Skill UI

This skill functions as a dedicated dependency security expert, specializing in auditing project dependencies. It analyzes codebases for known security vulnerabilities, license compliance issues, outdated packages, and overall supply chain risks. It provides comprehensive, actionable remediation strategies and detailed risk reports to keep software supply chains secure and compliant.

A powerful tool for comprehensive, offline dependency auditing across 8+ programming ecosystems (e.g., Node, Python, Go, Rust). It identifies critical CVE vulnerabilities, license conflicts, and calculates safe upgrade paths, making it essential for pre-release security checks, legal compliance reviews, and major version migrations.

This skill functions as a specialized dependency security expert. It analyzes project dependencies to identify critical security vulnerabilities, licensing compliance issues, and outdated packages. It provides comprehensive, actionable remediation strategies to strengthen supply chain security.

Comprehensive checklist for application security hardening, covering input validation, output encoding, SQL/CSRF defenses, security headers, JWT best practices, secrets handling, rate limiting, and dependency audits to keep web services resilient.

A comprehensive toolkit for the full software development lifecycle. It guides stack selection using a detailed decision engine, automatically scaffolds complex boilerplate projects across multiple popular stacks (Next.js, MERN, FastAPI, Django), and provides deep code quality analysis. Features include security vulnerability detection, complexity scoring, and dependency auditing, ensuring high-quality development from the start.

Provides a Senior SecOps engineer toolkit for running SAST/DAST, dependency CVE scans, policy checks, and compliance automation (SOC2/PCI-DSS/HIPAA/GDPR) during audits, CVE response, or CI/CD hardening.

This skill provides comprehensive dependency management for software projects. It analyzes the entire dependency tree to identify security vulnerabilities, suggest safe updates, and help plan major version migration paths. Use this when performing security audits, managing third-party library updates, or planning complex project upgrades.

A comprehensive security scanner designed to audit AI agent skills before deployment. It analyzes source code (Python, Bash, JS), detects critical vulnerabilities like command injection, network exfiltration, and unsafe deserialization. Furthermore, it scans markdown files for prompt injection attacks, and assesses dependency supply chain risks, providing a clear PASS/WARN/FAIL verdict and remediation guidance.

Automated Rust Security Auditor for analyzing crate source code to spot vulnerabilities, dependency issues, and unsafe patterns before deployment across teams.

This tool systematically audits a project's dependencies to identify potential supply chain security risks. It evaluates critical factors such as maintenance status, contributor count, popularity, and the presence of high-risk features. It is ideal for pre-security audits, assessing the overall attack surface, and mitigating risks before deployment.

Executes a deep security audit via Centinela (QA), covering OWASP Top 10 checks, dependency CVEs, secrets scans, and delivers structured findings and handoff reports.

A robust security auditing tool designed to scan CI/CD pipeline configurations, such as GitHub Actions YAML, for critical supply chain vulnerabilities. It automatically detects issues like unpinned dependencies, script injection risks, secrets exposure, and dependency confusion, helping teams harden their build systems and maintain secure software development lifecycles.