Skill UI

Expert guidance for designing, debugging, and securing production-grade GitHub Actions CI/CD workflows, including reusable workflows, matrix builds, self-hosted runners, OIDC authentication, caching, environments, secrets, and release automation.

This skill acts as an expert CI/CD diagnostician for GitHub Actions. It analyzes failed workflow logs and pipeline definitions to identify root causes like missing secrets, environment mismatches, or syntax errors. It provides precise YAML or code changes to fix the pipeline, optimize performance, and update deprecated actions while ensuring security best practices.

This skill provides production-ready GitHub Actions workflow patterns for testing, building, and deploying applications. It covers test workflows, matrix builds, artifact publication, and secure deployment strategies. Users should inspect repository scripts and verify action revisions before adoption. It ensures reproducible builds and secure CI/CD pipelines.

This skill provides patterns for automating GitHub workflows with AI assistance. It helps in automating PR reviews, setting up issue triage, creating GitHub Actions workflows, and integrating AI into CI/CD pipelines. It also covers automating Git operations like rebases and cherry-picks. Inspired by modern DevOps practices and tools like Gemini CLI, this skill streamlines development processes and reduces manual effort in repository management.

Guidance for designing system experience components per Apple Human Interface Guidelines: widgets, live activities, notifications, complications, home screen quick actions, top shelf, watch faces, app clips, and app shortcuts. Helps deliver glanceable, context-aware UI across platforms.

This skill provides guidance on Apple's Human Interface Guidelines for designing user interfaces across different Apple platforms including iOS, iPadOS, macOS, tvOS, visionOS, and watchOS. It covers key principles like touch-first interaction for mobile, pointer and keyboard usage for desktop, and spatial interaction for visionOS. It helps developers and designers adapt layouts, navigation, and interactions to match platform conventions and user expectations, ensuring a native feel and consistent brand experience.

This skill enables users to build reusable command-line scripts and utilities for interacting with the Hugging Face API. It supports chaining API calls, automating repetitive tasks, and processing model or dataset data efficiently. Scripts utilize HF_TOKEN for authentication and can leverage the hf CLI for advanced repository interactions.

This skill detects when AI agents exploit human trust through social engineering, deceptive guidance, or false assurances. It identifies prompts that induce unsafe actions, request sensitive credentials, or impersonate authority figures. Use this when evaluating agent safety, security advice, or decision-influencing workflows. Skip for static information.

This skill identifies security vulnerabilities in CI/CD pipelines, focusing on Jenkins Script Console, GitHub Actions workflows, and self-hosted runners. It covers techniques like Pwnrequest injection, credential store dumping, and Terraform state leakage. Requires explicit authorization for offensive security assessments.

This skill focuses on identifying clickjacking vulnerabilities where malicious sites overlay transparent iframes over legitimate pages to trick users into unintended actions. It involves checking security headers like X-Frame-Options and CSP, verifying if sensitive actions can be triggered via framing, and ensuring proper authorization before testing. It is strictly for authorized security assessments and bug bounty programs.

This skill helps identify and exploit specific vulnerabilities in Next.js applications, such as Server Actions authentication bypasses, middleware bypasses, and SSRF via image optimization. It provides commands for fingerprinting, version detection, and testing attack vectors. Requires explicit written authorization for target scope.

This skill formats AI responses to support ADHD readers by prioritizing immediate next actions, numbered steps, and specific time estimates. It eliminates tangents and preamble, ensuring visible progress and clear state tracking for better task execution and focus.