Skill UI

This utility provides key abstractions for integrating with the webiny administration API using GraphQL. It serves as a centralized catalog, guiding developers on how to correctly import and utilize pre-defined GraphQL client structures. By enforcing standardized interfaces and types, it ensures type safety and consistent data interaction patterns across the application's administrative features, streamlining data fetching in complex admin contexts.

This package provides essential service abstractions for building command-line interface (CLI) applications within the Webiny ecosystem. It defines standardized interfaces for core functionalities like logging (LoggerService) and managing user interaction (UiService), ensuring consistency, modularity, and type safety across different CLI projects.

This module provides essential architectural abstractions for structuring complex applications using the Webiny framework. It defines core types for various system components, including Admin panels, APIs, Command Line Interfaces (CLI), Infrastructure management, and Project logic. Developers must utilize these imported abstractions to ensure strict type safety and clear separation of concerns in their code.

The official SDK for interacting with the Webiny Headless CMS and File Manager from external applications (Next.js, Vue, Node.js). It provides a robust TypeScript interface for performing CRUD operations (list, get, create, update, publish), advanced filtering, sorting, and ensuring type safety across complex content models. Use this when building frontends or backends that need to consume Webiny content data.

Logic Lens is an advanced AI skill that performs deep, formal logic-driven code review. Unlike standard linters, it analyzes code for complex issues like race conditions, security vulnerabilities (SQL injection, XSS), type safety flaws, and algorithmic errors across 9 critical risk categories. It is ideal for pre-merge PR reviews, auditing sensitive code paths, and refactoring complex business logic.

A powerful PreToolUse hook designed to act as a safety net during code writing sessions. It automatically scans both file paths and content for 12 common security anti-patterns, including SQL injection, XSS, command injection (Node.js/Python), and unsafe deserialization. It blocks the writing operation and provides immediate warnings, ensuring adherence to secure coding practices when handling sensitive code like authentication or payment logic.

This orchestrator acts as a central hub for Go development, managing the complexity of modern software projects. Instead of using single skills, it reads the task context (e.g., building gRPC, debugging a panic) and automatically loads the most relevant combination of specialized skills (like testing, error handling, safety, or security) simultaneously. It ensures comprehensive coverage throughout the entire Go development lifecycle, making it ideal for advanced AI coding agents.

A critical discipline for managing expenses when integrating paid AI or inference APIs. This guard treats dollar cost as a third complexity dimension, mandating the definition of cost contracts (max calls per run, max budget per run, max budget per day). It enforces best practices for bounding loops, retries, and fan-out, ensuring that code bugs cannot lead to unexpected overspending. Best practice requires configuring hard caps both in the code and at the provider dashboard for defense in depth.

This meta-skill runs three independent code reviewers—safety, test coverage, and style—in parallel over the current uncommitted diff. It then arbitrates a single, authoritative verdict (BLOCK, BLOCK_WITH_OVERRIDE, or PASS_WITH_NOTES) based on strict priority rules, offering a comprehensive second opinion before committing code.

This meta-skill implements a combinator pattern for deep security analysis. It runs three independent gates—policy governance, secret scanning, and audit logging—over a candidate operation. It enforces a strict arbitration rule (Policy DENY > Scanner WARN > ALLOW) to provide a robust, multi-layered verdict, making it ideal for reviewing critical code changes or environment modifications for safety compliance.

This skill converts a single static image (PNG/JPG) into a short, animated MP4 video using the Ken-Burns zoom effect. It is specifically designed as a robust fallback mechanism for automated video workflows. If an upstream AI video generation step fails—often due to content moderation flags (e.g., facial recognition or audio safety issues)—this animator ensures a valid placeholder clip is generated. This allows downstream merging steps to complete the deliverable without interruption, maintaining the narrative flow.

This skill allows users to query the current state of various AWS resources (including EC2, S3, Lambda, RDS, VPC, etc.) using natural language. It translates user intent into strictly read-only AWS CLI commands (e.g., `describe-*`, `list-*`). Crucially, this tool can only view data and is contractually incapable of performing any write, modify, delete, or mutation actions, ensuring maximum safety.