Skill UI

This skill generates a formal Architecture Decision Record (ADR) following industry-standard formats. It guides users through documenting the full rationale behind significant technical choices, ensuring that the context, alternatives considered, chosen option, and resulting trade-offs are all captured. Ideal for maintaining architectural integrity and knowledge transfer within engineering teams.

This skill generates a comprehensive, safe, and zero-downtime database migration plan for schema changes. It utilizes the industry-standard expand/contract pattern to ensure backward compatibility, detailing multiple phased steps (Expand, Backfill, Contract), necessary SQL scripts, robust rollback procedures, and detailed deployment runbooks. Essential for maintaining application availability during large-scale database updates.

This comprehensive skill applies industry-standard prioritization frameworks, including RICE, MoSCoW, Kano, and ICE, to rank product features and backlog items. It generates a scored, defensible list that includes a recommended build order, explicitly deprioritized items, and documented assumptions. Essential for Product Managers and teams needing to make data-driven, strategic decisions about the product roadmap and manage scope trade-offs.

This skill guides the creation of comprehensive Product Requirements Documents (PRDs) following industry best practices. It ensures all critical sections are included, such as problem statements, user stories, functional/non-functional requirements, technical considerations, and success metrics. Use it when formalizing a new feature or product specification for engineers and stakeholders.

This skill transforms vague feature briefs, PRD sections, or general ideas into highly detailed, actionable user stories. It enforces industry best practices by including standard formats (As a... I want to...), behavioral acceptance criteria (Given/When/Then), edge cases, and a Definition of Done. Ideal for product managers and business analysts who need to create estimate-ready tickets for development teams.

This skill details how to monitor Certificate Transparency (CT) logs using industry tools like crt.sh and Certstream. By analyzing publicly issued SSL/TLS certificates, users can proactively detect lookalike domains, unauthorized certificate issuance for owned assets, and early-stage phishing infrastructure targeting their organization. Ideal for SOC analysts and threat hunters.

This comprehensive guide details how to use industry-leading tools like TruffleHog and git-secrets to scan source code repositories, full git history, and configuration files for hardcoded AWS credentials and secrets. It is essential for integrating secrets detection into CI/CD pipelines, performing proactive security audits, and ensuring compliance by preventing sensitive keys from reaching production environments.

Implements comprehensive runtime safety defenses for Large Language Model (LLM), RAG, and agent applications. This skill integrates industry-leading guardrail systems—including Llama Guard 3, NeMo Guardrails, and LLM Guard—to inspect and constrain all input and output data. It is essential for production environments requiring protection against adversarial attacks such as jailbreaks, prompt injection (OWASP LLM01), toxic content, and sensitive data leakage.

This guide details how to mature and operationalize a MISP instance, transforming it from a simple repository into an active threat detection engine. Users learn to enable and cache curated threat feeds, apply warninglists to minimize false positives, query indicators using PyMISP, and automate the export of matching attributes into industry-standard detection rules like Suricata, Sigma, and Wazuh.

This skill provides a comprehensive test quality review, drawing on established principles from classic engineering texts like xUnit Test Patterns and How Google Tests Software. It diagnoses structural flaws—such as brittleness, decay, and poor coverage—in existing test suites, helping ensure that the codebase and its tests are robust, maintainable, and adhere to high industry standards.

Generates championship-grade, F1-inspired test suites based on the WJTTC methodology. This skill enforces a 'tests first' philosophy, analyzing the codebase to define structured test plans. It covers standard industry unit tests (Layer 1) and deep expert edge cases (Layer 2). Furthermore, it includes Signal Integrity Audits to ensure the test suite's reliability is paramount, guiding development toward maximum code quality.

This comprehensive guide outlines industry best practices for designing robust and consistent REST APIs. It covers proper resource naming conventions, standardized HTTP method semantics, detailed HTTP status codes (e.g., 201, 404, 422), structured response formats (including pagination and links), and advanced strategies like cursor-based pagination. Essential for building scalable and maintainable APIs.