Skill UI

Orchestrates an exhaustive, multi-dimensional code review process by coordinating specialized agents (e.g., security, performance, quality, architecture). This workflow covers code quality, architectural integrity, security vulnerabilities (OWASP Top 10), performance bottlenecks, and test coverage, providing consolidated, actionable feedback and remediation guidance.

Scans Cosmos SDK chains and CosmWasm contracts for nine consensus-critical vulnerabilities such as non-determinism, incorrect GetSigners, and ABCI panics, returning findings and fix guidance when auditing or preparing new launches.

This tool integrates advanced AI capabilities into the entire Git lifecycle within the IDE. It assists developers by automatically generating standardized commit messages from staged diffs, providing deep code review using the @Git context (checking for vulnerabilities, missing handling), and offering systematic guidance for resolving complex merge conflicts. It streamlines version control and elevates code quality.

A powerful tool for comprehensive, offline dependency auditing across 8+ programming ecosystems (e.g., Node, Python, Go, Rust). It identifies critical CVE vulnerabilities, license conflicts, and calculates safe upgrade paths, making it essential for pre-release security checks, legal compliance reviews, and major version migrations.

This skill functions as a specialized dependency security expert. It analyzes project dependencies to identify critical security vulnerabilities, licensing compliance issues, and outdated packages. It provides comprehensive, actionable remediation strategies to strengthen supply chain security.

Detect SQL injection weaknesses by running the sql-injection-detector plugin against codebases, identifying risky queries, and providing remediation guidance to secure applications.

Run targeted file path traversal assessments to find directory traversal and LFI vulnerabilities across web parameters, verify exploitation payloads, and document sensitive files exposed via automated fuzzing and manual checks.

Performs a structured, multi-phase audit on local branch changes (diffs) to identify security vulnerabilities, bugs, and code quality issues. It systematically checks for common risks like Injection (SQL, XSS), Broken Authentication, IDOR, CSRF, and business logic flaws, providing detailed severity, evidence, and suggested fixes. Ideal for pre-merge code reviews and security audits.

Scans infrastructure-as-code, application, and system configurations via the security-misconfiguration-finder plugin to expose vulnerabilities and compliance gaps, enabling proactive remediation before deployment.

Scans Android APKs for Firebase misconfigurations, testing databases, storage, authentication, and cloud functions to surface vulnerabilities during mobile security audits.

This skill provides a structured methodology for reviewing code commits intended to fix security vulnerabilities or address audit findings. It ensures that the original root cause is properly resolved, verifies the fix hasn't introduced new bugs or vulnerabilities (regressions), and validates the overall completeness of the remediation effort. Ideal for security-critical code reviews.

This skill acts as a comprehensive security scanner specializing in detecting Cross-Site Scripting (XSS) vulnerabilities in client-side code. It performs static analysis across React, Vue, Angular, and vanilla JavaScript, specifically identifying unsafe practices like direct HTML manipulation (innerHTML), raw rendering (v-html), and insecure URL handling. Use it when auditing frontend code for security flaws and needing best practices for secure coding.