Skill UI

This comprehensive guide details security-first development practices, emphasizing threat modeling (STRIDE) and secure design principles. It provides mandatory controls for validating all external input, preventing common vulnerabilities like XSS and SQL injection, and properly managing authentication and sensitive data storage. Use it when building any feature that handles untrusted data or interacts with external systems.

Guides teams through a final launch-readiness checklist covering code quality, security, performance, documentation, feature flags, staged rollouts, and monitoring to ensure confident production deployments.

A comprehensive workflow for the full lifecycle management of AI skills. This tool guides users through creating skills from scratch, modifying existing ones, and rigorously benchmarking performance. It supports iterative refinement, quantitative evaluation, and optimizing skill descriptions for maximum triggering accuracy.

A systematic methodology for initiating projects, features, or major changes. It mandates creating a detailed, structured specification (spec) before writing any code, ensuring all assumptions are surfaced and vague requirements are translated into measurable success criteria. This process involves four validated phases: Specify, Plan, Tasks, and Implement, guaranteeing alignment between the human team and the development process.

Guides zero-to-live Star Office visualization for Aion/OpenClaw by installing, starting, connecting, and troubleshooting the local UI service, checking ports/auth, and offering alternative open-source monitors when needed.

This skill generates highly structured DESIGN.md files, acting as a semantic design system for Google Stitch. It translates complex, anti-generic frontend principles—including typography, color calibration, component behavior, and motion physics—into actionable, natural-language rules. Use it as the single source of truth to guide AI in generating premium, non-clichéd, professional user interfaces.

Test-driven development requires writing a failing test before any implementation so logic, bug fixes, and behavioral changes are always backed by proof; it is ideal for guarding refactors and ensuring regressions stay caught by the automated suite.

This meta-skill guides engineers through the entire software development lifecycle, from initial idea refinement and specification to implementation, testing, code review, and deployment. It emphasizes critical best practices like surfacing assumptions, managing ambiguity, enforcing simplicity, and maintaining scope discipline to prevent common failure modes.

Deploy applications or static sites to Vercel instantly via a script that packages your project, auto-detects frameworks, uploads artifacts, and returns preview and claim URLs without requiring authentication.

Guides multi-axis reviews before merging, checking correctness, readability, architecture, security, and performance while enforcing concise change sizing and descriptive commit messaging to keep PR history clear.

Comprehensive reference for red teamers and penetration testers on executing Active Directory attacks, covering reconnaissance, credential harvesting, Kerberos abuses, lateral movement, and domain persistence techniques against Windows domains.

Provides step-by-step techniques for assessing AWS security, covering IAM enumeration, privilege escalation, SSRF metadata attacks, S3/Lambda exploitation, and red-team persistence workflows with recommended tools and commands.