Skill UI

A structured methodology for validating non-trivial decisions by subjecting them to an adversarial, fresh-context review. This process is crucial when correctness is paramount—such as in production, security-sensitive logic, or complex architecture—by forcing a skeptical examination that aims to disprove assumptions rather than simply approve them.

A comprehensive pre-production audit tool that scans a codebase for critical issues across eight dimensions: security, database, deployment, code quality, AI/LLM usage, dependencies, frontend, and observability. It intercepts deployment commands, forcing users to resolve critical failures before shipping code. The audit is stack-agnostic and provides detailed pass/fail/manual reports.

A comprehensive guide detailing best practices for securing Quarkus applications. It covers robust authentication methods like JWT and OIDC, role-based access control (RBAC) for authorization, mandatory input validation using Bean Validation, preventing SQL injection, and secure secret management. Essential for developers building highly secure Java microservices.

A comprehensive CI/CD pipeline for Quarkus applications, designed to verify code quality and deployment readiness. It covers all phases: build, static code analysis (SonarQube, Checkstyle), rigorous functional testing (Unit, Integration, API), security scanning (OWASP, dependency checks), native image compatibility testing, performance load testing (K6), and container image validation (Trivy, Grype).

Skill Scout is a crucial pre-creation workflow designed to prevent the duplication of effort. Before building a new skill, it systematically searches local, marketplace, GitHub, and web sources. It not only finds potential matches but also rigorously vets them for security, maintenance status, and relevance, providing the user with clear options: Use Existing, Fork/Extend, or Create New.

This skill provides comprehensive code reviews, helping users assess code quality, identify various potential issues (syntax, logic, security, performance), and receive actionable suggestions for improvement. It generates a detailed, structured report covering a summary, found issues, and quality metrics.

This skill runs the Bumblebee scanner on macOS/Linux to perform read-only inventory and exposure checks. It detects compromised packages, developer tools, and host configurations against known security advisories. It is primarily used for supply-chain incident response and vulnerability assessment, providing developers with a clear picture of local system exposure.

This orchestrator acts as a central hub for Go development, managing the complexity of modern software projects. Instead of using single skills, it reads the task context (e.g., building gRPC, debugging a panic) and automatically loads the most relevant combination of specialized skills (like testing, error handling, safety, or security) simultaneously. It ensures comprehensive coverage throughout the entire Go development lifecycle, making it ideal for advanced AI coding agents.

This automated workflow performs a comprehensive review against the AWS Well-Architected Framework (WAF). It scans IaC definitions (Terraform, CloudFormation, CDK) and deployed resources to identify compliance gaps, security risks, and optimization opportunities across six core pillars. Findings are structured and automatically generated as actionable GitHub issues with remediation code examples.