Skill UI

A comprehensive security scanner designed to audit AI agent skills before deployment. It analyzes source code (Python, Bash, JS), detects critical vulnerabilities like command injection, network exfiltration, and unsafe deserialization. Furthermore, it scans markdown files for prompt injection attacks, and assesses dependency supply chain risks, providing a clear PASS/WARN/FAIL verdict and remediation guidance.

Performs static security analysis on GitHub Actions workflows that incorporate AI coding agents (e.g., Claude, Gemini, OpenAI). This skill helps identify critical data flow vulnerabilities, such as where attacker-controlled input can reach AI agent prompts or internal systems via CI/CD pipelines, going beyond simple expression checks.

This comprehensive guide helps users build, audit, and debug robust analytics tracking systems using GA4 and Google Tag Manager. It focuses on establishing a consistent event taxonomy and capturing every meaningful user action—from initial visits to complex conversions—ensuring data integrity for accurate decision-making.

This skill establishes a rigorous framework for building deep architectural context by performing ultra-granular, line-by-line analysis of code. It applies methodologies like First Principles and 5 Whys to maintain a stable, evolving mental model of the entire system, making it essential for pre-vulnerability security auditing, threat modeling, and complex architecture reviews.

A command-line utility designed to search, extract, and analyze data from Burp Suite project files (.burp). It allows users to search request/response headers and bodies using complex regex patterns, extract security audit findings, or gather proxy/site map data. Essential for deep analysis of captured HTTP traffic in web security testing, while providing safeguards against large data overflows.

Analyzes a code repository to generate a recommended, minimal set of read-only shell command permissions for Claude Code's settings.json. It automatically detects the project's tech stack (e.g., Python, Node.js, Go), build tools, and monorepo structure, ensuring a safe and evidence-based security baseline for new projects or auditing existing permissions.

This skill simulates a senior engineer's final, deep audit of an entire codebase before committing or pushing to a remote repository. It systematically checks for junk files, dead code, security vulnerabilities (secrets, injection flaws), and performance bottlenecks (N+1 queries). Use this pre-flight check before any major release or public deployment to ensure maximum code quality and production readiness.

A rigorous, security-focused code review process designed for Pull Requests (PRs), commits, and diffs. It moves beyond general reviews by focusing intensely on high-risk areas such as authentication, cryptography, external calls, and value transfer. The methodology is evidence-based, requiring detailed attack scenario modeling and generating comprehensive, auditable markdown reports to identify overlooked vulnerabilities and regressions.

A specialized review tool for identifying critical performance bottlenecks within Django applications. It focuses on validating issues such as N+1 queries, unbounded querysets, missing database indexes, and write loops. Use this when you suspect database slowdowns or memory exhaustion due to inefficient ORM usage, ensuring findings are provable and actionable.

This specialized AI acts as an auditor for Medical Devices (SaMD) compliance. It reviews critical documentation like Design History Files (DHF) and technical files against major global regulations, including 21 CFR Part 820, IEC 62304, and ISO 13485. It identifies compliance gaps, cites specific regulations, and provides actionable remediation steps to prepare for regulatory audits.

This skill provides comprehensive guidelines and automated checks for auditing and fixing HTML accessibility violations. It covers critical WCAG areas including proper ARIA labeling, full keyboard navigation support, focus management for modals and dialogs, color contrast adherence, and robust form error handling. Use it when developing any interactive UI component or reviewing existing code for accessibility compliance.

This skill guides the process of auditing and correcting critical HTML metadata elements, ensuring optimal performance for search engines and social media sharing. It covers page titles, meta descriptions, canonical URLs, Open Graph tags, Twitter cards, favicons, JSON-LD structured data, and robots directives. Use this when implementing or refining SEO metadata, fixing broken social previews, or setting up structured data.