Skill UI

This skill generates a comprehensive, minimal, and enforceable security policy document (Blue Book) for applications handling sensitive data. It structures requirements using MUST/SHOULD/CAN language, explicitly defining assumptions, scope, threat models, and security gates. It is essential for establishing clear security guardrails and ensuring compliance early in the development lifecycle.

This framework enforces organizational governance and policy guardrails for Sentry usage. It standardizes configuration across services, mandatorily scrubbing PII, enforcing naming conventions, and managing trace rate caps based on service criticality. It integrates into CI/CD to prevent compliance drift and ensure adherence to standards like GDPR and HIPAA.

Provides a comprehensive guide for crafting and maintaining Claude Code skills, covering auto-activation hooks, skill-rules configuration, guardrails, domain skills, trigger testing, and Anthropic-aligned best practices such as the 500-line rule and progressive disclosure.

A comprehensive guardrail system for enforcing organizational governance across Supabase projects. It provides reusable RLS policy templates, strict naming conventions, CI-checked migration processes, cost alert configurations, and security audit scripts. Use this to ensure development consistency, security, and cost control at scale.

Implement comprehensive guardrails for Vercel applications, covering the entire development lifecycle. This solution includes custom ESLint rules to prevent secret exposure, pre-commit hooks for credential scanning, and robust CI checks to validate vercel.json, ensure edge runtime compatibility, and monitor bundle size, guaranteeing high quality and secure deployments.

This policy set establishes comprehensive guardrails for using AI coding assistants (like Windsurf/Cascade). It governs terminal commands, enforces workspace isolation (preventing access to secrets/credentials), and integrates CI/CD gates for code quality. Use this when setting up team development standards, mandatory code review policies for AI output, or implementing secure development pipelines.

Provides a Perl-centric security checklist covering taint mode, strict input validation, safe regex, file/command handling, and DBI parameterization to harden web and CLI applications before processing untrusted data.

Security guardrails embedded in the mortgage plugin that block prompt injection and social-engineering tricks, stop system prompt extraction, guard PII and pricing logic, enforce workflow phases, and ensure conversational inputs stay within refinance scope.

A comprehensive design specification detailing 98 rules for building Command Line Interface (CLI) tools that are safe, reliable, and easily consumable by AI agents. It covers structured JSON output formats, standardized error handling (to stderr), robust input contracts, safety guardrails (e.g., preventing path traversal), and tiered compliance levels (Agent-Friendly, Agent-Ready, Agent-Native) for seamless integration into AI workflows.

Implement GCP Organization Policy constraints to enforce security guardrails across an entire resource hierarchy, restricting risky configurations, enforcing encryption, and auditing compliance programmatically at organization, folder, and project scopes.

Builds NeMo Guardrails-based input/output validation pipelines to block prompt injection, redact PII, enforce content policies, and verify structured outputs so LLM-powered services stay safe before downstream use.

A specialized cognitive psychology skill designed to engineer highly engaging headlines, subject lines, and titles. It utilizes principles like the curiosity gap, self-relevance, and contrast to create compelling hooks for marketing copy, landing pages, emails, and social media ads. It ensures attention-grabbing power while maintaining ethical guardrails and promise continuity.