Skill UI

This skill designs and audits the core engineering harness required for reliable AI agent collaboration within a codebase. It establishes critical infrastructure elements such as change tracking, linting rules, CI/CD gates, and standardized documentation, ensuring the repository remains the single source of truth for all intelligent agents. Ideal for setting up complex development workflows.

This skill simulates a world-class Senior System Design Engineer with 20+ years of experience at top tech companies. It helps users design, review, and scale complex, highly available, and resilient distributed systems. It covers every aspect from database sharding and microservices decomposition to caching strategies, observability stacks, and CI/CD pipelines, providing detailed blueprints and mathematical scaling estimates.

This skill provides deep security review for GitHub Actions workflow files. It focuses on the unique Actions threat model—identifying vulnerabilities like script injection via ${{ }} interpolation, privilege escalation from triggers (e.g., pull_request_target), and ensuring least-privilege permissions for CI/CD pipelines. Use it to audit, secure, or harden existing workflows, preventing attacks from untrusted inputs and supply chain risks.

This skill generates a complete, actionable CI/CD playbook, thoroughly documenting the entire software deployment lifecycle. It covers essential stages like build & linting, unit/integration testing, security scanning, and phased deployment to staging and production. The output provides clear guidelines on required inputs, automated gates, manual approvals, and necessary rollback procedures, which is crucial for engineering documentation and team onboarding.

This skill generates a comprehensive and structured developer onboarding document for any service or codebase. It guides new engineers through the entire product lifecycle, covering architectural overview, local development setup, key coding patterns, testing strategies, CI/CD deployment processes, and team contacts, ensuring rapid productivity from day one.

This advanced skill downloads Instagram posts, carousels, and Reels at their original, high resolution directly from the CDN. It supports batch processing of multiple URLs, automatically creates organized folders for each post, and stitches multi-slide carousels into a single PDF file, making content archiving and aggregation seamless.

Generates a complete, structured load and performance testing plan for any service. This skill guides the definition of test objectives, establishes measurable SLO thresholds (p99, error rate, throughput), and designs multi-scenario tests (Baseline, Stress, Spike, Soak). It is essential for teams needing to set clear pass/fail criteria, select appropriate tooling (k6, Locust), and integrate performance gates into CI/CD pipelines.

This skill automates end-to-end (E2E) functional testing for Android applications. It parses an XML specification defining a multi-step user 'journey.' The executor sequentially performs interactive UI actions (taps, swipes, text input) using ADB commands and verifies application states through assertions. It outputs a detailed, standardized JSON report, making it ideal for robust CI/CD integration and quality assurance.

Use Mailtrap Email Sandbox to capture and inspect outbound emails without sending them to real recipients. This is crucial for development, staging, and CI/CD environments. It allows developers to test email content, headers, attachments, and spam scores using dedicated APIs, SMTP settings, or SDKs, ensuring mail integrity before deployment. Ideal for automation and rigorous quality checks.

This skill deploys Remote Browser Isolation (RBI) as a core component of a Zero Trust security architecture. It implements sophisticated isolation policies utilizing URL categorization, risk-based routing, and Content Disarming and Reconstruction (CDR) for file sanitization. It provides robust data loss prevention controls, effectively mitigating zero-day exploits, phishing, and data exfiltration across isolated web sessions, and integrating with SWG and ZTNA platforms.

This guide outlines a comprehensive workflow for detecting and preventing the exposure of sensitive AWS credentials (access keys, session tokens) within source code repositories, CI/CD pipelines, and configuration files. It utilizes TruffleHog for deep historical scanning and integrates git-secrets for robust pre-commit hooks, significantly reducing the risk of credential theft and unauthorized account access.

This skill provides comprehensive security auditing for Model Context Protocol (MCP) servers and their associated tool metadata. It is designed to detect sophisticated supply chain attacks, including tool poisoning (indirect prompt injection), Server-Side Request Forgery (SSRF), tool shadowing, and unauthenticated exposure. It is essential for securing AI agent stacks before integrating new tools or during CI/CD processes.