Skill UI

This skill provides comprehensive security auditing for Model Context Protocol (MCP) servers and their associated tool metadata. It is designed to detect sophisticated supply chain attacks, including tool poisoning (indirect prompt injection), Server-Side Request Forgery (SSRF), tool shadowing, and unauthenticated exposure. It is essential for securing AI agent stacks before integrating new tools or during CI/CD processes.

NetExec is a powerful, protocol-oriented tool for penetration testing, designed for assessing and exploiting Windows and Active Directory environments. It facilitates lateral movement by authenticating over protocols like SMB, WinRM, LDAP, and MSSQL. Key functions include password spraying, comprehensive network enumeration, command execution, and dumping critical credentials (SAM, LSA, NTDS) during post-exploitation phases.

This guide provides a comprehensive reference on Agent Skills, a standardized and powerful method for providing structured context, workflows, and tools to Large Language Models (LLMs). It details the anatomy of the SKILL.md file, the three-stage progressive disclosure loading process, and best practices for creating both capability (tool-based) and process (workflow-based) primitives. Use this resource when designing, reviewing, or debugging agent-driven applications to ensure reliable and context-efficient performance.

This utility provides garbage collection for Claude Code configurations. It periodically scans various directories—including skills, memory files, hooks, permissions, and caches—to identify orphaned, stale, or redundant configuration items. Crucially, the process is designed to be non-destructive, always requiring explicit human confirmation for every deletion to ensure a safe, audited cleanup process.

This tool automates the creation of a standard directory structure for a Domain-Driven Design (DDD) Bounded Context. It is essential when starting a new subdomain, separating a large monolithic application, or setting up a fresh, well-organized module structure, adhering to best practices for domain, application, and infrastructure layers.

A comprehensive tool designed to audit and validate the structural integrity of a Domain-Driven Design (DDD) codebase. It detects cross-context import violations, checks for violations of aggregate invariant rules, and enforces naming conventions for domain events and repositories. Ideal for CI/CD gates and pre-merge code reviews to prevent architectural decay.

This comprehensive tool guides developers through the entire plugin ecosystem, helping them find and recommend the optimal plugins for any given workflow or task. It covers core coordination, multi-agent collaboration, advanced memory management (Vector DB, RAG), architectural design (ADR/DDD), security auditing, and modern development methodologies. Use it when starting a new project or optimizing existing development pipelines.

A specialized audit skill designed to identify and quantify resource leakage, excessive costs, and billing vulnerabilities within complex development tool workflows (e.g., GitHub Apps). It traces webhook events, queue processing, and model calls to pinpoint where token burn or unauthorized resource usage is occurring, ensuring cost efficiency and clean billing practices.

Flox is a declarative, Nix-based environment manager designed to create perfectly reproducible development environments. It handles system-level dependencies (like compilers, databases, and native libraries) and ensures that complex toolchains across multiple languages (Python, Node.js, Go, etc.) function identically across macOS and Linux. Ideal for solving 'works on my machine' issues and onboarding new team members instantly.

GateGuard is a mandatory pre-tool-use hook designed to significantly enhance the reliability and safety of LLM-generated code and actions. Instead of relying on self-evaluation, it forces the model to perform concrete, verifiable investigations—such as listing all imported files, checking data schemas, or detailing rollback procedures—before any write or destructive command execution. It establishes a three-stage gate (Deny, Force, Allow) to prevent hallucination and ensure context awareness in complex coding environments.

Performs a pure, read-only static security scan of a harness's declared MCP surfaces. It analyzes policy, permission, and dependency issues by reading manifest files (e.g., .mcp/servers.json and .harness/claims.json) without executing any underlying tools. Designed for integration into CI/CD pipelines to enforce security policies and ensure compliance.

This tool is designed to analyze source code by extracting core entities (classes, functions, modules, types) and mapping their complex relationships (imports, inheritance, calls, dependencies). It constructs a comprehensive Knowledge Graph (KG) in AgentDB. This is essential for detailed dependency analysis, understanding large codebase structures, and performing accurate impact assessments.