Skill UI

A professional-grade 'Living Pipeline' that integrates advanced AI reasoning into the SDLC. It provides autonomous guardrails for system security, cloud cost management (FinOps), and Kubernetes compliance. It audits Linux Kernel patches for memory vulnerabilities, detects cost drifts in Terraform plans, and generates hardened K8s manifests from natural language policies.

This skill systematically audits a given project by analyzing its historical memory, rollout summaries, and local skill definitions. It identifies repeated complex workflows, recurring operational patterns, or areas where existing skills are stale. The audit process guides the user to recommend the highest-value skills to either add (if a new pattern emerges) or update (if current skills are outdated or incomplete), ensuring the AI agent operates with the most accurate and context-specific knowledge base for optimal project execution.

This skill reviews code differences (diffs) to identify opportunities for improvement in clarity, reusability, efficiency, and overall quality. It employs multiple specialized sub-agents (e.g., Code Reuse, Efficiency, Quality) to audit changes. It can provide high-confidence, behavior-preserving fixes when requested, ensuring the code adheres to best practices without introducing regressions. Best used when refactoring, cleaning up, or auditing a specific code scope.

This skill provides a comprehensive, structured workflow for diagnosing performance bottlenecks in SwiftUI applications. It guides users through a code-first review to detect common issues like invalidation storms, layout thrash, or heavy main-thread work. When code review is insufficient, it provides detailed guidance on collecting runtime evidence using Instruments, enabling precise root cause analysis and targeted remediation strategies.

Automates comprehensive end-to-end Quality Assurance (QA) for deployed web applications. This skill performs multi-stage testing, including smoke tests, complex user interactions (forms, authentication), visual regression checks across breakpoints, performance monitoring (Core Web Vitals), and WCAG accessibility audits.

This technique audits user interaction flows (like button clicks) to detect subtle bugs that static analysis often misses. It specifically tracks the full sequence of state changes, identifying instances where later actions unintentionally cancel, contradict, or leave the UI in an inconsistent state due to state store side effects or race conditions. Ideal for debugging complex state management architectures (Redux, Zustand).

This tool detects malicious packages mimicking legitimate dependencies in npm and PyPI. It analyzes package names using Levenshtein distance, examines publish date heuristics, and identifies download count anomalies to secure the software supply chain. Ideal for auditing project dependencies and proactively monitoring for supply chain threats.

A comprehensive guide detailing architectural patterns for developing robust Electronic Medical Record (EMR) and Electronic Health Record (EHR) systems. Covers critical areas like patient safety protocols, structured clinical workflows, drug interaction checking, audit trail implementation, and WCAG accessibility standards. Essential for building highly reliable and compliant healthcare IT solutions.

A comprehensive guide to building HIPAA, GDPR, and other global compliance systems for healthcare applications. This pattern outlines best practices for protecting Protected Health Information (PHI) and Personally Identifiable Information (PII) by implementing robust access controls, Row-Level Security (RLS), and mandatory audit trails. Essential for any feature handling patient or clinical data.

repo-scan is a powerful tool designed to audit large, complex, cross-stack codebases (C++, Java, iOS, Web). It classifies every file into project code, third-party dependencies, or build artifacts. Key features include detecting embedded libraries (e.g., FFmpeg, OpenSSL) and providing a practical 4-stage assessment (Core Asset / Extract / Refactor / Deprecate) via an interactive HTML report. Essential for managing monorepos and planning major refactoring efforts.

This skill provides a comprehensive, read-only audit of a development workspace, including active repositories, installed plugins, connected services, and environment configurations. It analyzes existing capabilities against best practices to identify functional gaps and recommends the most valuable ECC-native skills, hooks, and workflows needed to enhance the development experience. Ideal for setup planning and architectural reviews.

A comprehensive guide detailing security patterns and audit checklists for Automated Market Maker (AMM) smart contracts in DeFi. Covers critical vulnerabilities such as flash loans, slippage, reentrancy attacks, price manipulation, and integer overflow/underflow. Essential for reviewing major DeFi protocols like Uniswap.