Skill UI

This skill is intended to analyze and improve the quality of codebases, ensuring adherence to best practices and coding standards. Note: This specific file is a translation placeholder, and the core functionality description should refer to the original skill file for details.

Guides developers through receiving and responding to code review feedback: read carefully, restate requirements, verify against the codebase, evaluate correctness, push back with technical reasoning if needed, and implement one verified fix at a time.

This skill simulates a senior engineer's final, deep audit of an entire codebase before committing or pushing to a remote repository. It systematically checks for junk files, dead code, security vulnerabilities (secrets, injection flaws), and performance bottlenecks (N+1 queries). Use this pre-flight check before any major release or public deployment to ensure maximum code quality and production readiness.

This guide provides a deep, investigation-driven methodology for reviewing Django and Django REST Framework (DRF) codebases. It helps identify critical authorization gaps, focusing on Insecure Direct Object References (IDOR) and object-level access failures. Learn how to trace data flows, analyze custom managers, and verify that users can only access resources they are explicitly authorized to view or modify.

This comprehensive guide provides patterns and strategies for migrating existing imperative TypeScript code to functional programming patterns using fp-ts. Learn how to replace traditional structures like try/catch blocks, null checks, and callbacks with robust, type-safe functional equivalents (e.g., Either, Option, Task). It is essential for developers aiming to increase code reliability and maintainability in large TypeScript codebases.

Scans Go codebases for security vulnerabilities, highlighting risky patterns, insecure dependencies, and misconfigurations so auditors can catch issues before deployment.

Python Security Auditor is a concise tool that inspects Python codebases for common vulnerabilities and configuration issues, helping developers prioritize fixes and maintain secure deployments.

This skill provides a structured workflow for porting existing Semgrep security rules to multiple target languages. It guides users through applicability analysis, test-first rule creation, and validation for each language variant, ensuring consistent and accurate security coverage across polyglot codebases.

A systematic skill for identifying similar vulnerabilities and bugs across large, complex codebases. It guides the user through generalizing initial bug patterns using techniques like CodeQL and Semgrep, ensuring comprehensive security audits beyond the initially discovered flaw. Ideal for advanced security research and robust code auditing.

Vexor CLI is a powerful tool for developers needing to locate code, functions, or documentation sections within large repositories based on *intent* rather than exact keywords or file paths. It provides semantic discovery, making it invaluable when manual searching or simple text matching fails, helping developers understand the implementation logic across complex codebases.

A specialized tool for auditing source code (C/C++/Rust) to ensure sensitive data (keys, passwords, PII) is properly zeroized. It analyzes memory handling at the assembly and IR level to detect if compiler optimizations, such as dead-store elimination, have accidentally removed or weakened the secure cleanup process. Essential for maintaining security in critical codebases.

A forensic tool for performing post-mortem analysis on AI-assisted coding sessions. It goes beyond simply stating what was done, determining *why* work deviated (e.g., spec ambiguity, repo friction, agent error), identifying scope creep, and classifying rework patterns. It provides evidence-backed recommendations to improve prompts, codebase health, and future development workflows.