Skill UI

This script automates the Git push process, ensuring safety checks (e.g., preventing direct pushes to main branches) and verifying uncommitted changes. Upon successful push, it dynamically generates and displays direct tracking links for CI pipelines on major platforms like GitLab and GitHub Actions, providing immediate status updates for development teams.

This advanced skill specializes in tracing the complete provenance of software artifacts across the entire development lifecycle. It is designed for deep security analysis of CI/CD pipelines, identifying dependency drift, build tampering, package origin, and determining the final artifact consumed at runtime. Use it when investigating integrity vulnerabilities in complex release flows.

A specialized downstream skill for deep analysis of complex web rendering pipelines. Use this to trace vulnerabilities or logical flaws residing in Server-Side Rendering (SSR), template data, route loaders, or client-server hydration boundaries. It compares template-level gating against backend handler enforcement to pinpoint the decisive weak point in the render chain.

This comprehensive pipeline automates the entire software release cycle, from merging a Pull Request (PR) to verifying the final deployment. It performs critical steps including CI status checks, waiting for build completion, executing pre-merge readiness gates (staleness, testing, documentation), and finally merging and detecting the target deployment platform for a controlled, reliable release.

An advanced orchestrator that manages the entire software development lifecycle (SDLC) from initial concept vetting to final code deployment. It guides the process through distinct, sequential stages: Product Direction Review (CEO), Technical Architecture Review (Engineering), Detailed Planning, Validation, and final Execution (PR). This tool ensures all critical gates are passed before writing code, minimizing risks and ensuring alignment.

This gate review forces a transition from vague product direction to a concrete, buildable technical specification. It mandates the creation of architectural diagrams, data flow maps, state machines, and failure mode inventories before a single line of implementation code is written. Essential for complex features with async components or external dependencies.

This robust pipeline guides development teams through a rigorous, five-phase planning process *before* writing any code. It systematically analyzes PRDs, design specifications (UX, accessibility), and existing architecture to produce a comprehensive implementation plan. Key outputs include Architecture Decision Records (ADRs), detailed task breakdowns, and verification strategies, ensuring all technical and design decisions are documented and scoped.

A comprehensive framework for assessing software supply chain security. It covers generating Software Bill of Materials (SBOM), performing Software Composition Analysis (SCA) on open-source dependencies, auditing CI/CD pipelines, and analyzing container images. This skill helps identify vulnerabilities, ensure build integrity, and verify component provenance across the entire development lifecycle.

This skill validates FHIR R4 resources and Bundles against mandatory US Core profiles (USCDI). It goes beyond mere syntactic checks to ensure that data prepared for submission to major Electronic Health Records (EHRs) like Epic or Cerner meets the required US-specific conformance standards. It detects common data gaps, checks 'must-support' elements, and converts the comprehensive validation report into a standard FHIR OperationOutcome for seamless pipeline integration.

Automates the full pipeline from a task goal to an A-grade Seed and its execution. Runs bounded Socratic interviews, generates a Seed, reviews and repairs until quality is met, then executes and tracks the background job via MCP tools.

Force-links a development or target environment to a Power Platform Pipelines host, overriding its previous host association. Use when creating a deployment environment fails because it is already associated with another pipelines host, or when intentionally migrating an environment between hosts. Destructive to the previous host's pipelines access; reversible via Force Link from the original host.

This skill is the final step in the plugin build pipeline. It takes the generated manifest and all staged binary artifacts (Android/iOS) from prior build steps. Its core function is to reconcile the declared entrypoints against the actual existence of binaries, ensuring consistency. It then zips these verified components into a single, statically verified, and ready-to-deliver .ppmplugin bundle.