annatchijova/skills

annatchijova/skills · abductive-engineering/SKILL.md · Software engineering best practices grounded in C.S. Peirce's abductive reasoning and his triadic framework…

annatchijova/skills · acquisition-order-of-volatility/SKILL.md · Collect digital evidence in order of volatility, or destroy the thing you came for — memory, network state, and running…

annatchijova/skills · agent-trust-boundaries/SKILL.md · Design LLM and agentic systems so that retrieved content is data and never instruction — instruction authority comes…

annatchijova/skills · alert-triage-economics/SKILL.md · Triage a security alert queue by expected loss, not by the severity label the tool stamped — because analyst attention…

annatchijova/skills · assume-breach-modeling/SKILL.md · Start from "this step already succeeded" and map what the attacker reaches next — the identity held at that position…

annatchijova/skills · atomic-state-mutation/SKILL.md · Make a logical operation that spans several writes to persistent state land all-or-nothing, isolated from concurrent…

annatchijova/skills · attack-surface-triage/SKILL.md · Enumerate the attack surface of an AUTHORIZED target and rank it into a reproducible, falsifiable candidate queue —…

annatchijova/skills · audit-before-patch/SKILL.md · Validate any audit finding, bug report, or proposed fix against the actual current file content before changing a…

annatchijova/skills · authorization-surface-mapping/SKILL.md · Build the actor × resource × action matrix a system implicitly claims to enforce, then test the cells it never wrote a…

annatchijova/skills · beyond-the-fix/SKILL.md · Audit the bug fixes themselves — a patch proves that someone knew something was wrong there, never that it is now…

annatchijova/skills · beyond-the-sink/SKILL.md · Look past the obvious layer of an investigation — past sink-grep keyword lists, past the exhausted question family…

annatchijova/skills · claim-provenance-discipline/SKILL.md · Tracking and preserving the origin of every assertion as it travels through drafts, handoffs, summaries, and documents…

annatchijova/skills · client-side-trust-boundary/SKILL.md · Treat any code or data that runs on a device the user controls as code and data the adversary controls — the mobile…

annatchijova/skills · cloud-architecture-selection/SKILL.md · Derive cloud infrastructure from a workload's actual constraints and required capabilities — never from "X is popular"…

annatchijova/skills · cloud-control-plane-reasoning/SKILL.md · Reason about cloud compromise on the identity and control-plane graph, not the network diagram — because in cloud the…

annatchijova/skills · codebase-health-assessment/SKILL.md · Systematic assessment of a codebase's living, dead, and fossil modules — scan, categorize, prioritize, act. Use when…

annatchijova/skills · concurrency-reasoning/SKILL.md · Reason about concurrent execution in terms of shared mutable state, invariants, and happens-before ordering — not in…

annatchijova/skills · container-trust-boundary/SKILL.md · Treat a container as isolation, not as a security boundary — because "it runs in a container" is not "it is contained"…

annatchijova/skills · containment-under-uncertainty/SKILL.md · Make containment decisions before scope is known, reasoning in reversible-versus-irreversible moves — because acting…

annatchijova/skills · control-effectiveness-vs-existence/SKILL.md · Distinguish a control that exists from a control that works — because compliance attests existence ("MFA is enabled")…

annatchijova/skills · credential-material-triage/SKILL.md · Turn "we found a credential" into a finding by triaging what the material actually is, what it authenticates as, what…

annatchijova/skills · crypto-misuse-reasoning/SKILL.md · Judge a cryptographic system by how it is used, not by which primitive it names — because "we use AES-256" says…

annatchijova/skills · data-leakage-hunting/SKILL.md · Hunt the one bug class in machine learning whose symptom is a better score — information from the evaluation set…

annatchijova/skills · data-provenance-mapping/SKILL.md · You cannot protect, delete, or report on data whose flow you have not mapped — a "delete my data" request, a…

annatchijova/skills · daubert-defensible-writing/SKILL.md · Writing reports, documentation, findings, and explanations that survive cross-examination — separating fact from…

annatchijova/skills · debt-closure-discipline/SKILL.md · Priority determines resolution order, not permission to accumulate indefinitely — every known issue (bug…

annatchijova/skills · deception-signal-quality/SKILL.md · Design deception so that a triggered decoy is a true positive by construction — a honeytoken, honeypot, or canary earns…

annatchijova/skills · decision-record-discipline/SKILL.md · Capture a technical decision while the context still exists — the forces at the time, the alternatives and why each was…

annatchijova/skills · dependency-provenance/SKILL.md · Know what you actually run, where it came from, and what changed — manifest vs lockfile vs installed vs shipped…

annatchijova/skills · destination-driven-construction/SKILL.md · Build toward a chosen, ambitious final product in coherent levels — each one architecturally compatible with the…

annatchijova/skills · detection-engineering/SKILL.md · Turn a detection requirement into a deployed, tested, versioned rule — with a benign twin that must NOT fire, an…

annatchijova/skills · deterministic-core/SKILL.md · Keep any consequential output path reproducible bit-for-bit and tamper-evident — no floats in the decision path…

annatchijova/skills · diagnosing-bugs/SKILL.md · Disciplined diagnosis loop for hard bugs and performance regressions — build a tight feedback loop FIRST, then…

annatchijova/skills · discriminating-proof/SKILL.md · Turn a plausible hypothesis into an earned verdict with the cheapest experiment that can kill it — binary oracle with a…

annatchijova/skills · distributed-write-atomicity/SKILL.md · Design the intermediate state, redelivery, and deduplication explicitly whenever two effects cannot share one…

annatchijova/skills · dont-fall-in-love-with-the-bug/SKILL.md · Do not stop at a reproducible symptom — the gate that makes you earn the report before writing it. Name the broken…

annatchijova/skills · dual-use-behavior-adjudication/SKILL.md · Decide whether observed activity is malicious when the tool, command, or API call is itself legitimate — the…

annatchijova/skills · exploitability-triage/SKILL.md · Turn a scanner hit or a CVSS score into a real risk decision by proving, in this deployment, that the vulnerable code…

annatchijova/skills · falsifiable-testing/SKILL.md · Write tests that can actually fail, and prove it — see the test red before you trust it green, break the code…

annatchijova/skills · finding-custody/SKILL.md · Govern what happens to a confirmed finding once it is reported and you are not going to publish it — the difference…

annatchijova/skills · forensic-logging-design/SKILL.md · Decide what to record today so that tomorrow's reconstruction is possible — derive fields from the questions someone…

annatchijova/skills · forensic-persistence/SKILL.md · Keep an investigation alive and productive when every hypothesis has been refuted, the target looks hardened, and the…

annatchijova/skills · frontend-accessibility-by-construction/SKILL.md · Build interactive frontend components — forms, modals, navigation, custom widgets — so they are operable and…

annatchijova/skills · frontend-component-boundaries/SKILL.md · Decide where to cut a frontend component's boundary by cohesion, behavior, semantics, reuse, and shared reasons to…

annatchijova/skills · frontend-performance-budgets/SKILL.md · Set and enforce explicit performance budgets before writing frontend code, not measure after the fact — outcome metrics…

annatchijova/skills · frontend-testing-strategy/SKILL.md · Allocate frontend test effort by the Testing Trophy (static > unit > integration > E2E) and write tests that assert on…

annatchijova/skills · git-discipline/SKILL.md · Protect repository history during AI-assisted and agentic coding by tagging a restore point before each session…

annatchijova/skills · honest-degradation/SKILL.md · Make code that runs on degraded, legacy, reconstructed, or unverifiable input fail visibly instead of returning a…

annatchijova/skills · honest-technical-oratory/SKILL.md · Present a technical project out loud, under a real time limit, to an audience that may not share your vocabulary or…

annatchijova/skills · hypothesis-driven-hunting/SKILL.md · Run a threat hunt as a falsifiable hypothesis about adversary behavior, not a keyword sweep — state before you query…