Skill UI

This central skill specializes in performing comprehensive threat modeling using STRIDE and calculating risk via DREAD scoring. It guides users through defining scope, identifying threats, and planning mitigations for new architectures. Crucially, it acts as a security router, directing specialized requests—such as pen-testing, incident response, cloud posture checks, and AI security reviews—to the appropriate dedicated skill.

Structured pre-PR verification loop for Spring Boot projects that runs fast-build checks, static analysis, tests with coverage, security scans, formatting gates, and diff reviews to catch issues before deployment.

This skill provides a structured approach to systematically identify security threats by applying the STRIDE methodology (Spoofing, Tampering, Repudiation, Information Disclosure, Denial of Service, Elevation of Privilege). It is crucial for conducting thorough threat modeling sessions, analyzing system architectures, reviewing security design decisions, and creating robust security documentation for compliance and auditing purposes.

A comprehensive guide detailing the most common and critical mistakes when developing with Supabase. Covers severe security issues (like exposing service role keys or missing RLS), data integrity failures, and performance bottlenecks (connection pooling, N+1 queries). Essential for code review, onboarding new developers, or auditing existing Supabase projects to ensure secure and robust applications.

An expert skill designed for writing, reviewing, and refactoring SwiftUI code for iOS and macOS. It provides deep insights into modern state management (@Observable), optimizing view composition, handling data flow, and improving performance. The skill also assists with interpreting Instruments traces and adhering to Apple's latest Human Interface Guidelines.

This skill provides expert guidance on creating, reviewing, and managing production-grade AWS infrastructure using Terraform. It focuses on best practices for reusable module design, robust remote state management (S3 + DynamoDB), and adhering to modern HashiCorp Configuration Language (HCL) patterns like using 'for_each'. Ideal for teams building or auditing complex, scalable AWS environments.

This comprehensive workflow provides a complete cycle of quality assurance for software development. It covers every stage from defining the test strategy (TDD, Unit Testing) through integration, E2E testing, browser automation, performance profiling, security scanning, and final code review. Use this when setting up robust testing infrastructure or ensuring production-ready software quality.

Configures robust CI/CD pipelines for Vercel projects using GitHub Actions. This guide automates the full deployment lifecycle, including generating preview environments on every pull request, performing reliable production builds upon merging to main, and implementing test gating to ensure code quality before release. Ideal for professional web development workflows.

A comprehensive, step-by-step guide for responding to Vercel-related production outages, deployment failures, and platform issues. This runbook covers rapid triage using CLI commands, executing instant rollbacks, investigating root causes (log analysis, diffing), managing communication templates, and conducting thorough postmortem reviews.

This comprehensive guide catalogs common anti-patterns and mistakes when deploying applications on Vercel. It covers critical architectural areas such as secret management (preventing key exposure), optimizing serverless function performance (cold start, timeouts), adhering to Edge Runtime standards, and resolving configuration errors. Use this skill for code reviews, security audits, and onboarding new developers to ensure best deployment practices.

Guidelines for reviewing UI code against web interface best practices, covering accessibility, performance, responsive design, component patterns, CSS practices, security, and internationalization during audits or UX evaluations.

Runs a Lighthouse-based audit that combines performance, accessibility, SEO, and best-practice checks, categorizes issues by severity, and recommends targeted fixes for requested site reviews.