Skill UI

This skill provides guidance for implementing tasks using structured workflow patterns, specifically following Conductor's TDD (Test-Driven Development) workflow. It helps manage phase checkpoints, organize git commits, and execute rigorous verification protocols. Use it when adhering to a defined development plan, ensuring quality gates are passed, and managing the entire lifecycle from initial planning to final validation.

A comprehensive guide covering patterns and architectures for automating code execution using LLMs. It spans simple sequential pipelines (e.g., daily dev scripts) to advanced, RFC-driven multi-agent Directed Acyclic Graph (DAG) orchestration. Ideal for building CI/CD style continuous development pipelines, managing complex state, and automating quality gates without human intervention.

This advanced pipeline orchestrates complex feature development based on Request for Comments (RFCs). It breaks down monolithic changes into small, independently verifiable work units, managing dependencies through a Directed Acyclic Graph (DAG). It includes multiple quality gates, dedicated unit testing, and a safe merge queue to ensure robust integration and controlled deployment.

This skill guides users on setting up automated code quality gates directly at the Git level. It covers best practices using frameworks like Husky, lint-staged, and pre-commit. Users can enforce linting, formatting, type-checking, and standardized commit message conventions (e.g., Conventional Commits) before code is committed or pushed, significantly improving code hygiene and development workflow consistency.

Automates the final pre-release verification by running documentation, quality, testing, and security gates through the Centinela QA agent before shipment, then records results and verdict in docs for each version.

This skill guides the integration of OWASP ZAP for Dynamic Application Security Testing (DAST) directly into CI/CD pipelines. Learn how to perform baseline, full, and API scans against running applications, interpret complex security findings, tune scan policies, and establish automated security quality gates in modern CI/CD platforms like GitHub Actions and GitLab CI. Essential for DevSecOps practices.

This skill guides developers through integrating Static Application Security Testing (SAST) tools like CodeQL and Semgrep into GitHub Actions CI/CD pipelines. It covers automating code scanning on pull requests and pushes, tuning rules to reduce false positives, uploading SARIF results, and establishing quality gates to prevent vulnerable code from merging into production.

Automates the static security analysis of Android APK/AAB files using the Mobile Security Framework (MobSF). This skill identifies critical vulnerabilities such as hardcoded secrets, insecure permissions, weak cryptography, and structural flaws (mapping to OWASP Mobile Top 10) without requiring application execution. It is essential for integrating security gates into CI/CD pipelines, performing pre-release quality assurance, and enhancing penetration testing coverage.

Use Trivy to automate comprehensive vulnerability detection (CVEs, misconfigurations) in Docker container images within CI/CD pipelines. This skill guides users on establishing robust quality gates—such as integrating into GitHub Actions or GitLab CI—to ensure that only secure images are pushed to production registries, covering OS packages, dependencies, and Dockerfile best practices.

AgentFlow transforms your existing Kanban board (Asana, GitHub, Linear) into a self-managing, autonomous AI development pipeline. It orchestrates multiple AI agents through defined stages (Backlog to Done), enforcing deterministic quality gates, performing adversarial reviews, and tracking costs—all visible within your existing project management UI. It provides crash-proof execution and full observability for complex software development lifecycles.

A comprehensive guide for setting up production-grade CI/CD pipelines for Go projects using GitHub Actions. This skill covers essential quality gates including unit testing, linting (golangci-lint), static analysis security testing (SAST), vulnerability scanning, dependency management, Docker builds, and automated releases using GoReleaser.

This advanced skill automates the enforcement of Python code quality using Ruff. It implements a controlled, iterative workflow that supports safe and unsafe automatic autofixes, formats the code, and reviews diffs after each pass. The process recursively repeats until all findings are resolved or require explicit user decision, ensuring high code consistency and quality gates.