Skill UI

This skill provides a comprehensive methodology for discovering and exploiting broken link hijacking vulnerabilities. By spidering a target site and extracting all external scripts, domains, and references, the skill checks the DNS and domain registration status. It is crucial for conducting subdomain takeover testing, supply-chain security reviews of third-party resources, and advanced bug bounty hunting.

This skill provides a systematic cryptographic audit tool designed to review applications for security vulnerabilities. It scans source code and configuration files to detect weak hashing algorithms (MD5, SHA-1), insecure cipher modes (ECB), hardcoded secrets, and deprecated protocols like TLS 1.0. Essential for security assessments, compliance checks, and maintaining secure coding practices.

Vibers provides a human code review workflow for AI-generated GitHub projects; add the collaborator, GitHub Action, and commit guidance to receive spec- and security-focused feedback plus follow-up PR fixes.

This comprehensive workflow guides the design, optimization, and deployment of scalable, cost-effective Google Cloud Platform (GCP) architectures for both startups and large enterprises. It covers the full lifecycle, from gathering detailed requirements (compliance, SLA) and recommending optimal patterns (Serverless, GKE, Data Pipelines) to estimating costs, generating Infrastructure as Code (IaC) using Terraform, setting up CI/CD pipelines, and completing a thorough security review.

A comprehensive guide detailing security patterns and audit checklists for Automated Market Maker (AMM) smart contracts in DeFi. Covers critical vulnerabilities such as flash loans, slippage, reentrancy attacks, price manipulation, and integer overflow/underflow. Essential for reviewing major DeFi protocols like Uniswap.

This skill provides comprehensive automation for managing GitHub workflows across the entire development lifecycle. It covers detailed issue triage, PR review status checks, CI/CD failure debugging, official release management, and security monitoring using the GitHub CLI. Ideal for maintaining open-source project health and streamlining team development processes.

Automates CI/CD pipeline setup, from linting and type checks to integration, E2E, security, and deployment stages, plus feedback loops for AI agents and preview deployments.

Guides structured reviews for Flutter/Dart pull or merge requests, checking correctness, security, style, tests, and documentation while verifying branch scope and CI health.

This skill guides users through advanced security auditing and best practices for Golang development. It acts as a senior security engineer, focusing on defense in depth by analyzing critical areas like injection patterns, cryptography, secrets management, and authorization flaws. It supports full codebase audits (using STRIDE and DREAD scoring) and precise PR vulnerability reviews, ensuring secure and resilient Go applications.

Persona for IT administrators to monitor Workspace security, configure Drive sharing policies, and run workflows for standup reporting and audit review while emphasizing dry-run checks and auth-status verification.

This framework provides a rigorous, multi-dimensional guide for conducting code reviews. It evaluates five critical axes: correctness, readability, architecture, security, and performance. Use this process before merging any code change, especially when reviewing PRs, refactoring, or evaluating code produced by AI agents, to ensure continuous improvement and maintain high code health.

A comprehensive code review tool designed for C#/.NET projects. It evaluates the implementation of key design patterns (Command, Factory, Repository) and adherence to SOLID principles. The review covers architecture, best practices (async/await, logging), security, testability, and clean code principles, providing actionable recommendations for improvement.