Skill UI

This skill provides read-only functionality to query and list comprehensive information about KubeSphere clusters. It is designed for viewing cluster lists, checking current status, retrieving detailed specifications, and identifying component versions across multiple clusters. IMPORTANT: This operation is strictly read-only. Never use these commands for creating, updating, or deleting resources; always use the KubeSphere console for management actions.

This guide outlines critical security best practices for design-to-code pipelines using Anima and Figma. It covers securing API credentials by restricting token scopes (e.g., read-only access for Figma), enforcing server-side execution for SDKs, and implementing robust secret management using cloud services like GCP Secret Manager. This minimizes the risk of credential leakage in CI/CD environments.

This guide details essential best practices for securing applications integrated with Anthropic's Claude API. It covers critical security measures including secure API key management (server-side only), robust input validation to prevent cost attacks, defense mechanisms against prompt injection, and implementing per-user rate limiting. Essential reading for maintaining data privacy and system integrity in production environments.

This elite skill acts as an art director and implementation strategist for modern web development. It mandates an 'Image-First' workflow: first generating high-fidelity, premium design images for specific sections (e.g., hero, product features), deeply analyzing these visual references, and only then translating them into clean, structured, and highly implementable frontend code. It is designed to avoid generic AI clichés, ensuring results that are aesthetically superior, structurally sound, and ready for professional deployment.

This skill runs the Bumblebee scanner on macOS/Linux to perform read-only inventory and exposure checks. It detects compromised packages, developer tools, and host configurations against known security advisories. It is primarily used for supply-chain incident response and vulnerability assessment, providing developers with a clear picture of local system exposure.

Meta-Apply serves as the mandatory, privileged landing gate for all self-modification patches within the skill corpus. It strictly separates the 'proposal' (read-only staging) from the 'landing' (mutation). This skill requires explicit human invocation and runs a fresh, cross-model jury audit at the time of application, ensuring that no staged patch can be applied without passing stringent, real-time security and functional checks. It acts as the final, audited authority for updating the core system skills.

This skill allows users to query the current state of various AWS resources (including EC2, S3, Lambda, RDS, VPC, etc.) using natural language. It translates user intent into strictly read-only AWS CLI commands (e.g., `describe-*`, `list-*`). Crucially, this tool can only view data and is contractually incapable of performing any write, modify, delete, or mutation actions, ensuring maximum safety.

Unship is a dedicated local workflow for front-end developers to compare multiple AI-generated UI alternatives (such as layouts, copy, or flows) directly within a running application environment. Instead of committing to one generated version, it adds temporary source-level variants, allowing for visual comparison. After the user selects the final version, the skill automatically cleans up all unused temporary code and attributes, ensuring a clean, production-ready codebase. Note: This tool is for local iteration only, not for production A/B testing or analytics.

A comprehensive tool for exploring Go/Golang packages and modules using the pkg.go.dev API via the `godig` client. It provides read-only access to essential information, including detailed API signatures, comprehensive documentation, version history, dependency graphs, known vulnerabilities (CVEs), and import usage. Ideal for researching external Go libraries, verifying API usage, or understanding module structure.

This skill runs a read-only audit to assess production deployment readiness. It reviews release artifacts, migration changes, configuration gaps, and potential risks (including rollback feasibility and launch blockers) before actual deployment or merging. It helps reduce coordination failures and ensures a safe release cycle.

A systematic, non-mutating investigation designed for complex software failures, including bugs, regressions, crashes, and flaky behavior. This skill launches four specialized, read-only sub-agents in parallel to perform deep root-cause analysis, trace code paths, pinpoint the smallest failing seam, and predict the quickest path to confirming or fixing the issue. It is designed purely for diagnosis and hypothesis generation.

This skill helps developers achieve maximum AI readiness by automatically detecting the project stack and seeding context using a single, precise goal sentence. It systematically fills the essential project context (the 6 Ws), requiring the user only to answer the few remaining knowledge gaps (like the 'why' or 'when'). This creates a portable, structured context file, ensuring AI models have a complete understanding of the project before coding, minimizing guesswork and maximizing efficiency.