Skill UI

Expert guide for designing robust, scalable, and resilient backend systems. Covers modern patterns including Microservices, Event Sourcing, CQRS, and advanced API contracts (REST, GraphQL, gRPC). Specializes in defining service boundaries, implementing distributed transactions (Saga), and integrating comprehensive security measures like OAuth 2.0 and mTLS.

This skill generates complete gRPC service definitions, client/server stubs, and robust implementations directly from Protocol Buffer (.proto) files. It supports all streaming patterns (unary, server, client, bidirectional) and includes advanced features like authentication interceptors, health checks, and automatic REST-to-gRPC gateway generation, making it ideal for building high-performance, enterprise-grade microservices.

This skill simulates a senior Go developer, specializing in writing high-performance, production-grade Go applications. It covers advanced topics like concurrent programming using goroutines and channels, designing robust microservices with gRPC/REST, and optimizing code using pprof and benchmarks. It enforces idiomatic Go patterns, context propagation, and strict testing practices (table-driven, fuzzing, race detection).

Automatically assists backend developers with gRPC service generation, offering best-practice patterns, multi-language scaffolds for Node.js, Python, Go, and validating configs for databases, caching, and messaging to stay production-ready.

A comprehensive guide for designing and implementing production-grade microservices using gRPC in Go. Covers best practices for API contract standardization with Protobuf and Buf, securing service-to-service communication via mTLS, and integrating deep observability using OpenTelemetry interceptors. Ideal for building high-performance, reliable internal APIs.

A comprehensive utility designed to assess the security posture of modern APIs, including REST, GraphQL, and gRPC. It strictly follows the OWASP API Security Top 10 framework, testing for critical vulnerabilities such as Broken Object/Function Level Authorization (BOLA/BFLA), SQL/NoSQL injection flaws, and weaknesses in authentication mechanisms like JWT manipulation. Essential for security engineers and penetration testers validating complex microservice architectures and API gateways.

A comprehensive guide for systematically assessing modern API endpoints (REST, GraphQL, gRPC) against the OWASP API Security Top 10 (2023). This workflow covers identifying endpoints, testing for Broken Object Level Authorization (BOLA/IDOR), assessing broken authentication, and validating rate limiting. Use this during authorized penetration tests or before production deployment to ensure robust API security.

A comprehensive guide for designing, implementing, and reviewing scalable microservices using gRPC in Go. It covers critical best practices including structured protobuf organization, implementing interceptors for cross-cutting concerns, managing connection deadlines, handling standardized gRPC status codes, and ensuring graceful shutdown for robust distributed systems.

Qdrant is a high-performance vector database. This client SDK suite provides official, easy-to-use libraries for multiple programming languages (including Python, Java, Go, and TypeScript). It enables developers to seamlessly integrate sophisticated vector search capabilities into their applications, supporting both REST and gRPC APIs. Ideal for building semantic search engines, recommendation systems, and advanced AI applications.

This tool acts as a centralized orchestrator for the entire Go development lifecycle. It analyzes the current task context—whether designing an API, debugging a panic, or building a gRPC service—and intelligently loads multiple, highly relevant skills simultaneously. It ensures developers have comprehensive, context-aware support for complex workflows, handling everything from architecture and error management to performance tuning and security auditing.

A comprehensive, multi-phase workflow guide for authorized reverse engineering of complex network protocols. Ideal for analyzing proprietary formats such as custom TCP/UDP binary protocols, Protobuf, gRPC, WebSocket frames, and reconstructing state machines from raw PCAP data. This guide covers data collection, field layout restoration, serialization recovery, and secure replaying.

A comprehensive guide to conducting authorized security assessments across API-driven applications. This skill covers REST, gRPC, and WebSocket protocols, addressing the full OWASP API Security Top 10 2023. Techniques include identifying Broken Object Level Authorization (BOLA/IDOR), broken authentication, excessive data exposure, and implementing fuzzing for various API endpoints. Designed for professional penetration testing engagements.