Skill UI

Generates a complete, structured load and performance testing plan for any service. This skill guides the definition of test objectives, establishes measurable SLO thresholds (p99, error rate, throughput), and designs multi-scenario tests (Baseline, Stress, Spike, Soak). It is essential for teams needing to set clear pass/fail criteria, select appropriate tooling (k6, Locust), and integrate performance gates into CI/CD pipelines.

This skill guides the decomposition of monolithic applications into independent microservices using Domain-Driven Design (DDD). It defines bounded contexts, service boundaries, communication patterns (sync/async), data ownership, and provides a structured migration roadmap (e.g., Strangler Fig Pattern). Essential for scaling and modernizing large enterprise systems.

This skill generates a comprehensive, actionable runbook for any service, designed specifically for on-call engineers. It structures critical incident response procedures, including alert definitions, escalation matrices, diagnostic commands, and rollback steps, significantly reducing Mean Time To Resolution (MTTR). It provides a single source of truth for responding confidently during high-stress incidents.

This skill generates a comprehensive, structured threat model for any given service or feature using the STRIDE framework. It guides users through identifying critical assets, defining trust boundaries, enumerating specific threats (Spoofing, Tampering, Repudiation, Information Disclosure, Denial of Service, Elevation of Privilege), assessing risk, and proposing concrete mitigation controls. Ideal for security design reviews and documentation.

A comprehensive framework designed for formal procurement decision-making. This skill guides the creation of a weighted scorecard and detailed evaluation criteria by assessing functional fit, commercial terms, security compliance, and vendor stability. Use this when conducting RFPs, comparing multiple suppliers, or making critical software/service provider choices to ensure a holistic, risk-mitigated recommendation.

This skill simulates advanced red-teaming techniques targeting Microsoft Entra ID's OAuth 2.0 device-code flow and illicit consent mechanisms. It demonstrates how attackers can steal access and refresh tokens, bypass Multi-Factor Authentication (MFA), and pivot across various Microsoft 365 services. It is designed for authorized security testing to validate token protection and conditional access policies.

A comprehensive security auditing tool designed to identify over-permissive Role-Based Access Control (RBAC) roles and potential service-account token abuse paths within a Kubernetes cluster. It systematically reviews cluster bindings, effective permissions, and common escalation primitives using advanced tools like `kubectl auth can-i`, `rbac-police`, and `rakkess`, ensuring adherence to the principle of least privilege.

This skill provides comprehensive guidance on designing complex system integrations, including event-driven architectures (EDA), webhook flows, API chaining, and robust ETL pipelines. It covers advanced patterns like Saga, Outbox, and resilience mechanisms (Idempotency, Circuit Breaker), making it ideal for connecting multiple microservices and managing asynchronous data flows.

The Application Insights JavaScript SDK is designed to instrument client-side web applications for Real User Monitoring (RUM). It automatically collects crucial telemetry, including page views, user clicks, AJAX dependencies, unhandled exceptions, and custom events. This SDK supports correlating browser-side activity with backend services and includes specialized support for GenAI agent traces following OpenTelemetry standards.

rclone is a powerful, feature-rich command-line utility designed to manage files across diverse cloud storage backends, including S3-compatible services. It provides robust, reliable equivalents to core Unix commands (sync, copy, move, mount). Use this skill for all terminal-based cloud operations, such as syncing, backing up, downloading, or managing remote data securely.

A comprehensive, single-page runbook designed specifically for engineering on-call teams. It consolidates crucial information needed during incidents, including service topology, critical alerts tables, dashboard links, common operational commands, on-call rotation schedules, and incident response checklists, ensuring fast and efficient response.

A comprehensive guide covering scalable backend architecture patterns, including Repository, Service, and Middleware design. It details best practices for building robust APIs using Node.js, Express, and Next.js. Topics covered include RESTful API structuring, database query optimization (preventing N+1 issues), implementing database transactions, and integrating caching strategies like Redis. This guide is essential for developing high-performance, maintainable server-side applications.