Skill UI

This skill performs a comprehensive security audit of Model Context Protocol (MCP) server configurations found in .mcp.json files. It is designed to identify critical vulnerabilities, including hardcoded secrets (API keys, tokens), dangerous shell injection patterns, unpinned dependencies, and compliance issues regarding approved server lists. Use this skill during security reviews, project onboarding, or pre-commit checks to ensure secure deployment.

This tool automates the entire process of creating a complete, production-ready application structure solely from an OpenAPI (Swagger) specification. It analyzes the spec to design the application architecture, generating all necessary layers including controllers, service logic, data models (DTOs), and repositories, adhering to best practices, framework conventions, and separation of concerns. The output includes unit tests, configuration files, and setup instructions, providing a robust, ready-to-use codebase.

An advanced, AI-powered agent designed to generate comprehensive and workable unit tests for virtually any programming language (e.g., Python, C#, Java, Go, TypeScript). It operates via a sophisticated multi-agent pipeline (Research → Plan → Implement → Build → Test → Fix → Lint). This ensures generated tests are not only written following project conventions but also compile, pass all tests, and effectively improve code coverage.

Design, analyze, and refine Azure infrastructure through natural language prompts, generate interactive architecture diagrams locally with bundled scripts, and produce deployable Bicep templates to automate infrastructure-as-code workflows.

Analyzes PostgreSQL snippets or entire projects to flag anti-patterns, enforce best practices, optimize JSONB/array usage, schema design, custom types, triggers, extensions, and security policies like RLS.

A comprehensive, multi-phase quality engineering audit tool designed to test codebases beyond standard unit tests. It first explores the codebase's domain and architecture to derive behavioral requirements, then executes a rigorous sequence including spec-traced functional tests, three-pass code reviews, and a multi-model specification audit (Council of Three). It is specifically engineered to find the critical 35% of real-world defects that structural code review alone might miss. Works with any programming language.

This skill provides comprehensive guidelines and techniques for safe code refactoring. It focuses on improving code structure, readability, and maintainability without altering the external behavior or functionality of the system. Learn to address common code smells, such as long methods, duplicated logic, god objects, and primitive obsession, using established design patterns and best practices. It emphasizes that refactoring should be gradual, test-driven, and methodical.

This guide maps user questions and topics (e.g., configuration, memory, skills, CLI) to specific, relevant documentation paths and source code entry points within the QwenPaw ecosystem. It is designed for built-in QA Agents to eliminate aimless searching, ensuring the agent reads the most accurate files to provide comprehensive and precise answers about the system's features.

A universal assistant for conducting deep code reviews across major SQL databases (MySQL, PostgreSQL, SQL Server, Oracle). It rigorously analyzes SQL code for critical vulnerabilities (like SQL injection), performance bottlenecks, maintainability issues, and adherence to industry best practices. Features include security audits, index optimization recommendations, query structure analysis, and schema design validation, ensuring robust and secure database development.

A comprehensive guide covering best practices for Terraform and OpenTofu. It provides structured advice on module hierarchy, directory organization, naming conventions, and advanced testing strategies (including native testing and policy as code). Use this skill when designing, refactoring, or implementing robust Infrastructure as Code (IaC) pipelines and multi-environment deployments.

This skill rigorously audits UI code against established design system conventions, focusing on adherence to design tokens, component ergonomics, accessibility standards, and mobile UX best practices. It ensures that the implementation is consistent with the defined style guide, providing a structured verdict and concrete, actionable fixes.

This tool reviews user interface (UI) code files to ensure compliance with established Web Interface Guidelines and best practices. Use it when auditing design, checking accessibility, or performing general code reviews to meet industry standards and improve overall product quality. It fetches the latest rules and outputs detailed findings.