Skill UI

A comprehensive, NIST/CISA-aligned workflow for structured recovery following a ransomware incident. It covers critical steps including environment isolation, forensic evidence preservation, Active Directory restoration (DSRM, krbtgt reset), backup integrity validation, and phased, dependency-based system rebuild. Essential for post-incident disaster recovery planning.

This skill provides a comprehensive framework for simulating and testing disaster recovery plans against ransomware threats. It guides users through measuring Recovery Time Objective (RTO) and Recovery Point Objective (RPO), validating clean backup restores, and hardening security controls to ensure organizational resilience. It is designed for tabletop exercises and compliance auditing, not for active incident response.

A comprehensive guide for setting up production-grade CI/CD pipelines for Go projects using GitHub Actions. It covers all critical stages: unit testing (with race detection), linting, static application security testing (SAST), vulnerability scanning, automated dependency updates (Dependabot/Renovate), Docker image builds, and automated releases via GoReleaser. Ideal for DevOps engineers establishing or improving Go project quality gates.

This comprehensive checklist guides the deployment of Snowflake data pipelines and integrations into a production environment. It covers critical areas such as authentication best practices, warehouse configuration, data pipeline readiness, access control, monitoring setup, and disaster recovery planning. Use it when preparing for a go-live or validating the stability of your production Snowflake setup.

A comprehensive guide to implementing production-grade reliability patterns for Snowflake environments. Covers advanced techniques like Time Travel for point-in-time recovery, cross-region database replication, account failover groups for disaster recovery, and application-level resilience coding (e.g., connection failover logic). Essential for building fault-tolerant, highly available data pipelines.

This framework enforces high output quality, intellectual honesty, and continuous improvement across all AppSec agents. It mandates structured processes, including self-critique loops, anti-rationalization guards, and self-reflection quality gates (≥8 scoring). Applicable during code review, SAST, SCA, and threat modeling, it ensures rigorous and verifiable security analysis.

Creates comprehensive, actionable disaster recovery (DR) documents for any service or system. It defines critical recovery targets (RTO/RPO), outlines failure scenario runbooks, specifies backup validation procedures, and establishes testing cadences. Use this tool when building site reliability engineering (SRE) practices or preparing for major system failure simulations.

A comprehensive set of programmatic interfaces for RuView's Wi-Fi sensing capabilities, including the CLI binary, REST API, and WebAssembly builds. This toolkit allows developers to integrate sophisticated disaster survivor detection and signal analysis into various environments, such as scripting, web browsers, and edge devices (ESP32-WASM3). Ideal for systems requiring cross-platform, scalable sensing data streams.

A comprehensive white-box security auditing workflow designed for proprietary source code. It integrates static analysis security testing (SAST) tools like Semgrep and CodeQL to detect common vulnerabilities (e.g., injection, IDOR, crypto misuse), followed by mandatory manual threat modeling and verification steps. Applicable for PR reviews and pre-deployment security checks.

A comprehensive workflow bundle covering the entire cloud-native development lifecycle. It guides users through critical phases, including cloud infrastructure setup (AWS, Azure, GCP, Terraform IaC), container orchestration with Kubernetes, robust CI/CD pipeline automation, observability implementation, security hardening, cost optimization, and disaster recovery planning. This ensures best practices across all stages of modern application deployment.

This skill covers expert-level database administration for modern cloud environments. It includes managing AWS, Azure, and Google Cloud databases, implementing Infrastructure as Code, ensuring high availability and disaster recovery, optimizing performance, and securing data. Suitable for automating maintenance, handling migrations, and managing containerized databases.

Implement comprehensive automated database backup strategies for PostgreSQL, MySQL, and MongoDB. Configure retention policies, schedule backups using cron or systemd, and upload to S3-compatible storage. Includes scripts for logical and physical backups, point-in-time recovery, and disaster recovery testing. Essential for DevOps and database administration roles to ensure data safety and business continuity.