Skill UI

Provides automated regression analysis guidance, best practices, code snippets, and validation for SQL, BI, visualization, and statistical workflows in data analytics projects.

Scans your codebase with pattern matching and entropy analysis to detect exposed secrets like API keys, passwords, and private keys, then generates remediation reports so you can fix vulnerabilities before committing or deploying code.

Automates the generation of professional, high-resolution marketing screenshots for your web application using Playwright. This skill guides you through the entire process, from gathering user requirements (product hunt, social media, documentation) to deep code analysis (routes, components). It ensures comprehensive coverage of key features, providing marketing-ready assets for your product launch or documentation.

Runs AgentShield to audit Claude Code configuration files and MCP components for secrets, injection risks, and overly permissive settings, offering CLI, JSON/Markdown/HTML reports, auto-fix, Opus deep analysis, and CI-ready GitHub Action hooks to harden new or existing projects.

Perform Static Application Security Testing (SAST) to identify critical security vulnerabilities, including SQL injection, XSS, hardcoded secrets, and path traversal, directly from source code. Supports multi-language ecosystems (Python, JavaScript, Java, Go, etc.) and major frameworks, enabling crucial pre-deployment security validation and compliance checks (OWASP, PCI-DSS).

Runs Semgrep static analysis with auto language detection, parallel Task subagents, Semgrep Pro checks, and configurable “run all” or “important only” modes to audit codebases for vulnerabilities and bug patterns.

A comprehensive skill set for modern frontend development using React, Next.js, TypeScript, and Tailwind CSS. It covers automated project scaffolding, component generation (including hooks and stories), and critical bundle analysis. Use this to enforce best practices, optimize performance, and maintain high code quality in large-scale web applications.

A comprehensive toolkit for the full software development lifecycle. It guides stack selection using a detailed decision engine, automatically scaffolds complex boilerplate projects across multiple popular stacks (Next.js, MERN, FastAPI, Django), and provides deep code quality analysis. Features include security vulnerability detection, complexity scoring, and dependency auditing, ensuring high-quality development from the start.

A comprehensive guide to configuring and utilizing ShellCheck for static analysis of shell scripts (Bash, sh, POSIX). This tool detects common programming pitfalls, enforces best practices, and helps ensure script reliability and portability. Ideal for setting up linting in CI/CD pipelines, pre-commit hooks, or maintaining code quality standards across a development team.

This expert skill specializes in guiding comprehensive GitHub issue resolution. It covers systematic bug investigation, feature implementation, and collaborative development workflows. Expertise includes issue triage, root cause analysis, test-driven development, and professional pull request management, ensuring vague reports are transformed into production-ready code following modern CI/CD practices.

A comprehensive skill to identify, analyze, prioritize, and track technical debt across large codebases. It provides three interconnected tools: a Debt Scanner, a Debt Prioritizer (using cost-of-delay frameworks), and a Debt Dashboard. This system helps engineering teams make data-driven decisions to balance new features with necessary maintenance and refactoring work, ensuring the long-term sustainability of software systems.

Automates guidance for technical diagram analysis, offering best practices for diagrams, charts, presentations, and validating code or visuals to meet visual documentation standards.