Skill UI

A specialized audit skill designed to identify and quantify resource leakage, excessive costs, and billing vulnerabilities within complex development tool workflows (e.g., GitHub Apps). It traces webhook events, queue processing, and model calls to pinpoint where token burn or unauthorized resource usage is occurring, ensuring cost efficiency and clean billing practices.

A formal framework designed for evaluating AI-assisted code generation sessions. It implements Development Oriented Evals (EDD) principles, allowing users to define capability and regression criteria. The system supports multiple evaluation types—code-based, model-based, and human review—and tracks reliability using advanced metrics like pass@k, ensuring robust quality control for AI agents.

This guide details integrating FoundationModels for running Large Language Models (LLMs) directly on the device (iOS 26). It covers advanced patterns including text generation, extracting structured data using @Generable, implementing custom tool calling for domain logic, and streaming responses for real-time UI updates. Key features emphasize strong privacy and offline capability, ensuring no data leaves the device.

GateGuard is a mandatory pre-tool-use hook designed to significantly enhance the reliability and safety of LLM-generated code and actions. Instead of relying on self-evaluation, it forces the model to perform concrete, verifiable investigations—such as listing all imported files, checking data schemas, or detailing rollback procedures—before any write or destructive command execution. It establishes a three-stage gate (Deny, Force, Allow) to prevent hallucination and ensure context awareness in complex coding environments.

This tool facilitates the creation and execution of intelligent, goal-oriented action plans using the Goal-Oriented Action Planning (GOAP) algorithm. It models complex objectives by defining a goal state, assessing the current state, identifying gaps, and generating an optimal action sequence. The system supports execution, real-time monitoring, and adaptive replanning when unexpected failures or changes occur, ensuring robust project completion.

A comprehensive audit worker that integrates Open Infrastructure Architecture (OIA) manifest analysis, threat modeling, and MCP security scanning. It computes a composite worst-case severity score and persists time-stamped audit records in a memory namespace. Primarily designed for scheduled CI/CD pipelines to detect architectural drift and security regressions over time.

This skill generates an enterprise-grade threat model report using the `harness threat-model` command. It categorizes threats across the MCP surface, providing a detailed report including the overall worst severity (clean, low, medium, high) and specific findings. Ideal for pre-launch security reviews and periodic audits when sharing findings with an InfoSec team.

This guide details the Hexagonal Architecture (Ports and Adapters) pattern, a robust method for decoupling core business logic from external infrastructure concerns. It teaches how to structure applications to make the domain model independent of databases, UI frameworks, or message queues. Implementing this pattern drastically improves testability, maintainability, and the ability to swap out external services without rewriting business rules.

A comprehensive guide to best practices for data access and persistence in Spring Boot using JPA and Hibernate. Covers critical topics such as entity modeling, relationship management (preventing N+1), transaction handling, query optimization, indexing strategies, and connection pooling.

A comprehensive guide to production-level Laravel architectural patterns. It details best practices for structuring scalable web applications and APIs, covering service layers, dedicated actions, Eloquent ORM modeling, resource design, queue management, and advanced routing techniques like scope bindings. Learn how to maintain clean separation of concerns in large-scale PHP projects.

A comprehensive, end-to-end methodology designed for software engineers and AI agents to safely and systematically integrate machine learning models into existing non-ML codebases. It guides users through critical phases, including problem framing, data readiness, architectural decoupling (via APIs/services), baseline model implementation, and final MLOps pipeline setup.

This tool detects and flags Personally Identifiable Information (PII) across text, code, and configuration files. It is essential to use this before committing code, writing logs, or generating model responses to prevent accidental exposure of sensitive data. It identifies various types of PII, including emails, phone numbers, SSNs, credit card numbers, API keys, and passwords, offering quick checks, detailed scans, and full context-aware analysis.