Skill UI

Implement PCI DSS v4.0 requirements for protecting cardholder data across the Cardholder Data Environment (CDE). Guides SAQ selection, network segmentation, encryption, access controls, and ongoing testing for payment card processing.

Expert AI-powered code review combining automated static analysis, intelligent pattern recognition, and modern DevOps practices. Leverages tools like GitHub Copilot, SonarQube, CodeQL, and Semgrep to identify bugs, vulnerabilities, and performance issues across 30+ languages, integrated with CI/CD pipelines for instant PR feedback.

This skill enables developers to scaffold, write, and debug enterprise-grade Playwright E2E tests in Java. It enforces the Page Object Model, JUnit 5, and Allure reporting integration. Supports parallel execution, CI/CD pipelines, and thread-safe base classes for production-quality testing. Ideal for Java 17+ environments.

Implement policy as code using OPA, Kyverno, and Sentinel to automate compliance enforcement in CI/CD pipelines. Define security rules for infrastructure and Kubernetes resources, preventing violations before production deployment. Ideal for DevSecOps teams ensuring consistent governance across cloud environments.

This skill generates Newman CLI commands, configuration files, Jenkins pipeline scripts, and shell automation for running Postman collections in CI/CD or local environments. It helps automate API testing workflows by creating reusable scripts and pipeline configurations that integrate seamlessly with development and deployment processes, ensuring consistent test execution.

This skill autonomously deep-scans entire codebases line-by-line to identify security vulnerabilities, performance bottlenecks, and architectural flaws. It systematically refactors code to meet enterprise-grade production standards, including adding logging, monitoring, CI/CD pipelines, and security hardening. Ideal for preparing software for deployment.

Generates production-grade pytest tests in Python with fixtures, parametrize, markers, mocking, and conftest patterns. Use when user mentions pytest, conftest, @pytest.fixture, @pytest.mark, or Python test. Covers basic tests, fixtures, parametrize, mocking, assertions, anti-patterns, configuration, and deep patterns for CI/CD, async, and best practices.

This comprehensive guide provides robust strategies for testing Python code using industry best practices. It covers essential techniques like pytest, fixtures, mocking, parameterization, and implementing Test-Driven Development (TDD). Use this skill when writing unit tests, setting up complex test suites, performing integration testing, or establishing continuous testing infrastructure in CI/CD pipelines.

This skill generates Robot Framework tests using keyword-driven syntax with Python. It supports SeleniumLibrary for web UI testing and RequestsLibrary for API testing. Users can define custom keywords and create data-driven test cases. Ideal for automation engineers needing structured test scripts for web applications and backend services. Supports cloud integration and CI/CD pipelines.

The RunAPI CLI serves as the dedicated execution layer for interacting with RunAPI's suite of advanced AI models. It allows developers to programmatically generate multimodal content, including images, videos, and music/audio, directly from the terminal or CI/CD pipeline. Users can submit one-off jobs, manage asynchronous tasks, and pass complex JSON request bodies to various services like Suno, Claude, and Gemini, making it essential for robust AI automation workflows.

This skill covers the setup and configuration of Static Application Security Testing (SAST) tools like Semgrep, SonarQube, and CodeQL. It guides users on creating custom security rules, integrating scans into CI/CD pipelines, and managing quality gates. The process includes optimizing scan performance, reducing false positives, and ensuring compliance with security policies across multiple programming languages.

Perform static application security testing to identify vulnerabilities in source code before deployment. Use tools like Semgrep, CodeQL, and SonarQube to integrate security gates into CI/CD pipelines and ensure compliance with secure SDLC practices.