Skill UI

A comprehensive guide detailing security patterns and audit checklists for Automated Market Maker (AMM) smart contracts in DeFi. Covers critical vulnerabilities such as flash loans, slippage, reentrancy attacks, price manipulation, and integer overflow/underflow. Essential for reviewing major DeFi protocols like Uniswap.

A specialized audit skill designed to identify and quantify resource leakage, excessive costs, and billing vulnerabilities within complex development tool workflows (e.g., GitHub Apps). It traces webhook events, queue processing, and model calls to pinpoint where token burn or unauthorized resource usage is occurring, ensuring cost efficiency and clean billing practices.

This skill provides comprehensive guardrails for handling Protected Health Information (PHI) in US healthcare software. It guides development teams on data classification, security best practices, access control, and audit logging to ensure strict adherence to HIPAA regulations. Use it when dealing with patient data storage, transmission, or processing to prevent breaches and maintain compliance.

A comprehensive guide for writing, reviewing, and auditing concurrent Go code. It covers core principles of structured concurrency, including proper resource management for goroutines, safe use of channels, mutexes, and advanced synchronization primitives like errgroup and singleflight. Essential for avoiding common issues like goroutine leaks, race conditions, and context propagation failures.

A comprehensive guide and persona for technical writers and developers focused on Go code documentation. It outlines best practices for writing, reviewing, and structuring godoc comments, READMEs, CHANGELOGs, and contributing guidelines for both libraries and command-line applications. Use this skill when setting up, writing, or auditing high-quality technical documentation for any Go project.

A comprehensive skill for engineering high-quality, observable Go services. It guides best practices across five key signals: structured logging (slog), Prometheus metrics, OpenTelemetry tracing, continuous profiling (pprof), and RUM. Use this when instrumenting new features, reviewing PRs, or auditing entire codebases to ensure systems are fully measurable for reliable diagnosis and alerting.

This comprehensive skill provides a senior Go security engineer persona, guiding users through rigorous security practices for Golang development and code auditing. It covers threat modeling (STRIDE), vulnerability analysis (DREAD), secure development principles, and specialized modes like Review and Audit to detect issues such as injection, crypto flaws, and authorization weaknesses.

Persona for IT administrators to monitor Workspace security, configure Drive sharing policies, and run workflows for standup reporting and audit review while emphasizing dry-run checks and auth-status verification.

This skill performs a comprehensive security audit of Model Context Protocol (MCP) server configurations found in .mcp.json files. It is designed to identify critical vulnerabilities, including hardcoded secrets (API keys, tokens), dangerous shell injection patterns, unpinned dependencies, and compliance issues regarding approved server lists. Use this skill during security reviews, project onboarding, or pre-commit checks to ensure secure deployment.

This library provides a complete and verified set of grep command patterns designed for auditing existing React codebases. It is essential for developers preparing for major React upgrades, specifically migration audits for React 18.3.1 or React 19. It detects deprecated APIs, removed features, unsafe lifecycle methods, batching vulnerabilities, and dependency conflicts, ensuring a smooth transition.

Leverage AI-powered exploratory testing to thoroughly audit web applications and verify functionality. This skill simulates user interaction, detecting complex bugs, validating critical flows (like checkout or login), and checking accessibility compliance. Use it proactively after development to ensure quality before deployment.

This specialist simulates the role of an App Store reviewer, auditing iOS source code and metadata against Apple's strict guidelines. It systematically identifies potential compliance risks, technical vulnerabilities, monetization gaps (IAP/Subscriptions), and critical UX shortcomings, delivering a prioritized risk register for fast approval.