Skill UI

This tool audits the activation metadata of coding skills used by AI agents. It grades skills (A-F) based on description clarity, simulates which skill a prompt will trigger, and identifies metadata collisions where one skill might silently overshadow another. It is essential for ensuring robust, predictable, and reliable AI agent behavior during development and CI processes.

This meta-skill is designed exclusively to orchestrate and formalize complex workflows composed of multiple existing skills. It acts as a comprehensive governance layer, guiding the user through intent clarification, trigger collision checks, linting, and proposal persistence. Use it when proposing a multi-step, integrated solution, but do not use it for simple standalone skill requests.

This skill provides deep security review for GitHub Actions workflow files. It focuses on the unique Actions threat model—identifying vulnerabilities like script injection via ${{ }} interpolation, privilege escalation from triggers (e.g., pull_request_target), and ensuring least-privilege permissions for CI/CD pipelines. Use it to audit, secure, or harden existing workflows, preventing attacks from untrusted inputs and supply chain risks.

Programmatically manage your entire contact database within Mailtrap. This guide covers using the API to create, update, delete, and bulk import contacts. It is essential for synchronizing contact data with CRMs, triggering custom automation events, building targeted segments, or performing large-scale list cleanups.

This skill automates the entire phishing incident response workflow using the Splunk SOAR REST API. It parses suspicious email headers and bodies to extract artifacts (URLs, IPs, sender details), creates a structured incident container, triggers a comprehensive automated investigation playbook, and compiles a final verdict report for security teams.

This skill guides the deployment and strategic use of honeytokens and canarytokens (decoy credentials, files, URLs, etc.). These high-fidelity decoys are designed to detect unauthorized access, insider threats, or adversary reconnaissance by triggering alerts upon any interaction, providing early warning deep within the kill chain.

This skill acts as a comprehensive maintenance orchestrator for the brooks-lint plugin repository. It executes a rigorous, sequential subagent pipeline—including authoring, evaluation, QA, trigger auditing, and release management. Use this when adding, editing, or updating skills to ensure all related components (manifests, README, CHANGELOG) are synchronized and adhere to strict quality gates throughout the development lifecycle.

This skill is designed to identify subtle and complex logic bugs within a single code file or function. It employs a semi-formal execution tracing methodology, systematically breaking down the suspected bug into five stages: Premises (expected state), Trace (execution path), Divergence (actual deviation), Trigger (reproduction case), and Remedy (fix). It is ideal for scenarios where users suspect code is wrong but cannot specify a concrete failure point.

This library provides a comprehensive framework for managing bounded AI workflows (loops). Users can analyze existing codebases or work histories to discover opportunities for repeating, automated agent processes. It guides the user through finding published templates, auditing and repairing weak agents, adapting parameters, or crafting entirely new, robust automation designs, ensuring clear triggers, verification, and mandatory stopping conditions.