Skill UI

An advanced workflow orchestrator designed to perform multi-phase, deep-dive schema optimization on large datasets (e.g., BigQuery exports). It systematically analyzes schema structure, identifies unused or redundant fields, assesses potential impact, and generates a comprehensive, actionable report with recommended optimization strategies and estimated savings.

This skill provides a practical guide for comprehensive accessibility validation of web applications. It helps users test compatibility with various screen readers, validate ARIA implementations, and debug issues related to assistive technologies. Ideal for ensuring that web forms, dynamic content, and navigation are fully usable by people with disabilities.

A structured workflow designed to prevent 'reinventing the wheel.' Before writing custom code, this skill guides the user through analyzing needs, conducting parallel searches across multiple channels (npm, PyPI, GitHub, MCP), evaluating candidate solutions based on maintainability and community support, and making a decision (Adopt, Extend, or Custom Build). It ensures that solutions leverage existing, proven libraries and patterns.

This skill functions as an expert-level web researcher, utilizing advanced search strategies (query optimization, domain filtering) to gather, synthesize, and validate information from multiple web sources. It is ideal for complex research tasks requiring fact verification, identifying trends, and producing structured, actionable insights, ensuring high credibility for the final output.

Secret Scanner Assistant auto-activates within Security Fundamentals to guide you on secret detection, authentication, validation, secure coding, and vulnerability checks with best practices.

Walks through Trail of Bits’ five-step secure smart-contract workflow, running Slither and special feature checks, generating visual diagrams, documenting security properties, and flagging manual risks with an action plan.

A comprehensive, multi-phase workflow designed for conducting deep security audits across modern web applications and APIs. This bundle guides users through the entire security lifecycle, including reconnaissance, vulnerability scanning (SAST/DAST), specific testing for OWASP Top 10 and injection flaws, specialized API fuzzing, full-scope penetration testing, security hardening, and final risk reporting. Ideal for compliance checks and proactive security enhancement.

This skill simulates an expert cybersecurity auditor specializing in DevSecOps methodologies and comprehensive security assurance. It guides users through running detailed security audits, performing threat modeling, and assessing vulnerabilities (e.g., IDOR). Capabilities cover SAST, DAST, cloud security posture, zero-trust architectures, and compliance adherence to major frameworks like GDPR, HIPAA, and PCI-DSS, ensuring security is integrated throughout the entire SDLC.

Provides language- and framework-specific security best practices guidance by loading reference documents, detecting vulnerabilities, and generating prioritized reports when asked.

Automates the creation and validation of security headers by guiding users through authentication, input validation, secure coding, and vulnerability detection practices within the Security Fundamentals domain.

This skill specializes in transforming theoretical threat models, risk assessments, and business context into concrete, actionable security requirements. It is essential for writing detailed security user stories, defining robust acceptance criteria, building comprehensive security test cases, and ensuring compliance requirement mapping. Use it when bridging the gap between identifying a vulnerability and specifying how the system must be secured.

A specialized skill for conducting comprehensive security audits. It identifies vulnerabilities in code, infrastructure, and dependencies, generating structured reports with severity ratings (CVSS) and detailed remediation guidance. Ideal for SAST scans, penetration testing, DevSecOps pipelines, and compliance checks.