Skill UI

Vexor CLI is a powerful tool for developers needing to locate code, functions, or documentation sections within large repositories based on *intent* rather than exact keywords or file paths. It provides semantic discovery, making it invaluable when manual searching or simple text matching fails, helping developers understand the implementation logic across complex codebases.

A specialized tool for auditing source code (C/C++/Rust) to ensure sensitive data (keys, passwords, PII) is properly zeroized. It analyzes memory handling at the assembly and IR level to detect if compiler optimizations, such as dead-store elimination, have accidentally removed or weakened the secure cleanup process. Essential for maintaining security in critical codebases.

This comprehensive guide details advanced techniques for detecting and exploiting NoSQL injection vulnerabilities across various databases like MongoDB and CouchDB. It covers critical attack vectors, including authentication bypass using operators ($ne, $gt), blind data extraction via $regex, and executing arbitrary server-side JavaScript through the $where clause. Essential reading for penetration testers and security researchers assessing NoSQL backends.

Implement robust Static Application Security Testing (SAST) using CodeQL powered by GitHub Advanced Security (GHAS). This solution automates the detection of critical vulnerabilities (e.g., SQL injection, XSS) across large, enterprise-scale codebases, ensuring compliance and maintaining a strong DevSecOps posture throughout the development lifecycle.

This skill guide provides a comprehensive framework for automating the secure rotation of service account credentials. It addresses the challenge of managing long-lived secrets across diverse environments, including Active Directory, AWS, GCP, Azure, and databases. By implementing centralized secrets management (like HashiCorp Vault) and automated workflows, users can systematically eliminate stale credentials, dramatically reducing the risk of security breaches and non-compliance.

Grype is an open-source vulnerability scanner from Anchore. It inspects container images, filesystems, and SBOMs for known CVEs. It leverages Syft-generated SBOMs to match packages against multiple vulnerability databases (NVD, GitHub Advisories). Use it for security assessments, auditing, and integrating into CI/CD pipelines to enforce vulnerability standards and manage supply chain risks.

Orchestrates WCAG 2.2 Level A/AA scans, fixes, and verifications across React, Next.js, Vue, Angular, Svelte, and plain HTML codebases, producing before/after diffs, contrast checks, compliance reports, and CI/CD-ready hooks.

Automatically analyzes unfamiliar codebases to generate a comprehensive, structured onboarding guide. It systematically detects package manifests, framework fingerprints, architecture maps, key entry points, and coding conventions. Ideal for new developers joining a project or setting up a repository for the first time.

A comprehensive 7-stage workflow designed to manage, audit, and optimize GitHub repositories. This tool automates critical tasks including identifying hardcoded secrets, cleaning up junk files, performing deep documentation reviews, benchmarking against competitors, and validating the final state, transforming messy codebases into production-ready assets.

This expert reviews and rectifies complex Swift Concurrency issues, such as actor isolation violations, Sendable safety breaches, and data races. It applies modern patterns (like `@MainActor` and `actor` usage) to ensure code adheres to Swift 6.2+ standards while minimizing behavior changes. Use it when debugging concurrency warnings or migrating legacy codebases.

This guide provides comprehensive patterns for designing and implementing secure multi-tenant SaaS applications using shared databases. It covers critical techniques like Row-Level Security (RLS) in PostgreSQL, implementing tenant-aware middleware in TypeScript (Express/Fastify), and enforcing data scoping at the ORM level (Prisma/Drizzle). Learn how to prevent data leakage and manage tenant isolation across shared schemas.

A comprehensive guide to professional Git version control. It covers best practices for branching strategies (GitHub Flow, GitFlow, Trunk-Based), writing standardized commit messages using Conventional Commits, managing merges vs. rebases, and defining effective Pull Request workflows. Ideal for any development team looking to improve code collaboration and maintain a clean, traceable history.