Skill UI

Provides Windsurf projects with dependency tree analysis, vulnerability scanning, and update planning, helping developers audit npm/yarn/pnpm/pip packages, plot safe migrations, and apply verified upgrades.

Systematically examines project dependencies, using GitHub data to highlight single-maintainer, unmaintained, unpopular, or otherwise risky packages before audits so teams can focus security efforts and propose better-maintained alternatives.

Command-line helper that drives the burpsuite-project-file-parser extension and Burp Suite Professional to search headers, bodies, and audit data from .burp project files while enforcing safe truncation and size checks.

Analyzes a repository’s stack, tooling, and structure to recommend Claude Code settings.json permissions, compiling safe read-only commands when onboarding or auditing projects.

Functions as a Chief Security Architect assistant that performs STRIDE/PASTA threat modeling, OWASP checks, Red/Blue team simulations and incident response playbooks to harden any project before production.

Audit Google Cloud IAM using gcloud CLI, Policy Analyzer, and IAM Recommender to flag over-privileged bindings, primitive roles, service-account keys, and cross-project risks during security assessments and compliance reviews.

Implement GCP Organization Policy constraints to enforce security guardrails across an entire resource hierarchy, restricting risky configurations, enforcing encryption, and auditing compliance programmatically at organization, folder, and project scopes.

Structured verification loop for Laravel projects that runs environment checks, linting/static analysis, tests with coverage, security audits, migrations, and build/deployment readiness before PRs or deployments.

Automated 7-stage workflow for auditing, cleaning, reviewing, and benchmarking GitHub repositories, turning messy projects into polished, production-ready codebases with guided analysis, manual reflection, and final validation.

Ensures Node.js projects compute Ethereum Keccak-256 hashes instead of incorrect SHA3-256 by guiding developers to use ethers/viem/web3 helpers, preventing selector, signature, storage-slot, and address derivation bugs while easing audits.

This skill performs a comprehensive security audit of Model Context Protocol (MCP) server configurations found in .mcp.json files. It is designed to identify critical vulnerabilities, including hardcoded secrets (API keys, tokens), dangerous shell injection patterns, unpinned dependencies, and compliance issues regarding approved server lists. Use this skill during security reviews, project onboarding, or pre-commit checks to ensure secure deployment.

Skillshare is a comprehensive CLI tool designed to manage and synchronize AI Command Line Interface (CLI) skills across dozens of AI tools and repositories. It provides a single source of truth for skill configurations, enabling users to install, update, audit, analyze, and share skills globally or within specific projects. Use it for streamlining AI workflow setup, managing cross-tool dependencies, setting up CI/CD audit pipelines, or building specialized skill hubs.