Skill UI

This comprehensive guide walks new engineers through setting up a complete local development environment from scratch. It covers all necessary prerequisites, including installing required tools (Git, Docker, Go, etc.), cloning repositories, configuring environment variables, and running initial tests. The goal is to ensure a consistent, working environment and allow new team members to start contributing code quickly and confidently.

Generates comprehensive, structured documentation for microservices or internal platforms. This skill covers service identity, architecture context, APIs, SLAs, data classification, and operational runbooks, making it ideal for developer portals, service READMEs, and internal service registries. It ensures new team members can quickly understand how to use and depend on a shared service.

This skill generates a clear, scannable, and comprehensive sprint brief for Agile teams. It structures critical information including the specific sprint goal, business rationale, grouped scope, critical path items, potential risks with mitigation plans, and the Definition of Done. It ensures all cross-functional team members (Engineers, Designers, PMs) are aligned on the sprint's focus and objectives.

A comprehensive framework designed to help content creators and marketers plan, structure, and write highly shareable, high-reach social media content. It teaches the psychology behind sharing, provides proven hook formulas (e.g., contrarian statements, specific numbers), and builds a repeatable system to maximize engagement and organic reach across platforms like LinkedIn, TikTok, and Instagram.

A comprehensive style guide for building mission control, NOC dashboards, and global monitoring systems. This theme utilizes dark mode, glowing accents (cyan, amber, red), and complex data visualization elements to simulate a high-stakes, real-time operational environment across web, iOS, and Flutter platforms.

A comprehensive workflow for establishing and maturing a Third-Party Risk Management (TPRM) program. This guide covers the entire vendor lifecycle, from initial inventory and risk tiering to conducting due diligence (SOC 2, ISO 27001), embedding security requirements in contracts, and ensuring continuous monitoring and secure offboarding. Essential for compliance and supply chain risk management.

A comprehensive guide for conducting authorized vishing (voice phishing) pretext calls. This technique, utilized in red-teaming, simulates an attacker impersonating a trusted authority (e.g., IT support, vendor) to test an organization's human security controls. It measures employee adherence to verification protocols and highlights vulnerabilities in staff security awareness.

This skill provides a repeatable assessment for RAG systems, testing for critical vulnerabilities in vector stores and embedding models. It specifically addresses embedding inversion, cross-tenant data leakage, and knowledge-base poisoning, aligning with OWASP LLM08:2025. Use when performing authorized security audits of retrieval layers and multi-tenant isolation.

This skill provides comprehensive methods and frameworks to detect sophisticated AI attacks, including model extraction, membership inference, and model inversion, which abuse inference APIs. It focuses on monitoring per-principal query volume, input distribution, and confidence exposure. Use it for securing public or partner inference APIs, or for conducting pre-deployment red-teaming to assess the model's extractability and overall security posture against MITRE ATLAS techniques.

Detailed methods for red-teaming and penetration testing of LLM applications. This skill extracts sensitive system prompts, secrets, and embedded logic using advanced techniques like jailbreaking, encoding tricks, and automated scanners (Garak, Promptfoo), ensuring compliance with OWASP LLM07:2025.

This skill provides comprehensive techniques for security-testing Retrieval-Augmented Generation (RAG) pipelines. It probes for indirect prompt injection, which occurs when malicious instructions are embedded in retrieved documents, and tests for embedding-space manipulation. Using advanced tools like NVIDIA garak, Promptfoo, and PyRIT against vector stores (FAISS, Chroma, etc.), users can validate retrieval guardrails and secure CI/CD gates against adversarial inputs and data leakage.

A spectral vector search tool that enhances nearest-neighbor search with graph Laplacian features, capturing both semantic similarity and structural roles in embedding spaces.