Skill UI

Configures a robust CI/CD pipeline for Apollo.io integrations using GitHub Actions. It implements multi-stage testing, including unit tests (using MSW mocks for zero API calls), live integration tests (gated to main branch), and secret scanning. Ensures reliable and safe deployment practices for SaaS applications.

This skill enables Claude to generate production-ready CI/CD pipeline configurations for major platforms, including GitHub Actions, GitLab CI, and Jenkins. It automates the entire software development lifecycle, supporting best practices for testing, building, security scanning, and multi-environment deployment. Use this when setting up automated software delivery workflows.

Automates OWASP Top 10 (2021) security assessments via the owasp-compliance-checker plugin, scanning codebases for vulnerabilities, reporting compliance gaps, and suggesting remediation advice for developers or auditors.

Detects memory usage issues by scanning code for common leak patterns, such as lingering listeners, closures holding references, or runaway caches, and provides recommendations to fix them before performance degrades.

Master the complete penetration testing lifecycle, covering all five stages from reconnaissance and scanning to vulnerability analysis using OWASP standards, and advanced exploitation techniques with tools like Metasploit. This skill provides a structured framework for conducting authorized, professional security assessments.

Automated fuzz testing of APIs via the /fuzz-api command to inject malformed, boundary, and random payloads, spotting crashes, SQL injection, XSS, and validation gaps during vulnerability scanning or security reviews.

Validates Vertex AI Agent Engine GitHub Actions workflows, enforcing Workload Identity Federation, least-privilege IAM, OIDC permissions, and security scanning so GCP deployments stay automated and secure.

A comprehensive guide featuring best practices and patterns for building robust GitLab CI/CD pipelines. Covers multi-stage deployments, containerization (Docker), infrastructure as code (Terraform), security scanning, caching strategies, and advanced GitOps workflows for automated testing and deployment to Kubernetes.

Guides users through advanced network security scanning tasks by offering best-practice workflows, code/config generation, and validation for compliance, penetration testing, and enterprise security scenarios.

Comprehensive CLI reference for penetration testing tools spanning network scanning, exploitation, password cracking, and web testing to speed up authorized security assessments.

This skill performs deep, line-by-line scanning of an entire codebase to understand its architecture, patterns, and dependencies. It systematically identifies critical issues across security vulnerabilities (SQL injection, secrets), performance bottlenecks (N+1 queries, caching), architectural flaws, and code quality gaps. It then automatically refactors and fixes all identified issues, transforming the code into professional, production-grade, enterprise-level quality.

Provides comprehensive guidance for setting up and configuring Static Application Security Testing (SAST) tools, including Semgrep, SonarQube, and CodeQL. Learn how to integrate security scanning into CI/CD pipelines, define custom security rules, enforce quality gates, and manage compliance policies to proactively identify and remediate code vulnerabilities across multiple programming languages.