Skill UI

Guides assistants through DOCX creation, editing, and redlining by describing when to unpack XML, use docx-js for new files, leverage the Document library for edits, and follow tracked-change workflows for reviews, including batching and precise OOXML edits.

A comprehensive runbook providing structured procedures for responding to Exa search API outages and integration failures. It guides users through initial triage, analyzing specific HTTP error codes (e.g., 401, 429, 5xx), implementing mitigation strategies, and completing thorough post-incident reviews and root cause analyses.

Performs authorized file path traversal assessments to map web inputs, craft traversal payloads, and document sensitive files that can be read, aiding defenders in hardening filesystem handling during security reviews.

Performs a structured, multi-phase audit on local branch changes (diffs) to identify security vulnerabilities, bugs, and code quality issues. It systematically checks for common risks like Injection (SQL, XSS), Broken Authentication, IDOR, CSRF, and business logic flaws, providing detailed severity, evidence, and suggested fixes. Ideal for pre-merge code reviews and security audits.

This skill provides a structured methodology for reviewing code commits intended to fix security vulnerabilities or address audit findings. It ensures that the original root cause is properly resolved, verifies the fix hasn't introduced new bugs or vulnerabilities (regressions), and validates the overall completeness of the remediation effort. Ideal for security-critical code reviews.

Automated fuzz testing of APIs via the /fuzz-api command to inject malformed, boundary, and random payloads, spotting crashes, SQL injection, XSS, and validation gaps during vulnerability scanning or security reviews.

Automatically generate thorough database documentation using database-documentation-gen, covering ERD diagrams, relationships, columns, indexes, triggers, procedures, and interactive HTML reports whenever you need schema insight for onboarding, reviews, or governance.

Automate GitHub repositories, issues, PRs, branches, CI/CD, and permissions through Composio’s Rube MCP toolkit, enabling programmatic workflows, reviews, searches, and deployments across connected repos.

Detects fail-open insecure defaults such as hardcoded secrets, weak auth, or permissive security that allow production apps to run unsafely, guiding auditors through discovery, verification, confirmation, and reporting steps during security reviews or deployment validation.

A comprehensive technical audit checklist designed to validate the production readiness of OpenRouter API integrations. It covers critical areas including security practices (e.g., secret management, key rotation), system reliability (e.g., fallbacks, retries, timeouts), and observability requirements (e.g., structured logging, cost tracking). Use this guide before launching or during major operational reviews to ensure robust, scalable, and compliant deployments.

This skill enables the coordination of multiple specialized AI agents within a single session. It is designed for complex, multi-domain tasks such as comprehensive code reviews, security audits, or full-stack feature implementations. It coordinates expertise across various domains (backend, frontend, testing, architecture) to provide holistic analysis and actionable recommendations.

A comprehensive specialist that combines automated static analysis (SonarQube, CodeQL, Semgrep) with advanced AI capabilities. This tool performs multi-layered code reviews assessing security vulnerabilities, performance bottlenecks, architectural coherence, and maintainability across various programming languages, integrating seamlessly into CI/CD pipelines.