Skill UI

This skill maps engineering changes (code diffs, architecture designs, IaC) to specific financial compliance controls, such as PCI-DSS v4.0 and MAS TRM. It generates an auditable report detailing compliance gaps, required evidence, and concrete remediation steps, helping teams catch violations before formal audits.

This skill provides a deterministic, git-only method to verify claims made by AI agents (e.g., 'done', 'shipped', 'fixed'). Instead of trusting the agent's self-report, it audits the commit's diff and git history using the DOS kernel (`dos verify`, `dos commit-audit`) to confirm if the claimed change genuinely occurred and is backed by non-forgeable evidence. It acts as a critical quality gate.

This skill designs and audits the core engineering harness required for reliable AI agent collaboration within a codebase. It establishes critical infrastructure elements such as change tracking, linting rules, CI/CD gates, and standardized documentation, ensuring the repository remains the single source of truth for all intelligent agents. Ideal for setting up complex development workflows.

This guide helps developers audit and clean up Vite + React projects initialized using the Lovable scaffolding tool. It systematically removes all boilerplate artifacts, including placeholder assets, dedicated dependencies (like lovable-tagger), generated documentation, and unnecessary components (e.g., unused Radix deps). The goal is to deliver a clean, fully owned, and production-ready codebase.

This skill provides deep security review for GitHub Actions workflow files. It focuses on the unique Actions threat model—identifying vulnerabilities like script injection via ${{ }} interpolation, privilege escalation from triggers (e.g., pull_request_target), and ensuring least-privilege permissions for CI/CD pipelines. Use it to audit, secure, or harden existing workflows, preventing attacks from untrusted inputs and supply chain risks.

This comprehensive skill serves as an entry point for all web UI design needs, covering components, pages, dashboards, and advanced layouts using React, Vue, or pure HTML/CSS. It addresses not only aesthetics and polish (color, typography, spacing) but also deep structural concerns like responsive design, UX auditing, and visual system implementation. Use it whenever a user asks to improve the look, feel, or function of a digital interface.

A comprehensive playbook for optimizing the entire lifecycle of pull requests. It guides developers through systematic pre-flight cleanup, critical self-audits, local test verification, and structuring high-signal PR descriptions to ensure code quality and fast maintainer approval.

Generates a comprehensive, structured audit based on WCAG 2.2 guidelines. This tool assesses UI and designs across perceivable, operable, understandable, and robust criteria, covering visual, motor, and cognitive accessibility. It produces a prioritized checklist with pass/fail assessments and specific, actionable remediation suggestions for developers and designers.

This skill performs a comprehensive audit of project dependencies, identifying critical security vulnerabilities (CVEs), analyzing license compliance against established policies, and detecting outdated or risky packages. It produces an actionable report including an overall dependency health score and a prioritized, time-bound remediation plan, ensuring the software supply chain is secure and legally compliant.

This tool conducts structured reviews of various Infrastructure-as-Code (IaC) tools (e.g., Terraform, Pulumi) across multiple cloud providers. It generates an actionable report that categorizes findings by severity (Critical, High, Medium, Low), providing detailed remediation steps and a reusable best-practice checklist for continuous security, compliance, and operational auditing.

This skill generates formal, audit-ready Standard Operating Procedures (SOPs) suitable for regulated industries, ISO certification, or internal process standardization. It structures the document with defined sections including Purpose, Scope, Definitions, Responsibilities, detailed Step-by-step Procedures, Quality Checks, and Non-Conformance handling, ensuring compliance and clarity for operational scaling.

An adversarial Quality Assurance (QA) pass designed to deep-dive into any codebase for logic errors, security flaws, and functional bugs. Instead of confirming that code 'looks right,' this skill actively attempts to break the code by simulating hostile inputs, tracing critical data paths, and checking for subtle, real-world correctness issues. Essential for high-stakes, critical code reviews.