Skill UI

This skill guides the planning and review process for complex home or small-lab network changes. It covers creating staged migration plans for VLAN segmentation, implementing local DNS resolvers (like Pi-hole), setting up secure VPN access, and ensuring network safety through detailed inventory checks and rollback procedures. It emphasizes security best practices and trust zoning.

A comprehensive guide detailing best practices for securing Quarkus applications. It covers robust authentication methods like JWT and OIDC, role-based access control (RBAC) for authorization, mandatory input validation using Bean Validation, preventing SQL injection, and secure secret management. Essential for developers building highly secure Java microservices.

A comprehensive CI/CD pipeline for Quarkus applications, designed to verify code quality and deployment readiness. It covers all phases: build, static code analysis (SonarQube, Checkstyle), rigorous functional testing (Unit, Integration, API), security scanning (OWASP, dependency checks), native image compatibility testing, performance load testing (K6), and container image validation (Trivy, Grype).

A risk-paranoid, mandatory review process designed to interrogate any plan that touches sensitive customer data, regulatory compliance, or production access. It forces consideration of critical security pillars including STRIDE threat modeling, blast radius quantification, detection mechanisms (MTTD), incident response runbooks, regulatory notification windows, and third-party vendor security posture. Essential before deploying features handling PII, PHI, or before compliance audits (SOC 2, HIPAA, GDPR).

This tool simulates a Chief Technology Officer's comprehensive review, stress-testing any major technical plan. It systematically interrogates critical areas including scaling limits (scaling cliffs), accumulated technical debt, team capacity planning, build-vs-buy economics, system reliability (SLOs), and security compliance. Use it before committing to core architecture changes or making high-stakes engineering decisions.

A comprehensive guide on segmenting a home network using VLANs to dramatically enhance security. Learn how to isolate different device types—such as IoT gadgets, guests, and servers—from main PCs, preventing cross-segment malware spread and unauthorized communication. Covers setup steps for UniFi, pfSense, and OPNsense.

Skill Scout is a crucial pre-creation workflow designed to prevent the duplication of effort. Before building a new skill, it systematically searches local, marketplace, GitHub, and web sources. It not only finds potential matches but also rigorously vets them for security, maintenance status, and relevance, providing the user with clear options: Use Existing, Fork/Extend, or Create New.

This skill provides comprehensive code reviews, helping users assess code quality, identify various potential issues (syntax, logic, security, performance), and receive actionable suggestions for improvement. It generates a detailed, structured report covering a summary, found issues, and quality metrics.

This skill simulates a comprehensive auditor pressure test for any Information Security Management System (ISMS) against ISO 27001 standards. It forces interrogation on six critical areas—including scope, risk management, access control, and incident response—ensuring compliance and readiness before internal audits, Stage 1 certification, or surveillance audits.

This skill provides specialized internal auditing capabilities for ISO/IEC 42001:2023 AIMS. It helps compliance teams assess gaps across Clauses 4-10, build comprehensive AI risk registers with control mapping, and plan structured internal audits (Clause 9.2). Ideal for pre-certification readiness, scoping internal audit cycles, or integrating AI systems into existing quality/security management systems (ISMS/QMS).

A comprehensive guide for designing and implementing robust Infrastructure as Code (IaC) using Terraform or OpenTofu. Covers module hierarchy design, best practices for naming conventions, structuring multi-environment pipelines, advanced testing strategies (native tests, Terratest, static analysis), and integrating security scanning (trivy, checkov) into CI/CD workflows.

A powerful PreToolUse hook designed to act as a safety net during code writing sessions. It automatically scans both file paths and content for 12 common security anti-patterns, including SQL injection, XSS, command injection (Node.js/Python), and unsafe deserialization. It blocks the writing operation and provides immediate warnings, ensuring adherence to secure coding practices when handling sensitive code like authentication or payment logic.