Skill UI

This comprehensive workflow provides a complete cycle of quality assurance for software development. It covers every stage from defining the test strategy (TDD, Unit Testing) through integration, E2E testing, browser automation, performance profiling, security scanning, and final code review. Use this when setting up robust testing infrastructure or ensuring production-ready software quality.

Automates threat modeling guidance within Security Advanced: step-by-step best practices, compliance-ready code, and validation for enterprise security workflows.

Provides Twilio-based communication patterns covering SMS, voice, WhatsApp, and Verify flows; includes error handling, compliance reminders, rate limits, segmentation warnings, and OTP 2FA guidance for notifications, confirmations, and security workflows.

This skill provides robust guidelines and patterns for managing environment variables and sensitive credentials securely. It is designed to ensure that secrets, API keys, and other confidential information are never accidentally exposed or logged in Claude sessions, terminal outputs, development logs, or version control commits (like Git). Use this skill when handling sensitive data in development workflows to maintain maximum security.

Automates Web Application Firewall rule creation by guiding advanced security teams through best practices, code generation, and validation for compliant penetration-testing workflows.

This comprehensive workflow guides users through a multi-phase process for assessing web application security. It is designed to systematically test for common vulnerabilities listed in the OWASP Top 10, including SQL injection, XSS, broken authentication, and access control issues. Ideal for professional penetration testing, security auditing, and bug bounty hunting.

This skill provides AI-assisted capabilities for creating and managing Continuous Integration/Continuous Deployment (CI/CD) workflows using GitHub Actions. It can generate new workflows from project requirements, optimize existing pipelines, debug failures, and implement industry-standard security best practices, streamlining the entire development and deployment process.

Guide to capturing, filtering, and inspecting packets with Wireshark for troubleshooting, performance tuning, and security investigations across live and PCAP-based workflows.

Automatically monitors YAML workflows to validate syntax, infer schemas, convert formats, and harden Kubernetes/Docker Compose/CI configurations while spotting anti-patterns and security gaps.

Automates zero trust configuration support for advanced security operations, offering guidance, code/config generation, and validation whenever zero trust config helper topics arise during penetration testing, compliance, or threat modeling workflows.

Provides red team workflows combining subdomain enumeration, live host discovery, technology fingerprinting, XSS hunting, API fuzzing, and automated recon scripting to support bug bounty hunters and security researchers.

Guide to capturing, filtering, and inspecting packets with Wireshark for troubleshooting, performance tuning, and security investigations across live and PCAP-based workflows.