Skill UI

This guide outlines best practices for creating high-quality, structured pull requests (PRs) using Git and GitHub CLI. It ensures that every PR description captures not only what changed, but also the 'why' and necessary context for reviewers, significantly improving the code review process and adherence to engineering standards.

Handles QA code review reports by prioritizing critical and warning findings, implementing fixes with tests, running verification checklists, and preparing re-verification reports via the Forja Dev agent.

Aggregates Uncle Bob’s Clean Code, Architecture, Coder, Agile, and design-pattern guidance to evaluate reviews, refactors, and architecture decisions, and to surface professionalism heuristics without replacing your linter or formatter.

This skill provides a comprehensive framework for designing and reviewing native iOS applications. It covers adherence to Apple's Human Interface Guidelines (HIG), ensuring consistency across layout, typography, safe areas, and system components (e.g., Dynamic Island). Use this when building or reviewing SwiftUI/UIKit code to guarantee the app feels intuitive, highly polished, and genuinely native to the Apple ecosystem.

A powerful code review utility designed for SwiftUI projects. It comprehensively analyzes code quality, ensuring adherence to modern Swift APIs, optimal performance, robust data flow management, and compliance with Apple's Human Interface Guidelines and accessibility standards (like VoiceOver and Dynamic Type). Use this tool when writing, refactoring, or reviewing complex SwiftUI implementations to maintain high code hygiene and maintainability.

Guides modern Perl 5.36+ idioms and best practices for building robust, maintainable apps—covering signatures, dereferencing, Moo/roles, regexes and error handling—useful when writing, reviewing, refactoring, or migrating Perl code.

This skill orchestrates the entire coding lifecycle as a state machine, ensuring tasks proceed from issue intake through implementation, structured review, deployment, and final acceptance verification. It enforces a rigorous 'Definition of Done' (DoD) proof, moving beyond simple code changes. Ideal for complex feature development requiring structured handoffs and explicit verification evidence.

Automates review of Terraform infrastructure-as-code via Checkov, tfsec, Terrascan, and OPA/Rego policies to find permissive IAM roles, public exposure, missing encryption, and insecure defaults before cloud deployment.

A step-by-step playbook for spotting and abusing JavaScript prototype pollution in both browsers and Node.js services to trigger DOM XSS, remote code execution, and authorization bypasses during security hunts and code reviews.

Implements GitHub Advanced Security with CodeQL to provide automated static analysis, secret detection, dependency review, and push protection across repositories, enabling enterprise-scale vulnerability monitoring and compliance-aligned controls.

Analyzes PLC firmware to uncover vulnerabilities such as hardcoded credentials, insecure updates, backdoors, memory corruption, and undocumented debug interfaces. Covers extraction from Siemens, Allen-Bradley, and Schneider platforms, static and dynamic inspection, and baseline comparison to detect tampering.

Vibers provides a human code review workflow for AI-generated GitHub projects; add the collaborator, GitHub Action, and commit guidance to receive spec- and security-focused feedback plus follow-up PR fixes.