Skill UI

This skill guides you through a comprehensive, multi-phase interview to capture every necessary detail of a new project idea. It is designed to run BEFORE any code is written, forcing detailed specification gathering across purpose, features, data models, and technical constraints. The output is a clean, self-contained prompt.md file, ensuring subsequent development is based on solid, unambiguous requirements and preventing costly mistakes.

Implements a robust, four-stage coding discipline (Plan, Isolate, Test First, Double Review) to prevent premature code delivery. This skill forces the AI to structure complex tasks by planning, implementing in isolation, writing tests first, and performing deep self-review, significantly improving code correctness and quality.

A comprehensive guide and playbook for managing feature flags across services or teams. It covers flag taxonomy (Release, Experiment, Ops, Permission), naming conventions, safe rollout strategies, creation checklists, and cleanup policies to prevent technical debt. Ideal for standardizing feature flag practices and governance.

Programmatically manage your entire contact database within Mailtrap. This guide covers using the API to create, update, delete, and bulk import contacts. It is essential for synchronizing contact data with CRMs, triggering custom automation events, building targeted segments, or performing large-scale list cleanups.

This guide outlines a comprehensive workflow for detecting and preventing the exposure of sensitive AWS credentials (access keys, session tokens) within source code repositories, CI/CD pipelines, and configuration files. It utilizes TruffleHog for deep historical scanning and integrates git-secrets for robust pre-commit hooks, significantly reducing the risk of credential theft and unauthorized account access.

This skill enforces a rigorous data validation protocol by establishing hard boundaries at every point data enters the system (API requests, user input, environment variables, webhooks, etc.). It mandates a four-phase process: detection, trust classification, mandatory filtering (schema validation, sanitization, type checking), and final verification. This prevents untrusted data from reaching core business logic, mitigating risks like SQL injection and XSS.

A comprehensive tool and methodology for identifying and preventing dependency confusion attacks across major package ecosystems (npm, PyPI, Maven). It detects instances where internal, private package names are leaked and subsequently published publicly by attackers. The skill provides both detection (enumerating claimable internal names) and prevention strategies (enforcing registry pinning and scope restrictions) to secure the software supply chain.

A comprehensive red-teaming skill for assessing the security posture of Retrieval-Augmented Generation (RAG) pipelines. It systematically probes two critical injection surfaces: poisoned retrieved context (indirect prompt injection) and embedding manipulation. Use this skill to validate retrieval guardrails, ensure data leak prevention, and demonstrate vulnerabilities in LLM-powered knowledge assistants.

This advanced protocol forces the AI to conduct a thorough context audit before attempting any complex task. It mandates reading every relevant file, identifying architectural gaps, and providing a detailed orientation statement. It is essential for multi-file modifications, system design, and debugging to prevent acting on assumptions and maintain high code accuracy. The AI cannot proceed until all unknown variables are resolved.

This tool diagnoses and validates complex cron expressions (e.g., crontab, Kubernetes CronJob) to prevent silent scheduling failures. It identifies five common pitfalls: impossible dates, misunderstood OR semantics, resource spikes, uneven step drift, and leap year issues. Users can check the syntax, understand the true meaning, and calculate future execution times reliably.

This skill helps diagnose, repair, and prevent complex Drizzle Kit database migration conflicts. It addresses issues arising from merging branches, rebasing, or PR updates involving generated SQL, snapshots, and journals. Use it to ensure stable schema evolution in multi-developer teams and harden CI/CD workflows.

This skill provides comprehensive guidance on designing complex system integrations, including event-driven architectures (EDA), webhook flows, API chaining, and robust ETL pipelines. It covers advanced patterns like Saga, Outbox, and resilience mechanisms (Idempotency, Circuit Breaker), making it ideal for connecting multiple microservices and managing asynchronous data flows.