Skill UI

Perform static application security testing to identify vulnerabilities in source code before deployment. Use tools like Semgrep, CodeQL, and SonarQube to integrate security gates into CI/CD pipelines and ensure compliance with secure SDLC practices.

Screen a person or organization for adverse media coverage, PEP status, and sanctions exposure using the Stipple API. Corroboration-gated results return 'review' not 'guilty'. Ideal for AML/CTF onboarding, vendor due diligence, investor vetting, and ongoing counterparty monitoring.

This skill generates a concise and enforceable security policy document for applications handling sensitive data. It creates a single coherent Blue Book using MUST, SHOULD, and CAN language, defining explicit assumptions, scope, and security gates. The workflow includes gathering context, drafting the policy, enforcing guardrails against secrets, and performing quality checks on threat models and data handling rules.

A comprehensive automation toolkit for managing Sentry error tracking and monitoring operations. Users can programmatically investigate issues, configure project-level alert rules, manage release versions, and monitor organizational structure. Essential for DevOps and development teams needing deep integration and programmatic control over error data.

This skill enables comprehensive software supply chain security assessment, covering SBOM generation, SCA scanning, CI/CD pipeline review, and container image auditing. It involves verifying build integrity, dependency provenance, and vulnerability reachability. Key activities include auditing upstream repositories, integrating security gates in CI/CD, ensuring artifact integrity, and monitoring CVEs for actual exploitability to mitigate supply chain attacks.

This skill utilizes the Taisly Agent Kit to manage the entire workflow for publishing approved short-form videos across major platforms, including TikTok, Instagram Reels, YouTube Shorts, X, and Facebook. It facilitates agent-assisted publishing by ensuring coordination of captions, metadata, and campaign details. A critical feature is the mandatory explicit confirmation gate, which prevents any state-changing publishing action without explicit user approval, prioritizing safety and compliance.

Send messages, files, and alerts via Telegram bot API. Supports inline button questions for approvals and CI/cron notifications. Ideal for workflow automation, long-running task updates, and interactive approval gates without complex installation.

Investigate what went wrong in a Superpowers session and report findings with hard evidence. Reads on-disk transcripts to trace skill timelines, plan adherence, repeated work, stumbles and cost, then drafts an evidence-backed report, an optional GitHub issue, or a sanitized bundle for maintainers.

Build production-grade procedural meshes in Three.js: profile extrusion, lofts, revolve, sweep, solidify, bevels and apertures, plus topology, coplanar, clash and semantic quality gates for hard-surface assemblies and humanoid robots.

A security assessment skill that enforces a 7-question validation gate before submitting any vulnerability finding, ensuring only confirmed, in-scope, high-impact issues are reported. It provides a structured decision framework to kill false positives, verify authorization, and avoid known invalid bug classes.

Aggregates Uncle Bob’s Clean Code, Architecture, Coder, Agile, and design-pattern guidance to evaluate reviews, refactors, and architecture decisions, and to surface professionalism heuristics without replacing your linter or formatter.

Operate and evaluate a local Unified AI System through governed MCP tools without provider credentials. This skill enables secure inspection of AI gateways, including prompt enhancement and authorization boundaries, ensuring safety through content review and Docker image analysis before deployment.