Skill UI

Frontend Blueprint is an AI design consultant that structures discovery before coding, asking targeted questions, collecting references, and validating direction to deliver pixel-faithful UI components only when the context is clear.

This skill acts as a comprehensive security scanner specializing in detecting Cross-Site Scripting (XSS) vulnerabilities in client-side code. It performs static analysis across React, Vue, Angular, and vanilla JavaScript, specifically identifying unsafe practices like direct HTML manipulation (innerHTML), raw rendering (v-html), and insecure URL handling. Use it when auditing frontend code for security flaws and needing best practices for secure coding.

An expert skill dedicated to building secure, robust frontend applications. It specializes in preventing client-side vulnerabilities such as XSS and clickjacking. Core capabilities include safe DOM manipulation, implementing Content Security Policy (CSP), advanced input sanitization (allowlisting), and securing complex interactions like secure redirects and session management.

This skill guides the development of robust, security-focused full-stack web applications. It ensures layered security coverage across the entire application stack, from database queries (parameterized queries) to API endpoints (authentication/authorization) and frontend components (input validation, output encoding). Use this when building end-to-end features, microservices, or REST APIs that require simultaneous attention to Frontend, Backend, and Security best practices.

This utility provides programmatic access to Granola meeting data, enabling developers to build automated post-meeting workflows. Users can read meeting notes from the local cache, integrate with MCP servers for AI context, automatically extract action items and assignees, and sync outcomes directly into coding tasks, project documentation, or issue trackers like GitHub. Ideal for automating the development lifecycle from meeting insights.

Automates hardcoded credential discovery by guiding you through secure coding patterns, validation checks, and remediation strategies tailored to security fundamentals engagements.

Assists with security fundamentals by auto-activating when asked about https certificate checker tasks, guiding through detection patterns, secure coding, and validation workflows for reliable certificate handling.

Automates input validation checker guidance within the Security Fundamentals category, offering best practices, secure coding patterns, production-ready snippets, and output validation for common standards.

Automates guidance and code for identifying insecure deserialization flaws, following Security Fundamentals best practices to help with authentication, input validation, and secure coding checks when that phrase is mentioned.

Defines Java 17+ coding standards for Spring Boot services, covering naming, immutability, Optional usage, streams, exceptions, generics, project layout, and testing practices to ensure readable, maintainable code.

This skill specializes in writing, debugging, and refactoring modern JavaScript code (ES2023+). It covers advanced patterns like async/await, Promise handling, ESM modules, and optimal performance for both browser and Node.js environments. Use it for vanilla applications, complex async flows, and performance optimization.

Guides deliberate skill development during AI-assisted coding by offering optional 10–15 minute exercises after architecture work, schema changes, or “why” questions so developers stay engaged and understand decisions.