Skill UI

This skill runs the Bumblebee scanner on macOS/Linux to perform read-only inventory and exposure checks. It detects compromised packages, developer tools, and host configurations against known security advisories. It is primarily used for supply-chain incident response and vulnerability assessment, providing developers with a clear picture of local system exposure.

Generates a comprehensive, structured audit based on WCAG 2.2 guidelines. This tool assesses UI and designs across perceivable, operable, understandable, and robust criteria, covering visual, motor, and cognitive accessibility. It produces a prioritized checklist with pass/fail assessments and specific, actionable remediation suggestions for developers and designers.

This skill generates a comprehensive and structured test strategy document. Given a feature specification, PRD, or system description, it systematically outlines the test scope, performs a detailed risk assessment, defines necessary test types (Unit, E2E, Performance, Security), and provides a prioritized, actionable test case outline to ensure robust quality assurance before release.

This skill provides a comprehensive solution for monitoring brand impersonation attacks across multiple digital vectors. It systematically scans domains, social media platforms, mobile app stores, and the dark web to detect phishing campaigns, typosquatting, and unauthorized brand usage. It is essential for security teams conducting proactive threat intelligence gathering and vulnerability assessments to safeguard brand integrity.

A comprehensive guide to executing the NIST Risk Management Framework (RMF) to achieve an Authorization to Operate (ATO). This covers the full lifecycle, including preparation, system categorization (FIPS 199), control selection and tailoring (SP 800-53 Rev 5), implementation, assessment (SAR), and continuous monitoring. Essential for organizations working under FISMA or FedRAMP.

This tool provides a comprehensive security assessment framework for Retrieval-Augmented Generation (RAG) systems and vector databases. It tests critical vulnerabilities such as embedding inversion, cross-tenant data leakage, knowledge-base poisoning, and retrieval manipulation, aligning with OWASP LLM08:2025 standards. It is essential for validating the security posture of multi-tenant and vector-search applications.

This comprehensive tool performs an architectural audit of a codebase, mapping module dependencies, checking layering integrity, and flagging structural decay. Drawing on classic engineering principles (like Conway's Law and Testability Seams), it provides a deep assessment of the project's health and structure. Ideal for large-scale code reviews or onboarding new developers.

This skill provides a comprehensive tech debt assessment, identifying, classifying, and prioritizing core maintainability issues. By drawing on classic engineering principles, it helps teams build a structured refactoring roadmap, optimizing code health and development velocity.

This advanced skill performs a full-sweep analysis, providing a unified assessment of code quality across multiple dimensions: code decay, architecture integrity, technical debt, and test coverage. It automatically applies safe fixes directly to the codebase, while requiring confirmation for risky changes. It is ideal for comprehensive pre-release code health audits and automated refactoring.

A comprehensive presentation template designed for educational workshops and training sessions. It features a warm paper aesthetic, persistent learning objectives on the left sidebar, core content slides, interactive Multiple Choice Question (MCQ) self-assessment pages, and module wrap-ups, ensuring a structured and engaging learning experience.

This robust tool extracts structured entities (classes, functions, modules, types, concepts) and their complex relationships (imports, inheritance, calls) directly from source code files. It builds a comprehensive and weighted knowledge graph stored within AgentDB. Ideal for deep codebase analysis, dependency tracking, and impact assessment in large software projects.

repo-scan is a powerful tool designed to audit large, complex, cross-stack codebases (C++, Java, iOS, Web). It classifies every file into project code, third-party dependencies, or build artifacts. Key features include detecting embedded libraries (e.g., FFmpeg, OpenSSL) and providing a practical 4-stage assessment (Core Asset / Extract / Refactor / Deprecate) via an interactive HTML report. Essential for managing monorepos and planning major refactoring efforts.