Skill UI

Scan project dependencies for known CVEs and outdated packages using npm audit and security CLI tools. Covers severity triage, safe opt-in auto-fix workflow, and continuous monitoring hooks before releases or after lockfile changes.

A comprehensive skill to extract and transcribe subtitles from any YouTube video URL. It utilizes a two-stage approach: first, attempting fast extraction via the yt-dlp CLI tool; failing that, it falls back to advanced browser automation using Chrome DevTools MCP to scrape the transcript panel content directly from the webpage DOM. The output is always a clean, timestamped plain text file.

Performs a comprehensive security audit of Model Context Protocol (MCP) implementations, including servers, clients, and tools. This skill reviews code against critical security baselines (MCP-01 to MCP-05), OWASP MCP Top 10, and common Remote Code Execution (RCE) vectors (e.g., command injection, deserialization, SSRF). The output provides a detailed report with file and line references, ensuring compliance and identifying vulnerabilities before release. Use this when auditing network-exposed services or client security posture.

A comprehensive guide for building AI agents in Dart with Genkit, covering flows, tools, plugins, schemas, and the Genkit CLI for local development. Ideal for integrating LLMs into Dart or Flutter applications.

This SDK allows asynchronous Python programming to control a live web browser, simulating user interactions for web automation, testing, and data extraction. Users can navigate pages, locate elements, fill forms, click buttons, and capture snapshots of the current page's content. It enforces a 'perceive → act → verify' cycle, making it ideal for building robust web scrapers and end-to-end testing tools.

This skill transforms raw genomic identifiers (VCF, HGVS, rsID) into highly annotated, consequence-predicted records. It utilizes powerful, open-source tools like Ensembl VEP and gnomAD to predict variant consequences (e.g., missense, nonsense), map coordinates, and attach population allele frequencies. Furthermore, it links these molecular findings to clinical and phenotype context extracted by OpenMed, forming a comprehensive research record.

This skill scaffolds a gold-standard annotation project tailored for evaluating clinical NER and de-identification models (OpenMed). It guides users through defining label schemas, writing rigorous guidelines, configuring annotation tools (like BRAT/Label Studio), generating synthetic clinical text, and creating disciplined, non-leaking train/dev/test splits. It ensures that all committed data are synthetic fixtures for reproducible evaluation.

This skill deploys the OpenMed Model Context Protocol (MCP) server, exposing critical clinical NLP tools such as NER, PII extraction, and de-identification. It enables AI coding agents and chat clients to interact with OpenMed's capabilities via simple tool calls, running locally on-device to ensure user data privacy and security. Supports both stdio and Streamable HTTP deployment modes.

This skill extracts crucial Social Determinants of Health (SDOH) — such as housing instability, food insecurity, and transportation barriers — from unstructured clinical notes. It maps the identified text spans to standardized ICD-10-CM Z-codes (Z55–Z65). It is essential for health-equity analytics, building risk stratification tools, and identifying coding gaps by converting narrative text into queryable, discrete data points.

A comprehensive guide for embedding OpenMed-powered tools into Electronic Health Records (EHRs) like Epic or Cerner. It covers the entire SMART on FHIR workflow, including OAuth2 PKCE authorization, granular scoping (e.g., patient/DocumentReference.rs), secure token handling, and processing clinical notes locally on-device for de-identification and Named Entity Recognition (NER).

This comprehensive guide outlines a structured methodology for conducting authorized security testing on desktop thick clients (Win/macOS/Linux). It covers critical attack vectors, including local storage analysis, Inter-Process Communication (IPC) vulnerabilities, network traffic interception, client-side trust boundaries, and advanced reverse engineering techniques using tools like IDA and Ghidra.

This skill provides a CLI-based workflow for Android APK reverse engineering. It covers APK unpacking, Java decompilation, smali modification, repackaging, Frida dynamic hooking, and optional native .so analysis. It leverages local tools such as jadx, apktool, frida, adb, ida-reverse, and radare2. Useful for analyzing login, signature, security, root detection, or certificate verification logic in Android apps, always in an authorized context.