Skill UI

Guides security-first development with defensive input validation, auth handling, data protection, and OWASP prevention steps for any feature touching external data or sessions.

Guides teams through a final launch-readiness checklist covering code quality, security, performance, documentation, feature flags, staged rollouts, and monitoring to ensure confident production deployments.

Guides building, evaluating, and improving Claude skills by capturing intent, drafting behavior, running evals, iterating test cases, and polishing descriptions; ideal for users who want to design or refine a custom skill with measurable performance.

Guides zero-to-live Star Office visualization for Aion/OpenClaw by installing, starting, connecting, and troubleshooting the local UI service, checking ports/auth, and offering alternative open-source monitors when needed.

Test-driven development requires writing a failing test before any implementation so logic, bug fixes, and behavioral changes are always backed by proof; it is ideal for guarding refactors and ensuring regressions stay caught by the automated suite.

This meta-skill provides a comprehensive guide through the entire software development lifecycle (SDLC). It teaches senior-level engineering discipline, covering everything from vague idea refinement and specification design to planning, implementation, testing, code review, and deployment. It emphasizes core behaviors like surfacing assumptions, managing ambiguity, maintaining scope discipline, and enforcing technical simplicity.

Guides multi-axis reviews before merging, checking correctness, readability, architecture, security, and performance while enforcing concise change sizing and descriptive commit messaging to keep PR history clear.

Provides step-by-step techniques for assessing AWS security, covering IAM enumeration, privilege escalation, SSRF metadata attacks, S3/Lambda exploitation, and red-team persistence workflows with recommended tools and commands.

Provides ultra-compact, actionable code review comments whenever someone asks for a PR review, enforcing the `location: problem. fix.` format plus optional severity prefixes.

Guides learners through reconnaissance, scanning, vulnerability analysis, exploitation, and reporting phases of authorized penetration testing, pairing command examples with tool choices and professional deliverables.

Comprehensive Go testing guidance that spans table-driven subtests, testify suites, mocking, unit/integration tests, benchmarks, coverage, fuzzing, goleak leak detection, snapshot checks, and GitHub Actions CI to keep production suites reliable.

Covers comprehensive HTML injection attack scenarios, detection tips, and tooling so security testers can validate and document injection points, phishing overlays, and reflected or stored payloads during vulnerability assessments.