Skill UI

This skill automates the setup and configuration of Ollama, allowing users to deploy Large Language Models (LLMs) locally. It performs system assessment (OS, GPU, RAM), selects optimal models based on hardware availability, and handles installation across macOS, Linux, and Docker. Use this when you require free, self-hosted AI alternatives, need offline inference capabilities, or wish to eliminate reliance on costly hosted API services.

A sophisticated AI tool that coordinates multiple specialized agents (e.g., Security, Architecture, Performance) to provide comprehensive, multi-perspective code assessments. It goes beyond single-point reviews by managing context, running hybrid execution workflows, resolving conflicts, and synthesizing unified, actionable reports for high-quality code assurance.

A specialized, comprehensive workflow designed for optimizing PostgreSQL databases. It guides users through performance assessment, advanced query tuning (using EXPLAIN ANALYZE), defining optimal indexing strategies, fine-tuning configuration parameters (like shared_buffers), and setting up robust maintenance and monitoring practices for production environments.

Centralizes proven red team methodologies into an automated reconnaissance and vulnerability discovery workflow that sequences asset discovery, live host validation, fingerprinting, content hunting, and exploit surface analysis for bug bounty and defensive assessments.

Scans container images and running containers using Trivy and Snyk to identify vulnerabilities, rank them by severity, and return remediation guidance whenever users ask for a security assessment before or after deployment.

This skill specializes in transforming theoretical threat models, risk assessments, and business context into concrete, actionable security requirements. It is essential for writing detailed security user stories, defining robust acceptance criteria, building comprehensive security test cases, and ensuring compliance requirement mapping. Use it when bridging the gap between identifying a vulnerability and specifying how the system must be secured.

Analyzes existing Rails applications to provide a comprehensive and detailed upgrade assessment. This tool checks current gem and JavaScript dependencies, compares the running version against the latest stable release, fetches official upgrade guides, and generates diff reports. It assesses upgrade complexity (Small, Medium, Large) to ensure smooth and safe version migration for Ruby on Rails projects.

This skill provides a comprehensive guide for securely handling student audio data, assessment records, and learning progress within the Speak platform. It focuses on implementing robust data pipelines while ensuring compliance with international privacy regulations such as GDPR and COPPA. Essential for developers integrating or maintaining language learning applications.

This skill provides comprehensive observability for the Speak language learning platform. It monitors critical metrics such as API health status, assessment latency, session usage, and detailed pronunciation score distributions. It is essential for developers implementing robust, production-grade monitoring systems and managing large-scale language learning operations.

Execute systematic SQL injection vulnerability assessments on web applications using reconnaissance, payload tuning, and exploitation workflows to uncover database flaws, capture evidence, and validate remediation recommendations for authorized security testing.

This skill guides developers through advanced, safe, and systematic code refactoring using Test-Driven Development (TDD) principles. It provides a comprehensive workflow encompassing pre-assessment, detecting code smells, applying major design patterns (SOLID, Factory, Strategy), optimizing performance, and ensuring safety through rigorous, incremental testing. Use this when improving code structure, restructuring large components, or updating legacy systems while guaranteeing functional integrity and maintainability.

This guide details advanced techniques for authorized security assessments, focusing on forced browsing. It helps testers discover hidden administrative pages, unprotected APIs, and configuration files by systematically enumerating URLs and challenging application access control mechanisms. Techniques involve using tools like ffuf and Gobuster for comprehensive path and directory discovery.