Skill UI

This skill guides the verification of software build provenance and signatures using industry standards like SLSA and Sigstore. It leverages tools like cosign and slsa-verifier to enforce keyless OIDC identity and confirm that artifacts were built by trusted sources without tampering. It is essential for hardening CI/CD pipelines and securing the entire software supply chain against advanced attacks.

This advanced skill performs code review by simulating the documented engineering philosophies of historical figures (e.g., Linus Torvalds, Steve Jobs, Ken Thompson). It moves beyond generic AI findings by grounding critiques in specific, citable principles—such as 'good taste' or 'customer experience.' Ideal for high-stakes PRs, architectural reviews, and ensuring deep, pre-submission code hardening.