Skill UI

A sophisticated AI tool that coordinates multiple specialized agents (e.g., Security, Architecture, Performance) to provide comprehensive, multi-perspective code assessments. It goes beyond single-point reviews by managing context, running hybrid execution workflows, resolving conflicts, and synthesizing unified, actionable reports for high-quality code assurance.

Provides prioritized performance optimization recommendations across frontend, backend, and infrastructure, offering bottleneck analysis, impact estimates, and phased implementation roadmaps when users request speed improvements or reviews.

A comprehensive guide for configuring and managing organizational access control in Replit Enterprise. This skill covers defining role hierarchies (Owner, Admin, Manager, Editor, Viewer), implementing custom groups, integrating Single Sign-On (SSO/SAML), restricting deployment permissions (Production/Staging), and setting up detailed audit logging. Use this when securing a large development team, setting up strict security policies, or performing quarterly access reviews.

This guide identifies and explains common anti-patterns and critical pitfalls encountered when building applications on the Replit platform. Topics include data persistence, secret management, networking bindings, and environment configuration. Use this resource when conducting code reviews, onboarding new developers, or auditing existing Replit applications for best practices.

This workflow guides developers through the systematic process of requesting and acting upon code reviews. It emphasizes the core principle of reviewing early and often, providing structured inputs (commits, requirements, implemented features) via a subagent to catch technical issues, ensure compliance with requirements, and maintain high code quality before merging.

Automatically scans code for reflected, stored, and DOM-based XSS risks across HTML, JavaScript, CSS, and URLs, providing reports and safe proof-of-concept payloads for use in reviews, audits, or pre-deployment checks.

Automatically scans code for missing or weak input validation, highlighting potential XSS, SQL injection, or command injection risks so developers can harden their applications during reviews or audits.

This central skill specializes in performing comprehensive threat modeling using STRIDE and calculating risk via DREAD scoring. It guides users through defining scope, identifying threats, and planning mitigations for new architectures. Crucially, it acts as a security router, directing specialized requests—such as pen-testing, incident response, cloud posture checks, and AI security reviews—to the appropriate dedicated skill.

Structured pre-PR verification loop for Spring Boot projects that runs fast-build checks, static analysis, tests with coverage, security scans, formatting gates, and diff reviews to catch issues before deployment.

A workflow for executing implementation plans by spinning up a fresh subagent for each task and enforcing consecutive spec compliance and code quality reviews so the session stays focused and high-quality without manual context switches.

A specialized skill for conducting comprehensive security architecture reviews, risk assessments, and threat identification. It masters advanced methodologies like STRIDE, PASTA, and attack tree construction. Use this to build secure-by-design systems, identify potential attack vectors, and strengthen system resilience before deployment.

This skill scans web application endpoints and cookies to spot missing CSRF safeguards—tokens, double-submit cookies, SameSite attributes, and origin checks—then documents vulnerable paths and mitigation steps for security reviews.