Skill UI

This skill simulates a senior engineer's final, deep audit of an entire codebase before committing or pushing to a remote repository. It systematically checks for junk files, dead code, security vulnerabilities (secrets, injection flaws), and performance bottlenecks (N+1 queries). Use this pre-flight check before any major release or public deployment to ensure maximum code quality and production readiness.

A rigorous, security-focused code review process designed for Pull Requests (PRs), commits, and diffs. It moves beyond general reviews by focusing intensely on high-risk areas such as authentication, cryptography, external calls, and value transfer. The methodology is evidence-based, requiring detailed attack scenario modeling and generating comprehensive, auditable markdown reports to identify overlooked vulnerabilities and regressions.

The /hub:status command provides a comprehensive overview of an AgentHub session. It displays the current state of agent branches, commit counts, frontier status, and recent board updates. This is useful for monitoring ongoing collaborative AI tasks, allowing users to track progress and identify which agents are active or have completed their tasks.

This skill guides users on setting up automated code quality gates directly at the Git level. It covers best practices using frameworks like Husky, lint-staged, and pre-commit. Users can enforce linting, formatting, type-checking, and standardized commit message conventions (e.g., Conventional Commits) before code is committed or pushed, significantly improving code hygiene and development workflow consistency.

A comprehensive framework for applying the six core principles of ethical persuasion (Reciprocity, Commitment, Social Proof, Authority, Liking, Scarcity) to optimize product design, marketing copy, and sales flows. It helps users understand human behavioral heuristics to create genuinely compelling and ethical user experiences, increasing engagement and conversion rates.

A structured methodology for de-risking product ideas and validating market opportunities. This framework guides teams through defining measurable outcomes, building Opportunity Solution Trees (OST), mapping critical assumptions (Desirability, Viability, Feasibility), and planning rigorous experiments (prototyping, interviews, usability tests) before committing to full development resources. Ideal for discovery sprints and pre-build validation.

Autonomous experiment loop that edits a target file, runs a fixed evaluation, commits improvements, resets failures, and repeats to optimize any measurable metric.

This skill automates the extraction of actionable items, commitments, and follow-ups from meeting notes (e.g., Granola, Grain). It creates structured tasks in Todoist, updates task status, and drafts follow-up emails. Ideal for running daily or post-meeting cron jobs to ensure all commitments are tracked and executed.

This skill generates a comprehensive daily digest summarizing all critical pending items into a single summary. It aggregates stalled scheduling threads, unanswered emails, pending introductions/follow-ups, open Todoist tasks, and upcoming calendar events from multiple sources. It is essential for running a daily summary cron job or when the user requires a quick status check on their workload and commitments.

A comprehensive solution for identifying and preventing the accidental commitment of exposed AWS credentials, API keys, and session tokens within source code, configuration files, and git history. It integrates TruffleHog and git-secrets into CI/CD pipelines and pre-commit hooks, providing critical protection against credential theft and unauthorized cloud access in a DevSecOps environment. Essential for security auditing and compliance.

This skill guides the implementation of Gitleaks for robust secret scanning across development lifecycles. It covers setting up pre-commit hooks to prevent secrets from being committed, integrating scanning into CI/CD pipelines (like GitHub Actions), and writing custom regex rules to detect and remediate hardcoded credentials (API keys, passwords, tokens) in Git history, ensuring adherence to secure SDLC practices.

Vibers provides a human code review workflow for AI-generated GitHub projects; add the collaborator, GitHub Action, and commit guidance to receive spec- and security-focused feedback plus follow-up PR fixes.