Skill UI

Checks website, GitHub, and local docs to identify messaging inconsistencies and captures version, feature, terminology, and contact differences in a read-only discrepancy report whenever a consistency check is requested.

Analyzes smart contract codebases to enumerate externally callable state-changing functions, classify their access (public/role/contract-only), and produce structured audit-ready reports for Solidity, Vyper, Solana/Rust, Move, TON, and CosmWasm projects.

A comprehensive guide detailing security best practices for integrating with Lokalise. Covers strategies for managing API token scopes (read-only vs. read-write), enforcing the principle of least privilege, validating translated content for XSS or credential leakage, verifying webhook secrets, and securing CI/CD pipelines against hardcoded secrets. Essential for developers and DevOps engineers.

Read-only assistant that inspects Sentry issues, summarizes recent production errors, and pulls health metrics via the Sentry API when users ask for error reports or recent crashes.

Analyzes a code repository to generate a recommended, minimal set of read-only shell command permissions for Claude Code's settings.json. It automatically detects the project's tech stack (e.g., Python, Node.js, Go), build tools, and monorepo structure, ensuring a safe and evidence-based security baseline for new projects or auditing existing permissions.

This comprehensive index provides access to 32 production-ready, specialized engineering skills. It covers the entire development lifecycle, including system architecture, frontend, backend, DevOps, security operations, AI/ML, and data engineering. It is designed to guide users in selecting and loading only the specific module needed, ensuring focused expertise for complex tasks.

This skill enforces a mandatory, structured gate for starting new implementation tasks. It mandates that all work must be tracked via a GitHub issue, requiring explicit, testable acceptance criteria before any execution can begin. It defines a strict workflow (Problem, Goal, Scope, Acceptance Criteria, Status) to manage task readiness, ensuring that development only proceeds when criteria are fully defined and verifiable.

Validates SKILL.md files against the agentskills specification and Anthropic best practices, catching structure, semantic, naming, and quality issues in a single read-only pass before publishing or debugging skills.

A comprehensive guide detailing best practices for hardening Docker containers, aligning with CIS Docker Benchmark v1.8.0. It covers host configuration, minimizing attack surface, implementing least privilege, and enhancing runtime security using techniques like read-only filesystems, Seccomp, and AppArmor. Use this when deploying secure, production-grade containerized applications.

This comprehensive guide details industry best practices for container image hardening. It covers minimizing attack surface through multi-stage builds, utilizing distroless images, enforcing non-root users, and configuring read-only root filesystems. The techniques ensure compliance with standards like the CIS Docker Benchmark, making images secure and production-ready.

This skill provides a comprehensive, read-only audit of a development workspace, including active repositories, installed plugins, connected services, and environment configurations. It analyzes existing capabilities against best practices to identify functional gaps and recommends the most valuable ECC-native skills, hooks, and workflows needed to enhance the development experience. Ideal for setup planning and architectural reviews.

This skill guides the integration of Arize AX tracing into existing applications, especially complex LLM applications. It follows a structured, two-phase, agent-assisted flow: first analyzing the codebase (read-only) to understand dependencies, and then implementing instrumentation. It supports multi-language environments (Python, TypeScript, Java, Go) and integrates deeply with OpenTelemetry and various LLM providers, ensuring comprehensive observability without altering core business logic.