Skill UI

Semgrep is an open-source static analysis tool used to find bugs, detect vulnerabilities, and enforce coding standards. This guide covers writing custom rules in YAML format to implement advanced SAST checks, such as detecting SQL injection, hardcoded secrets, or tracking tainted user input. It is essential for building robust DevSecOps pipelines and ensuring compliance.

This skill guides developers through integrating Static Application Security Testing (SAST) tools like CodeQL and Semgrep into GitHub Actions CI/CD pipelines. It covers automating code scanning on pull requests and pushes, tuning rules to reduce false positives, uploading SARIF results, and establishing quality gates to prevent vulnerable code from merging into production.

This library provides a complete and verified set of grep command patterns designed for auditing existing React codebases. It is essential for developers preparing for major React upgrades, specifically migration audits for React 18.3.1 or React 19. It detects deprecated APIs, removed features, unsafe lifecycle methods, batching vulnerabilities, and dependency conflicts, ensuring a smooth transition.

A comprehensive guide and workflow for managing a personal knowledge vault using Obsidian. It details best practices for structuring notes in a flat file system, utilizing index notes, and leveraging wikilinking syntax ([[wikilinks]]) for robust connectivity. Includes command-line methods (grep/find) for efficient searching, note creation, and finding related backlinks across the entire vault, ensuring organized, interconnected learning.

A fast, grep-based linter that checks for common design system violations in CSS and component code, such as hardcoded colors, raw pixel values, and deprecated syntax. It provides immediate automated feedback to ensure code adheres to established design tokens and best practices.