Skill UI

This comprehensive guide serves as a decision flowchart for developers using Claude Code. It details when to use specific slash commands (/plan, /compact, /loop), select specialized agents (planner, code-reviewer, build-error-resolver), or invoke workflow skills (e2e-testing, tdd-workflow). It helps users select the optimal tool combination for complex tasks across the entire software development lifecycle, including feature planning, bug fixing, testing, and architectural design.

This skill performs a proactive, comprehensive audit to quantify the business and regulatory impact of a potential data breach before it occurs. It inventories sensitive data (PII, PHI, PCI-DSS), traces complex data flows through the codebase, identifies all exposure vectors, and calculates the 'blast radius.' The output provides law-sourced figures (e.g., GDPR, CCPA, HIPAA fine maximums) alongside heuristic risk estimates, guiding proactive hardening roadmaps for compliance and security.

This skill performs comprehensive, feature-level integration validation after all associated development tasks are implemented. It goes beyond checking individual tasks to ensure cross-task consistency, full test suite passage, and complete specification coverage. It validates data flow, architectural adherence, and performs critical security scans for residual issues (e.g., TODOs, hardcoded secrets), providing a holistic GO/NO-GO assessment for deployment. Use this skill as a final quality gate to verify that the completed feature set respects the designed boundaries and dependencies end-...

This skill analyzes your entire codebase to ensure it is optimized for AI contributions and developer tooling. It automatically generates essential configuration files such as `AGENTS.md`, Copilot instructions, CI workflows, and customizable issue templates. It learns from your existing PR review patterns to tailor the setup precisely to your project's stack. Use it when you need to prepare a repository for advanced AI-assisted development.

This skill automates the end-to-end release workflow for GitHub libraries, managing everything from version bumping (SemVer) to generating detailed changelogs. It analyzes code diffs and commit history using only the GitHub CLI and Git, streamlining the process of publishing new, stable versions and opening release PRs.

Squirrel is an advanced, full-cycle AI coding skill designed to guide software development from concept to production. It automatically detects the current project state (greenfield, in-progress, or mature) and adapts an 8-phase engineering pipeline. This comprehensive workflow covers planning, building, rigorous testing, bug hunting, code polishing, documentation, and deployment readiness, ensuring high-quality, maintainable results.

Cavecrew provides a set of specialized subagents (investigator, builder, reviewer) designed for efficient code development delegation. Unlike vanilla agents, Cavecrew compresses output results, drastically reducing the token usage injected back into the main context. This allows users to maintain context over much longer, complex coding sessions, effectively preventing context exhaustion during large-scale refactoring, debugging, or multi-step feature development.

An expert playbook detailing techniques for identifying, classifying, and defeating advanced code obfuscation in native binaries. Covers junk code, opaque predicates, self-modifying code (SMC), control flow flattening (CFF), VM protectors, and string encryption by utilizing symbolic execution, dynamic emulation, and advanced data flow analysis.

A sophisticated payload bypass technique targeting Java applications. It exploits the silent loss of high 8 bits when 16-bit Java characters are cast or written as 8-bit bytes. This allows attackers to bypass WAF/IDS security measures by making the WAF see harmless Unicode, while the backend service processes the original malicious ASCII byte payload. Ideal for blind SQLi, deserialization RCE, and path traversal. This primitive affects major frameworks like Tomcat, Spring, Jackson, and HttpClient.

This skill guides the design and optimization of production-grade multi-agent systems. It specializes in using LangGraph, LangChain, and DeepAgents to create structured, complex AI workflows. It covers state management, agent routing, memory integration, and tool calling, making it ideal for building robust, scalable agents like supervisors, planners, and coders.

This utility serves as a Command Line Interface (CLI) alias for managing 'flavor' profiles within AI code environments (like Claude Code). It allows users to set or select specific configuration flavors in the ~/.pua/config.json file. Crucially, it is designed to safely update the configuration by preserving any unknown fields, ensuring no unrelated settings are accidentally overwritten.

This alias serves as a specialized Codex CLI interface for implementing the P7 protocol, mimicking the workflow of a P7 senior engineer. It enforces a highly structured development cycle: detailed planning, robust implementation, mandatory self-review (via three critical questions), and final, verifiable completion markers. Ideal for complex coding tasks requiring maximum rigor and accountability.