Skill UI

Provides a structured workflow for performing initial triage of security incidents. This process uses established frameworks (NIST SP 800-61r3 and SANS PICERL) to classify the incident type, assign severity based on business impact, and determine the necessary containment and escalation steps. Ideal for analyzing SIEM/EDR alerts, suspicious user reports, or matching threat intelligence.

A comprehensive architectural guide for building and maintaining macOS menubar utilities using SwiftUI and Tuist. It enforces strict separation of concerns by guiding developers to keep networking, state management, and UI presentation in distinct, testable layers, ensuring robust and scalable application development.

A comprehensive guide detailing proven patterns for building robust and scalable SwiftUI applications. Covers modern state management (@State, @Observable), advanced navigation (Sheets, NavigationStack), handling asynchronous data flows, and adhering to architectural best practices to create maintainable, performant UIs.

A comprehensive guide to designing scalable, cost-effective, and compliant architectures on Microsoft Azure. This skill covers the entire lifecycle, from gathering detailed business requirements (SLA, RPO/RTO) and selecting appropriate service patterns (AKS, Serverless, Data Factory), to generating Infrastructure as Code (IaC) using Bicep. It also includes steps for cost optimization, reserved instance planning, and setting up robust CI/CD pipelines via Azure DevOps or GitHub Actions.

This comprehensive workflow guides the design, optimization, and deployment of scalable, cost-effective Google Cloud Platform (GCP) architectures for both startups and large enterprises. It covers the full lifecycle, from gathering detailed requirements (compliance, SLA) and recommending optimal patterns (Serverless, GKE, Data Pipelines) to estimating costs, generating Infrastructure as Code (IaC) using Terraform, setting up CI/CD pipelines, and completing a thorough security review.

A comprehensive guide to advanced development practices on the Snowflake platform. Covers best practices for SQL (MERGE, semi-structured data, colon prefix rule), modern data pipeline construction (Dynamic Tables, Streams/Tasks, Snowpipe), and deep integration with Cortex AI functions and Snowpark Python. Essential knowledge for data engineers building robust, scalable, and intelligent data applications.

This guide outlines the architecture and implementation steps for building a robust, production-ready design system. It covers core elements like design tokens, reusable components, and layout patterns. Ideal for teams needing to maintain design consistency, ensure accessibility, and synchronize design (Figma) with implementation (Storybook).

This skill focuses on detecting and mitigating sophisticated code injection and privilege escalation attacks across the entire serverless ecosystem (AWS Lambda, Azure, GCP). It combines static analysis of dangerous code sinks (e.g., eval, exec) with continuous monitoring of event sources (S3, SQS, API Gateway) and rigorous IAM auditing. It provides a comprehensive framework to secure the expanding serverless attack surface.

This skill provides a comprehensive guide and structured SQL templates for performing deep forensic investigations on AWS cloud logs. It utilizes AWS Athena to query massive datasets from CloudTrail, VPC Flow Logs, S3 access logs, and ALB logs. Ideal for detecting unauthorized access, data exfiltration, and privilege escalation during security incident response.

The Santa Method is a multi-agent adversarial verification framework designed to improve output quality by requiring two independent reviewers (Agent B and Agent C) to pass the content before publication. It eliminates single-agent bias and systematically improves outputs through iterative refinement loops until convergence or manual escalation.

Checks AWS, Azure, and GCP configurations for IAM escalation paths, public storage exposure, open security groups, and IaC gaps, providing preventive findings with MITRE mapping for cloud posture management workflows.

Guides teams through classifying and triaging declared security incidents, scoring severity, filtering false positives, routing escalations, and starting forensic collection consistent with NIST SP 800-61.