Skill UI

Guides you through building custom Semgrep rules with a testing-first workflow, AST analysis, and taint-mode preference to catch vulnerabilities or bug patterns while steering clear of overly broad or unverified shortcuts.

This skill provides a comprehensive guide for creating production-quality custom Semgrep rules. It teaches best practices for detecting security vulnerabilities, enforcing robust coding standards, and identifying specific bug patterns. By emphasizing a test-first approach and utilizing advanced techniques like taint mode, users can write highly accurate static analysis rules that drastically reduce false positives.

This comprehensive guide covers essential security patterns for Perl development, addressing common vulnerabilities like SQL Injection, XSS, Path Traversal, and Shell Injection. It details best practices including using Perl's Taint Mode, implementing strict allow-list validation, performing safe file operations, and executing external commands securely to ensure robust and resilient applications.

This structured prompt guides an AI model to proactively analyze a user's question and systematically list all necessary files for accurate answering. It forces the AI to categorize required context into 'Must See' (critical), 'Should See' (helpful), 'Already Have,' and 'Uncertainties.' Ideal for complex coding tasks, debugging, or feature implementation that spans multiple codebase files.

This comprehensive guide covers essential security patterns for Perl development, addressing common vulnerabilities like SQL Injection, XSS, Path Traversal, and Shell Injection. It details best practices including using Perl's Taint Mode, implementing strict allow-list validation, performing safe file operations, and executing external commands securely to ensure robust and resilient applications.

A comprehensive guide for designing, auditing, and reporting advanced statistical and causal inference experiments. It emphasizes moving beyond simple accuracy metrics to quantify uncertainty, model robustness, and causal mechanisms. Covers metrics like coverage, KL divergence, and regret, and outlines best practices for seeding, compute fairness, and creating standardized reporting blocks (e.g., UAI standards).

This skill creates custom Semgrep rules for detecting security vulnerabilities, bug patterns, and code patterns. It guides users through a strict workflow including test-first development, AST analysis, and validation. Ideal for building static analysis detections, enforcing coding standards, and identifying data flow issues using taint mode.