Skill UI

This tool performs a rapid, heuristic security assessment focused on identifying common vulnerabilities listed in the OWASP Top 10. It scans source code for hardcoded secrets, SQL injection risks, XSS vectors, insecure dependencies, and authentication flaws. It is ideal for pre-commit checks or code reviews before merging sensitive changes.

This tool simulates a senior application security engineer, performing a comprehensive, multi-phase audit. It checks for exposed secrets, prompt injection vectors, dependency vulnerabilities (supporting multiple languages), and critical configuration misconfigurations. It provides a scored, prioritized remediation report, ensuring a robust security posture before deployment.

The Ship command provides a comprehensive, multi-stage checklist for ensuring code readiness before production deployment. It verifies critical quality gates, including running full unit tests, performing security audits, checking for hardcoded secrets, and verifying documentation updates. Use this tool to guarantee the stability and quality of every software release.

A comprehensive framework for assessing software supply chain security. It covers generating Software Bill of Materials (SBOM), performing Software Composition Analysis (SCA) on open-source dependencies, auditing CI/CD pipelines, and analyzing container images. This skill helps identify vulnerabilities, ensure build integrity, and verify component provenance across the entire development lifecycle.

This protocol simulates a diverse, anonymous jury of 3 to 5 specialized subagents to reach a committed, non-ambiguous verdict. It is designed to combat cognitive biases like anchoring and groupthink by running blind, independent opinions before structured deliberation. Ideal for high-stakes decisions across product development, architecture, strategy, and vendor choice where a single perspective is insufficient.

This utility is essential for developers needing to ensure that recent code modifications function as intended. By running the application within a verification environment, users can quickly validate that the changes meet all expected behaviors, maintaining system stability and quality assurance before deployment or merging.