Skill UI

This expert skill analyzes codebases to identify, quantify, and prioritize all forms of technical debt—including code complexity, architectural flaws, outdated dependencies, and testing gaps. It calculates the measurable impact of this debt on development velocity, bug rates, and overall business risk. The output provides a comprehensive, actionable, and ROI-driven roadmap for systematic remediation.

This skill functions as a dedicated dependency security expert, specializing in auditing project dependencies. It analyzes codebases for known security vulnerabilities, license compliance issues, outdated packages, and overall supply chain risks. It provides comprehensive, actionable remediation strategies and detailed risk reports to keep software supply chains secure and compliant.

This skill acts as an expert dependency manager, specializing in planning and executing safe, incremental upgrades for project dependencies. It provides comprehensive risk assessment, compatibility analysis, step-by-step migration guides, and robust testing/rollback plans to ensure system stability during major framework updates.

Runs AgentShield to audit Claude Code configuration files and MCP components for secrets, injection risks, and overly permissive settings, offering CLI, JSON/Markdown/HTML reports, auto-fix, Opus deep analysis, and CI-ready GitHub Action hooks to harden new or existing projects.

This skill acts as a specialized security expert for analyzing project dependencies. It scans dependencies across multiple ecosystems (e.g., npm, pip, Maven) to identify known vulnerabilities, assess associated risks, and generate Software Bill of Materials (SBOMs). It provides comprehensive insights into supply chain security and offers automated strategies for remediation, ensuring compliance and stability during development.

This skill maps observed adversary behaviors, security alerts, and detection rules to the MITRE ATT&CK framework. It is essential for quantifying detection coverage, building ATT&CK heatmaps, tagging SIEM alerts, and prioritizing security controls based on known threat actor playbooks. Use it for comprehensive gap analysis and risk reporting.

This skill utilizes the Shodan API to perform comprehensive IP reputation analysis. It enriches IP addresses by identifying open ports, running services, known vulnerabilities (CVEs), and hosting context. It is crucial for threat intelligence enrichment, incident triage, and security assessments, helping security professionals assess the risk level and potential compromise of exposed infrastructure.

Kubesec is a powerful open-source tool designed to perform comprehensive security risk analysis on Kubernetes resource manifests (YAML/JSON). It automatically detects critical misconfigurations, potential privilege escalation vectors, and deviations from industry security best practices. It provides actionable scoring and hardening recommendations, making it essential for CI/CD pipelines, security auditing, and automated compliance checks.

A comprehensive guide to creating production-grade Product Requirements Documents (PRDs). This skill helps bridge the gap between vague business concepts and concrete technical specifications for modern software systems and AI features. It enforces a structured workflow, ensuring all necessary components—from user stories and success KPIs to technical architecture and risk analysis—are defined.

This tool facilitates comprehensive prior art searches across global patent databases (Google Patents, Espacenet) and academic literature (Google Scholar, arXiv). It guides users through extracting core inventive concepts, performing targeted searches using keywords and IPC/CPC codes, and analyzing the results to assess novelty, overlap risk, and general freedom-to-operate.

This skill generates a comprehensive, structured threat model for any given service or feature using the STRIDE framework. It guides users through identifying critical assets, defining trust boundaries, enumerating specific threats (Spoofing, Tampering, Repudiation, Information Disclosure, Denial of Service, Elevation of Privilege), assessing risk, and proposing concrete mitigation controls. Ideal for security design reviews and documentation.

This advanced skill performs a full-sweep analysis, providing a unified assessment of code quality across multiple dimensions: code decay, architecture integrity, technical debt, and test coverage. It automatically applies safe fixes directly to the codebase, while requiring confirmation for risky changes. It is ideal for comprehensive pre-release code health audits and automated refactoring.