fabioc-aloha/Alex_Skill_Mall - 8ページ

critical-thinking

Challenge what you think is right — alternative hypotheses, missing data, evidence quality, bias detection, falsifiability, and adversarial review

原文の言語: 英語

debugging-patterns

Systematic problem-solving and error analysis.

原文の言語: 英語

dialog-engineering

CSAR Loop and structured conversation patterns for effective AI dialog -- Clarify, Summarize, Act, Reflect

原文の言語: 英語

hypothesis-driven-debugging

Investigate build failures, test errors, runtime crashes, or unexpected behavior through systematic minimal reproduction, multi-hypothesis testing, and evidence-based verification. Use when asked to "debug", "investigate a failure", "find root cause",…

原文の言語: 英語

knowledge-synthesis

Cross-project pattern recognition — abstract, generalize, connect, store at the highest true level

原文の言語: 英語

problem-framing-audit

Step-back protocol — restate, generalise, specialise, invert, ask why, pre-mortem, check stakeholders, and audit framings before solving

原文の言語: 英語

root-cause-analysis

Find the true source, not symptoms — systematic debugging from observation to permanent fix

原文の言語: 英語

rubber-duck-debugging

Be a thinking partner. The answer often emerges when explaining the problem.

原文の言語: 英語

socratic-questioning

Help users discover answers, don't just deliver them.

原文の言語: 英語

allowlist-over-blocklist

Validate input against an allowlist of permitted values — reject everything else

原文の言語: 英語

api-security-hardening

API security hardening — rate limiting, JWT validation, CORS, input validation (4-layer defense)

原文の言語: 英語

assist-sg-update

Generate assisted PRs to correct Security Group ownership for first-party apps flagged by S360 tenant-isolation policy (SFI-TI3.2.2)

原文の言語: 英語

build-fix

Fix compile-time and build errors introduced by prior agent changes

原文の言語: 英語

create-associate-nsg

Creates a new Network Security Group and associates it with the specified subnets and/or NICs of a Virtual Network.

原文の言語: 英語

distribution-security

Defense-in-depth, PII protection, secrets scanning, and secure packaging for distributed software

原文の言語: 英語

error-message-sanitization

Raw error messages leak internal information to users:

原文の言語: 英語

fetch-violations

Query S360 Kusto for SFI-TI3.2.2 tenant isolation violations, classify by ViolationTitle, flag autofix-eligible items for downstream remediation

原文の言語: 英語

generate-report

Generate an interactive, self-contained HTML dashboard displaying SFI-TI3.2.2 tenant isolation violations for a service, org, or alias -- includes filtering, sorting, severity coding, TSG links, S360 deep links.

原文の言語: 英語

guide-advanced-remediation

Complex multi-step remediation scenarios for S360 Tenant Isolation violations that require code changes, Federated Identity Credential (FIC) setup, and bilateral coordination between service teams.

原文の言語: 英語

guide-cert-rehoming

End-to-end process of rehoming (moving or reissuing) certificates so every production Entra app credential lives in the same tenant and cloud as the app itself.

原文の言語: 英語

input

Extract and resolve required CodeQL alert metadata from user input before remediation

原文の言語: 英語

lookup-nsg-for-vnet

Checks every subnet in a Virtual Network for an associated Network Security Group, and also inspects each NIC attached to those subnets for NIC-level NSG coverage.

原文の言語: 英語

lookup-nsg

Finds the Network Interface Card (NIC) and associated Network Security Group (NSG) for a VM given its public IP address.

原文の言語: 英語

markdown-sanitization-chain

Markdown sanitization order matters — marked.js then DOMPurify then Mermaid to prevent XSS

原文の言語: 英語

nnf-cve-cleanup

Cleans up NNF deployments impacted by vulnerable or outdated container images using guided execution.

原文の言語: 英語

output

Produce the final CodeQL fix result table and choose the correct exit code and retry behavior

原文の言語: 英語

path-traversal-prevention

When copying files or serving content, user-controlled paths can escape the intended directory:

原文の言語: 英語

pii-privacy-regulations

Handling personally identifiable information under European and Australian privacy regulations.

原文の言語: 英語

privacy-responsible-ai

Privacy by design, data protection, and responsible AI principles.

原文の言語: 英語

remediate-nsg

Applies M365NetIsoNsg compliance rules to an existing Azure NSG and outputs the ARM template for Safe Deployment.

原文の言語: 英語

remediate-pfx-certificates

Skill helps user to remove checked-in certificates from source code in case of exposed secrets

原文の言語: 英語

revoke-and-rotate-certificate

Skill helps user to revoke and rotate certificate in case of exposed secrets

原文の言語: 英語

secrets-management

Secure token storage, VS Code SecretStorage API, credential management, environment variable migration

原文の言語: 英語

security-review

Defend before attackers find the gaps - OWASP, STRIDE, and Microsoft SFI

原文の言語: 英語

security-threat-modeler

Analyze codebase architecture to generate a STRIDE-based threat model with data flow diagrams, trust boundaries, prioritized threats, and mitigations. Compatible with Microsoft Threat Modeling Tool concepts. Use when asked to "threat model", "security…

原文の言語: 英語

shell-injection-prevention

Use execFileSync with args array instead of execSync with string concatenation to prevent shell injection

原文の言語: 英語

symfix

Classify and remediate CodeQL alerts with the SymFix workflow using staged changelog updates

原文の言語: 英語

threat-surface-analysis

Discover a codebase's threat surface through systematic investigation — map ecosystem groups, dependency graphs, service connections, authentication mechanisms, and trust boundaries. Use when performing threat modeling, security review, or architectural…

原文の言語: 英語

violation-triager

Orchestrate end-to-end SFI-TI3.2.2 workflow — fetch violations, classify, dispatch to remediation skills, generate report

原文の言語: 英語

coherence-audit

Detect coherence violations between Alex_ACT_Edition (brain) and Alex_Skill_Mall (marketplace) — broken references, tag mismatches, deprecated install snippets

原文の言語: 英語