Skill UI

This skill performs a two-model debate review on code pull requests from GitHub, GitLab, or Azure DevOps. It uses two AI agents to argue over code changes before posting a final inline comment. Ideal for thorough pre-merge reviews or local working tree checks. It requires delegate-skills and authenticated access to the version control platform.

This skill performs security-focused code reviews for pull requests, commits, and diffs. It prioritizes high-risk areas like authentication, cryptography, and external calls. The process is evidence-based, requiring specific line numbers and attack scenarios. It adapts to codebase size and always generates a comprehensive markdown report.

Authorized digital forensics workflow: memory dumps with Volatility, disk and super-timelines, PCAP investigation with tshark, Windows artifact triage, and chain-of-custody evidence preservation.

Review Django and DRF code for access control vulnerabilities, IDOR, and object-level authorization failures. Use when auditing views, viewsets, or ORM queries for authorization gaps.

Build production-grade ASP.NET Core 8+ backend services with EF Core, authentication, background jobs, and enterprise API patterns.

Deploy Expo web apps and API routes to EAS Hosting on Expo's managed edge. Covers authoring +api.ts routes, HTTP methods, dynamic routes, environment secrets, CORS, error handling, local testing, and eas deploy.

Reverse engineer EDR internals including user-mode hook tables, ETW, and AMSI to study bypass techniques like direct syscalls, Hell's Gate, and call-stack spoofing. This skill is designed for authorized red-team research and security assessments within controlled lab environments, focusing on Windows endpoint protection evasion.

Coordinate a bounded code review from multiple perspectives including correctness, authorization, and performance. This skill describes a review procedure for defined diffs or subsystems. It involves reading diffs, choosing relevant perspectives, recording findings with exact locations, reproducing issues, and resolving disagreements through code or tests. It is a read-only review process that does not install orchestration engines or prove compliance.

Master the full penetration testing lifecycle: reconnaissance, scanning, vulnerability analysis, exploitation and reporting. Covers tools like Nmap, Nikto, theHarvester, OSINT techniques, OWASP web testing and professional report deliverables for authorized security assessments only.

This skill helps developers create FastAPI routers following established patterns. It includes proper authentication, response models, and HTTP status codes. Users can copy templates and replace placeholders to quickly build backend endpoints. It supports optional or required authentication and defines clear response structures for API integration.

Implement FedRAMP requirements for US federal cloud services. Configure NIST 800-53 security controls and continuous monitoring processes. Essential for cloud providers seeking authorization to serve federal agencies, covering impact levels and control families like access control and audit.

This skill provides expert guidance for using ffuf during authorized web penetration testing. It covers authenticated fuzzing, raw requests, auto-calibration, and result analysis. Users must confirm authorization before probing targets. It helps with content discovery, subdomain enumeration, and parameter fuzzing efficiently while ensuring safety protocols are followed.