Skill UI

A comprehensive pattern for building robust and cost-efficient LLM application pipelines. This guide details combining model routing based on task complexity, immutable cost tracking, limited retry logic, and prompt caching to manage API expenditures while maintaining high quality. Essential for production systems handling variable-complexity, high-volume tasks.

This skill provides comprehensive handling for Lokalise translation data, covering the entire localization lifecycle. It facilitates creating keys with rich metadata, managing versions using immutable snapshots, isolating work with feature branches, and generating various export formats (JSON, XLIFF). It is essential for handling sensitive translation data, ensuring PII compliance, and managing scalable internationalization within development pipelines.

A comprehensive toolkit designed to professionalize LLM prompt workflows. It moves prompts from ad-hoc drafts to measurable, production-ready assets through A/B testing against structured test cases, immutable version tracking, and governance guidelines. Essential for marketing teams needing verifiable quality and safety for AI-generated content.

This guide demonstrates how to implement clean and robust asynchronous pipelines in TypeScript using `TaskEither` from `fp-ts`. It solves the common problem of deeply nested, unmanageable `try/catch` blocks, allowing developers to compose sequential API calls and operations while correctly handling success and failure paths in a functional, immutable manner. Ideal for complex data fetching and workflow orchestration.

Detects unauthorized runtime drift in containers by monitoring binary execution, filesystem changes, and configuration deviation from the original immutable image. Uses Falco and Microsoft Defender for Containers. Ideal for validating immutable-infrastructure controls, hunting for unexpected package installs or binaries, and determining whether a container diverged from its source image.

This guide details building ransomware-resistant, immutable backup infrastructure using the restic tool and S3 Object Lock (WORM). It automates backup creation, enforces data integrity through checksum checks, and mandates retention periods, helping organizations adhere to the advanced 3-2-1-1-0 backup strategy.

This guide details the implementation of a robust, ransomware-resilient backup architecture following the extended 3-2-1-1-0 rule. It covers critical steps such as classifying assets, defining RPO/RTO, implementing immutable or air-gapped storage, and isolating backup credentials from the production domain. Use this knowledge to design a multilayered defense against data loss and ensure reliable recovery points.

Kubesec is an open-source security risk analysis tool that scores Kubernetes resource manifests to identify security misconfigurations, privilege escalation risks, and policy violations. It checks for best practices like immutable root filesystems and non-root execution. Ideal for integrating into CI/CD pipelines, pre-deployment manifest review, or performing security audits.

A comprehensive guide to hardening container registries using Harbor. Learn how to enforce strict image provenance and deployment security by integrating vulnerability scanning (Trivy), cryptographic image signing (Cosign/Notary), granular Role-Based Access Control (RBAC), immutable tag policies, and content trust. Essential for environments requiring high compliance and robust supply chain security.

A comprehensive guide to hardening GitHub Actions CI/CD workflows against modern supply chain attacks, credential theft, and privilege escalation. Learn techniques such as pinning actions to immutable SHA digests, minimizing GITHUB_TOKEN permissions, preventing script injection from untrusted inputs, and implementing required review gates for secure deployment pipelines. Essential for any project handling production secrets or elevated permissions.

A comprehensive guide to idiomatic and robust Dart/Flutter patterns. Covers essential topics including null safety, immutable state management (Freezed), advanced state solutions (BLoC, Riverpod, Provider), reactive routing with GoRouter, secure networking using Dio, and implementing Clean Architecture principles. Ideal for setting up new, scalable Flutter projects.

A governance skill designed to secure AI agent tool calls using advanced authorization policies. It implements Cedar policies to control which tools agents can access and under what conditions. Key features include running in 'Shadow mode' for safe observation, 'Enforce mode' for strict blocking, and generating cryptographically signed Ed25519 receipts to provide an immutable, tamper-evident audit trail for every policy decision.