Skill UI

A comprehensive guide detailing best practices for securing Quarkus applications. It covers robust authentication methods like JWT and OIDC, role-based access control (RBAC) for authorization, mandatory input validation using Bean Validation, preventing SQL injection, and secure secret management. Essential for developers building highly secure Java microservices.

A comprehensive CI/CD pipeline for Quarkus applications, designed to verify code quality and deployment readiness. It covers all phases: build, static code analysis (SonarQube, Checkstyle), rigorous functional testing (Unit, Integration, API), security scanning (OWASP, dependency checks), native image compatibility testing, performance load testing (K6), and container image validation (Trivy, Grype).

A risk-paranoid, mandatory review process designed to interrogate any plan that touches sensitive customer data, regulatory compliance, or production access. It forces consideration of critical security pillars including STRIDE threat modeling, blast radius quantification, detection mechanisms (MTTD), incident response runbooks, regulatory notification windows, and third-party vendor security posture. Essential before deploying features handling PII, PHI, or before compliance audits (SOC 2, HIPAA, GDPR).

This tool simulates a Chief Technology Officer's comprehensive review, stress-testing any major technical plan. It systematically interrogates critical areas including scaling limits (scaling cliffs), accumulated technical debt, team capacity planning, build-vs-buy economics, system reliability (SLOs), and security compliance. Use it before committing to core architecture changes or making high-stakes engineering decisions.

A comprehensive guide on segmenting a home network using VLANs to dramatically enhance security. Learn how to isolate different device types—such as IoT gadgets, guests, and servers—from main PCs, preventing cross-segment malware spread and unauthorized communication. Covers setup steps for UniFi, pfSense, and OPNsense.

A comprehensive guide to setting up a fast and secure WireGuard VPN server for remote access to your home network (homelab). Learn keypair generation, advanced Linux firewall (iptables) rules, and how to manage different tunneling modes (split vs. full tunnel) for optimal performance.

Skill Scout is a crucial pre-creation workflow designed to prevent the duplication of effort. Before building a new skill, it systematically searches local, marketplace, GitHub, and web sources. It not only finds potential matches but also rigorously vets them for security, maintenance status, and relevance, providing the user with clear options: Use Existing, Fork/Extend, or Create New.

This expert framework guides users through the systematic process of conducting rigorous A/B tests and growth experiments. It covers all stages: formulating strong hypotheses, selecting appropriate metrics (primary, secondary, guardrail), calculating necessary sample sizes, and choosing the best implementation method (client-side vs. server-side). Use this when planning to compare two versions or build a systematic growth experimentation program.

This skill provides comprehensive code reviews, helping users assess code quality, identify various potential issues (syntax, logic, security, performance), and receive actionable suggestions for improvement. It generates a detailed, structured report covering a summary, found issues, and quality metrics.

This skill simulates a comprehensive auditor pressure test for any Information Security Management System (ISMS) against ISO 27001 standards. It forces interrogation on six critical areas—including scope, risk management, access control, and incident response—ensuring compliance and readiness before internal audits, Stage 1 certification, or surveillance audits.

This skill provides specialized internal auditing capabilities for ISO/IEC 42001:2023 AIMS. It helps compliance teams assess gaps across Clauses 4-10, build comprehensive AI risk registers with control mapping, and plan structured internal audits (Clause 9.2). Ideal for pre-certification readiness, scoping internal audit cycles, or integrating AI systems into existing quality/security management systems (ISMS/QMS).

A comprehensive guide for integrating Microsoft Graph SDK into applications. It covers accessing Microsoft 365 data (users, mail, calendar, Teams, SharePoint) from various languages (.NET, Python, TypeScript). Key topics include robust authentication patterns (Managed Identity, OBO), advanced data retrieval techniques like pagination, delta queries, batch requests, and setting up change notifications via webhooks. Learn best practices for secure and efficient API interaction.