Skill UI

A comprehensive playbook for optimizing the entire lifecycle of pull requests. It guides developers through systematic pre-flight cleanup, critical self-audits, local test verification, and structuring high-signal PR descriptions to ensure code quality and fast maintainer approval.

Automate security workflows and remediation processes. Build security pipelines for scanning, compliance checks, and SOAR capabilities. Ideal for scaling security operations or implementing DevSecOps strategies. Includes scripts for secret scanning, SAST, dependency checks, and automated incident response playbooks.

A comprehensive five-phase methodology for bug bounty and SRC vulnerability hunting, covering intake, reconnaissance, enumeration, active hunting, and reporting. Includes attack playbooks for SQLi, XSS, RCE, SSRF, IDOR, and more, with WAF bypass techniques and prioritization strategies for efficient security assessments.

This skill enables detection, response, and prevention of software supply chain attacks targeting package registries, container images, and CI/CD pipelines. It includes lockfile auditing, provenance verification using tools like Cosign and SLSA, and emergency response playbooks for compromised dependencies.

Structured onboarding skill that builds reusable checklists with phases, owners, and due offsets. Supports CSV, SQL, JSON, Notion, and Excel outputs. Ideal for SME operations and HR teams.