fabioc-aloha/Alex_Skill_Mall - Página 8

critical-thinking

Challenge what you think is right — alternative hypotheses, missing data, evidence quality, bias detection, falsifiability, and adversarial review

Idioma do texto original: inglês

debugging-patterns

Systematic problem-solving and error analysis.

Idioma do texto original: inglês

dialog-engineering

CSAR Loop and structured conversation patterns for effective AI dialog -- Clarify, Summarize, Act, Reflect

Idioma do texto original: inglês

hypothesis-driven-debugging

Investigate build failures, test errors, runtime crashes, or unexpected behavior through systematic minimal reproduction, multi-hypothesis testing, and evidence-based verification. Use when asked to "debug", "investigate a failure", "find root cause",…

Idioma do texto original: inglês

knowledge-synthesis

Cross-project pattern recognition — abstract, generalize, connect, store at the highest true level

Idioma do texto original: inglês

problem-framing-audit

Step-back protocol — restate, generalise, specialise, invert, ask why, pre-mortem, check stakeholders, and audit framings before solving

Idioma do texto original: inglês

root-cause-analysis

Find the true source, not symptoms — systematic debugging from observation to permanent fix

Idioma do texto original: inglês

rubber-duck-debugging

Be a thinking partner. The answer often emerges when explaining the problem.

Idioma do texto original: inglês

socratic-questioning

Help users discover answers, don't just deliver them.

Idioma do texto original: inglês

allowlist-over-blocklist

Validate input against an allowlist of permitted values — reject everything else

Idioma do texto original: inglês

api-security-hardening

API security hardening — rate limiting, JWT validation, CORS, input validation (4-layer defense)

Idioma do texto original: inglês

assist-sg-update

Generate assisted PRs to correct Security Group ownership for first-party apps flagged by S360 tenant-isolation policy (SFI-TI3.2.2)

Idioma do texto original: inglês

build-fix

Fix compile-time and build errors introduced by prior agent changes

Idioma do texto original: inglês

create-associate-nsg

Creates a new Network Security Group and associates it with the specified subnets and/or NICs of a Virtual Network.

Idioma do texto original: inglês

distribution-security

Defense-in-depth, PII protection, secrets scanning, and secure packaging for distributed software

Idioma do texto original: inglês

error-message-sanitization

Raw error messages leak internal information to users:

Idioma do texto original: inglês

fetch-violations

Query S360 Kusto for SFI-TI3.2.2 tenant isolation violations, classify by ViolationTitle, flag autofix-eligible items for downstream remediation

Idioma do texto original: inglês

generate-report

Generate an interactive, self-contained HTML dashboard displaying SFI-TI3.2.2 tenant isolation violations for a service, org, or alias -- includes filtering, sorting, severity coding, TSG links, S360 deep links.

Idioma do texto original: inglês

guide-advanced-remediation

Complex multi-step remediation scenarios for S360 Tenant Isolation violations that require code changes, Federated Identity Credential (FIC) setup, and bilateral coordination between service teams.

Idioma do texto original: inglês

guide-cert-rehoming

End-to-end process of rehoming (moving or reissuing) certificates so every production Entra app credential lives in the same tenant and cloud as the app itself.

Idioma do texto original: inglês

input

Extract and resolve required CodeQL alert metadata from user input before remediation

Idioma do texto original: inglês

lookup-nsg-for-vnet

Checks every subnet in a Virtual Network for an associated Network Security Group, and also inspects each NIC attached to those subnets for NIC-level NSG coverage.

Idioma do texto original: inglês

lookup-nsg

Finds the Network Interface Card (NIC) and associated Network Security Group (NSG) for a VM given its public IP address.

Idioma do texto original: inglês

markdown-sanitization-chain

Markdown sanitization order matters — marked.js then DOMPurify then Mermaid to prevent XSS

Idioma do texto original: inglês

nnf-cve-cleanup

Cleans up NNF deployments impacted by vulnerable or outdated container images using guided execution.

Idioma do texto original: inglês

output

Produce the final CodeQL fix result table and choose the correct exit code and retry behavior

Idioma do texto original: inglês

path-traversal-prevention

When copying files or serving content, user-controlled paths can escape the intended directory:

Idioma do texto original: inglês

pii-privacy-regulations

Handling personally identifiable information under European and Australian privacy regulations.

Idioma do texto original: inglês

privacy-responsible-ai

Privacy by design, data protection, and responsible AI principles.

Idioma do texto original: inglês

remediate-nsg

Applies M365NetIsoNsg compliance rules to an existing Azure NSG and outputs the ARM template for Safe Deployment.

Idioma do texto original: inglês

remediate-pfx-certificates

Skill helps user to remove checked-in certificates from source code in case of exposed secrets

Idioma do texto original: inglês

revoke-and-rotate-certificate

Skill helps user to revoke and rotate certificate in case of exposed secrets

Idioma do texto original: inglês

secrets-management

Secure token storage, VS Code SecretStorage API, credential management, environment variable migration

Idioma do texto original: inglês

security-review

Defend before attackers find the gaps - OWASP, STRIDE, and Microsoft SFI

Idioma do texto original: inglês

security-threat-modeler

Analyze codebase architecture to generate a STRIDE-based threat model with data flow diagrams, trust boundaries, prioritized threats, and mitigations. Compatible with Microsoft Threat Modeling Tool concepts. Use when asked to "threat model", "security…

Idioma do texto original: inglês

shell-injection-prevention

Use execFileSync with args array instead of execSync with string concatenation to prevent shell injection

Idioma do texto original: inglês

symfix

Classify and remediate CodeQL alerts with the SymFix workflow using staged changelog updates

Idioma do texto original: inglês

threat-surface-analysis

Discover a codebase's threat surface through systematic investigation — map ecosystem groups, dependency graphs, service connections, authentication mechanisms, and trust boundaries. Use when performing threat modeling, security review, or architectural…

Idioma do texto original: inglês

violation-triager

Orchestrate end-to-end SFI-TI3.2.2 workflow — fetch violations, classify, dispatch to remediation skills, generate report

Idioma do texto original: inglês

coherence-audit

Detect coherence violations between Alex_ACT_Edition (brain) and Alex_Skill_Mall (marketplace) — broken references, tag mismatches, deprecated install snippets

Idioma do texto original: inglês