Skill UI

Provides a comprehensive workflow and tooling (GuardDog) to triage npm packages and dependency trees for signs of malicious activity. It focuses on static analysis of install scripts, detecting credential exfiltration, reverse shells, and worming behavior, thereby safeguarding against software supply-chain attacks.

This skill detects malicious, misspelled, or brand-jacked package names (typosquatting) across major ecosystems (npm, PyPI, crates.io). It uses advanced techniques like edit-distance and keyboard-proximity analysis, powered by tools like typomania and OSSGadget, to flag potential supply chain attacks *before* a dependency is installed. It is essential for implementing robust CI/CD security gates and proactive dependency screening.

A comprehensive guide for threat hunting and detection engineering focused on identifying SSO and OAuth token abuse. It detects 'pass-the-cookie' and session replay attacks where attackers use stolen tokens (like cookies or refresh tokens) to move laterally across federated SaaS platforms (Entra ID, Okta) without needing credentials. Essential for post-incident scope analysis and validating T1550.001 coverage.

This advanced skill performs a full-sweep analysis, providing a unified assessment of code quality across multiple dimensions: code decay, architecture integrity, technical debt, and test coverage. It automatically applies safe fixes directly to the codebase, while requiring confirmation for risky changes. It is ideal for comprehensive pre-release code health audits and automated refactoring.

A systematic, non-mutating investigation designed for complex software failures, including bugs, regressions, crashes, and flaky behavior. This skill launches four specialized, read-only sub-agents in parallel to perform deep root-cause analysis, trace code paths, pinpoint the smallest failing seam, and predict the quickest path to confirming or fixing the issue. It is designed purely for diagnosis and hypothesis generation.

A comprehensive, four-phase methodology for debugging complex software issues. It guides users through root cause investigation, pattern analysis, hypothesis testing, and controlled implementation. The core principle emphasizes finding the underlying cause rather than applying quick, symptomatic fixes, ensuring robust and reliable code improvements across various failure scenarios.

This sophisticated skill is designed to locate the root cause of a confirmed software failure. It performs a systematic, semi-formal tracing process: first tracing backward from the observed failure point (using provided stack traces, assertions, or error messages) to identify the original premise, and then tracing forward to confirm the symptom. It outputs a highly structured report detailing the divergence, premises, and remedy.

This skill provides a rigorous, structured method for inspecting animated 3D characters, rigs, and motion retargeting in Blender. It moves beyond visual evidence (screenshots) by extracting and comparing structured data points such as bone transformations, bounding box changes, ground contacts, and axis conventions. Ideal for diagnosing subtle animation flaws like foot sliding, ground penetration, or incorrect orientation that are invisible in still images.

This is a foundational primitive skill for managing complex browser interactions. It initiates a named, traceable browser session within an RVF cognitive container, recording every user action as a trajectory step. Use it when starting any multi-step web exploration, ensuring the session state, actions, and results are preserved for later analysis, testing, or replay by downstream skills.

This technique audits user interaction flows (like button clicks) to detect subtle bugs that static analysis often misses. It specifically tracks the full sequence of state changes, identifying instances where later actions unintentionally cancel, contradict, or leave the UI in an inconsistent state due to state store side effects or race conditions. Ideal for debugging complex state management architectures (Redux, Zustand).

This guide outlines a comprehensive, agent-focused testing workflow for modern C++ (C++17/20) using GoogleTest and CMake/CTest. It teaches key concepts like the TDD cycle (Red-Green-Refactor), utilizing mocking (gmock) and fixtures for isolation, setting up robust CI/CD integration, and debugging complex issues using sanitizers (ASAN, TSAN) and coverage analysis. Use this when writing, updating, or ensuring the functional robustness of C++ codebases.

This tool analyzes Git diffs to provide comprehensive insights for Pull Requests (PRs) and large code changes. It calculates risk scores based on churn history and sensitive areas, classifies changes (e.g., feature, bugfix), recommends required reviewers, and provides detailed statistics. Use this before merging to assess code quality and minimize deployment risk.