Skill UI

Automates cloud security posture assistance within the Security Advanced domain, guiding practitioners through best practices, compliance checks, threat modeling, and prod-ready configurations whenever they mention cloud security posture.

A comprehensive troubleshooting guide for diagnosing and fixing common operational and configuration issues with the CodeRabbit PR review bot. Use this guide when reviews fail to post, scope is incorrect, comments are excessive, or configurations are ignored. It covers steps for checking GitHub permissions, YAML syntax, and advanced bot interaction commands.

This skill executes CodeRabbit's core workflow, providing automated, in-depth code reviews directly on pull requests. It analyzes code diffs based on custom rules (e.g., API validation, DB security), generates detailed walkthrough summaries, and posts line-level feedback. Ideal for setting up robust CI/CD quality gates and maintaining high code standards throughout the development lifecycle.

A comprehensive guide to optimizing costs associated with AI code review tools like CodeRabbit. Learn strategies for right-sizing seat allocation, scoping services to high-value repositories, and implementing granular file filters to minimize unnecessary AI processing and billing overhead. Essential for managing SaaS spend in a DevOps environment.

Collects comprehensive diagnostic evidence for troubleshooting CodeRabbit integration issues. This bundle checks the App installation status, validates the `.coderabbit.yaml` configuration, reviews recent PR history, and verifies GitHub webhook deliveries. Essential for preparing support tickets and diagnosing complex SaaS integration failures.

This skill provides a comprehensive guide to configuring CodeRabbit for advanced, security-focused code reviews. It teaches how to implement rules for detecting hardcoded secrets, common vulnerabilities (like SQL injection and XSS), and enforcing secure coding standards across APIs, databases, and infrastructure code. Use this when hardening a codebase's security posture or ensuring compliance with industry standards.

Compares PostgreSQL or MySQL schemas using the database-diff-tool, produces transaction-safe migration scripts and rollback procedures, and outlines synchronization steps for staging/production deployments.

Implements a robust caching strategy by using the SHA-256 hash of file content as the primary key, instead of the file path. This pattern is essential for high-cost file processing pipelines (like OCR, PDF parsing) because it ensures cache hits survive file renaming or moving, while still automatically invalidating entries when the content changes. It adheres to the Single Responsibility Principle (SRP) by isolating caching logic into a service layer wrapper.

This skill automatically fetches the latest official documentation for programming libraries and frameworks (such as React, Next.js, or Prisma) via the Context7 API. It is essential for developers who require accurate, up-to-date technical reference material to ensure their code adheres to the most current best practices.

Provides targeted guidance for improving LCP, INP, and CLS to boost page experience and search rankings, with checklists, issue breakdowns, and actionable fixes for rendering and interaction bottlenecks.

A comprehensive pattern for building robust and cost-efficient LLM application pipelines. This guide details combining model routing based on task complexity, immutable cost tracking, limited retry logic, and prompt caching to manage API expenditures while maintaining high quality. Essential for production systems handling variable-complexity, high-volume tasks.

Automated AWS skill that activates when you invoke cost optimization analyzer, offering guided best practices, code/config validation, and recommendations across compute, storage, networking, and serverless domains.