Skill UI

This skill enforces a rigorous, opinionated baseline for UI development, ensuring consistency across spacing, hierarchy, typography, and layout. It helps maintain high code quality by fixing structural and stylistic inconsistencies, particularly useful for polishing AI-generated or quickly developed interfaces to meet professional standards and accessibility requirements.

Analyzes a code repository to generate a recommended, minimal set of read-only shell command permissions for Claude Code's settings.json. It automatically detects the project's tech stack (e.g., Python, Node.js, Go), build tools, and monorepo structure, ensuring a safe and evidence-based security baseline for new projects or auditing existing permissions.

This skill automates the creation of isolated, pre-configured development containers (devcontainers). It scans the project structure to detect supported languages (Python, Node.js, Rust, Go) and intelligently generates the necessary configuration files, VS Code extensions, and setup scripts. It ensures all required tools are installed in a sandboxed environment, making it ideal for starting new multi-language projects or needing consistent, reproducible development workspaces.

A rigorous, security-focused code review process designed for Pull Requests (PRs), commits, and diffs. It moves beyond general reviews by focusing intensely on high-risk areas such as authentication, cryptography, external calls, and value transfer. The methodology is evidence-based, requiring detailed attack scenario modeling and generating comprehensive, auditable markdown reports to identify overlooked vulnerabilities and regressions.

This guide provides a deep, investigation-driven methodology for reviewing Django and Django REST Framework (DRF) codebases. It helps identify critical authorization gaps, focusing on Insecure Direct Object References (IDOR) and object-level access failures. Learn how to trace data flows, analyze custom managers, and verify that users can only access resources they are explicitly authorized to view or modify.

A specialized review tool for identifying critical performance bottlenecks within Django applications. It focuses on validating issues such as N+1 queries, unbounded querysets, missing database indexes, and write loops. Use this when you suspect database slowdowns or memory exhaustion due to inefficient ORM usage, ensuring findings are provable and actionable.

Use this guide to build and manage Expo development clients using EAS Build. This is the recommended setup for production-grade testing, allowing developers to test custom native code, local modules, and advanced features that exceed Expo Go's capabilities. It covers local builds, TestFlight submission, and connecting to the Metro bundler.

Diagnose and fix failing or flaky Playwright tests via a systematic reproduce-trace-categorize-fix workflow, validate stability by repeated runs, and recommend CI safeguards to prevent regressions.

This guide offers a jargon-free, practical approach to functional programming using fp-ts in TypeScript. It focuses on the 80/20 principles, teaching core patterns like Pipe, Option, and Either. Learn how to handle missing values safely, manage errors explicitly, and chain operations cleanly, improving code readability without over-engineering.

A rigorous framework designed to audit GitHub Actions workflows for exploitable security vulnerabilities. This skill focuses strictly on real-world attack patterns, requiring every identified finding to include a concrete exploitation scenario (Entry Point, Payload, Impact). Ideal for securing CI/CD pipelines against external attackers.

Scans Go codebases for security vulnerabilities, highlighting risky patterns, insecure dependencies, and misconfigurations so auditors can catch issues before deployment.

A lightweight integration for automating Google Docs tasks. It allows users to programmatically create, read, search, edit, append, and replace content in Google Workspace documents. With standalone OAuth authentication, it is ideal for local scripts that require direct document content manipulation without relying on a centralized server.