Skill UI

A comprehensive, NIST/CISA-aligned workflow for structured recovery following a ransomware incident. It covers critical steps including environment isolation, forensic evidence preservation, Active Directory restoration (DSRM, krbtgt reset), backup integrity validation, and phased, dependency-based system rebuild. Essential for post-incident disaster recovery planning.

This skill provides a comprehensive framework for simulating and testing disaster recovery plans against ransomware threats. It guides users through measuring Recovery Time Objective (RTO) and Recovery Point Objective (RPO), validating clean backup restores, and hardening security controls to ensure organizational resilience. It is designed for tabletop exercises and compliance auditing, not for active incident response.

A comprehensive guide for setting up production-grade CI/CD pipelines for Go projects using GitHub Actions. This skill covers essential quality gates including unit testing, linting (golangci-lint), static analysis security testing (SAST), vulnerability scanning, dependency management, Docker builds, and automated releases using GoReleaser.

This comprehensive checklist guides the deployment of Snowflake data pipelines and integrations into a production environment. It covers critical areas such as authentication best practices, warehouse configuration, data pipeline readiness, access control, monitoring setup, and disaster recovery planning. Use it when preparing for a go-live or validating the stability of your production Snowflake setup.

A comprehensive guide to implementing production-grade reliability patterns for Snowflake environments. Covers advanced techniques like Time Travel for point-in-time recovery, cross-region database replication, account failover groups for disaster recovery, and application-level resilience coding (e.g., connection failover logic). Essential for building fault-tolerant, highly available data pipelines.

This framework enforces high output quality, intellectual honesty, and continuous improvement across all AppSec agents. It mandates structured processes, including self-critique loops, anti-rationalization guards, and self-reflection quality gates (≥8 scoring). Applicable during code review, SAST, SCA, and threat modeling, it ensures rigorous and verifiable security analysis.

Creates comprehensive, actionable disaster recovery (DR) documents for any service or system. It defines critical recovery targets (RTO/RPO), outlines failure scenario runbooks, specifies backup validation procedures, and establishes testing cadences. Use this tool when building site reliability engineering (SRE) practices or preparing for major system failure simulations.

A comprehensive set of programmatic interfaces for RuView's Wi-Fi sensing capabilities, including the CLI binary, REST API, and WebAssembly builds. This toolkit allows developers to integrate sophisticated disaster survivor detection and signal analysis into various environments, such as scripting, web browsers, and edge devices (ESP32-WASM3). Ideal for systems requiring cross-platform, scalable sensing data streams.

A comprehensive white-box security auditing workflow designed for proprietary source code. It integrates static analysis security testing (SAST) tools like Semgrep and CodeQL to detect common vulnerabilities (e.g., injection, IDOR, crypto misuse), followed by mandatory manual threat modeling and verification steps. Applicable for PR reviews and pre-deployment security checks.