Skill UI

This skill creates custom Semgrep rules for detecting security vulnerabilities, bug patterns, and code patterns. It guides users through a strict workflow including test-first development, AST analysis, and validation. Ideal for building static analysis detections, enforcing coding standards, and identifying data flow issues using taint mode.

Creates language-specific variants of existing Semgrep rules. Use when porting a rule to target languages, with applicability analysis and test-driven validation for each language.

Manage tasks on an OpenViking kanban board using markdown files. Supports task handoffs between agents, progress tracking, and evidence archiving. Use the `ov` CLI to read, write, and grep task states. Ideal for collaborative workflows where work needs to be paused and resumed by different agents without losing context.

This skill helps identify similar vulnerabilities and bugs across codebases using pattern-based analysis. It is used for hunting bug variants, building CodeQL or Semgrep queries, analyzing security vulnerabilities, and performing systematic code audits after an initial issue is found. It involves understanding root causes, creating exact match patterns, and iteratively generalizing search criteria while avoiding false positives.