Skill UI

Orchestrates the full paper-writing workflow from plan to polished PDF, chaining planning, figure generation, LaTeX drafting, compilation, and auto-improvement for research narratives or reports.

Uses Aqua Security Trivy to scan container images, filesystems, IaC, and Kubernetes manifests for vulnerabilities, secrets, and license issues while generating SBOMs and integrating into CI/CD pipelines for triage-ready reports.

Implements Snyk-driven SCA scans inside CI/CD pipelines to catch vulnerable OSS dependencies, auto-generate fix PRs, enforce license policies, and continuously monitor deployments.

This guide details how to use OWASP Threat Dragon, an open-source tool, for comprehensive threat modeling. It enables security teams and developers to create data flow diagrams (DFD), identify potential vulnerabilities using standard methodologies like STRIDE and LINDDUN, and generate detailed threat reports. It is crucial for secure design review, risk assessment, and continuous security validation in DevSecOps pipelines.

This tool provides a structured methodology for triaging raw vulnerability findings generated by DAST and SAST scanners. It utilizes the OWASP risk rating methodology to validate true positives, filter out false positives, and calculate a comprehensive risk score (Risk = Likelihood x Impact). This process significantly reduces alert fatigue and ensures development teams prioritize remediation efforts on the most critical and exploitable vulnerabilities.

Defines workflows for scanning container registry images via Trivy and Grype, generating SBOMs, signing artifacts with Cosign/Sigstore, and configuring registry policies plus CI/CD gates to block unscanned or unsigned images.

Vibers provides a human code review workflow for AI-generated GitHub projects; add the collaborator, GitHub Action, and commit guidance to receive spec- and security-focused feedback plus follow-up PR fixes.

Guides users through a structured 23-step interview to design, generate, and deploy Claude plugins across claude.ai and Claude Code, handling activation prompts, platform quirks, and GitHub pushes.

Guides SOC analysts through NIST SP 800-61r3 and SANS PICERL-based incident triage, covering alert enrichment, severity scoring, classification, and escalation steps for SIEM/EDR-generated threats and IOC matches.

SvelteKit is the official full-stack framework built on Svelte, enabling developers to build fast, modern, and highly performant web applications. It provides comprehensive features including file-based routing, Server-Side Rendering (SSR), Static Site Generation (SSG), API routes, and progressive form actions, all while maintaining Svelte's zero runtime overhead. Use this skill when building complex, data-driven web platforms where performance and developer experience are paramount.

Creates a comprehensive onboarding guide for new teammates by extracting project context from the knowledge graph, layering architecture descriptions, guiding tours, and highlighting complex files so newcomers can ramp up quickly.

Turns messy workflows, docs, transcripts, or existing scripts into production-ready cross-platform agent skills by surfacing hidden requirements, generating specs, and validating exports for Claude Code, Copilot CLI, Cursor, and similar runtimes.