Skill UI

This skill performs deep, line-by-line scanning of an entire codebase to understand its architecture, patterns, and dependencies. It systematically identifies critical issues across security vulnerabilities (SQL injection, secrets), performance bottlenecks (N+1 queries, caching), architectural flaws, and code quality gaps. It then automatically refactors and fixes all identified issues, transforming the code into professional, production-grade, enterprise-level quality.

Showcases modern Python practices, covering strict 3.12 type hints, dataclasses vs Pydantic decisions, asyncio/httpx patterns, src-layout projects, pyproject tool configs, virtual env workflows, and pytest guidance for reliable codebases.

This skill guides developers through modernizing React applications. It covers migrating from class components to functional components using hooks, upgrading React versions, adopting concurrent features (like Suspense), and applying automated refactoring techniques using codemods. It is essential for maintaining high-performance, modern React codebases and integrating TypeScript.

This skill functions as an expert technical writer, generating comprehensive and structured README.md documentation for software projects. It meticulously analyzes the codebase, identifying project structure, tech stack, prerequisites, dependencies, and deployment pipelines, ensuring users receive a complete guide for local setup and production deployment.

Guidelines for responding to code review feedback with technical rigor: read every comment, restate requirements, verify against the codebase, ask clarifying questions, push back when technically needed, and implement fixes one at a time with testing.

This guide provides a comprehensive reference architecture for building robust, production-grade applications on Replit. It covers best-practice project layouts, system-level configurations (like replit.nix), data layer strategies (PostgreSQL, KV, Object Storage), and secure deployment techniques. Use it when starting a new Replit project, optimizing existing codebases, or establishing enterprise-level architectural standards.

Scans your codebase with pattern matching and entropy analysis to detect exposed secrets like API keys, passwords, and private keys, then generates remediation reports so you can fix vulnerabilities before committing or deploying code.

Delivers repository-grounded AppSec threat models that map components, boundaries, assets, entry points, and attacker capabilities to abuse paths, along with prioritized mitigations tailored to codebase evidence and explicit assumptions.

Runs Semgrep static analysis with auto language detection, parallel Task subagents, Semgrep Pro checks, and configurable “run all” or “important only” modes to audit codebases for vulnerabilities and bug patterns.

A specialized reverse-engineering skill designed to extract comprehensive functional and non-functional specifications from existing, undocumented, or legacy codebases. It operates by analyzing code structure, tracing data flows, and identifying observable behaviors. The output is structured using EARS (Easy Approach to Requirements Syntax), providing clearer requirements documentation, architectural diagrams, and dependency maps for onboarding or system modernization.

This skill guides the creation of production-ready design systems using Tailwind CSS. It covers advanced topics such as implementing design tokens, managing component variants, establishing responsive patterns, and ensuring high accessibility standards. Use this when building component libraries, applying theming, or standardizing UI patterns across a large codebase.

A comprehensive skill to identify, analyze, prioritize, and track technical debt across large codebases. It provides three interconnected tools: a Debt Scanner, a Debt Prioritizer (using cost-of-delay frameworks), and a Debt Dashboard. This system helps engineering teams make data-driven decisions to balance new features with necessary maintenance and refactoring work, ensuring the long-term sustainability of software systems.