Skill UI

MolyKit is a comprehensive toolkit designed for building robust, cross-platform AI chat applications. It provides core utilities for integrating large language models (LLMs) like OpenAI, handling real-time SSE streaming responses, and managing complex cross-platform asynchronous patterns (PlatformSend, spawn()). The kit includes ready-to-use widgets for messages, prompt inputs, and avatars, making it ideal for developers creating sophisticated, multilingual chat experiences.

A comprehensive, multi-phase security audit tool designed to evaluate AI agent skills before deployment. It detects critical vulnerabilities, including prompt injection, malicious code, excessive permissions, secret exposure, and supply chain risks, ensuring the integrity and safety of your agent environment.

Varlock is a secure-by-default CLI tool designed to manage and validate sensitive environment variables and secrets during coding sessions, CI/CD, and development workflows. It ensures that credentials, API keys, and passwords are never exposed in logs, terminal output, error messages, or the assistant's context, providing a critical layer of security for modern development practices.

Provides architecture design support including ADR templates, system design checklists, scalability assessment prompts, architecture patterns, and API guidance so engineers can document decisions and ensure reliability during technical design phases.

A comprehensive operational CISO tool designed for total governance of enterprise credentials and secrets. It discovers, classifies, and protects all types of sensitive data—including API keys, tokens, service accounts, and passwords—across all providers (AWS, Google Cloud, OpenAI, etc.). It monitors code, Git history, CI/CD pipelines, containers, logs, and backups to prevent exposure and enforce least privilege principles.

A powerful code review utility designed for SwiftUI projects. It comprehensively analyzes code quality, ensuring adherence to modern Swift APIs, optimal performance, robust data flow management, and compliance with Apple's Human Interface Guidelines and accessibility standards (like VoiceOver and Dynamic Type). Use this tool when writing, refactoring, or reviewing complex SwiftUI implementations to maintain high code hygiene and maintainability.

A comprehensive suite of 25 advanced agent skills designed for modern software development and platform operations. These tools cover the entire development lifecycle, including multi-agent architecture design, robust CI/CD pipelines, database schema management, performance profiling, observability setup, and security auditing. Ideal for complex system integration and platform engineering teams.

A suite of 12 production-ready compliance agents and tools designed specifically for HealthTech and MedTech organizations. These skills cover critical international regulations and standards, including ISO 13485, EU MDR, FDA 510(k)/PMA, ISO 27001, GDPR, and risk management (ISO 14971). Use them to automate compliance tasks, manage documentation, conduct audits, and ensure adherence to global medical device standards.

A comprehensive collection of six expert-level, structured workflows designed to elevate AI assistance from ad-hoc querying to repeatable, production-grade engineering practices. Users can evaluate prompts, design RAG architectures, plan context budgets, run security audits, build eval harnesses, and coach product strategy.

A comprehensive design specification detailing 98 rules for building Command Line Interface (CLI) tools that are safe, reliable, and easily consumable by AI agents. It covers structured JSON output formats, standardized error handling (to stderr), robust input contracts, safety guardrails (e.g., preventing path traversal), and tiered compliance levels (Agent-Friendly, Agent-Ready, Agent-Native) for seamless integration into AI workflows.

Guides security architects through designing and deploying a continuous CSPM program across AWS, Azure, and GCP, covering tool selection, policy baselines, automation, and SOC integration to monitor misconfigurations and prioritize remediation.

This tool is designed for security professionals to test for Server-Side Request Forgery (SSRF) vulnerabilities. It systematically probes user-controllable URL parameters to identify access to internal network services, cloud metadata endpoints (AWS/GCP/Azure), and restricted local resources. It supports various payload techniques, including protocol handlers (gopher, file), IP encoding, and DNS rebinding, making it essential for thorough security assessments and penetration testing.