Skill UI

Manage and apply custom policies to customize readiness scoring across development artifacts. Users can set pass-rate thresholds, override criteria impact, or disable irrelevant checks to tailor scoring to specific organizational standards or project needs. Essential for CI gating and ensuring compliance.

This expert playbook provides comprehensive techniques for testing Cross-Site Request Forgery (CSRF) vulnerabilities in web applications. It covers identifying state-changing endpoints, bypassing anti-CSRF tokens (including missing validation and predictable tokens), and exploiting modern weaknesses like SameSite=Lax via GET methods or misconfigured JSON APIs. Essential reading for security professionals and penetration testers.

This comprehensive playbook details advanced techniques for detecting Prototype Pollution vulnerabilities in JavaScript environments (Node.js and browser). It covers various attack vectors, including using `__proto__` and `constructor.prototype` paths, and provides black-box testing payloads for JSON parsing, query string merging, and deep object assignment. Use this when analyzing applications for potential Remote Code Execution (RCE) or unintended property leakage via object merging sinks.

This CLI alias functions as a command for gracefully canceling an active PUA loop, mirroring the functionality of the Claude Code `/pua:cancel-loop` command. It cleans up loop state and worktree references, ensuring the cancellation event is recorded. It also safely manages configuration files, preserving unknown fields in `~/.pua/config.json`.

This utility serves as a Command Line Interface (CLI) alias for managing 'flavor' profiles within AI code environments (like Claude Code). It allows users to set or select specific configuration flavors in the ~/.pua/config.json file. Crucially, it is designed to safely update the configuration by preserving any unknown fields, ensuring no unrelated settings are accidentally overwritten.

This utility serves as a command-line alias for invoking the Claude Code `/pua:kpi` function. It loads necessary configurations (pua-pro) to generate comprehensive Key Performance Indicator (KPI) or performance report cards. It manages configuration files by updating `~/.pua/config.json` while preserving unknown fields and ensuring the directory structure exists.

This utility serves as a Codex CLI alias, mapping specifically to the Claude Code `/pua:offline` command. It enables offline operation mode for developer tools by updating the user's configuration file (~/.pua/config.json). Use this for developers needing to simulate or operate in environments with limited connectivity, ensuring continued access to code assistance features.

This alias serves as a dedicated CLI command for Codex, simulating the core functionality of the Claude Code `/pua:on` command. It enables 'PUA always-on mode' by managing the `~/.pua/config.json` file. This utility is essential for maintaining continuous operational readiness and managing coding assistant feedback cycles.

This CLI alias serves as a system maintenance tool for PUA agent state. It scans for stale PUA agent data, identifying and safely removing only confirmed orphan records to maintain system integrity. It also manages configuration files, ensuring unknown fields are preserved when updating the primary config JSON.

This tool functions as a command-line interface (CLI) alias for conducting a structured PUA survey. It guides the user through the survey process, collects confidential local responses, and manages configuration data in `~/.pua/config.json`. It is designed for seamless integration within developer environments using Codex/Claude Code.

This CLI alias executes a comprehensive teardown protocol for PUA agents, designed for development environments. It safely releases all active agent and loop states, ensuring a clean system reset. It automatically manages configuration files like ~/.pua/config.json, preserving unknown fields while providing reliable, evidence-based cleanup.

This CLI alias acts as a dedicated command to disable the PUA always-on mode feature, typically used within AI coding environments like Claude Code. By modifying the user's configuration file (`~/.pua/config.json`), it sets `always_on=false` and `feedback_frequency=0`. This function provides users with granular control, effectively turning off continuous monitoring or background feedback mechanisms managed by the AI assistant.