Skill UI

This guide outlines how to build new API connectors or providers that strictly adhere to the existing integration architecture and patterns of a target repository. It is designed for adding integrations while maintaining architectural consistency (e.g., layout, configuration schema, authentication model, and testing style), preventing the creation of novel, unsupported patterns.

Generates structured CodeTour `.tour` files in JSON format for detailed, step-by-step code walkthroughs. This tool is essential for onboarding new engineers, conducting architectural reviews, or documenting complex PR changes. It provides a guided narrative that directs users to specific files and line anchors, ensuring a structured and focused learning journey.

This tool guides the creation of actionable monitoring dashboards for observability platforms like Grafana and SigNoz. Instead of merely displaying raw metrics, it focuses on structuring data to answer critical operational questions: Is the system healthy? Where are the bottlenecks? What changes occurred? And what action should be taken? It transforms raw metrics into decision-making tools.

A comprehensive guide detailing security patterns and audit checklists for Automated Market Maker (AMM) smart contracts in DeFi. Covers critical vulnerabilities such as flash loans, slippage, reentrancy attacks, price manipulation, and integer overflow/underflow. Essential for reviewing major DeFi protocols like Uniswap.

A specialized audit skill designed to identify and quantify resource leakage, excessive costs, and billing vulnerabilities within complex development tool workflows (e.g., GitHub Apps). It traces webhook events, queue processing, and model calls to pinpoint where token burn or unauthorized resource usage is occurring, ensuring cost efficiency and clean billing practices.

This utility ensures the prevention of silent floating-point mismatch bugs across all EVM chains. It covers runtime querying of decimals, chain-aware caching, handling precision drift in bridged tokens, and safe normalization for bots, dashboards, and DeFi tools. It is crucial for accurate cross-chain balance comparison.

This skill provides comprehensive automation for managing GitHub workflows across the entire development lifecycle. It covers detailed issue triage, PR review status checks, CI/CD failure debugging, official release management, and security monitoring using the GitHub CLI. Ideal for maintaining open-source project health and streamlining team development processes.

This skill provides comprehensive guardrails for handling Protected Health Information (PHI) in US healthcare software. It guides development teams on data classification, security best practices, access control, and audit logging to ensure strict adherence to HIPAA regulations. Use it when dealing with patient data storage, transmission, or processing to prevent breaches and maintain compliance.

Hookify rules enable developers to define custom, event-driven workflows using Markdown files with YAML frontmatter. These rules monitor specific operational events (such as bash commands, file edits, or user prompts) and can trigger warnings or block operations when predefined regex patterns are matched. They are essential for enforcing coding standards, preventing dangerous operations, and guiding development adherence in complex software environments.

This guide addresses the critical difference between standard Node.js SHA3-256 and the Keccak-256 hash function required by Ethereum. Using the wrong hash function can silently corrupt calculated function selectors, event topics, storage slots, and derived addresses. It provides best practices and code examples for using dedicated libraries (like ethers, viem, web3.js) to ensure correct, Ethereum-compliant hashing in JavaScript and TypeScript environments.

A guide for security researchers focused on finding exploitable, remote-reachable vulnerabilities for bug bounties or responsible disclosure. It emphasizes high-signal flaws such as SSRF, RCE, and SQL injection, while guiding users through the professional triage and PoC creation process for penetration testing.

This skill guides users through evidence-based terminal operations. It is designed for scenarios requiring direct command execution, Git status checks, debugging CI/build failures, and pushing narrow, verified fixes. It emphasizes following a structured, minimal-scope workflow and accurately reporting the repository's current state (e.g., local changes vs. pushed code).