Skill UI

Comprehensive guide for exporting and building Godot projects for distribution across multiple platforms (Windows, macOS, Linux, Web, Android). Learn how to configure export presets, run headless exports for CI/CD, and handle complex platform requirements like cross-origin isolation and dedicated server setups.

A comprehensive methodology for exploiting modern Continuous Integration/Continuous Delivery (CI/CD) pipelines. This skill covers advanced attack vectors across major platforms, including GitHub Actions expression injection, Jenkins RCE, GitLab YAML abuse, and Azure DevOps compromise. Techniques focus on privilege escalation, credential theft, and supply chain poisoning, mapping to MITRE ATT&CK T1195.002.

A comprehensive methodology for offensive security, detailing how to systematically extract secrets from Continuous Integration/Continuous Deployment (CI/CD) pipelines. Techniques covered include dumping environment variables, exploiting misconfigurations in HashiCorp Vault, AWS Secrets Manager, and cloud platform tokens (GitHub, GitLab, etc.). It also guides attackers on OIDC federation abuse, build log analysis, and advanced exfiltration methods, mapping to MITRE ATT&CK T1552.

A comprehensive methodology covering advanced offensive techniques targeting the software supply chain. This includes exploiting dependency confusion across npm, PyPI, and NuGet, executing build system hooks, tampering with CI/CD pipelines, and compromising container images. It provides detailed PoC patterns and detection guidance for red team operations.

An expert advisor trained in PCI DSS standards (v4.0.1 current) and QSA methodology. This skill provides deep guidance on compliance requirements, including CDE scoping, SAQ selection, gap assessment roadmaps, network segmentation, data tokenization, and general best practices for protecting cardholder data. Essential for security, compliance, and engineering teams.

Provides a comprehensive setup for Playwright End-to-End (E2E) testing. This skill automatically analyzes your project structure (framework detection, TypeScript/JavaScript) and generates all necessary files: the core playwright.config.ts, standardized folder structure, initial test examples, and full CI/CD workflows (GitHub Actions/GitLab). It ensures your testing environment is production-ready, supporting modern frameworks like Next.js, React, Vue, and Angular.

This skill automates the setup of continuous integration and continuous deployment (CI/CD) pipelines specifically for Power Pages solutions within the Power Platform. It creates pipeline configurations natively in Dataverse, eliminating the need for external YAML files or separate CI/CD infrastructure. It guides users through the Application Lifecycle Management (ALM) process, ensuring structured, automated deployment from development stages to production.

Design, create, review, migrate, or troubleshoot Azure Developer CLI (azd) projects using current Microsoft guidance. Use for azd, azure.yaml, AZD templates, Bicep or Terraform under infra, AZD environments and secrets, hooks, deployment workflows, and azd-managed CI/CD.

Comprehensive guidelines for DevOps workflows including infrastructure design, CI/CD pipelines, container management with Docker and Kubernetes, health checks, rollback strategies, feature flags, and mobile release processes. Ensures production readiness and security compliance across various environments.

This skill diffs a live web page's accessibility violations against a specified baseline. It can compare changes against uncommitted local stashes or a specific Git branch. The report focuses exclusively on changes, highlighting new violations introduced, violations that have been fixed, and the count of pre-existing issues. Ideal for CI/CD pipelines and development auditing.

Performs static security analysis on GitHub Actions workflows that incorporate AI coding agents (e.g., Claude, Gemini, OpenAI). This skill helps identify critical data flow vulnerabilities, such as where attacker-controlled input can reach AI agent prompts or internal systems via CI/CD pipelines, going beyond simple expression checks.

Use this skill to deeply inspect and audit the entire process of local AI coding-agent sessions. It tracks critical operational metrics such as token consumption, cost spikes, tool failures, latency anomalies, and overall health scores. Ideal for debugging unreliable code runs, establishing CI/CD health gates, or comparing different attempts to ensure semantic accuracy.