Skill UI

OWASP Threat Dragon is an open-source tool designed for security professionals and developers. It guides users through creating detailed data flow diagrams (DFD) to map system architecture. The framework enables the systematic identification of vulnerabilities by applying established methodologies like STRIDE and LINDDUN, culminating in comprehensive, compliance-ready threat model reports.

This skill provides comprehensive guidance on hardening and securing critical process historian servers (e.g., OSIsoft PI, Honeywell PHD) operating within Operational Technology (OT) environments. It covers best practices for network placement across the Purdue Model, implementing robust access controls, establishing secure data replication architectures through DMZs (using data diodes), preventing SQL injection, and maintaining data integrity for safety-critical and regulatory reporting purposes. It is essential for minimizing cyber risks in industrial control systems.

This skill provides a comprehensive guide to implementing secure, defense-in-depth remote access architectures for Operational Technology (OT) and Industrial Control Systems (ICS). It covers best practices such as using jump servers, implementing Multi-Factor Authentication (MFA), session recording, and adhering to standards like IEC 62443 and NERC CIP-005 for vendor and operator access.

Automatically analyzes unfamiliar codebases to generate a comprehensive, structured onboarding guide. It systematically detects package manifests, framework fingerprints, architecture maps, key entry points, and coding conventions. Ideal for new developers joining a project or setting up a repository for the first time.

A comprehensive tool for generating publication-quality figures essential for Machine Learning and AI academic papers. It supports two distinct workflows: generating complex system architecture and workflow diagrams using AI (Gemini), and creating precise, data-driven visualizations (line charts, heatmaps, etc.) using standard libraries like matplotlib and seaborn. Use it when preparing any figure for a conference submission.

This skill outlines the architecture and methodology for deploying canary files (honeytokens) across critical file systems. By placing decoy documents with known content in high-value locations, this system monitors for unauthorized modifications, deletions, or encryption attempts. It detects ransomware by triggering high-fidelity alerts via File Integrity Monitoring (FIM) systems, serving as a crucial deception layer that complements existing EDR/AV solutions.

This guide outlines the architecture and implementation steps for building a robust, production-ready design system. It covers core elements like design tokens, reusable components, and layout patterns. Ideal for teams needing to maintain design consistency, ensure accessibility, and synchronize design (Figma) with implementation (Storybook).

Provides an expert methodology to significantly reduce AI API spending (40-80%) without sacrificing user quality. The guide covers cost auditing, optimizing existing systems, and designing cost-efficient architectures using techniques like model routing, prompt caching, output length control, and prompt compression.

This skill provides a comprehensive, evidence-based inventory and overlap audit workflow for enterprise automation. It helps users determine which jobs, hooks, connectors, or wrappers are currently live, broken, redundant, or missing before making critical changes, ensuring reliable system architecture and clean code practices.

A comprehensive guide for building production-quality, highly accessible, and responsive user interfaces. Covers advanced topics including component architecture (composition over configuration), robust state management patterns (Context, Redux, Server State), adherence to design systems, and meeting WCAG accessibility standards. Use this skill when developing or refining complex user-facing components that require professional polish and maintainability.

A type-safe dependency injection toolkit for Go (Golang) that helps manage service lifecycles, scopes, and dependencies in a structured way. It allows developers to register services and retrieve them through a central container, promoting clean architecture and making code easier to test and maintain. Ideal for refactoring manual constructors into a robust DI system.

A comprehensive, type-safe in-memory caching library for Go, designed for advanced system architecture. It supports nine sophisticated eviction algorithms (like W-TinyLFU, LRU, LFU, ARC) to optimize cache hit rates based on specific access patterns. Key features include TTL management, loader chains for read-through caching (with singleflight deduplication), sharding, and Prometheus metrics. Ideal for high-frequency services needing to reduce database load and latency.