Skill UI

This guide details how to scaffold complete, structured exercise directory setups, including mandatory sections for problems, reference solutions, and conceptual explainers. It outlines precise naming conventions, required files (like readme.md and main.ts), and a robust workflow that ensures the setup passes linting checks. It is ideal for creating new course modules, generating exercise stubs, or structuring large-scale educational curricula.

A comprehensive guide for rapid incident response when Shopify integrations fail or behave unexpectedly. It instructs users to triage issues by checking the status page, diagnosing API connectivity, and handling common errors like rate limits (429) or expired tokens (401). Includes decision trees, immediate mitigation steps, and communication templates.

This comprehensive guide serves as a decision flowchart for developers using Claude Code. It details when to use specific slash commands (/plan, /compact, /loop), select specialized agents (planner, code-reviewer, build-error-resolver), or invoke workflow skills (e2e-testing, tdd-workflow). It helps users select the optimal tool combination for complex tasks across the entire software development lifecycle, including feature planning, bug fixing, testing, and architectural design.

This skill analyzes your entire codebase to ensure it is optimized for AI contributions and developer tooling. It automatically generates essential configuration files such as `AGENTS.md`, Copilot instructions, CI workflows, and customizable issue templates. It learns from your existing PR review patterns to tailor the setup precisely to your project's stack. Use it when you need to prepare a repository for advanced AI-assisted development.

A tool that generates and opens a GitHub Pull Request (PR) dashboard in the browser. Users can specify precise criteria, including date ranges (e.g., 'last 7 days', 'this month') and specific roles (e.g., 'Authored by me', 'Requested reviews'), to view detailed PR activity. Requires GitHub CLI authentication for full functionality.

A powerful tool designed to automatically generate comprehensive OpenAPI/Swagger documentation for Go RESTful APIs. By using specific annotation comments (@Summary, @Param, @Router, etc.) within the Go source code, developers define the precise API contract. It supports multiple popular web frameworks (Gin, Echo, Fiber) and complex security definitions (JWT, OAuth2), ensuring the documentation is always accurate and serves as the single source of truth for API consumers. Ideal for maintaining structured, production-grade APIs.

This skill analyzes the comprehensive commit history between two branches to generate a concise, objective, and highly structured Pull Request (PR) description. It automatically groups changes by domain, summarizing the purpose, technical notes, and user impact, ensuring consistency and minimizing manual documentation effort.

A deep-dive session designed to stress-test a technical plan against an existing domain model. This process forces the user to resolve ambiguities, sharpen terminology, and validate decisions by cross-referencing code and existing documentation (CONTEXT.md, ADRs). It ensures architectural rigor and completeness before implementation.

An expert playbook for identifying and simulating dependency confusion attacks in software supply chains. It comprehensively covers how internal package names can be squatted on public registries, leading to malicious code execution via package manager lifecycle hooks (e.g., npm, pip, Maven). Use this guide for authorized red-team exercises and deep vulnerability assessment of build processes.

A specialized CLI alias designed to implement the PUA P9 protocol, simulating the role of a P9 tech lead for AI coding assistance (Codex/Claude Code). This tool helps users structure complex development tasks by focusing on writing precise prompts, managing execution steps, and strictly adhering to a defined professional protocol, minimizing direct code implementation unless reassigned. It ensures rigorous process management and evidence-based output.

A structured methodology for validating non-trivial decisions by subjecting them to an adversarial, fresh-context review. This process is crucial when correctness is paramount—such as in production, security-sensitive logic, or complex architecture—by forcing a skeptical examination that aims to disprove assumptions rather than simply approve them.

This tool simulates a 'risk-paranoid' interrogation, forcing comprehensive security and compliance checks before deploying any system that handles sensitive data (PII, PHI, cardholder data). It covers six critical areas: Threat Modeling (STRIDE), Blast Radius quantification, Detection capabilities (MTTD), Incident Response readiness, Regulatory compliance windows (GDPR, HIPAA), and Third-party vendor security posture. Use this gate check before major architectural changes or production releases.