Skill UI

Shipwright is an autonomous, multi-phase agent designed to convert simple, plain-English requirements into fully functional, tested, and deployment-ready applications. It supports modern full-stack frameworks like Next.js/Supabase, SvelteKit, and Astro. Use this tool when you need to scaffold a complete project, add complex features, or generate an entire SaaS dashboard merely by describing it.

This skill provides a comprehensive framework for security auditing LLM agents that possess external tools (file system access, command execution, network calls). It employs advanced dialogue probing techniques—such as command injection, path traversal, and SSRF attempts—to identify vulnerabilities where the agent might be induced to execute unexpected or malicious code, or access sensitive resources. Essential for red teaming and securing agent functionalities.

Provides comprehensive migration patterns for converting existing v5 Webiny code to the v6 architecture. It details key architectural shifts, including replacing ContextPlugins with Dependency Injection (DI) Services, updating event subscriptions to specialized EventHandler Features, and adopting the feature-based container registration model. Essential for developers and AI agents performing major framework upgrades.

This framework enforces high output quality, intellectual honesty, and continuous improvement across all AppSec agents. It mandates structured processes, including self-critique loops, anti-rationalization guards, and self-reflection quality gates (≥8 scoring). Applicable during code review, SAST, SCA, and threat modeling, it ensures rigorous and verifiable security analysis.