Skill UI

This skill provides an active penetration testing toolchain covering information gathering, port scanning, vulnerability scanning, web attacks (SQL injection, XSS), directory brute-forcing, and password cracking. It exposes 20+ security tools to AI agents via MCP servers for authorized security assessments.

This advanced skill performs server-enforced security and privacy reviews for applications, including those rapidly developed with AI agents. It implements comprehensive models like STRIDE (security) and LINDDUN (privacy), screens dependencies against live CVE/CISA data, and evaluates applicability of major EU regulations (GDPR, AI Act, NIS2). The output is a formal, auditable compliance report, never a simulated chat response or legal verdict.

A comprehensive guide for developing full-featured VS Code extensions from scratch or converting existing web applications (JS/React/Vue). Learn to implement custom commands, complex webviews, hierarchical tree views, custom editors, and integrate advanced features like AI agents using file-bridge IPC. Supports modern build stacks including TypeScript, esbuild, and Vite.

This skill automatically scans all defined user and project skills (from SKILL.md files) to create a comprehensive, centralized index. It manages skill paths, triggers, descriptions, and scopes, ensuring that downstream agents and delegators always have an up-to-date source of truth for available functionalities. It is crucial for maintaining system integrity and avoiding redundant skill definitions.

This skill enforces strict communication protocols for AI agents interacting in shared channels with external parties. It ensures agents speak only when explicitly addressed, prevents internal context leakage, and routes sensitive content to draft-only approval. Ideal for group chats, DMs, and business partnerships where privacy and security are critical.

Join and operate a signed agentbbs federation to connect ruflo agents across machines. Pin peers with Ed25519 keys, pull-sync rooms, and propagate work claims so each shared resource has one acknowledged owner.