Skill UI

This skill outlines a systematic workflow for addressing review comments and issue feedback on GitHub Pull Requests (PRs) using the GitHub CLI (`gh`). It guides users through inspecting comments, planning fixes, applying code changes, and finally responding to the threads as resolved, ensuring a streamlined code review process.

Prepares codebases for Trail of Bits security reviews by setting goals, running static analysis, expanding test coverage, pruning dead code, documenting build scope/access, and generating flowcharts, user stories, glossaries, and other reviewer-ready artifacts.

Prepares codebases for Trail of Bits security reviews by setting goals, running static analysis, expanding test coverage, pruning dead code, documenting build scope/access, and generating flowcharts, user stories, glossaries, and other reviewer-ready artifacts.

This comprehensive skill guide details essential security best practices for modern application development. It covers identifying and mitigating common vulnerabilities such as hardcoded secrets, SQL injection, XSS, and CSRF. Use this when implementing authentication, handling user input, managing sensitive credentials, or building new API endpoints to ensure robust and secure code.

This skill provides comprehensive guidelines based on Clean Code principles, transforming merely functional code into highly readable, maintainable, and robust software. It covers best practices for naming conventions, function design (small, single responsibility), error handling (exceptions over return codes), formatting, and adhering to Test-Driven Development (TDD). Use this skill when writing new features, reviewing pull requests, or refactoring legacy systems to improve overall code quality.

This skill serves as an expert guide for writing, reviewing, and optimizing AWS CloudFormation templates. It covers foundational best practices, including utilizing parameterized environments, implementing nested stacks, managing stateful resources with deletion policies, and ensuring production-grade infrastructure consistency. Use it when building robust and maintainable Infrastructure as Code (IaC) for AWS.

This skill acts as a code education expert, specializing in breaking down complex code, algorithms, or system architecture. It transforms difficult technical concepts into understandable explanations using clear narratives, visual diagrams, and step-by-step breakdowns. Ideal for creating learning materials, onboarding guides, or detailed technical reviews for developers of all levels.

An expert AI specialist that integrates advanced static analysis (e.g., CodeQL, SonarQube) with modern DevOps practices. It performs multi-layered code reviews, checking for security vulnerabilities, performance bottlenecks, architectural flaws, and adherence to best practices across various languages. Ideal for CI/CD pipelines and pull request validation.

A systematic and comprehensive checklist for conducting thorough code reviews. This skill guides reviewers through checking crucial aspects including functionality verification, security vulnerabilities, performance bottlenecks, code maintainability, and test coverage, ensuring high code quality standards.

This skill helps transform code reviews from simple gatekeeping into a powerful knowledge-sharing mechanism. It guides users through systematic analysis of code changes, focusing on correctness, security, performance, and maintainability. Use it when reviewing pull requests, establishing best practices, or mentoring developers to ensure high-quality, robust codebase development.

Analyzes diffs, architecture, and tests to spot bugs, SQL injection, XSS, N+1 queries, and maintainability smells, then produces prioritized, actionable reports ideal for PR reviews, quality audits, and refactoring planning.

Learn how to integrate CodeRabbit as a mandatory Continuous Integration (CI) gate within your GitHub repository. This comprehensive guide demonstrates setting up branch protection rules, creating GitHub Actions workflows, and enforcing CodeRabbit's reviews to ensure high code quality before merging. Includes advanced setup for PR size checks and notification mechanisms.