Skill UI

This skill establishes a rigorous framework for building deep architectural context by performing ultra-granular, line-by-line analysis of code. It applies methodologies like First Principles and 5 Whys to maintain a stable, evolving mental model of the entire system, making it essential for pre-vulnerability security auditing, threat modeling, and complex architecture reviews.

A command-line utility designed to search, extract, and analyze data from Burp Suite project files (.burp). It allows users to search request/response headers and bodies using complex regex patterns, extract security audit findings, or gather proxy/site map data. Essential for deep analysis of captured HTTP traffic in web security testing, while providing safeguards against large data overflows.

Analyzes a code repository to generate a recommended, minimal set of read-only shell command permissions for Claude Code's settings.json. It automatically detects the project's tech stack (e.g., Python, Node.js, Go), build tools, and monorepo structure, ensuring a safe and evidence-based security baseline for new projects or auditing existing permissions.

This skill simulates a senior engineer's final, deep audit of an entire codebase before committing or pushing to a remote repository. It systematically checks for junk files, dead code, security vulnerabilities (secrets, injection flaws), and performance bottlenecks (N+1 queries). Use this pre-flight check before any major release or public deployment to ensure maximum code quality and production readiness.

A rigorous, security-focused code review process designed for Pull Requests (PRs), commits, and diffs. It moves beyond general reviews by focusing intensely on high-risk areas such as authentication, cryptography, external calls, and value transfer. The methodology is evidence-based, requiring detailed attack scenario modeling and generating comprehensive, auditable markdown reports to identify overlooked vulnerabilities and regressions.

A specialized review tool for identifying critical performance bottlenecks within Django applications. It focuses on validating issues such as N+1 queries, unbounded querysets, missing database indexes, and write loops. Use this when you suspect database slowdowns or memory exhaustion due to inefficient ORM usage, ensuring findings are provable and actionable.

Manage long-lived cloud agents via observability, secure boundaries, lifecycle controls, and controlled rollouts, ensuring reliable recovery, auditability, and integration with PM2/systemd/CI-CD workflows.

This specialized AI acts as an auditor for Medical Devices (SaMD) compliance. It reviews critical documentation like Design History Files (DHF) and technical files against major global regulations, including 21 CFR Part 820, IEC 62304, and ISO 13485. It identifies compliance gaps, cites specific regulations, and provides actionable remediation steps to prepare for regulatory audits.

A comprehensive skill for auditing and fixing common HTML accessibility issues, ensuring compliance with WCAG guidelines. It covers critical areas such as ARIA labels, keyboard navigation, focus management, color contrast, and form validation. Use this when developing complex UI components, forms, or any interactive element to guarantee usability for all users.

This skill provides comprehensive guidelines for auditing and correcting critical HTML metadata. It covers page titles, descriptions, canonical URLs, Open Graph tags, Twitter cards, favicons, and structured data (JSON-LD). Use this process when adding or reviewing SEO and social metadata to ensure optimal search visibility and shareable content for web pages.

This skill provides a comprehensive guide to auditing and fixing common animation performance issues in web applications, including layout thrashing, jank, and inefficient scroll-linked motion. It outlines critical best practices across CSS and JavaScript, covering rendering steps (layout, paint, composite) and best practices for achieving smooth, high-performance user interfaces.

A rigorous framework designed to audit GitHub Actions workflows for exploitable security vulnerabilities. This skill focuses strictly on real-world attack patterns, requiring every identified finding to include a concrete exploitation scenario (Entry Point, Payload, Impact). Ideal for securing CI/CD pipelines against external attackers.