Skill UI

Master the Zod library for defining robust, type-safe schemas in TypeScript. This expert covers advanced validation techniques, including primitives, objects, unions, and discriminated unions. It specializes in type inference (`z.infer`), data coercion, complex refinements, and seamless integration with modern frameworks like React Hook Form, Next.js, and tRPC, ensuring consistency across your application state and API inputs.

An enterprise-grade agent designed to manage the entire lifecycle of skills within an ecosystem. It handles installation, deep validation (including 10 security checks), registration, and post-installation verification. Features include automatic repair, rollback, dry-run simulation, and a comprehensive status dashboard, ensuring maximum redundancy and system integrity.

This skill provides expertise in TanStack Query (React Query), a powerful tool for asynchronous state management in modern React and Next.js applications. It covers advanced patterns like data fetching, cache invalidation, optimistic updates, and handling SSR hydration, ensuring highly performant and reliable data layers.

Intelligent multi-strategy web scraper that selects between static WebFetch, browser automation, curl/bash, and WebSearch paths to extract structured tables, lists, pricing, and other data, with pagination handling, validation confidence, transforms, and CSV/JSON output for monitoring workflows.

This comprehensive guide covers essential security patterns for Perl development, addressing common vulnerabilities like SQL Injection, XSS, Path Traversal, and Shell Injection. It details best practices including using Perl's Taint Mode, implementing strict allow-list validation, performing safe file operations, and executing external commands securely to ensure robust and resilient applications.

Validates SKILL.md files against the agentskills specification and Anthropic best practices, catching structure, semantic, naming, and quality issues in a single read-only pass before publishing or debugging skills.

This comprehensive tool validates Claude Code plugins against official Anthropic specifications and internal enterprise standards. It performs two main types of checks: structural validation (checking `plugin.json` fields, file references, and permissions) and content validation (conducting deep grading using `SKILL.md`). Use this when building, auditing, or preparing plugins for marketplace submission to ensure compliance and quality.

This skill provides a comprehensive workflow for building vendor-agnostic detection rules using the Sigma format. It empowers security operations center (SOC) engineers to translate raw threat intelligence and MITRE ATT&CK techniques into standardized, portable detection logic. The process guides users through rule validation and conversion into specific queries for major SIEM platforms, including Splunk, Elastic, and Microsoft Sentinel, ensuring robust detection coverage.

This skill outlines a comprehensive, structured workflow for managing Microsoft Patch Tuesday security updates. It covers the entire lifecycle, from initial vulnerability triage and risk assessment to testing, staged deployment (Pilot, Production Rings), and final validation, ensuring compliance with risk-based remediation SLAs.

This utility provides a comprehensive framework for proactive threat hunting, focusing on detecting advanced and suspicious PowerShell execution patterns. It covers common attacker techniques such as encoded command usage, download cradles (IEX), AMSI bypass attempts, and constrained language mode evasion. It is designed for security analysts during incident response and threat intelligence validation, requiring EDR and SIEM telemetry.

A comprehensive framework for penetration testing APIs, designed to detect and exploit critical injection flaws. It covers SQL injection (SQLi), NoSQL injection, OS command injection, LDAP injection, and Server-Side Request Forgery (SSRF). This skill guides the testing of all input vectors—including path parameters, headers, query strings, and request bodies—to assess input validation and backend security posture against industry standards like OWASP.

A comprehensive skill for assessing mobile applications (Android and iOS) for vulnerabilities related to deep links, custom URI schemes, and intent handling. This skill identifies risks such as unauthorized access, data injection, intent hijacking, and improper validation of App Links or Universal Links, crucial for robust mobile security testing.