Skill UI

This tool parses Software Bill of Materials (SBOM) in CycloneDX and SPDX formats. It correlates components against the NVD CVE database to identify known supply chain vulnerabilities. Key features include building dependency graphs, calculating transitive risk scores, and generating compliance reports for regulatory assessment.

This tool detects malicious packages mimicking legitimate dependencies in npm and PyPI. It analyzes package names using Levenshtein distance, examines publish date heuristics, and identifies download count anomalies to secure the software supply chain. Ideal for auditing project dependencies and proactively monitoring for supply chain threats.

Guides researchers through organizing assumptions, invariant objects, notation, and derivation maps to turn loose goals, messy notes, or partial formula chains into a coherent package suitable for paper-style theory drafts or blocker reports.

This utility ensures the prevention of silent floating-point mismatch bugs across all EVM chains. It covers runtime querying of decimals, chain-aware caching, handling precision drift in bridged tokens, and safe normalization for bots, dashboards, and DeFi tools. It is crucial for accurate cross-chain balance comparison.

Comprehensive guide for managing Go project dependencies, covering best practices for adding, upgrading, and removing packages. It emphasizes critical security practices like vulnerability scanning (govulncheck), supply chain verification (go mod verify), and maintaining clean module files (go mod tidy). Use this when auditing security, refactoring dependencies, or ensuring build reproducibility.

Guides Go engineers on using samber/hot for in-memory caches with TTL, loader chains, sharding, and metrics, plus choosing eviction algorithms to fit work-set and stability needs.

This skill provides robust mechanisms to verify the integrity of AI agent plugins, tools, and dependencies. It generates deterministic SHA-256 manifests (INTEGRITY.json) for all components, allowing users to detect unauthorized modifications, track provenance, and ensure that deployed assets match their published versions. Use this during CI/CD pipelines, code review, and pre-production promotion to secure the entire agent ecosystem.

Checks AI agent implementations against the OWASP Agentic Security Initiative Top 10 risks, producing findings on controls, vulnerabilities, and recommendations for prompt injection, tool governance, escalation, logging, identity, policy, supply chain, and behavioral monitoring before production or audit.

Aspire is a code-first polyglot toolchain that orchestrates containers, executables, and cloud resources through an AppHost project, guiding creation, debugging, configuration, deployment, and troubleshooting for distributed applications across languages.

Converts markdown documents to HTML via marked.js-style workflows, pandoc/gomarkdown knowledge, and templating systems like Jekyll or Hugo for both single-file and batch pipelines, enabling static site previews, documentation, and CLI/Node toolchains.

This CLI manages, syncs, and orchestrates AI-powered skills and agents across diverse tools (e.g., Claude, Cursor, Windsurf). It provides a single source of truth for skill configuration, supporting various deployment modes (global/project), version control workflows (commit/push), and CI/CD auditing. Use it to install, update, and maintain complex AI toolchains reliably.

Process videos, audio, images, and documents on Transloadit’s cloud using 86+ robots to encode formats, generate thumbnails, resize/watermark, run OCR, speech-to-text, moderation, and chain multi-step pipelines for scalable media automation.