Skill UI

This skill provides command-driven methods to audit and harden security configurations across common SaaS platforms like GitHub, Slack, Google Workspace, and AWS. It covers inventory auditing, OAuth management, identity verification, branch protection, and session policies to prepare for compliance audits and reduce security risks.

This skill reviews code differences (diffs) to identify opportunities for improvement in clarity, reusability, efficiency, and overall quality. It employs multiple specialized sub-agents (e.g., Code Reuse, Efficiency, Quality) to audit changes. It can provide high-confidence, behavior-preserving fixes when requested, ensuring the code adheres to best practices without introducing regressions. Best used when refactoring, cleaning up, or auditing a specific code scope.

This skill guides the mastery of smart contract security best practices for Solidity. It is essential for writing robust, secure, and efficient contracts, auditing existing code for common vulnerabilities (such as reentrancy, overflow, and access control issues), and implementing secure DeFi protocols. It focuses on preventing common attack vectors while optimizing gas usage.

This skill verifies code implementations strictly adhere to documentation specifications, especially for blockchain smart contracts. It compares code against whitepapers and design documents to identify gaps, undocumented behaviors, or compliance issues. Ideal for auditing protocol implementations, ensuring deterministic alignment between intended logic and actual code execution without relying on prior knowledge.

This skill enables comprehensive security assessments of SSH services. It covers enumeration, credential attacks, vulnerability exploitation, and configuration auditing using tools like Nmap, Hydra, and Metasploit. Suitable for authorized penetration testing and security research to identify weaknesses in SSH implementations.

This skill provides a structured approach to systematically identify security threats by applying the STRIDE methodology (Spoofing, Tampering, Repudiation, Information Disclosure, Denial of Service, Elevation of Privilege). It is crucial for conducting thorough threat modeling sessions, analyzing system architectures, reviewing security design decisions, and creating robust security documentation for compliance and auditing purposes.

This skill enables detection, response, and prevention of software supply chain attacks targeting package registries, container images, and CI/CD pipelines. It includes lockfile auditing, provenance verification using tools like Cosign and SLSA, and emergency response playbooks for compromised dependencies.

This skill enables comprehensive software supply chain security assessment, covering SBOM generation, SCA scanning, CI/CD pipeline review, and container image auditing. It involves verifying build integrity, dependency provenance, and vulnerability reachability. Key activities include auditing upstream repositories, integrating security gates in CI/CD, ensuring artifact integrity, and monitoring CVEs for actual exploitability to mitigate supply chain attacks.

Tree Ring Memory is a local-first framework for managing AI agent memory lifecycles. It enables recall, evidence recording, auditing, and forgetting without dumping transcripts. Built with Rust and SQLite, it supports scoped memory, privacy, and durable project knowledge consolidation. Ideal for developers managing AI agent projects securely.

Comprehensive guide for managing users, groups, permissions, sudo access, and LDAP integration on Linux systems. Includes practical scripts for bulk user operations and access auditing. Ideal for system administrators and DevOps engineers.

A comprehensive collection of agent skills for rigorously auditing digital interfaces and user flows. It evaluates designs against 168 research-backed UX/UI principles, detects common design antipatterns, and provides specialized review for AI-powered interfaces, ensuring adherence to modern best practices.

A comprehensive guide for auditing web content against WCAG 2.2 guidelines. This skill assists users in conducting thorough accessibility audits by combining automated scans (Axe, Lighthouse) with critical manual checks, such as keyboard navigation and screen reader flow. It provides actionable remediation strategies to ensure compliance with standards like ADA and Section 508.