Skill UI

Runs AgentShield to audit Claude Code configuration files and MCP components for secrets, injection risks, and overly permissive settings, offering CLI, JSON/Markdown/HTML reports, auto-fix, Opus deep analysis, and CI-ready GitHub Action hooks to harden new or existing projects.

This skill acts as a specialized security expert for analyzing project dependencies. It scans dependencies across multiple ecosystems (e.g., npm, pip, Maven) to identify known vulnerabilities, assess associated risks, and generate Software Bill of Materials (SBOMs). It provides comprehensive insights into supply chain security and offers automated strategies for remediation, ensuring compliance and stability during development.

This skill implements a robust, multi-layered security hardening process based on the Defense-in-Depth strategy and DevSecOps principles. It coordinates specialized agents to perform comprehensive security assessments (SAST, DAST, SBOM, Threat Modeling), identify critical vulnerabilities, and execute layered remediation. The process covers application code, backend APIs, frontend components, and mobile platforms, ensuring a resilient security posture across the entire development lifecycle.

Perform Static Application Security Testing (SAST) to identify critical security vulnerabilities, including SQL injection, XSS, hardcoded secrets, and path traversal, directly from source code. Supports multi-language ecosystems (Python, JavaScript, Java, Go, etc.) and major frameworks, enabling crucial pre-deployment security validation and compliance checks (OWASP, PCI-DSS).

Guides authorized practitioners through Nmap, Masscan, Nessus, OpenVAS, Burp Suite, and OWASP ZAP for network discovery, vulnerability assessment, web application testing, wireless security, and compliance reporting across diverse environments.

Runs Semgrep static analysis with auto language detection, parallel Task subagents, Semgrep Pro checks, and configurable “run all” or “important only” modes to audit codebases for vulnerabilities and bug patterns.

Senior Architect orchestrates architecture decision workflows, generates Mermaid/PlantUML/ASCII diagrams, analyzes dependencies, and evaluates tech stacks to help teams choose scalable systems and document design choices.

A comprehensive toolset for the full backend development lifecycle. This suite enables developers to scaffold API routes from OpenAPI specifications, manage complex database migrations and optimization (PostgreSQL), and perform rigorous load/performance testing. It supports building robust microservices, securing REST APIs, and ensuring system scalability.

This comprehensive guide details the expertise needed for a Senior Data Engineer. It covers building, optimizing, and governing scalable data pipelines and robust ETL/ELT systems using modern tools like Spark, Kafka, Airflow, and dbt. Includes decision frameworks for architecting data solutions (Batch vs Streaming, Lakehouse vs Warehouse) and implementing advanced data modeling patterns.

This comprehensive toolkit provides end-to-end DevOps automation capabilities. It scaffolds CI/CD pipelines (GitHub Actions, CircleCI), generates robust Infrastructure as Code (IaC) modules using Terraform for major clouds (AWS, GCP, Azure), and manages complex Kubernetes deployments (Blue/Green, Rolling). Ideal for automating infrastructure setup, application deployment, and drift management in multi-cloud environments.

A comprehensive skill set for modern frontend development using React, Next.js, TypeScript, and Tailwind CSS. It covers automated project scaffolding, component generation (including hooks and stories), and critical bundle analysis. Use this to enforce best practices, optimize performance, and maintain high code quality in large-scale web applications.

A comprehensive toolkit for the full software development lifecycle. It guides stack selection using a detailed decision engine, automatically scaffolds complex boilerplate projects across multiple popular stacks (Next.js, MERN, FastAPI, Django), and provides deep code quality analysis. Features include security vulnerability detection, complexity scoring, and dependency auditing, ensuring high-quality development from the start.