Skill UI

This skill enables the coordination of multiple specialized AI agents within a single session. It is designed for complex, multi-domain tasks such as comprehensive code reviews, security audits, or full-stack feature implementations. It coordinates expertise across various domains (backend, frontend, testing, architecture) to provide holistic analysis and actionable recommendations.

A sophisticated AI tool that coordinates multiple specialized agents (e.g., Security, Architecture, Performance) to provide comprehensive, multi-perspective code assessments. It goes beyond single-point reviews by managing context, running hybrid execution workflows, resolving conflicts, and synthesizing unified, actionable reports for high-quality code assurance.

Enables Claude to run a security-focused code review via the security-agent plugin, flagging SQL injection, XSS, authentication flaws, and unsafe dependencies with severity, location, impact, and remediation guidance for requested audits.

This skill provides foundational security patterns and implementation guides for building AI voice agents and automating phone call workflows using Retell AI. It covers essential SDK usage (TypeScript), agent listing, and critical error handling (e.g., 401 Unauthorized, 429 Rate Limit) when integrating Retell into voice or telephony applications.

Runs AgentShield to audit Claude Code configuration files and MCP components for secrets, injection risks, and overly permissive settings, offering CLI, JSON/Markdown/HTML reports, auto-fix, Opus deep analysis, and CI-ready GitHub Action hooks to harden new or existing projects.

This skill implements a robust, multi-layered security hardening process based on the Defense-in-Depth strategy and DevSecOps principles. It coordinates specialized agents to perform comprehensive security assessments (SAST, DAST, SBOM, Threat Modeling), identify critical vulnerabilities, and execute layered remediation. The process covers application code, backend APIs, frontend components, and mobile platforms, ensuring a resilient security posture across the entire development lifecycle.

Runs Semgrep static analysis with auto language detection, parallel Task subagents, Semgrep Pro checks, and configurable “run all” or “important only” modes to audit codebases for vulnerabilities and bug patterns.

Provides a structured workflow for defining agent-agnostic subagents with isolated context, covering purpose definition, metadata configuration, prompt writing, and common specialist patterns for verification, debugging, security auditing, and review.

This expert skill validates the deployment readiness of Vertex AI Agent Engines. It executes a weighted audit across five critical dimensions: security, monitoring, performance, compliance, and best practices. The output provides a comprehensive 0-100% composite score, a detailed pass/fail report for each check, and a prioritized, actionable remediation plan, ensuring high-quality, production-grade deployments.

This skill thoroughly inspects and validates Vertex AI Agent Engine deployments. It assesses critical components such as the Code Execution Sandbox, Memory Bank, A2A protocol compliance, security posture, and performance metrics. The tool generates weighted production-readiness scores (0-100%) and provides detailed, actionable recommendations to ensure the deployment is robust, secure, and ready for production use.

A comprehensive security scanner designed to audit AI agent skills before deployment. It analyzes source code (Python, Bash, JS), detects critical vulnerabilities like command injection, network exfiltration, and unsafe deserialization. Furthermore, it scans markdown files for prompt injection attacks, and assesses dependency supply chain risks, providing a clear PASS/WARN/FAIL verdict and remediation guidance.

Performs static security analysis on GitHub Actions workflows that incorporate AI coding agents (e.g., Claude, Gemini, OpenAI). This skill helps identify critical data flow vulnerabilities, such as where attacker-controlled input can reach AI agent prompts or internal systems via CI/CD pipelines, going beyond simple expression checks.