Skill UI

Zero-knowledge SSH ops CLI for server health checks, docker/systemd control, log tailing, Postgres introspection, and declarative deploys without exposing credentials to the agent.

Manage SSL/TLS certificates for web servers, Kubernetes clusters, and internal services. Covers Let's Encrypt with Certbot, automated renewal, cert-manager deployment, and configuration of ClusterIssuers and Certificate resources.

Practical IT troubleshooting runbooks for startups and small teams without dedicated IT staff. Covers SSO lockouts, network issues, laptop performance, and macOS administration with copy-paste commands.

This skill provides a structured approach to systematically identify security threats by applying the STRIDE methodology (Spoofing, Tampering, Repudiation, Information Disclosure, Denial of Service, Elevation of Privilege). It is crucial for conducting thorough threat modeling sessions, analyzing system architectures, reviewing security design decisions, and creating robust security documentation for compliance and auditing purposes.

Implement and verify Stripe checkout, subscriptions, webhooks, and refunds with explicit server-side authorization. Covers payment flows, webhook handling, subscription management, and customer management. Provides code patterns for hosted checkout, payment intents, and setup intents. Emphasizes security boundaries and proper use of test accounts.

This skill handles tasks involving Supabase, a backend-as-a-service platform. It covers database management, authentication, edge functions, storage, and real-time features. It includes guidance on client library integration with frameworks like Next.js and React. The skill emphasizes verifying changes against documentation, securing data with Row Level Security (RLS), and managing API keys safely. It helps resolve auth issues and implement secure database policies.

Automates Supabase projects by sequencing Composio Rube MCP workflows for database querying, schema inspection, SQL execution, project/org management, storage buckets, edge functions, and health monitoring while always refreshing tool schemas first.

This skill provides comprehensive guidelines for optimizing Postgres database performance and security. It covers query optimization, schema design, connection management, Row-Level Security, and concurrency handling. Use it when writing SQL, reviewing database configurations, or implementing indexes. Based on Supabase best practices to ensure efficient and secure database operations for production environments.

This skill enforces a high standard for all generated code, prioritizing correctness, clarity, and idiomatic patterns across all languages. It helps minimize code bloat by removing unnecessary abstractions and verbose patterns, while also optimizing the agent's output by using targeted diffs and eliminating excessive conversational overhead. Use this for all code generation, refactoring, or review tasks.

This skill performs external reconnaissance on software supply chain attack surfaces. It identifies public GitHub organizations, internal package names in JS/Python bundles, and Docker images. It checks for dependency confusion vulnerabilities by verifying if internal package names are available on public registries. Requires explicit authorization for offensive security assessments.

This skill enables detection, response, and prevention of software supply chain attacks targeting package registries, container images, and CI/CD pipelines. It includes lockfile auditing, provenance verification using tools like Cosign and SLSA, and emergency response playbooks for compromised dependencies.

This skill identifies dependencies at heightened risk of exploitation or takeover by evaluating factors like maintainer activity, popularity, and security history. It generates a security report for supply chain attack surface assessment and pre-engagement scoping.