fabioc-aloha/Alex_Skill_Mall - 第 8 页

critical-thinking

Challenge what you think is right — alternative hypotheses, missing data, evidence quality, bias detection, falsifiability, and adversarial review

原文语言：英语

debugging-patterns

Systematic problem-solving and error analysis.

原文语言：英语

dialog-engineering

CSAR Loop and structured conversation patterns for effective AI dialog -- Clarify, Summarize, Act, Reflect

原文语言：英语

hypothesis-driven-debugging

Investigate build failures, test errors, runtime crashes, or unexpected behavior through systematic minimal reproduction, multi-hypothesis testing, and evidence-based verification. Use when asked to "debug", "investigate a failure", "find root cause",…

原文语言：英语

knowledge-synthesis

Cross-project pattern recognition — abstract, generalize, connect, store at the highest true level

原文语言：英语

problem-framing-audit

Step-back protocol — restate, generalise, specialise, invert, ask why, pre-mortem, check stakeholders, and audit framings before solving

原文语言：英语

root-cause-analysis

Find the true source, not symptoms — systematic debugging from observation to permanent fix

原文语言：英语

rubber-duck-debugging

Be a thinking partner. The answer often emerges when explaining the problem.

原文语言：英语

socratic-questioning

Help users discover answers, don't just deliver them.

原文语言：英语

allowlist-over-blocklist

Validate input against an allowlist of permitted values — reject everything else

原文语言：英语

api-security-hardening

API security hardening — rate limiting, JWT validation, CORS, input validation (4-layer defense)

原文语言：英语

assist-sg-update

Generate assisted PRs to correct Security Group ownership for first-party apps flagged by S360 tenant-isolation policy (SFI-TI3.2.2)

原文语言：英语

build-fix

Fix compile-time and build errors introduced by prior agent changes

原文语言：英语

create-associate-nsg

Creates a new Network Security Group and associates it with the specified subnets and/or NICs of a Virtual Network.

原文语言：英语

distribution-security

Defense-in-depth, PII protection, secrets scanning, and secure packaging for distributed software

原文语言：英语

error-message-sanitization

Raw error messages leak internal information to users:

原文语言：英语

fetch-violations

Query S360 Kusto for SFI-TI3.2.2 tenant isolation violations, classify by ViolationTitle, flag autofix-eligible items for downstream remediation

原文语言：英语

generate-report

Generate an interactive, self-contained HTML dashboard displaying SFI-TI3.2.2 tenant isolation violations for a service, org, or alias -- includes filtering, sorting, severity coding, TSG links, S360 deep links.

原文语言：英语

guide-advanced-remediation

Complex multi-step remediation scenarios for S360 Tenant Isolation violations that require code changes, Federated Identity Credential (FIC) setup, and bilateral coordination between service teams.

原文语言：英语

guide-cert-rehoming

End-to-end process of rehoming (moving or reissuing) certificates so every production Entra app credential lives in the same tenant and cloud as the app itself.

原文语言：英语

input

Extract and resolve required CodeQL alert metadata from user input before remediation

原文语言：英语

lookup-nsg-for-vnet

Checks every subnet in a Virtual Network for an associated Network Security Group, and also inspects each NIC attached to those subnets for NIC-level NSG coverage.

原文语言：英语

lookup-nsg

Finds the Network Interface Card (NIC) and associated Network Security Group (NSG) for a VM given its public IP address.

原文语言：英语

markdown-sanitization-chain

Markdown sanitization order matters — marked.js then DOMPurify then Mermaid to prevent XSS

原文语言：英语

nnf-cve-cleanup

Cleans up NNF deployments impacted by vulnerable or outdated container images using guided execution.

原文语言：英语

output

Produce the final CodeQL fix result table and choose the correct exit code and retry behavior

原文语言：英语

path-traversal-prevention

When copying files or serving content, user-controlled paths can escape the intended directory:

原文语言：英语

pii-privacy-regulations

Handling personally identifiable information under European and Australian privacy regulations.

原文语言：英语

privacy-responsible-ai

Privacy by design, data protection, and responsible AI principles.

原文语言：英语

remediate-nsg

Applies M365NetIsoNsg compliance rules to an existing Azure NSG and outputs the ARM template for Safe Deployment.

原文语言：英语

remediate-pfx-certificates

Skill helps user to remove checked-in certificates from source code in case of exposed secrets

原文语言：英语

revoke-and-rotate-certificate

Skill helps user to revoke and rotate certificate in case of exposed secrets

原文语言：英语

secrets-management

Secure token storage, VS Code SecretStorage API, credential management, environment variable migration

原文语言：英语

security-review

Defend before attackers find the gaps - OWASP, STRIDE, and Microsoft SFI

原文语言：英语

security-threat-modeler

Analyze codebase architecture to generate a STRIDE-based threat model with data flow diagrams, trust boundaries, prioritized threats, and mitigations. Compatible with Microsoft Threat Modeling Tool concepts. Use when asked to "threat model", "security…

原文语言：英语

shell-injection-prevention

Use execFileSync with args array instead of execSync with string concatenation to prevent shell injection

原文语言：英语

symfix

Classify and remediate CodeQL alerts with the SymFix workflow using staged changelog updates

原文语言：英语

threat-surface-analysis

Discover a codebase's threat surface through systematic investigation — map ecosystem groups, dependency graphs, service connections, authentication mechanisms, and trust boundaries. Use when performing threat modeling, security review, or architectural…

原文语言：英语

violation-triager

Orchestrate end-to-end SFI-TI3.2.2 workflow — fetch violations, classify, dispatch to remediation skills, generate report

原文语言：英语

coherence-audit

Detect coherence violations between Alex_ACT_Edition (brain) and Alex_Skill_Mall (marketplace) — broken references, tag mismatches, deprecated install snippets

原文语言：英语