Skill UI

This comprehensive, zero-trust security auditor scans third-party AI agent skills before installation. It performs a rigorous 6-phase review process, analyzing surface patterns, script integrity, permissions, and supply chain risks. It is designed to detect malicious payloads, credential theft, instruction overrides, and prompt injection attacks, ensuring secure AI development and deployment.

This assistant guides users through managing Azure resources entirely via the command line using the Azure CLI (`az`). It identifies the correct commands, prompts for missing required parameters (like resource groups or locations), constructs the full command sequence, executes the action, and diagnoses any output errors to ensure successful deployment and configuration of services across Compute, Networking, and other Azure domains.

Performs a comprehensive external audit of a deployed repository's state, going beyond simple code review. It checks for critical production gaps, including RLS misconfigurations, webhook idempotency issues, secret exposure, deployment health, and prompt injection vulnerabilities. Ideal for pre-launch gates and ensuring code stability before going live.

Methodology for capturing, analyzing, and replaying LoRaWAN and sub-GHz wireless traffic. Useful for testing IoT deployments, fixed-code remotes, garage doors, TPMS, and other devices in 433/868/915 MHz bands.

A comprehensive pre-production audit tool that scans a codebase for critical issues across eight dimensions: security, database, deployment, code quality, AI/LLM usage, dependencies, frontend, and observability. It intercepts deployment commands, forcing users to resolve critical failures before shipping code. The audit is stack-agnostic and provides detailed pass/fail/manual reports.

This tool is designed to validate the syntax, completeness, and correctness of network configuration files. It helps ensure that network devices are configured according to established standards and best practices, preventing deployment errors and ensuring reliable network operation. Ideal for network engineers and DevOps teams.

A comprehensive tool for monitoring SEO performance changes. It captures baselines of critical on-page SEO elements (titles, meta tags, headings, Core Web Vitals) and detects regressions or "drift" over time. Use it to compare current page states against stored standards to ensure consistent SEO integrity after updates or deployments.

A comprehensive CI/CD pipeline for Quarkus applications, designed to verify code quality and deployment readiness. It covers all phases: build, static code analysis (SonarQube, Checkstyle), rigorous functional testing (Unit, Integration, API), security scanning (OWASP, dependency checks), native image compatibility testing, performance load testing (K6), and container image validation (Trivy, Grype).

This skill performs a comprehensive compliance pressure test against the EU AI Act. It systematically assesses any AI system across six critical dimensions: prohibited practices, high-risk classification, conformity assessment, provider role definition, transparency obligations, and systemic risk, ensuring readiness for EU market deployment.

This skill provides an end-to-end solution to transform existing REST APIs, defined by OpenAPI or Swagger specifications, into functional MCP servers. It maps every API operation to a dedicated, callable LLM tool, automatically generating robust parameter schemas (Zod) and handling authentication wiring. Use this to expose internal or third-party APIs to LLMs, providing a complete workflow from spec ingestion to local testing and cloud deployment.

A comprehensive tool for the full lifecycle management of applications within the Lark ecosystem (Feishu/Miaoda). It supports three development paths: local full-stack development, HTML static hosting, and cloud-based AI session generation. Use this when creating, updating, deploying, or publishing any complex system, tool, or platform application.

Master the design, debugging, and hardening of production-grade GitHub Actions CI/CD pipelines. This skill covers advanced topics including reusable workflows, matrix builds, self-hosted runners, OIDC authentication, secrets management, environment protection, and complex trigger patterns (e.g., workflow_call, schedule, release). Use this to automate complex build, test, and deployment processes.