Skill UI

This skill allows users to build comprehensive attack trees to systematically visualize complex threat paths. It is essential for mapping potential attack scenarios, identifying critical defense gaps, prioritizing security investments, and communicating detailed security risks to non-technical stakeholders.

This skill allows users to build comprehensive attack trees to systematically visualize complex threat paths. It is essential for mapping potential attack scenarios, identifying critical defense gaps, prioritizing security investments, and communicating detailed security risks to non-technical stakeholders.

A comprehensive guide covering advanced offensive techniques for AWS cloud environments. Techniques include detailed IAM enumeration, privilege escalation paths, SSRF exploitation targeting metadata endpoints (IMDSv1/v2), S3 bucket exploitation, and Lambda function code extraction. Essential for security professionals and red team operations conducting authorized cloud vulnerability assessments.

A comprehensive JavaScript/TypeScript SDK for interacting with Azure File Shares. This library facilitates full lifecycle management of SMB file shares, including creating, listing, and deleting shares, managing quotas, and performing robust file and directory operations (uploading via stream, buffer, or file paths; downloading streamed content). Ideal for modern cloud-native applications requiring persistent file storage.

This skill details the architecture and implementation of a robust API Gateway, serving as the single entry point for multiple backend microservices. It centrally manages critical cross-cutting concerns, including path-based and header-based routing, JWT/OAuth2 authentication, rate limiting, load balancing, and circuit breaker protection. This pattern is essential for building resilient, scalable, and maintainable microservices architectures, significantly simplifying client integration and request management.

Provides a comprehensive, step-by-step guide and scripts for safely upgrading Clerk SDK packages. This tool helps developers manage version upgrades and critical breaking changes (e.g., async auth calls, middleware renaming, import path changes), ensuring a smooth and reliable transition to the latest SDK version.

A methodical pathfinder that learns each codebase, storing findings in .notebook/ while guiding developers through bug fixes, feature work, and investigations without guessing.

This skill guides users on fine-tuning CodeRabbit's review quality. It teaches the AI agent team preferences through PR feedback, integrates custom code guidelines (e.g., security policies), allows customization of the review tone, and implements path filters to drastically reduce false positives and noise. This ensures that all code feedback is highly relevant, actionable, and aligns with specific team standards.

This guide provides a step-by-step walkthrough for setting up automated AI code reviews using CodeRabbit. It covers creating the necessary `.coderabbit.yaml` configuration file, defining path-specific instructions, triggering reviews via Pull Requests (PRs), and interacting with the feedback using PR comments or the local CLI. Essential for integrating quality gates into CI/CD workflows.

This guide provides a comprehensive method for optimizing CodeRabbit's review process, focusing on improving speed, relevance, and the signal-to-noise ratio. Learn best practices for managing PR size, selecting the right review profile (e.g., 'assertive' vs. 'chill'), using path instructions to guide feedback, and filtering out low-value files. Ideal for teams looking to reduce review fatigue and ensure consistent code quality checks.

Scans component namespaces to detect duplicated domain logic across services, then suggests consolidation paths or shared services to improve maintainability and clarity.

Constant-time testing spots timing side channels in crypto code by verifying execution paths stay independent of secrets, guiding security reviews during audits and pull requests.