Skill UI

A rigorous, security-focused code review process designed for Pull Requests (PRs), commits, and diffs. It moves beyond general reviews by focusing intensely on high-risk areas such as authentication, cryptography, external calls, and value transfer. The methodology is evidence-based, requiring detailed attack scenario modeling and generating comprehensive, auditable markdown reports to identify overlooked vulnerabilities and regressions.

This skill guides users on setting up automated code quality gates directly at the Git level. It covers best practices using frameworks like Husky, lint-staged, and pre-commit. Users can enforce linting, formatting, type-checking, and standardized commit message conventions (e.g., Conventional Commits) before code is committed or pushed, significantly improving code hygiene and development workflow consistency.

A comprehensive solution for identifying and preventing the accidental commitment of exposed AWS credentials, API keys, and session tokens within source code, configuration files, and git history. It integrates TruffleHog and git-secrets into CI/CD pipelines and pre-commit hooks, providing critical protection against credential theft and unauthorized cloud access in a DevSecOps environment. Essential for security auditing and compliance.

This skill guides the implementation of Gitleaks for robust secret scanning across development lifecycles. It covers setting up pre-commit hooks to prevent secrets from being committed, integrating scanning into CI/CD pipelines (like GitHub Actions), and writing custom regex rules to detect and remediate hardcoded credentials (API keys, passwords, tokens) in Git history, ensuring adherence to secure SDLC practices.

A comprehensive guide to professional Git version control. It covers best practices for branching strategies (GitHub Flow, GitFlow, Trunk-Based), writing standardized commit messages using Conventional Commits, managing merges vs. rebases, and defining effective Pull Request workflows. Ideal for any development team looking to improve code collaboration and maintain a clean, traceable history.

A comprehensive guide to disciplined version control using Git. It outlines best practices for atomic commits, descriptive message formatting (feat, fix, refactor), adopting trunk-based development, and managing feature branches. Use this whenever making code changes, committing, or coordinating complex work streams to ensure code stability and traceability.

This tool generates highly standardized and ultra-compressed commit messages following the Conventional Commits specification. It ensures that commits are concise, professional, and adhere to strict formats (e.g., type(scope): summary). It intelligently generates a body only when the context (like breaking changes or complex reasoning) requires it, significantly reducing noise and maintaining a clean, clear project history.

This skill performs a comprehensive security audit of Model Context Protocol (MCP) server configurations found in .mcp.json files. It is designed to identify critical vulnerabilities, including hardcoded secrets (API keys, tokens), dangerous shell injection patterns, unpinned dependencies, and compliance issues regarding approved server lists. Use this skill during security reviews, project onboarding, or pre-commit checks to ensure secure deployment.

A comprehensive methodology for pinpointing the root cause of complex bugs, regressions, or unexpected behavior in large codebases. Techniques include binary search debugging, Git bisect for tracking regressions across commits, strategic data/control flow logging, component isolation, and advanced breakpoint strategies (conditional breakpoints, watch expressions). Ideal for scenarios where the bug source is unclear or difficult to reproduce.

This guide provides a comprehensive framework for adopting Conventional Commits using Mandarin Chinese. It details rules for commit types (feat, fix, perf, etc.), structuring the subject, body, and footer messages. Furthermore, it covers integrating automated tools like husky, commitlint, and conventional-changelog to enforce standardized, professional, and traceable commit workflows for Chinese development teams.

A comprehensive guide providing best practices for Git workflows, covering adaptation strategies for major Chinese platforms (Gitee, Coding.net, etc.), branch naming conventions, standardized commit messaging (Chinese Conventional Commits), and CI/CD integration across various domestic environments. Helps streamline development processes for Chinese teams.

A powerful utility designed to transform verbose writing into highly compressed, stylized output. It provides multiple modes (Lite, Full, Ultra) and skills (Commit, Review) to drastically reduce word count and increase density. Ideal for generating concise documentation, perfect commit messages, or classical Chinese prose.