Skill UI

This skill provides a structured methodology for tackling complex bugs, performance bottlenecks, and production incidents. It guides users through reproducing issues, forming hypotheses, performing controlled experiments, and narrowing down the scope using proven strategies and tools. Ideal for deep dive troubleshooting and root cause analysis in complex software systems.

This expert guide provides a systematic, structured methodology for debugging complex software issues. It teaches users how to analyze stack traces, correlate logs, establish consistent reproduction steps, and apply hypothesis-driven testing to isolate and resolve bugs, crashes, or unexpected behavior in any codebase. Essential for professional troubleshooting and quality assurance.

A comprehensive, AI-assisted methodology for diagnosing complex software errors in production environments. This skill guides users through the entire debugging lifecycle, from initial triage and gathering observability data (Sentry, DataDog, Jaeger) to generating hypotheses, selecting appropriate debugging strategies (Time-Travel, Chaos Engineering), and performing AI-powered root cause analysis. It culminates in proposing validated fixes and prevention measures.

Master the complete penetration testing lifecycle, covering all five stages from reconnaissance and scanning to vulnerability analysis using OWASP standards, and advanced exploitation techniques with tools like Metasploit. This skill provides a structured framework for conducting authorized, professional security assessments.

This guide details a complete local development workflow for integrating with Fireflies.ai GraphQL. It outlines setting up the project structure, recording real API responses as mock fixtures, creating a custom mock client, and writing robust unit tests. Use this methodology to ensure fast, reliable, and isolated development cycles without dependency on live APIs or worrying about rate limits.

This skill provides a structured methodology for reviewing code commits intended to fix security vulnerabilities or address audit findings. It ensures that the original root cause is properly resolved, verifies the fix hasn't introduced new bugs or vulnerabilities (regressions), and validates the overall completeness of the remediation effort. Ideal for security-critical code reviews.

Provides red team workflows combining subdomain enumeration, live host discovery, technology fingerprinting, XSS hunting, API fuzzing, and automated recon scripting to support bug bounty hunters and security researchers.

This skill provides a comprehensive, expert guide to the entire reverse engineering lifecycle. It covers advanced techniques for binary analysis, including static analysis (disassembly, metadata extraction, control flow mapping) and dynamic analysis (API hooking, memory tracing). Mastery includes utilizing industry-leading tools such as IDA Pro, Ghidra, radare2, and specialized frameworks like pwntools and angr. The methodology is structured for secure research, CTF challenges, and vulnerability assessment, emphasizing best practices and ethical use.

A specialized methodology for reviewing APIs, configuration schemas, and interfaces to identify 'footguns'—design choices where the path of least resistance leads to insecurity. This analysis focuses on making secure usage the default, covering topics like dangerous defaults, primitive vs. semantic type safety, and insecure algorithm selection. It is crucial for architects and reviewers to prevent developer misuse at the design level.

This comprehensive guide outlines the best practices and structured methodology for developing specialized skills for AI coding agents. It provides detailed instructions on integrating Azure SDKs and Microsoft Foundry services, covering crucial topics like secure authentication patterns (DefaultAzureCredential), modular workflow design, and maintaining concise, effective knowledge context for optimal agent performance.

This framework provides a comprehensive methodology for defining, measuring, and implementing Service Level Indicators (SLIs), Service Level Objectives (SLOs), and managing error budgets. It helps engineering teams quantify service reliability (e.g., availability, latency) and establish clear, measurable targets (SLOs). By tracking error budgets, teams can strategically balance rapid feature development (innovation velocity) against maintaining high system stability and reliability.

This skill provides a structured approach to systematically identify security threats by applying the STRIDE methodology (Spoofing, Tampering, Repudiation, Information Disclosure, Denial of Service, Elevation of Privilege). It is crucial for conducting thorough threat modeling sessions, analyzing system architectures, reviewing security design decisions, and creating robust security documentation for compliance and auditing purposes.