Skill UI

OSS-Fuzz gives open-source teams free distributed infrastructure for continuous fuzz testing, letting you build Docker images, compile sanitizing fuzzers, run harnesses, and review coverage/bugs through the helper.py CLI instead of hosting your own servers.

This skill automates the entire software development process overnight. By leveraging mandatory Git hooks, it strictly enforces Test-Driven Development (TDD). Use this when complex features need building, large codebases need refactoring, or bugs need fixing autonomously, guaranteeing that every commit passes rigorous testing cycles and meets high production-ready standards.

This skill enables the coordination of multiple specialized AI agents within a single session. It is designed for complex, multi-domain tasks such as comprehensive code reviews, security audits, or full-stack feature implementations. It coordinates expertise across various domains (backend, frontend, testing, architecture) to provide holistic analysis and actionable recommendations.

Comprehensive CLI reference for penetration testing tools spanning network scanning, exploitation, password cracking, and web testing to speed up authorized security assessments.

Automated skill that assists with percentile analyzer workflows in performance testing, guiding users through load, stress, benchmarking, and monitoring setups with best practices.

Guides teams through automated performance baseline creation, offering templates, validation rules, and best-practice checklists for load, stress, and benchmarking workflows within performance testing efforts.

This skill simulates an expert performance engineer capable of diagnosing complex bottlenecks across the entire technology stack. It covers modern observability techniques (OpenTelemetry, APM), advanced profiling (CPU, Memory, I/O), and sophisticated load testing strategies (k6, Chaos Engineering). Use this when optimizing scalability, reducing latency, improving throughput, or architecting highly reliable, performant distributed systems in cloud environments.

Automates load, stress, spike, and endurance tests through the performance-test-suite plugin, collecting response time, throughput, and error-rate metrics to spot CPU/memory/database/network bottlenecks and deliver graphs plus optimization guidance.

A comprehensive specialist that combines automated static analysis (SonarQube, CodeQL, Semgrep) with advanced AI capabilities. This tool performs multi-layered code reviews assessing security vulnerabilities, performance bottlenecks, architectural coherence, and maintainability across various programming languages, integrating seamlessly into CI/CD pipelines.

A sophisticated AI tool that coordinates multiple specialized agents (e.g., Security, Architecture, Performance) to provide comprehensive, multi-perspective code assessments. It goes beyond single-point reviews by managing context, running hybrid execution workflows, resolving conflicts, and synthesizing unified, actionable reports for high-quality code assurance.

Automates web application penetration testing by leveraging the penetration-tester plugin to scan OWASP Top 10 threats, suggest exploitation techniques, and produce actionable vulnerability reports for pentest or vulnerability assessment requests.

Automates vulnerability scans for applications and APIs via the security-test-scanner plugin, covering OWASP Top 10, SQL injection, XSS, CSRF, authentication, and authorization weaknesses while generating detailed remediation reports.