Skill UI

This skill generates a concise and enforceable security policy document for applications handling sensitive data. It creates a single coherent Blue Book using MUST, SHOULD, and CAN language, defining explicit assumptions, scope, and security gates. The workflow includes gathering context, drafting the policy, enforcing guardrails against secrets, and performing quality checks on threat models and data handling rules.

This skill specializes in transforming theoretical threat models, risk assessments, and business context into concrete, actionable security requirements. It is essential for writing detailed security user stories, defining robust acceptance criteria, building comprehensive security test cases, and ensuring compliance requirement mapping. Use it when bridging the gap between identifying a vulnerability and specifying how the system must be secured.

This skill scaffolds the necessary configurations for advanced engineering workflows. It guides the user through setting up the issue tracking system (GitHub, GitLab, or local markdown), defining the canonical triage label vocabulary, and establishing the domain documentation context (single or multi-context). It must be run once to initialize the repository for subsequent agent-driven development skills.

This skill enables the creation, improvement, and management of AI agent capabilities following specific specifications. It guides users through synthesizing sources, iterating on examples, authoring artifacts, and evaluating outcomes. Use it when tasked with defining new agent workflows, updating existing skill documentation, or optimizing trigger precision for better performance.

Framework for defining and implementing Service Level Indicators (SLIs), Service Level Objectives (SLOs), and error budgets to balance reliability with innovation velocity. Includes Prometheus recording rules, alerting configurations, and error budget policies for measuring service reliability targets.

This skill guides the mastery of smart contract security best practices for Solidity. It is essential for writing robust, secure, and efficient contracts, auditing existing code for common vulnerabilities (such as reentrancy, overflow, and access control issues), and implementing secure DeFi protocols. It focuses on preventing common attack vectors while optimizing gas usage.

This skill generates comprehensive market opportunity analysis for startups, calculating TAM, SAM, and SOM using bottom-up and top-down methodologies. It guides users through defining target markets, gathering data, validating assumptions, and creating detailed reports with actionable insights for investment thesis and growth strategy.

Guides the TDD red phase by generating comprehensive failing tests that define expected behavior, edge cases, and error handling across multiple frameworks (Jest, pytest, JUnit, Go, RSpec). Ensures failures are meaningful and test isolation.

This skill transforms the current workspace into a comprehensive, stateful teaching environment. It guides the user through deep, multi-session learning by structuring content into core components: a defined mission, reference materials, curated resources, structured lessons, and continuous learning records. It employs educational best practices (spaced repetition, retrieval practice) to ensure long-term knowledge retention.

This skill provides a robust system for tracking all code modifications using structured JSON records and enforcing a defined state machine (e.g., planned -> deployed). It is critical for AI coding workflows, ensuring that if a session expires or is abandoned, the next session receives the full context, progress summary, and blockers to resume seamlessly. Ideal for complex, multi-stage development projects and onboarding new codebases.

Provision and manage Google Cloud Platform infrastructure using Terraform with the hashicorp/google provider. Define repeatable, auditable IaC for VPC, GKE, Cloud SQL, IAM, and multi-environment CI/CD deployments.

This comprehensive workflow provides a complete cycle of quality assurance for software development. It covers every stage from defining the test strategy (TDD, Unit Testing) through integration, E2E testing, browser automation, performance profiling, security scanning, and final code review. Use this when setting up robust testing infrastructure or ensuring production-ready software quality.