Skill UI

This skill provides best practices for managing application state and ensuring data persistence within large-scale applications, particularly for systems using Makepad architecture (Robrix/Moly). It details core structures like AppState, techniques for passing state through widget trees (Scope), and handling persistent data serialization (serde) across sessions, making it essential for building robust, multi-session UIs.

Creates security-focused skills for automation or training environments, enabling teams to define and deploy safety-oriented routines quickly.

This skill provides a comprehensive guide for creating production-quality custom Semgrep rules. It teaches best practices for detecting security vulnerabilities, enforcing robust coding standards, and identifying specific bug patterns. By emphasizing a test-first approach and utilizing advanced techniques like taint mode, users can write highly accurate static analysis rules that drastically reduce false positives.

A comprehensive, multi-phase security audit tool designed to evaluate AI agent skills before deployment. It detects critical vulnerabilities, including prompt injection, malicious code, excessive permissions, secret exposure, and supply chain risks, ensuring the integrity and safety of your agent environment.

A comprehensive, canonical workflow for defining, writing, and improving complex AI skills. It guides users through a structured, multi-step process, including resolving targets, synthesizing information, enforcing depth gates, authoring artifacts, optimizing descriptions, and conducting thorough evaluation and validation.

This tool systematically audits a project's dependencies to identify potential supply chain security risks. It evaluates critical factors such as maintenance status, contributor count, popularity, and the presence of high-risk features. It is ideal for pre-security audits, assessing the overall attack surface, and mitigating risks before deployment.

Synchronizes Playwright tests with TestRail by importing cases, annotating tests, creating runs, and pushing results, covering status sync and case updates.

Master the creation and manipulation of 3D geometry within the Three.js framework. This guide covers built-in primitive shapes (Box, Sphere, Cylinder), advanced procedural geometries (Extrude, Tube, TorusKnot), and text visualization. Crucially, it details the use of BufferGeometry, allowing developers to store vertex, normal, UV, and color data in optimized typed arrays for high-performance rendering and custom mesh construction.

A comprehensive utility for handling asset loading within Three.js environments. It supports various formats, including GLTF/GLB models, textures, HDR environments, and complex image assets. Features include robust asynchronous loading patterns, progress tracking via LoadingManager, and detailed configuration for PBR materials and environment mapping.

This guide provides a comprehensive overview of various material types in Three.js, including MeshBasic, MeshLambert, MeshPhong, MeshStandard, and advanced MeshPhysical materials. It covers techniques for achieving realistic PBR rendering, simulating materials like glass, car paint, and fabric, and utilizing custom shaders for maximum visual control. Essential for any developer styling meshes and creating immersive 3D experiences.

This guide details advanced post-processing techniques for Three.js, allowing developers to enhance 3D scenes with cinematic visual effects. It covers implementing Bloom (glow), Depth of Field (DOF), Anti-Aliasing (FXAA/SMAA), and Ambient Occlusion (SSAO) using EffectComposer, significantly boosting the visual fidelity and realism of web-based 3D applications.

Varlock provides secure, default environment variable management, ensuring that sensitive secrets (like API keys and passwords) are never exposed in logs, terminal output, or the AI context. It validates environments, reads schemas, and executes commands in a secure manner, promoting best practices for handling secrets in modern development workflows.