Audit .NET applications for security vulnerabilities and performance bottlenecks.
npx skills add https://github.com/martinholovsky/SOTA-skills --skill sota-dotnet
Please help me install this Agent Skill. Skill: sota-dotnet Source: https://github.com/martinholovsky/SOTA-skills/tree/main/skills/sota-dotnet Command: npx skills add https://github.com/martinholovsky/SOTA-skills --skill sota-dotnet
This Skill addresses the complexity and risk in .NET code development and auditing, providing a comprehensive set of state-of-the-art rules and guidelines.
Run the 'sota-dotnet' skill to start auditing your .NET application.
High-intent search queries and answers about installing and using this skill.
You can audit .NET applications by applying expert-level engineering rules that review modern idioms, security, and performance. This process evaluates injection, deserialization, authentication, and crypto misuse risks, while also identifying garbage collection overhead and allocation pressure.
Securing .NET deserialization and injection risks involves enforcing guidelines for authentication, authorization, and crypto usage. The process applies state-of-the-art rules to mitigate these specific vulnerabilities, ensuring your application adheres to secure coding practices and modern idioms.
You can enforce C# coding standards by applying rules for build and CI safety that target project hygiene, analyzers, and formatting. This enforces best practices for targeting, NuGet supply chain management, and CI gates during your .NET build processes.
Yes, applying advanced C# async concurrency and modern nullability rules requires knowledge of .NET 10 LTS, C#, and relevant APIs. This ensures the expert-level engineering rules for error handling and performance optimization are implemented correctly within your environment.
Optimizing .NET performance and reducing garbage collection overhead requires applying state-of-the-art rules for managing allocation pressure and improving throughput. This approach enforces best practices for async concurrency and modern error handling to maximize application efficiency.
Postpartum-genushyacinthus29Configure Roslynator analyzers and CLI for C# static analysis.
dennisonbertramIdentifies and remediates code and dependency vulnerabilities using Snyk CLI.
AradotsoHarden npm, pnpm, and Bun installs against supply-chain attacks.
eliottbusinessAutomate pre-commit code review with static analysis and security scanning.
