Skill UI

A comprehensive guide detailing best practices for securing Quarkus applications. It covers robust authentication methods like JWT and OIDC, role-based access control (RBAC) for authorization, mandatory input validation using Bean Validation, preventing SQL injection, and secure secret management. Essential for developers building highly secure Java microservices.

A comprehensive, expert-level guideline for building Agentic User Interfaces (UIs). This system emphasizes conversational interactions, clear outcomes, and minimal user controls, allowing users to delegate complex tasks to AI. It provides structured rules covering color tokens, typography, accessibility (WCAG 2.2 AA), and component anatomy for professional developers and designers.

Meta-orchestrator for multi-framework compliance teams to select applicable frameworks, map cross-framework control overlap, simulate internal audits, and consolidate reusable evidence across ISO, GDPR, SOC 2, AI Act, and more.

This skill simulates a comprehensive auditor pressure test for any Information Security Management System (ISMS) against ISO 27001 standards. It forces interrogation on six critical areas—including scope, risk management, access control, and incident response—ensuring compliance and readiness before internal audits, Stage 1 certification, or surveillance audits.

This skill provides specialized internal auditing capabilities for ISO/IEC 42001:2023 AIMS. It helps compliance teams assess gaps across Clauses 4-10, build comprehensive AI risk registers with control mapping, and plan structured internal audits (Clause 9.2). Ideal for pre-certification readiness, scoping internal audit cycles, or integrating AI systems into existing quality/security management systems (ISMS/QMS).

This tool simulates the rigorous interrogation of a SOC 2 Type II auditor. It forces readiness checks across six critical domains—including scope definition, control consistency, change management, exception tracking, and evidence timing—at key audit milestones (pre-observation, mid-period, pre-field-test). Essential for maintaining continuous compliance.

This skill automatically routes subtasks to the most cost-effective Claude model (Haiku, Sonnet, or Opus) based on complexity. It logs real token usage and cost per session, and includes an A/B testing feature to validate model tier savings against your actual workload, ensuring accurate cost control.

This skill provides a comprehensive solution for embedding the powerful, Photoshop-compatible Photopea editor into any web application. Using photopea.js, developers can control the embedded instance via JavaScript, enabling advanced workflows such as opening remote files, loading local assets (fonts, brushes), executing custom scripts to manipulate layers and text, and exporting the final result in various formats (PNG, JPG, PSD, WebP). Ideal for building professional creative tools directly into your product.

A comprehensive guide for securing container images and runtime environments. Covers best practices from Dockerfile authoring (minimal base images, multi-stage builds, non-root users) through advanced runtime enforcement (seccomp, AppArmor) and Kubernetes security controls. Essential for production hardening and maintaining supply chain integrity.

A comprehensive REST API for sending and receiving multi-channel messages, including iMessage (blue bubbles), SMS, and RCS. This skill allows developers to integrate messaging capabilities into server-side applications, supporting advanced features such as group messaging, reactions, typing indicators, and status callbacks. It also handles inbound messages via webhooks, making it ideal for building robust, real-time communication services that require programmatic control over messaging lifecycles.

TextMe is a local daemon that transforms your smartphone into a powerful remote control for Claude Code sessions. By bridging inbound iMessages (from whitelisted numbers) through services like Sendblue, users can interact with their AI session on their laptop, executing code, navigating filesystems, sending voice notes, and receiving real-time updates. Ideal for supervising headless workstations or coding while away from your desk.

This skill provides comprehensive management for Opencode's permission system. It allows users to review currently always-allowed commands, suggest safe read-only commands, and configure granular access controls using allow/deny/ask patterns. It is essential for optimizing security, performing system audits, and managing the operational scope of the agent.