Skill UI

This skill guides the implementation of automated security scanning for Infrastructure as Code (IaC) templates using industry-leading tools like Checkov and tfsec. It focuses on integrating security checks into CI/CD pipelines to detect misconfigurations (e.g., public buckets, open ports) in Terraform, CloudFormation, and Kubernetes manifests before they reach production, thereby enforcing policy-based governance and securing the development lifecycle.

This guide provides a comprehensive workflow for Test-Driven Development (TDD) within Laravel applications. It covers best practices for writing unit, feature, and integration tests using modern tools like Pest and PHPUnit. Learn how to manage database states, mock external services, and achieve high code coverage efficiently.

This skill is designed for implementing and managing user verification workflows within a Laravel PHP framework. It facilitates processes such as email confirmation, password reset validation, and ensuring data integrity for secure application access. It is essential for robust web backend development.

This tool guides the process of reviewing security findings from DAST and SAST scanners. It uses the OWASP risk rating methodology to classify vulnerabilities (true positive, false positive, needs review) and calculate a comprehensive risk score based on likelihood and impact, ensuring development teams prioritize the most critical issues.

A comprehensive tool for establishing performance baselines across multiple dimensions. It measures Core Web Vitals (LCP, CLS, INP), API latency (p50, p95, p99), and development build efficiency. Essential for detecting performance regressions before merging code, ensuring stability in CI/CD pipelines, and comparing alternative stack implementations.

This tool serves as a persistent memory and state manager for complex coding projects within the Claude environment. It allows users to initialize new projects with structured metadata, track detailed session progress (including summaries, decisions, and next steps), and save the entire context reliably. By ensuring project continuity across disconnected sessions, it drastically improves the flow and consistency of the development workflow.

A specialized audit skill designed to identify and quantify resource leakage, excessive costs, and billing vulnerabilities within complex development tool workflows (e.g., GitHub Apps). It traces webhook events, queue processing, and model calls to pinpoint where token burn or unauthorized resource usage is occurring, ensuring cost efficiency and clean billing practices.

This skill guides users through advanced security auditing and best practices for Golang development. It acts as a senior security engineer, focusing on defense in depth by analyzing critical areas like injection patterns, cryptography, secrets management, and authorization flaws. It supports full codebase audits (using STRIDE and DREAD scoring) and precise PR vulnerability reviews, ensuring secure and resilient Go applications.

A comprehensive guide for systematically diagnosing and fixing bugs, crashes, deadlocks, and performance issues in Go code. It covers debugging methodology, utilizing tools like Delve and pprof, detecting race conditions, and following the Golden Rules to find the root cause, ensuring robust and reliable Go development practices.

This tool generates a comprehensive context map of a codebase before making any modifications. It guides developers to systematically analyze all relevant files, dependencies, existing tests, and common patterns. Use it to assess the full scope of a task, identify potential breaking changes, and ensure a robust and stable development cycle.

This tool analyzes specification files to extract all defined requirements and cross-references them with the current codebase implementation status. It systematically checks for unimplemented features, searches existing GitHub issues to prevent duplicates, and automatically generates detailed issues using a standardized feature request template. It is essential for robust product management, ensuring every defined requirement is tracked and scheduled for development.

A comprehensive skill guide for building complex, feature-rich web games and game engines using modern web technologies like HTML5, Canvas, WebGL, and JavaScript. Covers full 2D and 3D game development workflows, including implementing the game loop, physics simulation (collision detection, Newtonian physics), handling diverse input methods (touch, gamepad), managing assets, and integrating multiplayer features via WebRTC. Ideal for creating everything from simple platformers to advanced 3D simulations.