Skill UI

This skill enforces best practices for managing Go modules, focusing on stability, security, and maintainability. It guides users through essential workflows like dependency addition, safe upgrading (e.g., patch updates), cleanup (go mod tidy), and critical vulnerability scanning (govulncheck). Use this when initializing, updating, or auditing a Go project's dependency tree to ensure supply chain safety.

This library provides a complete and verified set of grep command patterns designed for auditing existing React codebases. It is essential for developers preparing for major React upgrades, specifically migration audits for React 18.3.1 or React 19. It detects deprecated APIs, removed features, unsafe lifecycle methods, batching vulnerabilities, and dependency conflicts, ensuring a smooth transition.

This skill performs a comprehensive audit of project dependencies, identifying critical security vulnerabilities (CVEs), analyzing license compliance against established policies, and detecting outdated or risky packages. It produces an actionable report including an overall dependency health score and a prioritized, time-bound remediation plan, ensuring the software supply chain is secure and legally compliant.

A powerful CLI and API client for exploring the entire Go ecosystem. It queries pkg.go.dev to provide comprehensive documentation, API references, usage examples, available versions, dependency relationships, and known security vulnerabilities for any Go package or module. Ideal for developers conducting library research, checking compatibility, or auditing dependencies.

Provides championship-grade repository hygiene and health checks. It systematically audits critical areas, including dependency health, CI/CD pipeline alignment, documentation synchronization, and detecting stray artifacts. The tool generates a prioritized, actionable cleanup plan and offers auto-fix capabilities to keep codebases pristine and production-ready.

This comprehensive tool scans all project dependencies against databases of known CVEs (Common Vulnerabilities and Exposures) and security vulnerabilities. It is essential for conducting thorough security audits of third-party packages, ensuring code quality before major releases, or responding to specific security advisories. It provides actionable reports categorized by severity.