Skill UI

This skill generates a comprehensive, structured threat model for any given service or feature using the STRIDE framework. It guides users through identifying critical assets, defining trust boundaries, enumerating specific threats (Spoofing, Tampering, Repudiation, Information Disclosure, Denial of Service, Elevation of Privilege), assessing risk, and proposing concrete mitigation controls. Ideal for security design reviews and documentation.

This document provides a comprehensive guide to the principles and vocabulary needed to write high-quality, predictable, and effective skills. It covers advanced concepts like model-invoked vs. user-invoked skills, managing context load, structuring information hierarchies (steps vs. reference), and implementing progressive disclosure to improve agent predictability.

This skill facilitates the systematic triage and closure of open promises or commitments within a project context. It guides the user to reliably close these commitments using verifiable, real-world outcomes via the acc_act(runtime="outcome") command. It emphasizes maintaining rigorous provenance discipline, ensuring that status updates are based only on external or runtime validated results, thereby maximizing data integrity and accountability.

This skill covers the principles of building Software Development Kits (SDKs) that provide an exceptional developer experience (DX). Learn how to design intuitive APIs, utilize progressive disclosure, establish sensible defaults, and implement actionable, guiding error messages. The focus is on driving product adoption by making the developer's workflow seamless and productive. Ideal for product managers, technical leads, and API designers.

This guide provides a comprehensive reference on Agent Skills, a standardized and powerful method for providing structured context, workflows, and tools to Large Language Models (LLMs). It details the anatomy of the SKILL.md file, the three-stage progressive disclosure loading process, and best practices for creating both capability (tool-based) and process (workflow-based) primitives. Use this resource when designing, reviewing, or debugging agent-driven applications to ensure reliable and context-efficient performance.

A guide for security researchers focused on finding exploitable, remote-reachable vulnerabilities for bug bounties or responsible disclosure. It emphasizes high-signal flaws such as SSRF, RCE, and SQL injection, while guiding users through the professional triage and PoC creation process for penetration testing.