Skill UI

Helps developers systematically optimize web performance by measuring key metrics, reducing bundle size, deferring scripts, optimizing images and fonts, and tuning caching and CSS for faster Time to Interactive and better Lighthouse scores.

This workflow guides developers through the systematic process of requesting and acting upon code reviews. It emphasizes the core principle of reviewing early and often, providing structured inputs (commits, requirements, implemented features) via a subagent to catch technical issues, ensure compliance with requirements, and maintain high code quality before merging.

Guides systematic load, stress, spike, and soak testing with k6, Artillery, JMeter, Locust, or autocannon, producing SLA-aligned metrics, bottleneck analysis, and CI gates for production-like services.

A comprehensive toolkit for professional security engineers. It covers the entire security lifecycle, including systematic threat modeling using STRIDE, designing secure architectures based on Zero Trust and Defense-in-Depth, conducting detailed vulnerability assessments (SAST/DAST), and implementing secure coding practices. Ideal for security audits, compliance reviews, and building resilient systems.

Provides systematic steps for using Shodan’s web, CLI, and API tools to enumerate exposed hosts, services, and vulnerabilities during penetration tests, with guidance on filtering, scanning, and exporting data for follow-up analysis.

Execute systematic SQL injection vulnerability assessments on web applications using reconnaissance, payload tuning, and exploitation workflows to uncover database flaws, capture evidence, and validate remediation recommendations for authorized security testing.

This skill provides systematic patterns and best practices for transforming slow database queries into lightning-fast operations. It covers advanced topics such as proper indexing strategies, detailed query plan analysis (EXPLAIN), resolving common issues like N+1 problems, and designing highly performant database schemas. Use this when debugging performance bottlenecks, improving application response times, or ensuring scalability for growing datasets.

This skill facilitates systematic threat identification by applying the STRIDE methodology (Spoofing, Tampering, Repudiation, Information Disclosure, Denial of Service, Elevation of Privilege). It is crucial for conducting comprehensive security analyses, performing threat modeling sessions on new or existing system architectures, and creating robust security documentation. Use it when reviewing design decisions, preparing for compliance audits, or training teams on advanced threat identification techniques.

A disciplined debugging ritual that forces you to investigate errors, reproduce issues, and analyze patterns before proposing fixes, ensuring root causes are understood across multi-component systems and minimizing risky guesswork under pressure.

This expert specializes in guiding systematic bug investigation, feature implementation, and collaborative development workflows using GitHub. It covers the entire lifecycle, from initial issue triage and root cause analysis to professional Pull Request creation. Use it to ensure fixes are thoroughly tested, proper branching is maintained, and modern CI/CD best practices are followed, transforming vague reports into production-ready code.

Systematically identify failing tests, group similar errors, and fix them in priority order so CI/CD runs stabilize after refactors or implementation work. Focused verification, dependency-aware ordering, and repeatable workflows ensure a clean `make test` pass.

Guides building systematic, high-quality 3D scenes, animations, and interactive experiences with Three.js by covering setup, geometry, materials, lighting, controls, and responsiveness for WebGL projects.