Skill UI

A comprehensive workflow designed for Product Managers and technical leads to systematically identify, prioritize, and document missing features in a software project. It guides users through project understanding, gap analysis, applying a scoring matrix for prioritization, developing detailed Minimum Viable Product (MVP) specifications, and structuring the output as actionable development issues (e.g., GitHub Issues) with dependency mapping and workload optimization.

Retrieves and analyzes Cancer Dependency Map release data, including CRISPR Chronos gene effects, model annotations, omics biomarkers, and PRISM drug sensitivity for selective dependency and synthetic-lethality analyses.

This structured skill guides users through root-cause-first debugging when an implementer is blocked, verification fails, or repeated attempts at fixing do not converge. It mandates a systematic approach combining local evidence inspection, runtime analysis, and external documentation research to accurately classify the failure's true source (e.g., missing dependency, spec conflict). It prevents speculative patching and generates a clear, actionable fix plan.

A comprehensive CI/CD pipeline for Quarkus applications, designed to verify code quality and deployment readiness. It covers all phases: build, static code analysis (SonarQube, Checkstyle), rigorous functional testing (Unit, Integration, API), security scanning (OWASP, dependency checks), native image compatibility testing, performance load testing (K6), and container image validation (Trivy, Grype).

This comprehensive guide covers the process of creating, analyzing, and securing Software Bills of Materials (SBOMs). It utilizes Syft to generate standards-compliant SBOMs (CycloneDX or SPDX) from container images and filesystems. The workflow details correlating these SBOMs with known CVEs using Grype for vulnerability analysis, and subsequently signing the artifacts with Cosign. This process is crucial for establishing supply chain trust, ensuring dependency visibility, and integrating vulnerability gating into CI/CD pipelines.

This tool is designed to analyze source code by extracting core entities (classes, functions, modules, types) and mapping their complex relationships (imports, inheritance, calls, dependencies). It constructs a comprehensive Knowledge Graph (KG) in AgentDB. This is essential for detailed dependency analysis, understanding large codebase structures, and performing accurate impact assessments.

This tool performs pathfinder traversal across a knowledge graph starting from a specified seed entity. It expands outward through causal edges, calculates path relevance scores, and prunes low-similarity branches. It is ideal for conducting impact analyses, tracing dependency chains, or understanding complex relationships within a structured knowledge base.

A comprehensive CI/CD quality gate for Quarkus microservices. This pipeline guides developers through critical stages: build integrity, static code analysis (Checkstyle, SonarQube), thorough unit/integration/API testing with coverage enforcement, dependency vulnerability scanning, native compilation validation (GraalVM), and performance load testing using K6. It ensures high code quality before PR or deployment.

Repo-scan is a powerful tool designed for comprehensive auditing of large and complex codebases, especially monorepos. It performs cross-stack analysis across C++, Android, iOS, and Web technologies. Key features include classifying files (core code, third-party, build artifacts), identifying known libraries, and assessing code modules into four stages: Core, Extract, Refactor, or Deprecate. Essential for planning major refactoring efforts or inheriting legacy systems.

This skill utilizes hyperbolic space embedding (Poincare ball model) to represent complex data structures with inherent hierarchy, such as dependency trees, ontologies, or module taxonomies. Unlike standard Euclidean embeddings, hyperbolic space preserves hierarchical distances efficiently, allowing for accurate distance calculations (geodesic distance) that grow logarithmically with tree depth. It is ideal for advanced knowledge graph analysis and code architecture mapping.

This advanced skill specializes in tracing the complete provenance of software artifacts across the entire development lifecycle. It is designed for deep security analysis of CI/CD pipelines, identifying dependency drift, build tampering, package origin, and determining the final artifact consumed at runtime. Use it when investigating integrity vulnerabilities in complex release flows.

Analyzes a Power Pages site project's source code and dependencies for various security issues. It runs static analysis (opengrep) and dependency scanning (trivy) to detect vulnerable packages, hard-coded secrets, license compliance problems, and general code patterns. Use this skill to audit code safety, check dependencies, or perform a comprehensive security audit.