Skill UI

A comprehensive methodology for exploiting modern Continuous Integration/Continuous Delivery (CI/CD) pipelines. This skill covers advanced attack vectors across major platforms, including GitHub Actions expression injection, Jenkins RCE, GitLab YAML abuse, and Azure DevOps compromise. Techniques focus on privilege escalation, credential theft, and supply chain poisoning, mapping to MITRE ATT&CK T1195.002.

This robust fixture is designed to execute predefined tasks using a specified seed path and current working directory. It intelligently separates dispatch metadata within YAML frontmatter from the main content body, ensuring the router reliably loads execution parameters while ignoring potential interference from the body text. Ideal for structured testing and controlled execution workflows.

This skill automates the setup of continuous integration and continuous deployment (CI/CD) pipelines specifically for Power Pages solutions within the Power Platform. It creates pipeline configurations natively in Dataverse, eliminating the need for external YAML files or separate CI/CD infrastructure. It guides users through the Application Lifecycle Management (ALM) process, ensuring structured, automated deployment from development stages to production.

Draft, create, comment on, triage, and approve GitHub issues using repository policy and YAML Issue Forms, with strict gates for duplicate search, labels, catalog approval, and delegated workflow actions.

Design, create, review, migrate, or troubleshoot Azure Developer CLI (azd) projects using current Microsoft guidance. Use for azd, azure.yaml, AZD templates, Bicep or Terraform under infra, AZD environments and secrets, hooks, deployment workflows, and azd-managed CI/CD.

Provides AI coding tools with browser-based end-to-end testing via declarative YAML scenarios and Playwright, including visual matching (OpenCV + OCR), platform auto-detection, and structured failure diagnosis.

Configure Azure Pipelines for CI/CD workflows, including build, test, and deployment stages. Manage service connections, define YAML triggers, and utilize templates for scalable automation across cloud environments.

Migrates symbols and annotations across binary versions using BinDiff-style workflows: compares disassembly and pseudocode with an LLM, then applies YAML mapping results to the new IDB.

Guide for splitting extracted text into chunks for LLM context windows or RAG ingestion. Covers chunk size, overlap, markdown/yaml/semantic chunkers, tokenizer-based sizing, and the standalone chunk command.

Define and run multi-container Docker applications using declarative YAML configuration. Ideal for local development, setting up environments, managing service dependencies, networking, and creating reproducible setups. Supports volume mounts, environment variables, and resource limits.

Use when writing or reviewing Expo EAS workflow YAML: inspect current schema and job syntax, validate configuration, and separate draft edits from launching builds or submissions.

This skill assists developers in creating and managing CI/CD pipelines for Expo projects using EAS workflows. It helps write YAML configuration files, validates syntax against official schemas, and automates build and deployment processes. Ideal for configuring triggers, job types, and runner settings within the .eas/workflows directory.