Skill UI

This skill provides structured procedures for managing NuGet packages in .NET projects and solutions. It strictly enforces the use of the `dotnet` CLI for adding, removing, and updating dependencies, prioritizing project integrity. It guides users through a mandatory workflow for version updates, including version verification and running `dotnet restore`, ensuring a stable and consistent development environment.

A deep-dive methodology for authorized penetration testing targeting dependency confusion and namespace resolution vulnerabilities across major package ecosystems (npm, PyPI, NuGet, Maven, etc.). This skill details advanced reconnaissance techniques, from analyzing lock files and source maps to exploiting error messages, alongside safe Proof-of-Concept (PoC) creation using DNS canaries for discovery during penetration engagements.

A comprehensive methodology covering advanced offensive techniques targeting the software supply chain. This includes exploiting dependency confusion across npm, PyPI, and NuGet, executing build system hooks, tampering with CI/CD pipelines, and compromising container images. It provides detailed PoC patterns and detection guidance for red team operations.

Migrates .NET/C# data access code from Oracle to PostgreSQL (Npgsql). Replaces Oracle NuGet packages, rewrites ADO.NET types, fixes DbType mappings, updates stored procedure invocation, and adapts connection strings. Use when migrating the application code layer during an Oracle-to-PostgreSQL database migration.

This skill guides developers to migrate .NET projects from checked-in .designer.cs files to using the Microsoft.CodeAnalysis.ResxSourceGenerator. It covers adding NuGet packages, removing generated designer files, updating MSBuild configurations, and handling special metadata like CustomToolNamespace.

Build, review, debug, test, and package Roslyn diagnostic analyzers, code fix providers, and incremental source generators using IOperation analysis, dependency pinning, and NuGet packaging rules.