Skill UI

An expert AI specialist that integrates advanced static analysis (e.g., CodeQL, SonarQube) with modern DevOps practices. It performs multi-layered code reviews, checking for security vulnerabilities, performance bottlenecks, architectural flaws, and adherence to best practices across various languages. Ideal for CI/CD pipelines and pull request validation.

This skill helps transform code reviews from simple gatekeeping into a powerful knowledge-sharing mechanism. It guides users through systematic analysis of code changes, focusing on correctness, security, performance, and maintainability. Use it when reviewing pull requests, establishing best practices, or mentoring developers to ensure high-quality, robust codebase development.

This expert skill specializes in creating comprehensive, maintainable technical documentation directly from existing codebase, configurations, and comments. It can generate various artifacts, including API specifications, system architecture diagrams, detailed user guides, and technical references, ensuring consistency and accuracy using AI-powered analysis and industry best practices. Ideal for building robust documentation pipelines and standardizing documentation across large repositories.

Guides engineers through initializing MCUs, crafting RTOS-aware drivers, and tuning power/timing for STM32, ESP32, and bare-metal targets; covers constraint analysis, interrupt safety, resource tracking, and validation with static analysis and real-time debugging.

A comprehensive, AI-assisted methodology for diagnosing complex software errors in production environments. This skill guides users through the entire debugging lifecycle, from initial triage and gathering observability data (Sentry, DataDog, Jaeger) to generating hypotheses, selecting appropriate debugging strategies (Time-Travel, Chaos Engineering), and performing AI-powered root cause analysis. It culminates in proposing validated fixes and prevention measures.

This skill outlines a comprehensive, multi-agent orchestration workflow designed for sophisticated production issue resolution. It systematically combines AI code assistants, observability platforms (like Sentry/DataDog), and automated techniques (e.g., git bisect, distributed tracing) into a rigorous four-phase process: Issue Analysis, Root Cause Investigation, Fix Implementation, and Verification. It guides best practices for reducing Mean Time To Recovery (MTTR) and improving system resilience in complex, multi-system environments.

A comprehensive specialist that combines automated static analysis (SonarQube, CodeQL, Semgrep) with advanced AI capabilities. This tool performs multi-layered code reviews assessing security vulnerabilities, performance bottlenecks, architectural coherence, and maintainability across various programming languages, integrating seamlessly into CI/CD pipelines.

This skill provides comprehensive capabilities for working with PowerPoint files (.pptx). It supports end-to-end workflows, including creating new presentations from scratch based on design principles, sophisticated content editing, and deep structural analysis. Users can extract plain text, access raw underlying XML (for notes, comments, and layouts), and apply expert design knowledge—such as selecting appropriate color palettes and establishing visual hierarchy—to ensure professional and effective presentations.

Python library for accessing SEC EDGAR filings, extracting XBRL statements, insider trading, and institutional holdings data to power financial analysis, screening, or structured data workflows across 10-K/10-Q/8-K/DEF-14A filings.

A powerful skill for conducting structured, systematic code reviews for PRs and MRs. It goes beyond basic style checks, performing deep analysis such as blast radius tracing, comprehensive security scanning (SQLi, XSS, secrets), detecting breaking changes in APIs/DB schemas, and calculating test coverage delta. Ideal for reviewing large, complex, or security-sensitive code changes before merging.

A powerful toolkit utilizing Objection and Frida for authorized mobile penetration testing. It enables deep runtime analysis of iOS applications, allowing users to inspect sensitive data in the keychain, filesystem, and memory. Key capabilities include bypassing client-side protections such as SSL pinning and jailbreak detection without requiring source code access.

A comprehensive cybersecurity tool designed to analyze malicious VBA and XLM macros embedded within Microsoft Office documents (Word, Excel, PowerPoint). It facilitates deep forensic investigation by extracting, deobfuscating, and tracing the full attack chain, including identifying auto-execution triggers, payload download URLs, and file writing techniques. Useful for malware analysts investigating phishing campaigns and maldocs.