Skill UI

Master the Zod library for defining robust, type-safe schemas in TypeScript. This expert covers advanced validation techniques, including primitives, objects, unions, and discriminated unions. It specializes in type inference (`z.infer`), data coercion, complex refinements, and seamless integration with modern frameworks like React Hook Form, Next.js, and tRPC, ensuring consistency across your application state and API inputs.

A comprehensive utility designed to assess the security posture of modern APIs, including REST, GraphQL, and gRPC. It strictly follows the OWASP API Security Top 10 framework, testing for critical vulnerabilities such as Broken Object/Function Level Authorization (BOLA/BFLA), SQL/NoSQL injection flaws, and weaknesses in authentication mechanisms like JWT manipulation. Essential for security engineers and penetration testers validating complex microservice architectures and API gateways.

A comprehensive guide for systematically assessing modern API endpoints (REST, GraphQL, gRPC) against the OWASP API Security Top 10 (2023). This workflow covers identifying endpoints, testing for Broken Object Level Authorization (BOLA/IDOR), assessing broken authentication, and validating rate limiting. Use this during authorized penetration tests or before production deployment to ensure robust API security.

tRPC allows developers to build highly type-safe APIs in a full-stack environment without needing to write or maintain separate schemas. It provides end-to-end type safety from server routers to client components, supporting queries, mutations, subscriptions, and robust middleware. Ideal for building modern TypeScript monorepos, Next.js, or Remix applications.

This guide details how to analyze comprehensive Zeek network logs (conn.log, smb_files.log, ntlm.log, dce_rpc.log, etc.) to detect advanced attacker techniques. It specifically targets indicators of compromise related to lateral movement, such as SMB admin share access, NTLM account spraying, and remote service execution (DCE/RPC patterns). It is a critical network forensics tool for post-incident investigation.

This skill provides comprehensive detection strategies for adversaries abusing DCOM objects (e.g., MMC20.Application) to perform stealthy lateral movement (MITRE ATT&CK T1021.003). It details how to correlate Sysmon Event IDs (Process Creation, Network Connection), analyze WMI activity, and monitor RPC traffic on port 135 to identify unauthorized remote command execution chains. Ideal for advanced threat hunting, red teaming, and purple team exercises.

A comprehensive guide for designing, implementing, and reviewing scalable microservices using gRPC in Go. It covers critical best practices including structured protobuf organization, implementing interceptors for cross-cutting concerns, managing connection deadlines, handling standardized gRPC status codes, and ensuring graceful shutdown for robust distributed systems.

Generates a structured Epic architecture specification from a Product Requirements Document, guiding senior architects to capture high-level approaches, layered Mermeid diagrams, features, technical enablers, stack choices, and value estimates for TypeScript/Next.js monorepo projects.

Generates a complete Power Platform MCP connector server tuned for Copilot Studio, covering swagger/api metadata, C# scripting, JSON-RPC handling, tool/resource wiring, and deployment-ready configurations with schema-safe inputs and streamable MCP HTTP endpoints.

Generates Power Platform custom connectors with MCP integration for Copilot Studio, covering schema generation, JSON-RPC scripts, validation, troubleshooting, OAuth hardening, and CLI guidance for paconn/pac workflows.

A comprehensive guide to setting up a full-cycle local Web3 development workflow. This skill utilizes Alchemy as the RPC provider, Hardhat for local unit testing, and integrates Mainnet forking and Sepolia testnet deployment. It covers initializing the project, configuring smart contract interactions, and implementing advanced testing patterns.

A comprehensive guide for diagnosing and fixing common errors encountered when using the Alchemy SDK and Web3 APIs. Covers issues such as authentication failures (401/403), rate limits (429), invalid parameters, RPC failures, and specific NFT/Enhanced API errors. Ideal for developers integrating blockchain functionalities.