Skill UI

This skill designs and audits the core engineering harness required for reliable AI agent collaboration within a codebase. It establishes critical infrastructure elements such as change tracking, linting rules, CI/CD gates, and standardized documentation, ensuring the repository remains the single source of truth for all intelligent agents. Ideal for setting up complex development workflows.

This skill generates a comprehensive capacity plan document for any service. It assists technical teams in proactively managing infrastructure by modeling traffic growth, forecasting resource utilization (CPU, memory, connections), projecting costs, and defining clear scaling strategies. Use this when assessing current resource headroom, planning for seasonal peaks, or defining a long-term infrastructure action roadmap.

This tool conducts structured reviews of various Infrastructure-as-Code (IaC) tools (e.g., Terraform, Pulumi) across multiple cloud providers. It generates an actionable report that categorizes findings by severity (Critical, High, Medium, Low), providing detailed remediation steps and a reusable best-practice checklist for continuous security, compliance, and operational auditing.

This skill details how to monitor Certificate Transparency (CT) logs using industry tools like crt.sh and Certstream. By analyzing publicly issued SSL/TLS certificates, users can proactively detect lookalike domains, unauthorized certificate issuance for owned assets, and early-stage phishing infrastructure targeting their organization. Ideal for SOC analysts and threat hunters.

This skill provides comprehensive functionality for monitoring and mapping adversary-controlled assets, such as C2 servers, phishing domains, and exploit kit hosts. By leveraging tools like Passive DNS, Certificate Transparency logs, and specialized scanners (Shodan/Censys), analysts can discover, track, and pivot through complex threat actor infrastructure over time, significantly enhancing security operations and threat intelligence maturity.

A comprehensive guide detailing the systematic workflow for analyzing malicious Linux ELF binaries. It covers essential techniques including static analysis (using readelf, elftools), dynamic tracing (strace, ltrace), and deep reverse engineering (GDB) of various threats like botnets, cryptominers, and ransomware targeting Linux environments, containers, and cloud infrastructure.

This guide details the architecture and deployment of resilient Command and Control (C2) redirectors. By using tools like Nginx and Apache, operators establish an intermediary layer that filters beacon traffic based on malleable C2 profiles. This setup protects the true team server from detection, takedown, and analysis (OPSEC), enabling advanced techniques like domain fronting and traffic shaping for low attribution.

Trivy is an open-source, comprehensive scanner used to find vulnerabilities (CVEs), misconfigurations, secrets, and license issues across multiple targets. It is essential for implementing 'shift-left' security gates in CI/CD pipelines, scanning container images, Infrastructure-as-Code (IaC) like Terraform/Kubernetes, and generating/re-scanning SBOMs for supply chain transparency.

A comprehensive skill for managing AWS operational excellence, cost governance, and observability. It provides guidance on pre-deployment cost estimation (TCO), detailed spending analysis using Cost Explorer, setup of CloudWatch alarms, auditing activity via CloudTrail, and overall security posture assessment. Essential for optimizing cloud spending and ensuring reliable infrastructure.

A comprehensive guide for managing AWS infrastructure as code using the SST v4 (Ion) framework, built on top of Pulumi. This skill covers the entire lifecycle, including writing and editing sst.config.ts, defining high-level components (Function, Bucket, Dynamo), wiring resource links, writing unit tests for infrastructure, and troubleshooting deployments across complex, multi-stack AWS environments.

This tool scaffolds a complete directory structure for a new Domain-Driven Design (DDD) Bounded Context. It automatically generates the standard layout, including `domain`, `application`, and `infrastructure` layers, and populates index files for clean module exports. Ideal for starting new microservices, splitting monoliths, or structuring fresh modules.

Comprehensive patterns and tools for writing robust tests for F# applications within the modern .NET ecosystem. This guide covers unit testing (xUnit, FsUnit), property-based testing (FsCheck), mocking dependencies (NSubstitute), and full integration testing (WebApplicationFactory). Ideal for improving test coverage, validating complex business logic, and establishing a resilient testing infrastructure.