Skill UI

This skill covers the setup and configuration of Static Application Security Testing (SAST) tools like Semgrep, SonarQube, and CodeQL. It guides users on creating custom security rules, integrating scans into CI/CD pipelines, and managing quality gates. The process includes optimizing scan performance, reducing false positives, and ensuring compliance with security policies across multiple programming languages.

Master essential security scanning tools for network discovery, vulnerability assessment, web application testing, wireless security, and compliance validation, covering tool selection, configuration, and authorized usage.

A comprehensive automation toolkit for managing Sentry error tracking and monitoring operations. Users can programmatically investigate issues, configure project-level alert rules, manage release versions, and monitor organizational structure. Essential for DevOps and development teams needing deep integration and programmatic control over error data.

Implement service-to-service communication management using Istio or Linkerd. Configure mutual TLS (mTLS) for security, traffic shaping, and observability. Use this skill when managing microservices architecture, enabling canary deployments, enforcing authorization policies, and monitoring service health without changing application code.

This skill provides expert-level assistance in designing and managing service mesh architectures using tools like Istio and Linkerd. It covers traffic management, security policies, observability, and multi-cluster configurations. Ideal for implementing zero-trust networking, canary deployments, and debugging microservices communication in Kubernetes environments.

This skill provides comprehensive guidance on implementing observability patterns for service mesh deployments like Istio and Linkerd. It covers metrics, tracing, logging, and dashboard configuration using Prometheus, Grafana, and Jaeger to monitor latency, errors, and traffic effectively.

This skill guides users through software setup or installation processes step by step. It displays the current action and lists remaining steps to prevent overwhelm. The assistant ensures all prerequisites are met and updates the checklist dynamically. Ideal for complex configurations requiring clear, atomic instructions.

This skill scaffolds the necessary configurations for advanced engineering workflows. It guides the user through setting up the issue tracking system (GitHub, GitLab, or local markdown), defining the canonical triage label vocabulary, and establishing the domain documentation context (single or multi-context). It must be run once to initialize the repository for subsequent agent-driven development skills.

This skill identifies error-prone APIs, dangerous configurations, and footgun designs that enable security mistakes. It evaluates whether interfaces are resistant to developer misuse, focusing on algorithm selection, default values, primitive types, and configuration cliffs. Use when reviewing API designs, cryptographic library ergonomics, or assessing authentication interfaces to ensure secure-by-default principles are followed.

Comprehensive guidance for configuring and using ShellCheck to improve shell script quality, catch common pitfalls, and enforce best practices through static code analysis. Covers installation, configuration files, error codes, and CI/CD integration.

Comprehensive guide for creating and managing skills in Claude Code with auto-activation system. Covers two-hook architecture, skill types (guardrail/domain), configuration files, and enforcement levels following Anthropic best practices including 500-line rule and progressive disclosure pattern.

Framework for defining and implementing Service Level Indicators (SLIs), Service Level Objectives (SLOs), and error budgets to balance reliability with innovation velocity. Includes Prometheus recording rules, alerting configurations, and error budget policies for measuring service reliability targets.