Skill UI

Trivy is an open-source, comprehensive scanner used to find vulnerabilities (CVEs), misconfigurations, secrets, and license issues across multiple targets. It is essential for implementing 'shift-left' security gates in CI/CD pipelines, scanning container images, Infrastructure-as-Code (IaC) like Terraform/Kubernetes, and generating/re-scanning SBOMs for supply chain transparency.

A comprehensive audit worker that integrates Open Infrastructure Architecture (OIA) manifest analysis, threat modeling, and MCP security scanning. It computes a composite worst-case severity score and persists time-stamped audit records in a memory namespace. Primarily designed for scheduled CI/CD pipelines to detect architectural drift and security regressions over time.

This comprehensive guide outlines a multi-stage verification pipeline for Quarkus applications. It covers build artifacts, static analysis (Checkstyle, SonarQube, PMD), comprehensive testing (Unit, Integration, API), security scanning (OWASP, dependency checks), native compilation, and performance testing (K6). Use this before PRs or deployments to ensure code quality and stability.

This tool provides comprehensive safety scanning for untrusted inputs, such as user submissions, API payloads, and webhook data. It actively detects various security threats, including prompt injection, jailbreak attempts, instruction override attacks, and unsafe content. Beyond basic checks, it offers deep analysis, full multi-layer scanning, and even capabilities to train defensive models using detected threats. Essential for secure AI application development.

A comprehensive, multi-stage skill designed to simulate a professional Continuous Integration (CI) pipeline. It guides users through critical quality gates, including build verification, type checking, linting, running test suites (with coverage checks), security scanning for secrets, and final diff review. Use this skill before creating a Pull Request or finalizing any significant feature to ensure code robustness and adherence to best practices.