Skill UI

Use Trivy to scan Docker and OCI images for OS/library CVEs, secrets, misconfigurations, licenses, and SBOM data; integrates with CI/CD pipelines and exports SARIF/JSON/CycloneDX for policy enforcement.

Use Kubesec to analyze Kubernetes YAML/JSON manifests for misconfigurations, privilege escalation risks, and missing controls, delivering scores and remediation hints via CLI, Docker, kubectl plugin, or REST API for DevSecOps and CI/CD pipelines.

Validates Helm chart provenance, scans rendered templates for misconfigurations, enforces pod security contexts, and hardens RBAC/secrets workflows so Kubernetes deployments stay compliant.

Guides penetration testers through identifying CORS misconfigurations on web APIs, validating origin handling, preflight responses, and crafting PoCs to prove sensitive data can be accessed cross-origin during authorized assessments.

Implements end-to-end FIDO2/WebAuthn hardware security key authentication, covering server configuration, registration and authentication ceremonies, YubiKey enrollment, and passkey migration so high-value accounts gain phishing-resistant, passwordless MFA.

Checks AWS, Azure, and GCP configurations for IAM escalation paths, public storage exposure, open security groups, and IaC gaps, providing preventive findings with MITRE mapping for cloud posture management workflows.

Guides idiomatic C# and .NET patterns covering immutability, explicit intent, dependency injection, async usage, configuration binding, result handling, and repository abstractions to build robust, maintainable applications.

This skill focuses on building new API connectors or providers for an existing repository by strictly adhering to the host project's established architectural patterns. It goes beyond basic HTTP calls, requiring alignment with the repository's native standards for connector layout, configuration schemas, authentication models, error handling, and testing frameworks. Use this when integrating a new service while maintaining architectural consistency with the current codebase.

A configuration-driven frontend approach that enforces premium UI rules, deterministic typography, responsive grids, and structured interaction states to override default LLM biases for polished interfaces.

Provides golangci-lint configuration, practical guidance for running linters, interpreting output, suppressing warnings responsibly, and embedding linting into Go workflows and CI pipelines to keep quality high.

Provides guidance for using `lark-cli base +...` commands to manage Feishu multi-dimensional tables, covering table and field configuration, records, views, dashboards, workflows, formulas, lookups, and data-query best practices so agents build reliable automation.

Guides agents through Lark CLI configuration initialization, auth login as user or bot, identity switching, scope and permission management, error handling, and update reminders so they can safely onboard tooling and troubleshoot permission issues.