Skill UI

Deploys osquery across Windows, macOS, and Linux endpoints, configures scheduled SQL queries, and integrates with FleetDM/SIEM to monitor processes, ports, software, and persistence for threat hunting and compliance.

Guide for deploying a CSA v2.0 Software-Defined Perimeter with SPA, mutual TLS, and controller/gateway configuration to enforce zero-trust network access for applications and users.

Performs credentialed vulnerability scans with Nessus, Qualys, and similar tools to log into hosts, inspect installed software, patches, and settings, and validate controls during assessments, incident response, or audits.

Simulates and detects software supply chain attacks by checking typosquatting risks with Levenshtein distance, probing dependency confusion across registries, verifying package hashes, and running pip-audit vulnerability scans for security assessments.

This guide details a comprehensive methodology for penetration testing desktop (thick client) applications. It covers static and dynamic analysis, focusing on identifying vulnerabilities such as hardcoded credentials, insecure local storage, DLL hijacking, memory manipulation, and API communication flaws. Tools like dnSpy, Procmon, and Burp Suite are utilized for in-depth security auditing of enterprise and banking software.

CCPM orchestrates software delivery from PRD through epics and GitHub issues into parallel agent execution, covering planning, decomposition, syncing, workstart, and status checks with mandated script-based reporting.

This guide enforces the 'spec-first' principle in software development, treating the specification as a non-negotiable contract. It outlines a rigorous, multi-stage workflow detailing mandatory sections (Functional/Non-Functional Requirements, Acceptance Criteria, API Contracts, Data Models) and bounded autonomy rules. Users learn how to define the system 'must do' before writing a single line of code, thereby minimizing rework and eliminating scope creep.

Guides business leaders through capital expenditure decisions, comparing ROI, payback, NPV, IRR, and opportunity costs for equipment, hires, software, real estate, or service lines so every dollar is justified before deployment.

Implements Cosign keyless signing with Fulcio certificates, Rekor log audit, and OIDC identity binding so container images and artifacts gain verifiable provenance within CI/CD pipelines.

AgentFlow transforms your existing Kanban board (Asana, GitHub, Linear) into a self-managing, autonomous AI development pipeline. It orchestrates multiple AI agents through defined stages (Backlog to Done), enforcing deterministic quality gates, performing adversarial reviews, and tracking costs—all visible within your existing project management UI. It provides crash-proof execution and full observability for complex software development lifecycles.

This skill manages comprehensive software development life cycle operations—including issue triage, PR reviews, version releases, bug fixing, and marketing content generation. It operates using a parallel "agent army" of dynamic agents (10-20 per task), requiring the user to adopt an Engineering Manager (EM) mindset. Key principles involve rigorous citation checking (anti-hallucination) and applying multiple roles (Product Owner, Open Source Contributor, Architect) simultaneously to ensure robust, safe, and user-centric outcomes across all platforms.

This skill provides comprehensive guardrails for handling Protected Health Information (PHI) in US healthcare software. It guides development teams on data classification, security best practices, access control, and audit logging to ensure strict adherence to HIPAA regulations. Use it when dealing with patient data storage, transmission, or processing to prevent breaches and maintain compliance.