Skill UI

This skill guide provides comprehensive implementation details for the Metro/Modern UI style, mimicking the aesthetic of Windows Phone/8 start screens. It focuses on creating sharply cornered, flat-color tiles arranged in a horizontally scrolling grid. Key features include live data updates (e.g., tile flipping) and replicating the classic interactive 'tilt' effect. Applicable for cross-platform development using Web (CSS), iOS (SwiftUI), and Flutter.

This guide details the principles and technical implementation of widget-based user interfaces, mimicking the aesthetic of modern mobile operating systems (like iOS Home Screen). It covers core design principles such as strict aspect ratios, glanceability, and corner radius matching. Practical code examples are provided for Web (CSS Grid), iOS (SwiftUI), and Cross-platform (Flutter) development, enabling designers to create modular, highly functional mini-apps.

A comprehensive skill for systematically building, refining, and documenting a project's domain model. It helps define core terminology, establish a ubiquitous language, and record critical architectural decisions (ADRs). Use this when you need to challenge ambiguous language, invent edge-case scenarios, or maintain architectural consistency throughout the development lifecycle.

Use Mailtrap Email Sandbox to capture and inspect outbound emails without sending them to real recipients. This is crucial for development, staging, and CI/CD environments. It allows developers to test email content, headers, attachments, and spam scores using dedicated APIs, SMTP settings, or SDKs, ensuring mail integrity before deployment. Ideal for automation and rigorous quality checks.

This skill scaffolds the necessary configurations for advanced engineering workflows. It guides the user through setting up the issue tracking system (GitHub, GitLab, or local markdown), defining the canonical triage label vocabulary, and establishing the domain documentation context (single or multi-context). It must be run once to initialize the repository for subsequent agent-driven development skills.

This tool evaluates how thoroughly a feature implementation meets product requirements (PRDs) or specifications. It scores acceptance criteria case-by-case, independently grading both the code implementation and the associated test coverage (unit and E2E). Ideal for benchmarking multiple development efforts, auditing adherence to specifications, or determining if a feature is 100% complete and compliant with the ground truth PRD.

This skill guides the systematic triage of project issues and external pull requests (PRs). It moves development items through a defined state machine using roles (e.g., bug, enhancement) and states (e.g., ready-for-agent, wontfix). The process involves context gathering, cross-codebase verification, deep questioning (grilling), and generating comprehensive, agent-ready briefs or marking them for human implementation.

A comprehensive, adaptive framework for developing and implementing features, adhering to a strict, multi-phase workflow: Specify, Design, Tasks, and Execute. This skill ensures feature quality through granular task breakdown, atomic Git commits, requirement traceability, and mandatory, independent verification. It automatically adjusts its depth based on feature complexity (Small to Complex), providing a robust mechanism for managing technical debt and capturing project lessons.

A comprehensive tool and methodology for identifying and preventing dependency confusion attacks across major package ecosystems (npm, PyPI, Maven). It detects instances where internal, private package names are leaked and subsequently published publicly by attackers. The skill provides both detection (enumerating claimable internal names) and prevention strategies (enforcing registry pinning and scope restrictions) to secure the software supply chain.

Provides a comprehensive workflow and tooling (GuardDog) to triage npm packages and dependency trees for signs of malicious activity. It focuses on static analysis of install scripts, detecting credential exfiltration, reverse shells, and worming behavior, thereby safeguarding against software supply-chain attacks.

This skill detects malicious, misspelled, or brand-jacked package names (typosquatting) across major ecosystems (npm, PyPI, crates.io). It uses advanced techniques like edit-distance and keyboard-proximity analysis, powered by tools like typomania and OSSGadget, to flag potential supply chain attacks *before* a dependency is installed. It is essential for implementing robust CI/CD security gates and proactive dependency screening.

This skill generates complete, production-grade client SDKs and API wrapper libraries for any REST API, regardless of the language (Python, TypeScript, etc.). It handles boilerplate code like authentication, retry logic (exponential backoff), data modeling, and structured resource management, saving significant development time. Use it whenever you need to consume a REST API via code.