Skill UI

An expert skill designed to author comprehensive, implementation-ready design system guidelines for editorial content like books, magazines, and reports. It structures visual language across tokens, typography, spacing, and component states, while rigorously adhering to WCAG accessibility standards and defining clear content tone and anti-patterns for developers and designers.

Acts as an expert guide for generating comprehensive, implementation-ready design system documentation. It enforces strict best practices covering visual foundations, component anatomy, accessibility standards (WCAG 2.2 AA), and structured writing workflows, ensuring consistency and clarity for engineering and design teams.

This comprehensive guide establishes the standards for a modern, minimalist, and highly functional design system. It defines foundational elements like typography, color tokens, and spacing scales, while strictly adhering to WCAG 2.2 AA accessibility. It provides structured workflows, detailed component rules, and quality gates for both designers and engineers to ensure consistent, usable, and aesthetically pleasing product experiences.

This comprehensive guide provides expert knowledge on implementing structured data and schema markup using schema.org standards. Learn how to correctly use JSON-LD to help search engines understand your content, enabling rich results like star ratings, FAQs, and product details. It covers best practices, common schema types (Article, Product, FAQPage), and essential validation methods for maximizing search visibility.

This skill audits a live web page against WCAG standards. It precisely locates accessibility violations, providing a detailed, selector-grounded worklist of necessary fixes without making any changes to the code. Ideal for QA engineers and developers needing a comprehensive, non-destructive report of broken accessibility elements.

Mason is the dedicated builder agent responsible for writing clean, functional, and production-ready code. He strictly adheres to architectural blueprints and defined checklists, ensuring every feature is implemented with high code quality standards, including comprehensive error handling, security best practices, and testability. Ideal for the core development phase of complex projects.

A comprehensive guide covering modern Dart programming standards and best practices. It details techniques for null safety, efficient collection manipulation, asynchronous programming (Futures and Streams), immutable class design, and optimizing Flutter widgets, ensuring developers write clean, performant, and bug-resistant code.

A comprehensive reference guide detailing modern and idiomatic PHP coding standards. It covers best practices across various topics, including type safety (strict typing, union types), object-oriented programming (constructor promotion, enums, match expressions), efficient array handling, robust error handling (exceptions), and modern string manipulation functions. Ideal for developers looking to upgrade legacy PHP code to modern, clean, and performant standards.

This tool provides a comprehensive security assessment framework for Retrieval-Augmented Generation (RAG) systems and vector databases. It tests critical vulnerabilities such as embedding inversion, cross-tenant data leakage, knowledge-base poisoning, and retrieval manipulation, aligning with OWASP LLM08:2025 standards. It is essential for validating the security posture of multi-tenant and vector-search applications.

This skill guides the end-to-end process of supply chain security by generating standards-compliant Software Bills of Materials (SBOMs) in CycloneDX and SPDX formats. It details using Syft to create inventories, correlating them with vulnerability intelligence via Grype, enforcing CI/CD gates based on severity, and establishing verifiable provenance using Cosign signing. Essential for modern DevSecOps practices.

This skill guides the verification of software build provenance and signatures using industry standards like SLSA and Sigstore. It leverages tools like cosign and slsa-verifier to enforce keyless OIDC identity and confirm that artifacts were built by trusted sources without tampering. It is essential for hardening CI/CD pipelines and securing the entire software supply chain against advanced attacks.

A portable CI gate designed to enforce Core Web Vitals (LCP, CLS, INP) budgets and category score floors on production frontend builds. It integrates into CI pipelines to automatically block pull requests if the performance metrics fall below defined Google standards, ensuring consistently fast and reliable user experiences.