Skill UI

Varlock provides secure, default environment variable management, ensuring that sensitive secrets (like API keys and passwords) are never exposed in logs, terminal output, or the AI context. It validates environments, reads schemas, and executes commands in a secure manner, promoting best practices for handling secrets in modern development workflows.

This skill monitors the performance of Claude Code and the local operating system. It diagnoses slowdowns, measures CPU/RAM/Disk usage, checks API latency, and generates detailed system health reports. It helps determine if the bottleneck is local hardware or the remote API connection, providing actionable corrective suggestions to improve the development workflow.

A comprehensive strategy for regression testing in AI-assisted development. It focuses on identifying systematic blind spots, such as schema inconsistencies between sandbox and production paths, and integrating automated bug checks into the development workflow. This guide teaches how to build robust, database-free API tests to ensure code quality when AI models contribute to the codebase.

This solution enforces strict data contract validation for all APIs using OpenAPI Specification (OAS) and JSON Schema. It ensures that all incoming requests and outgoing responses conform to predefined structures. By implementing validation at both the API Gateway (runtime) and during development (shift-left), it effectively prevents critical security vulnerabilities such as SQL injection, XSS, unauthorized data leakage, and mass assignment.

This skill guides the implementation of Gitleaks for robust secret scanning across development lifecycles. It covers setting up pre-commit hooks to prevent secrets from being committed, integrating scanning into CI/CD pipelines (like GitHub Actions), and writing custom regex rules to detect and remediate hardcoded credentials (API keys, passwords, tokens) in Git history, ensuring adherence to secure SDLC practices.

This guide details how to integrate OWASP ZAP (Zed Attack Proxy) into CI/CD pipelines (GitHub Actions/GitLab) for comprehensive Dynamic Application Security Testing (DAST). It covers configuring baseline, full, and API scans to identify common vulnerabilities like XSS, SQLi, and CSRF in running web applications and REST/GraphQL APIs, ensuring security quality gates in the development lifecycle.

SvelteKit is the official full-stack framework built on Svelte, enabling developers to build fast, modern, and highly performant web applications. It provides comprehensive features including file-based routing, Server-Side Rendering (SSR), Static Site Generation (SSG), API routes, and progressive form actions, all while maintaining Svelte's zero runtime overhead. Use this skill when building complex, data-driven web platforms where performance and developer experience are paramount.

Master the use of the `gh` CLI to interact with core GitHub features. This guide covers managing issues, checking Pull Request statuses, listing and debugging CI workflow runs, and executing advanced data queries via the GitHub API. Essential for automating DevOps workflows and debugging CI/CD pipelines directly from the terminal.

This guide enforces the 'spec-first' principle in software development, treating the specification as a non-negotiable contract. It outlines a rigorous, multi-stage workflow detailing mandatory sections (Functional/Non-Functional Requirements, Acceptance Criteria, API Contracts, Data Models) and bounded autonomy rules. Users learn how to define the system 'must do' before writing a single line of code, thereby minimizing rework and eliminating scope creep.

This skill guides developers on building LLM-powered applications using the Claude API, Anthropic SDKs, or the Agent SDK. It provides comprehensive guidance on language detection, best practices (like default model versions and streaming), and choosing the correct development surface (API call, Workflow, or Agent) based on the use case.

A comprehensive tool for establishing performance baselines across multiple dimensions. It measures Core Web Vitals (LCP, CLS, INP), API latency (p50, p95, p99), and development build efficiency. Essential for detecting performance regressions before merging code, ensuring stability in CI/CD pipelines, and comparing alternative stack implementations.

A comprehensive skill for integrating development workflows directly with Jira. Users can retrieve, analyze, and update Jira tickets, including extracting testable acceptance criteria, transitioning status, adding comments, and searching issues using JQL. Supports both MCP-based and direct REST API interactions.