Skill UI

This skill covers the setup and configuration of Static Application Security Testing (SAST) tools like Semgrep, SonarQube, and CodeQL. It guides users on creating custom security rules, integrating scans into CI/CD pipelines, and managing quality gates. The process includes optimizing scan performance, reducing false positives, and ensuring compliance with security policies across multiple programming languages.

A security payload collection containing XSS, SSRF, and SQL injection payloads, CSP/WAF bypass techniques, wordlists, and submission rules for authorized penetration testing.

This skill creates custom Semgrep rules for detecting security vulnerabilities, bug patterns, and code patterns. It guides users through a strict workflow including test-first development, AST analysis, and validation. Ideal for building static analysis detections, enforcing coding standards, and identifying data flow issues using taint mode.

Creates language-specific variants of existing Semgrep rules. Use when porting a rule to target languages, with applicability analysis and test-driven validation for each language.

A comprehensive automation toolkit for managing Sentry error tracking and monitoring operations. Users can programmatically investigate issues, configure project-level alert rules, manage release versions, and monitor organizational structure. Essential for DevOps and development teams needing deep integration and programmatic control over error data.

Framework for defining and implementing Service Level Indicators (SLIs), Service Level Objectives (SLOs), and error budgets to balance reliability with innovation velocity. Includes Prometheus recording rules, alerting configurations, and error budget policies for measuring service reliability targets.

This skill provides guidance for quality-focused software development and architecture based on Clean Architecture and Domain Driven Design principles. It covers code style rules, best practices like library-first approach, naming conventions, separation of concerns, and avoiding anti-patterns to ensure maintainable and scalable code.

Expert guide for building durable distributed systems with the Temporal Go SDK, covering deterministic workflow rules, mTLS worker configuration, advanced patterns, and testing/observability strategies for production workloads.

This skill reviews generated or changed test code against universal testing rules before deployment. It prevents common failure modes like mock-heavy unit tests, near-duplicate test bodies, and tests that re-verify the framework. It enforces best practices such as testing behavior over implementation, justifying mocks at system boundaries, and ensuring every test has a clear justification. Use it when reviewing diffs, new test files, or when writing new tests to ensure high-quality, maintainable test suites.

Proactive threat hunting and detection engineering using Sigma/YARA rules, SIEM queries, and ATT&CK mapping for blue-team operations. Includes hypothesis-driven workflows, rule validation, and toolchain guidance.