Skill UI

This skill provides a structured workflow for porting existing Semgrep security rules to multiple target languages. It guides users through applicability analysis, test-first rule creation, and validation for each language variant, ensuring consistent and accurate security coverage across polyglot codebases.

A comprehensive, canonical workflow for defining, writing, and improving complex AI skills. It guides users through a structured, multi-step process, including resolving targets, synthesizing information, enforcing depth gates, authoring artifacts, optimizing descriptions, and conducting thorough evaluation and validation.

Master the Zod library for defining robust, type-safe schemas in TypeScript. This expert covers advanced validation techniques, including primitives, objects, unions, and discriminated unions. It specializes in type inference (`z.infer`), data coercion, complex refinements, and seamless integration with modern frameworks like React Hook Form, Next.js, and tRPC, ensuring consistency across your application state and API inputs.

An enterprise-grade agent designed to manage the entire lifecycle of skills within an ecosystem. It handles installation, deep validation (including 10 security checks), registration, and post-installation verification. Features include automatic repair, rollback, dry-run simulation, and a comprehensive status dashboard, ensuring maximum redundancy and system integrity.

This skill provides expertise in TanStack Query (React Query), a powerful tool for asynchronous state management in modern React and Next.js applications. It covers advanced patterns like data fetching, cache invalidation, optimistic updates, and handling SSR hydration, ensuring highly performant and reliable data layers.

Intelligent multi-strategy web scraper that selects between static WebFetch, browser automation, curl/bash, and WebSearch paths to extract structured tables, lists, pricing, and other data, with pagination handling, validation confidence, transforms, and CSV/JSON output for monitoring workflows.

This comprehensive guide covers essential security patterns for Perl development, addressing common vulnerabilities like SQL Injection, XSS, Path Traversal, and Shell Injection. It details best practices including using Perl's Taint Mode, implementing strict allow-list validation, performing safe file operations, and executing external commands securely to ensure robust and resilient applications.

Validates SKILL.md files against the agentskills specification and Anthropic best practices, catching structure, semantic, naming, and quality issues in a single read-only pass before publishing or debugging skills.

This comprehensive tool validates Claude Code plugins against official Anthropic specifications and internal enterprise standards. It performs two main types of checks: structural validation (checking `plugin.json` fields, file references, and permissions) and content validation (conducting deep grading using `SKILL.md`). Use this when building, auditing, or preparing plugins for marketplace submission to ensure compliance and quality.

This skill provides a comprehensive workflow for building vendor-agnostic detection rules using the Sigma format. It empowers security operations center (SOC) engineers to translate raw threat intelligence and MITRE ATT&CK techniques into standardized, portable detection logic. The process guides users through rule validation and conversion into specific queries for major SIEM platforms, including Splunk, Elastic, and Microsoft Sentinel, ensuring robust detection coverage.

A comprehensive tool for testing API parameters, headers, and request bodies against various injection flaws, including SQL injection, NoSQL injection, OS command injection, LDAP injection, and SSRF. It assesses input validation and security posture according to OWASP guidelines. Use only for authorized penetration testing.

A comprehensive skill for assessing mobile applications (Android and iOS) for vulnerabilities related to deep links, custom URI schemes, and intent handling. This skill identifies risks such as unauthorized access, data injection, intent hijacking, and improper validation of App Links or Universal Links, crucial for robust mobile security testing.