Skill UI

Checks AWS, Azure, and GCP configurations for IAM escalation paths, public storage exposure, open security groups, and IaC gaps, providing preventive findings with MITRE mapping for cloud posture management workflows.

This guide outlines how to build new API connectors or providers that strictly adhere to the existing integration architecture and patterns of a target repository. It is designed for adding integrations while maintaining architectural consistency (e.g., layout, configuration schema, authentication model, and testing style), preventing the creation of novel, unsupported patterns.

A specialized audit skill designed to identify and quantify resource leakage, excessive costs, and billing vulnerabilities within complex development tool workflows (e.g., GitHub Apps). It traces webhook events, queue processing, and model calls to pinpoint where token burn or unauthorized resource usage is occurring, ensuring cost efficiency and clean billing practices.

This utility ensures the prevention of silent floating-point mismatch bugs across all EVM chains. It covers runtime querying of decimals, chain-aware caching, handling precision drift in bridged tokens, and safe normalization for bots, dashboards, and DeFi tools. It is crucial for accurate cross-chain balance comparison.

This skill provides comprehensive guardrails for handling Protected Health Information (PHI) in US healthcare software. It guides development teams on data classification, security best practices, access control, and audit logging to ensure strict adherence to HIPAA regulations. Use it when dealing with patient data storage, transmission, or processing to prevent breaches and maintain compliance.

Hookify rules enable developers to define custom, event-driven workflows using Markdown files with YAML frontmatter. These rules monitor specific operational events (such as bash commands, file edits, or user prompts) and can trigger warnings or block operations when predefined regex patterns are matched. They are essential for enforcing coding standards, preventing dangerous operations, and guiding development adherence in complex software environments.

This guide addresses the critical difference between standard Node.js SHA3-256 and the Keccak-256 hash function required by Ethereum. Using the wrong hash function can silently corrupt calculated function selectors, event topics, storage slots, and derived addresses. It provides best practices and code examples for using dedicated libraries (like ethers, viem, web3.js) to ensure correct, Ethereum-compliant hashing in JavaScript and TypeScript environments.

This guide provides a systematic, structured approach for debugging complex technical issues, such as failing tests, broken builds, or unexpected runtime errors. It teaches the 'Stop-the-Line' rule and utilizes a comprehensive triage checklist (Reproduce, Localize, Reduce, Fix, Guard, Verify) to ensure root causes are found and prevented from recurring.

A comprehensive guide on implementing Firebase Analytics in Flutter applications. Learn how to set up the service, log predefined and custom events (like add-to-cart), set user properties, track screen views, and adhere to best practices for robust data collection and funnels.

A type-safe, generics-first library for implementing ReactiveX streams in Golang. It provides declarative, composable pipelines for handling infinite, asynchronous data sources (like WebSockets or timers) with automatic backpressure, robust error propagation, and full Go context integration. Ideal for building real-time, event-driven architectures.

A robust CLI tool for connecting to Lark/Feishu real-time events. It allows streaming, subscribing, and consuming various events (e.g., IM messages, reactions, meeting updates) as NDJSON output. Ideal for developing Lark bots, building real-time message processors, or implementing long-running streaming webhook handlers, especially in AI agent subprocesses.

This tool analyzes specification files to extract all defined requirements and cross-references them with the current codebase implementation status. It systematically checks for unimplemented features, searches existing GitHub issues to prevent duplicates, and automatically generates detailed issues using a standardized feature request template. It is essential for robust product management, ensuring every defined requirement is tracked and scheduled for development.