Skill UI

Integrates Aqua Security’s Trivy scanner into CI/CD workflows to automatically scan Docker images, IaC files, and configs for OS and dependency CVEs, enforce severity-based quality gates, and block vulnerable images before deployment.

Guide security analysts through structured incident triage using IR playbooks—from alert intake and enrichment to severity scoring, playbook selection, and team paging—ensuring rapid, repeatable SOC responses.

Guides SOC analysts through NIST SP 800-61r3 and SANS PICERL-based incident triage, covering alert enrichment, severity scoring, classification, and escalation steps for SIEM/EDR-generated threats and IOC matches.

Guides teams through classifying and triaging declared security incidents, scoring severity, filtering false positives, routing escalations, and starting forensic collection consistent with NIST SP 800-61.

Evaluate interfaces against 168 research-backed UX/UI principles, detect antipatterns, and inject UX context during AI-assisted design or coding sessions to surface severity-tagged findings and actionable remediation.

Performs combined SEO and AEO audits on landing pages or blog posts, scoring overall/SEO/AEO/readability metrics out of 100, then prioritizing severity-ranked fixes and projected scores so authors can resolve Critical, Important, and Polish issues before publishing.

Provides ultra-compact, actionable code review comments whenever someone asks for a PR review, enforcing the `location: problem. fix.` format plus optional severity prefixes.

This guide outlines the process and mandatory structure for documenting defects found during an Oracle-to-PostgreSQL migration. It details how to write actionable bug reports, covering required elements like Severity, Root Cause, Scenario, and Solution. It emphasizes treating Oracle as the source of truth and handling data layer nuances (e.g., NULL vs. empty string) to ensure accurate defect tracking and remediation.

This skill transforms unstructured, messy bug input—such as raw error logs, screenshots, voice dictations, and rough notes—into clean, actionable, and professional GitHub issue templates. It extracts necessary details like reproduction steps, expected vs. actual behavior, impact severity, and context, ensuring developers receive perfectly formatted reports ready for immediate action.

A comprehensive, five-stage methodology for reviewing code quality. This process systematically checks for requirements compliance, logical correctness, code maintainability, test coverage, and critical security/performance vulnerabilities. It provides actionable feedback categorized by severity (Blocker, Major, Minor, Nit), ensuring high standards for all merged code.

A comprehensive guide on conducting effective and professional code reviews, tailored for domestic team cultures. It teaches techniques like using suggestions instead of commands, framing feedback as questions, implementing clear severity levels, and maintaining proper mixed Chinese/English annotation standards. Essential for improving code quality while preserving team harmony.