Skill UI

This skill defines canonical, ordered middleware patterns for LangChain and LangGraph agents. It addresses critical production-level LLM deployment issues, including PII leakage across tenants, token budget overconsumption, prompt injection defense (Guardrails), and cache key corruption. Use this to build secure, scalable, and cost-aware AI applications.

A remote MCP server designed for AI agents to dynamically discover, inspect, and verify external tools, APIs, and services. It allows agents to search a curated index of AI-ready websites, check for machine-readable endpoints (like OpenAPI or MCP), and confirm if an endpoint responds correctly to JSON-RPC, enabling robust, dynamic agent workflow building.

This skill provides a comprehensive framework for security auditing LLM agents that possess external tools (file system access, command execution, network calls). It employs advanced dialogue probing techniques—such as command injection, path traversal, and SSRF attempts—to identify vulnerabilities where the agent might be induced to execute unexpected or malicious code, or access sensitive resources. Essential for red teaming and securing agent functionalities.

This skill provides a structured framework for capturing, organizing, and maintaining persistent facts about the user. By segmenting facts into topic-specific files (e.g., coding preferences, tech stack, goals), it creates a reliable, objective knowledge base. This structure is crucial for AI agents and applications to achieve highly personalized interactions and provide accurate context.

Provides comprehensive migration patterns for converting existing v5 Webiny code to the v6 architecture. It details key architectural shifts, including replacing ContextPlugins with Dependency Injection (DI) Services, updating event subscriptions to specialized EventHandler Features, and adopting the feature-based container registration model. Essential for developers and AI agents performing major framework upgrades.

A powerful tool for executing complex, multi-step, and multi-agent workflows defined in YAML format directly within the AI session. It acts as an orchestration engine, simulating various roles (agents) to complete tasks sequentially or in parallel, without requiring external API keys or configuration. Ideal for complex business process automation and multi-role content generation.

This skill is designed for tackling complex, multi-step software development tasks. It generates highly detailed, structured implementation plans that strictly adhere to best practices like TDD, YAGNI, and DRY. The plan breaks down features into small, atomic, executable tasks, specifying required file changes, writing initial failing tests, implementing minimum necessary code, and committing. It ensures the resulting plan is ready for efficient, autonomous execution by AI agents or human teams.

This guide outlines a sophisticated development workflow using dedicated subagents for each independent task within a plan. It mandates a two-stage review process—first for specification compliance, then for code quality—ensuring highly reliable, high-quality, and rapidly iterative development cycles while maintaining strict context isolation.

This guide provides comprehensive best practices for creating, structuring, and optimizing reusable 'Skills' for advanced AI agents. It maps the concept of Test-Driven Development (TDD) onto documentation writing, covering YAML frontmatter rules, optimal description writing (focusing on trigger conditions, not workflows), and maximizing token efficiency for superior AI compliance.

This framework enforces high output quality, intellectual honesty, and continuous improvement across all AppSec agents. It mandates structured processes, including self-critique loops, anti-rationalization guards, and self-reflection quality gates (≥8 scoring). Applicable during code review, SAST, SCA, and threat modeling, it ensures rigorous and verifiable security analysis.

This comprehensive guide serves as a decision flowchart for developers using Claude Code. It details when to use specific slash commands (/plan, /compact, /loop), select specialized agents (planner, code-reviewer, build-error-resolver), or invoke workflow skills (e2e-testing, tdd-workflow). It helps users select the optimal tool combination for complex tasks across the entire software development lifecycle, including feature planning, bug fixing, testing, and architectural design.

This skill analyzes your entire codebase to ensure it is optimized for AI contributions and developer tooling. It automatically generates essential configuration files such as `AGENTS.md`, Copilot instructions, CI workflows, and customizable issue templates. It learns from your existing PR review patterns to tailor the setup precisely to your project's stack. Use it when you need to prepare a repository for advanced AI-assisted development.