Skill UI

This CLI alias implements the PUA Loop protocol, designed for running structured, iterative verification cycles. It helps developers set up and manage complex coding tasks that require explicit verification commands and defined stop conditions. It serves as a powerful wrapper for AI coding assistants like Codex/Claude, ensuring robust and traceable development workflows.

A comprehensive code review tool designed for C#/.NET projects. It evaluates the implementation of key design patterns (Command, Factory, Repository) and adherence to SOLID principles. The review covers architecture, best practices (async/await, logging), security, testability, and clean code principles, providing actionable recommendations for improvement.

This skill performs a comprehensive security audit of Model Context Protocol (MCP) server configurations found in .mcp.json files. It is designed to identify critical vulnerabilities, including hardcoded secrets (API keys, tokens), dangerous shell injection patterns, unpinned dependencies, and compliance issues regarding approved server lists. Use this skill during security reviews, project onboarding, or pre-commit checks to ensure secure deployment.

This tool automates the entire process of creating a complete, production-ready application structure solely from an OpenAPI (Swagger) specification. It analyzes the spec to design the application architecture, generating all necessary layers including controllers, service logic, data models (DTOs), and repositories, adhering to best practices, framework conventions, and separation of concerns. The output includes unit tests, configuration files, and setup instructions, providing a robust, ready-to-use codebase.

An advanced, AI-powered agent designed to generate comprehensive and workable unit tests for virtually any programming language (e.g., Python, C#, Java, Go, TypeScript). It operates via a sophisticated multi-agent pipeline (Research → Plan → Implement → Build → Test → Fix → Lint). This ensures generated tests are not only written following project conventions but also compile, pass all tests, and effectively improve code coverage.

Design, analyze, and refine Azure infrastructure through natural language prompts, generate interactive architecture diagrams locally with bundled scripts, and produce deployable Bicep templates to automate infrastructure-as-code workflows.

Analyzes PostgreSQL snippets or entire projects to flag anti-patterns, enforce best practices, optimize JSONB/array usage, schema design, custom types, triggers, extensions, and security policies like RLS.

A comprehensive, multi-phase quality engineering audit tool designed to test codebases beyond standard unit tests. It first explores the codebase's domain and architecture to derive behavioral requirements, then executes a rigorous sequence including spec-traced functional tests, three-pass code reviews, and a multi-model specification audit (Council of Three). It is specifically engineered to find the critical 35% of real-world defects that structural code review alone might miss. Works with any programming language.

This skill provides comprehensive guidelines and techniques for safe code refactoring. It focuses on improving code structure, readability, and maintainability without altering the external behavior or functionality of the system. Learn to address common code smells, such as long methods, duplicated logic, god objects, and primitive obsession, using established design patterns and best practices. It emphasizes that refactoring should be gradual, test-driven, and methodical.

This guide maps user questions and topics (e.g., configuration, memory, skills, CLI) to specific, relevant documentation paths and source code entry points within the QwenPaw ecosystem. It is designed for built-in QA Agents to eliminate aimless searching, ensuring the agent reads the most accurate files to provide comprehensive and precise answers about the system's features.

A universal assistant for conducting deep code reviews across major SQL databases (MySQL, PostgreSQL, SQL Server, Oracle). It rigorously analyzes SQL code for critical vulnerabilities (like SQL injection), performance bottlenecks, maintainability issues, and adherence to industry best practices. Features include security audits, index optimization recommendations, query structure analysis, and schema design validation, ensuring robust and secure database development.

A comprehensive guide covering best practices for Terraform and OpenTofu. It provides structured advice on module hierarchy, directory organization, naming conventions, and advanced testing strategies (including native testing and policy as code). Use this skill when designing, refactoring, or implementing robust Infrastructure as Code (IaC) pipelines and multi-environment deployments.