Skill UI

A comprehensive tool designed to audit the quality, relevance, and redundancy of all Claude skills and commands. It supports two modes: a rapid incremental scan for recently changed skills, and a deep full stocktake using AI judgment and expert checklists to assess viability (Keep, Improve, Update, Retire, Merge).

A comprehensive meta-skill for validating, testing, and scoring the quality of technical skills within an ecosystem. It performs deep structural checks (SKILL.md compliance), executes Python scripts for syntax, runtime, and output validation, and generates multi-dimensional quality scores using letter grades and tier recommendations. Ideal for new skill authorship, auditing existing components, or integrating rigorous QA gates into CI/CD pipelines.

This skill guides the mastery of smart contract security best practices for Solidity. It is essential for writing robust, secure, and efficient contracts, auditing existing code for common vulnerabilities (such as reentrancy, overflow, and access control issues), and implementing secure DeFi protocols. It focuses on preventing common attack vectors while optimizing gas usage.

Verifies that blockchain code precisely implements documented specifications by comparing logic, invariants, flows, and assumptions against whitepapers or design documents, flagging undocumented behavior, mismatches, and compliance gaps during audit engagements.

This skill provides a structured approach to systematically identify security threats by applying the STRIDE methodology (Spoofing, Tampering, Repudiation, Information Disclosure, Denial of Service, Elevation of Privilege). It is crucial for conducting thorough threat modeling sessions, analyzing system architectures, reviewing security design decisions, and creating robust security documentation for compliance and auditing purposes.

Scans Substrate/Polkadot FRAME pallets for seven critical vulnerabilities such as arithmetic overflow, panic DoS, incorrect weights, unsigned validation issues, bad randomness, and origin flaws, making it ideal for runtime audits and pre-launch security assessments.

This guide provides comprehensive, actionable methods to audit and significantly reduce Supabase operational costs. It covers advanced database tuning (vacuuming, index cleanup, bloat management), efficient storage lifecycle management, connection pooling strategies, and optimal plan selection. Use this when analyzing high billing reports, identifying resource waste, or implementing robust cost-saving measures in a cloud environment.

Implement comprehensive GDPR and CCPA compliance measures within Supabase. This skill guides developers on setting up Row Level Security (RLS) for tenant isolation, managing PII columns, executing right-to-deletion workflows, auditing sensitive data, and establishing automated data retention policies. Essential for any SaaS application handling regulated user data.

A comprehensive guide detailing the most common and critical mistakes when developing with Supabase. Covers severe security issues (like exposing service role keys or missing RLS), data integrity failures, and performance bottlenecks (connection pooling, N+1 queries). Essential for code review, onboarding new developers, or auditing existing Supabase projects to ensure secure and robust applications.

A comprehensive guardrail system for enforcing organizational governance across Supabase projects. It provides reusable RLS policy templates, strict naming conventions, CI-checked migration processes, cost alert configurations, and security audit scripts. Use this to ensure development consistency, security, and cost control at scale.

A comprehensive guide to implementing enterprise-grade Supabase architectures. This skill covers advanced patterns like monorepo layout, multi-tenant Row Level Security (RLS) isolation, microservices integration, and operational patterns (caching, queues, audit logging). Use this when building complex, scalable, and production-ready applications on Supabase.

This skill provides a comprehensive guide to securing Supabase projects. It covers critical security measures, including proper separation of anonymous and service role keys, enforcing Row Level Security (RLS) on all tables, and hardening the API surface. Use this when setting up a new project, performing security audits, or implementing robust data access control policies.