Skill UI

This skill guides the setup of Continuous Integration and Continuous Deployment (CI/CD) pipelines for Salesforce projects using GitHub Actions. It covers automated metadata deployment, rigorous Apex unit testing, and integration testing, ensuring code quality and stability before every release. Key steps include configuring JWT authentication, setting up GitHub Secrets, and defining multi-stage workflows to validate and deploy changes across environments.

This guide provides a comprehensive workflow for configuring and managing Salesforce integrations across multiple environments, including Development, various Sandboxes (QA, Staging), and Production. It covers best practices for environment-specific credential handling, utilizing secrets managers (Vault, AWS/GCP), and establishing robust CI/CD deployment promotion flows using Salesforce CLI and code examples.

This guide provides comprehensive steps for deploying Shopify applications (including extensions and functions) to various production cloud hosting platforms, such as Vercel, Fly.io, and Google Cloud Run. It covers critical aspects like environment configuration, setting up necessary webhooks, utilizing the Shopify CLI for deployment, and best practices for securely handling platform-specific secrets and ensuring production stability. Use this when moving a local Shopify app to a live e-commerce environment.

Implement comprehensive automated policy enforcement for Shopify apps, ensuring security and adherence to App Store guidelines. This skill includes ESLint rules for detecting hardcoded API secrets, enforcing GraphQL query cost budgets, and running pre-commit hooks and CI checks for critical compliance validations (e.g., GDPR webhooks). Use it when hardening a production-ready Shopify application.

Master the deployment of applications connected to Snowflake across various cloud environments, including serverless functions (AWS Lambda, Cloud Run) and containers. This guide covers best practices for secure connection management, connection pooling, handling secrets (like private keys), and ensuring application reliability in production settings.

Configure secure and isolated Webflow integrations across development, staging, and production environments. This guide details how to manage separate API tokens, Site IDs, and secure secrets using industry-standard secret managers like HashiCorp Vault, AWS Secrets Manager, and GCP Secret Manager, ensuring data integrity and reliable deployment in a CI/CD pipeline.

This skill performs comprehensive, feature-level integration validation after all associated development tasks are implemented. It goes beyond checking individual tasks to ensure cross-task consistency, full test suite passage, and complete specification coverage. It validates data flow, architectural adherence, and performs critical security scans for residual issues (e.g., TODOs, hardcoded secrets), providing a holistic GO/NO-GO assessment for deployment. Use this skill as a final quality gate to verify that the completed feature set respects the designed boundaries and dependencies end-...

A comprehensive playbook detailing advanced techniques for attacking Kubernetes clusters. Covers API server access, RBAC privilege escalation, service account token abuse, etcd secrets extraction, Kubelet exploitation, and various container escapes. This guide is essential for security professionals and red teams performing deep security assessments on cloud-native infrastructure.

Master the design, debugging, and hardening of production-grade GitHub Actions CI/CD pipelines. This skill covers advanced topics including reusable workflows, matrix builds, self-hosted runners, OIDC authentication, secrets management, environment protection, and complex trigger patterns (e.g., workflow_call, schedule, release). Use this to automate complex build, test, and deployment processes.

Dep handles the entire journey from local code to production deployment. This skill automates containerization using Docker and docker-compose, establishes robust CI/CD pipelines (linting, testing, security scanning, deployment), manages environment variables and secrets, and generates Infrastructure as Code (Terraform/Pulumi) configurations. It ensures observability and provides rollback procedures.

A comprehensive guide to deploying cloud-native deception across AWS, Azure, and GCP. This skill utilizes decoy resources—such as canary IAM keys, honey object storage buckets, and decoy secrets—whose sole purpose is to generate high-fidelity alerts the instant they are interacted with by an attacker. It detects cloud reconnaissance, credential theft, and lateral movement by wiring detection through native logging services (CloudTrail, Sentinel, Cloud Audit Logs), ensuring near-zero false positives for the SOC.

Implements HashiCorp Vault's dynamic secrets engine to automatically generate, lease, and rotate short-lived credentials for databases (e.g., Postgres, MySQL), AWS IAM keys, and PKI certificates. This eliminates the risk associated with storing static secrets, ensuring compliance with zero-trust principles and automating the entire secret lifecycle.