Skill UI

Dep handles the entire journey from local code to production deployment. This skill automates containerization using Docker and docker-compose, establishes robust CI/CD pipelines (linting, testing, security scanning, deployment), manages environment variables and secrets, and generates Infrastructure as Code (Terraform/Pulumi) configurations. It ensures observability and provides rollback procedures.

This skill maps engineering changes (code diffs, architecture designs, IaC) to specific financial compliance controls, such as PCI-DSS v4.0 and MAS TRM. It generates an auditable report detailing compliance gaps, required evidence, and concrete remediation steps, helping teams catch violations before formal audits.

This tool conducts structured reviews of various Infrastructure-as-Code (IaC) tools (e.g., Terraform, Pulumi) across multiple cloud providers. It generates an actionable report that categorizes findings by severity (Critical, High, Medium, Low), providing detailed remediation steps and a reusable best-practice checklist for continuous security, compliance, and operational auditing.

Trivy is an open-source, comprehensive security scanner designed for DevSecOps. It assesses container images, Infrastructure-as-Code (Terraform, K8s), filesystems, and SBOMs for vulnerabilities (CVEs), misconfigurations, hardcoded secrets, and license compliance. It is essential for implementing 'shift-left' security gates in CI/CD pipelines, ensuring that code and infrastructure are secure before deployment.

A comprehensive guide for managing AWS infrastructure as code using the SST v4 (Ion) framework, built on top of Pulumi. This skill covers the entire lifecycle, including writing and editing sst.config.ts, defining high-level components (Function, Bucket, Dynamo), wiring resource links, writing unit tests for infrastructure, and troubleshooting deployments across complex, multi-stack AWS environments.

A comprehensive tool for authors targeting the ACM Asia Conference on Computer and Communications Security (ASIACCS). It provides expert guidance on assessing whether a computer and communications security manuscript is a strong fit for this specific, high-impact venue. Topics covered include conference fit assessment, evidence bar establishment, manuscript re-framing strategies, threat modeling, and proper community positioning for maximum review impact.

This guide assists researchers in compiling and documenting all necessary ethical approvals, biosafety statements, and data/code availability declarations required for high-impact scientific manuscripts (e.g., Cancer Cell). It ensures compliance with guidelines covering animal protocols (IACUC), human subject ethics (IRB/Consent), and data sharing standards (GEO, Zenodo).

This comprehensive checklist guides authors through the final, critical pre-submission review phase for high-impact scientific journals. It covers technical completeness, scientific rigor (e.g., statistics, cell line authentication), ethical compliance (e.g., IACUC/IRB), data availability, and formatting consistency, ensuring the manuscript is ready for final submission.

This guide provides a specialized framework for authors targeting the IACR Conference on Cryptographic Hardware and Embedded Systems (CHES). It details the specific scope, evidence bar, and framing techniques required for cryptographic hardware papers, ensuring submissions meet the high standards of the community. It helps reposition work from journal or general CS styles.

This skill guides authors on formatting and positioning manuscripts for Physical Review Letters (PRL). It is a comprehensive venue-selection and reframing tool, helping authors determine if their physics result has sufficient broad significance, immediacy, and rigor to meet PRL's high standards. It covers methodological evidence bars, required structure, cross-subfield argumentation, and best practices for pre-submission checks.

This workflow performs a comprehensive review against the Azure Well-Architected Framework (WAF) using your existing Infrastructure as Code (IaC) and deployed resources. It systematically checks the five pillars—Reliability, Security, Cost Optimization, Operational Excellence, and Performance Efficiency—identifying architectural risks, drift, and compliance gaps. Findings are automatically logged and converted into actionable GitHub issues for streamlined remediation.

Expert guidance for SST v4 (Ion) on AWS: author, link, test, deploy, and troubleshoot Pulumi-backed infrastructure as code in TypeScript, including resource modules, migrations, and prod-safe conventions.