Skill UI

This skill analyzes your entire codebase to ensure it is optimized for AI contributions and developer tooling. It automatically generates essential configuration files such as `AGENTS.md`, Copilot instructions, CI workflows, and customizable issue templates. It learns from your existing PR review patterns to tailor the setup precisely to your project's stack. Use it when you need to prepare a repository for advanced AI-assisted development.

This skill integrates BuyWhere's product catalog surface, allowing AI agents to perform structured product searches, compare prices across various merchants, and discover deals. It is designed for developers building advanced e-commerce shopping agents, guiding them through the necessary API key setup and MCP configuration.

A comprehensive guide to using the spf13/viper library in Go for robust, layered configuration management. This skill details how to handle configuration precedence from multiple sources—including command flags, environment variables, config files (JSON, YAML, TOML), and remote KV stores. Learn advanced techniques like source binding, structured unmarshaling with mapstructure, and hot reloading for building reliable Go applications.

This assistant guides users through managing Azure resources entirely via the command line using the Azure CLI (`az`). It identifies the correct commands, prompts for missing required parameters (like resource groups or locations), constructs the full command sequence, executes the action, and diagnoses any output errors to ensure successful deployment and configuration of services across Compute, Networking, and other Azure domains.

Performs a comprehensive external audit of a deployed repository's state, going beyond simple code review. It checks for critical production gaps, including RLS misconfigurations, webhook idempotency issues, secret exposure, deployment health, and prompt injection vulnerabilities. Ideal for pre-launch gates and ensuring code stability before going live.

This comprehensive playbook guides the testing of Cross-Origin Resource Sharing (CORS) misconfigurations. It focuses on detecting critical vulnerabilities such as reflected origins, wildcard trust misuse, credentialed cross-origin reads, and bypasses in origin allowlists. Use this when analyzing browser-based access and trust boundaries for authenticated APIs.

This expert playbook provides comprehensive techniques for testing Cross-Site Request Forgery (CSRF) vulnerabilities in web applications. It covers identifying state-changing endpoints, bypassing anti-CSRF tokens (including missing validation and predictable tokens), and exploiting modern weaknesses like SameSite=Lax via GET methods or misconfigured JSON APIs. Essential reading for security professionals and penetration testers.

A comprehensive playbook for testing security flaws in OAuth 2.0 and OpenID Connect (OIDC) implementations. Use this guide to systematically check for misconfigurations in redirect URI handling, state and nonce validation, PKCE enforcement, token audience/issuer checks, and account binding vulnerabilities. Essential for reviewing applications linked to external identity providers.

This guide details how to configure SMTP email delivery settings within a Webiny project using the `<Api.Mailer.Smtp />` component. It specifies the required properties (host, port, user, etc.) and emphasizes best practices, such as passing sensitive passwords via environment variables rather than hard-coding them. Ideal for developers setting up external email services.

This extension provides comprehensive distributed tracing capabilities for the KubeSphere Observability Platform, adhering to the OpenTelemetry standard. It guides users through the entire lifecycle, including component installation (Generator, Collector, Agent), configuration, and querying complex tracing data, spans, and service graphs. It is essential for monitoring microservices and understanding complex system interactions.

This CLI alias functions as a command for gracefully canceling an active PUA loop, mirroring the functionality of the Claude Code `/pua:cancel-loop` command. It cleans up loop state and worktree references, ensuring the cancellation event is recorded. It also safely manages configuration files, preserving unknown fields in `~/.pua/config.json`.

This utility serves as a Command Line Interface (CLI) alias for managing 'flavor' profiles within AI code environments (like Claude Code). It allows users to set or select specific configuration flavors in the ~/.pua/config.json file. Crucially, it is designed to safely update the configuration by preserving any unknown fields, ensuring no unrelated settings are accidentally overwritten.