Skill UI

A specialized scripting language for Makepad, enabling advanced dynamic UI generation, complex workflow automation, and rapid application prototyping. It supports asynchronous operations (HTTP requests, timers) and is designed for integrating sophisticated, AI-assisted logic into application workflows.

MolyKit is a comprehensive toolkit designed for building robust, cross-platform AI chat applications. It provides core utilities for integrating large language models (LLMs) like OpenAI, handling real-time SSE streaming responses, and managing complex cross-platform asynchronous patterns (PlatformSend, spawn()). The kit includes ready-to-use widgets for messages, prompt inputs, and avatars, making it ideal for developers creating sophisticated, multilingual chat experiences.

This skill provides a structured workflow for porting existing Semgrep security rules to multiple target languages. It guides users through applicability analysis, test-first rule creation, and validation for each language variant, ensuring consistent and accurate security coverage across polyglot codebases.

A set of behavioral guidelines derived from Andrej Karpathy's observations to help users writing, reviewing, or refactoring code with Large Language Models (LLMs). It guides developers to avoid overcomplication, make surgical changes, explicitly surface assumptions, and define verifiable success criteria, promoting clean, simple, and robust code development.

This skill guides the development of EarLLM One, a complex Android application. The app captures real-time audio from Bluetooth earbuds, transcribes the voice using STT, sends the text input to a Large Language Model (LLM) via a robust pipeline, and plays the response back using TTS. It requires deep knowledge of Kotlin, Android development, Bluetooth profiles (A2DP/HFP), and advanced audio routing.

This skill provides methods for reliably extracting typed, validated, and structured data from Large Language Models (LLMs), moving beyond simple text parsing. It covers best practices across major APIs (OpenAI's response_format, Anthropic's tool_use, Google's responseSchema) and local models. Key workflows include defining schemas (Pydantic/Zod), implementing constrained decoding, and building robust retry loops for production-grade data pipelines.

A comprehensive guide for authorized penetration testers on identifying and exploiting insecure deserialization vulnerabilities across multiple languages (Java, PHP, Python, .NET). Covers techniques for generating payloads using tools like ysoserial and phpggc, and testing various application components such as cookies, HTTP parameters, and message queues to achieve potential Remote Code Execution (RCE).

This file serves as the dedicated translation resource for the MCP Server Patterns library. It is used to localize key strings and texts to ensure accurate user experience across different languages. Developers should refer to the original skill file for the core English content.

A comprehensive guide for mastering version control using GitHub and Git. It provides two modes: Guided Setup for first-time users, and an adaptive, hands-on curriculum for learning advanced concepts like branching, PR workflows, and CI/CD. The system automatically adjusts language and depth based on the user's skill level, ensuring effective, real-world learning.

A comprehensive workflow and guide for reverse engineering malware compiled using the Rust language. It specifically addresses complex challenges unique to Rust binaries, including non-null-terminated fat-pointer strings, monomorphization artifacts, and intricate error handling chains (Result/Option). Ideal for security analysts and red teams performing deep analysis of modern, resilient attack artifacts.

Trivy is an open-source scanner for comprehensive security auditing of container images. It detects vulnerabilities in OS packages, language dependencies, misconfigurations, exposed secrets, and license violations. It is essential for integrating security checks into CI/CD pipelines, performing rigorous security assessments, or conducting incident response investigations. Supports generating SBOMs and reporting in formats like SARIF and CycloneDX.

A professional-grade 'Living Pipeline' that integrates advanced AI reasoning into the SDLC. It provides autonomous guardrails for system security, cloud cost management (FinOps), and Kubernetes compliance. It audits Linux Kernel patches for memory vulnerabilities, detects cost drifts in Terraform plans, and generates hardened K8s manifests from natural language policies.