Skill UI

Analyzes a website’s HTTP security headers to identify missing or misconfigured directives, then produces a graded report with scores and recommendations for strengthening protections against common web threats.

Systematic code maturity assessment using Trail of Bits' 9-category framework, analyzing arithmetic safety, access controls, documentation, MEV risks, testing, and more to deliver evidence-backed scorecards and actionable recommendations.

This skill provides comprehensive methods for managing the entire data lifecycle of LLM observability platforms like Langfuse. Functions include exporting detailed traces and scores, configuring retention policies (e.g., automatic data cleanup), handling GDPR subject requests (access and erasure), and anonymizing Personally Identifiable Information (PII) for secure analytics. Essential for maintaining regulatory compliance in AI applications.

Provides a deep dive and step-by-step scripts for complex Langfuse migrations. Covers comprehensive data export (traces, scores, prompts, datasets) and import processes. This guide is essential for platform transitions, moving between different Langfuse instances, or migrating from observability tools like LangSmith, supporting zero-downtime dual-write patterns.

This guide provides advanced techniques for managing API rate limits (429 errors) and complexity budgets when interacting with the Linear API. It covers reading rate limit headers, implementing exponential backoff with jitter for robust retries, controlling request bursts via token buckets, and optimizing GraphQL queries to minimize complexity scores. Use this when developing reliable integrations that must adhere to strict API quotas.

Optimizes Astro projects with critical CSS inlining, asset compression, font-loading tweaks, third-party deferment, and LCP/image preload strategies aimed at sustaining 95+ Lighthouse scores.

Helps developers systematically optimize web performance by measuring key metrics, reducing bundle size, deferring scripts, optimizing images and fonts, and tuning caching and CSS for faster Time to Interactive and better Lighthouse scores.

This expert skill validates the deployment readiness of Vertex AI Agent Engines. It executes a weighted audit across five critical dimensions: security, monitoring, performance, compliance, and best practices. The output provides a comprehensive 0-100% composite score, a detailed pass/fail report for each check, and a prioritized, actionable remediation plan, ensuring high-quality, production-grade deployments.

A comprehensive development tool for building and managing enterprise-grade transactional email systems. It supports modern React Email and MJML templates, generating production-ready code for major providers like Resend, Postmark, and SendGrid. Key features include multi-provider integration, internationalization (i18n), dark mode, spam score optimization, and advanced analytics tracking. Ideal for setting up new products or migrating legacy email infrastructure.

This skill audits Azure Blob and ADLS storage accounts for critical security misconfigurations. It checks for public access exposure, weak or long-lived SAS tokens, missing encryption at rest, and outdated TLS versions. Using the Python SDK, it generates a detailed, risk-scored report to enhance cloud security posture management and detect potential data exposure risks.

This skill automates the process of vulnerability prioritization by querying the FIRST Exploit Prediction Scoring System (EPSS) API. It calculates the real-world probability of a CVE being exploited within 30 days, providing a crucial risk metric that surpasses traditional CVSS severity scoring. Use it for risk-based vulnerability management, allowing security teams to efficiently triage and remediate the most actively threatened vulnerabilities first.

This skill provides a comprehensive guide to the Common Vulnerability Scoring System (CVSS v4.0), the industry standard for assessing vulnerability severity. It teaches users how to calculate CVSS scores using Base, Threat, and Environmental metrics, and crucially, how to integrate real-world context like EPSS scores and CISA KEV listings for advanced, actionable risk prioritization in security operations.