Skill UI

This skill audits deployed web apps for exposed secrets like hardcoded API keys and tokens in JavaScript or HTML. It checks for publicly reachable config files and security header misconfigurations. It is a defensive, read-only workflow for authorized security reviews to identify potential data leaks without exploiting systems.

This skill enables expert analysis of embedded systems and IoT firmware. It covers hardware reverse engineering, extracting file systems, identifying vulnerabilities like hardcoded credentials, and binary analysis using tools like Binwalk and Ghidra. Used for security assessments and educational purposes with strict authorization.

Detects hardcoded secrets like API keys, tokens, and passwords embedded in source code, configuration files, or Infrastructure as Code (IaC). Used when an agent can access its codebase to identify security vulnerabilities at rest. Focuses on secrets stored in files rather than runtime leaks.

MockHunter is an advanced skill designed to audit live web pages, providing a comprehensive reality check on visible data. It analyzes every element to determine its true source: whether it is REAL (from the database), MOCK (simulated data), LLM-generated, HARDCODED, BROKEN (broken endpoints), or UNKNOWN. Ideal for auditing AI-generated UIs or reviewing proof-of-concept MVPs before customer sign-off.

This skill performs Static Application Security Testing (SAST) to detect code vulnerabilities across multiple programming languages and frameworks. It helps identify injection flaws, hardcoded secrets, and security policy violations before deployment. Suitable for code reviews, compliance checks like OWASP, and legacy code assessment. Requires source code access and is not for runtime testing.

This skill performs a quick automated lint scan to detect common design system violations in seconds. It checks for hardcoded colors, raw pixel values, old width/height syntax, physical properties, forbidden colors, missing data-slots, and improper className usage. Ideal for running after every file change to maintain design consistency and prevent technical debt in UI development projects using design tokens.

This skill reviews UI code for design system compliance, accessibility standards, and best practices. It checks for hardcoded values, component conventions, mobile responsiveness, performance optimization, typography consistency, and visual coherence. It ensures code aligns with established design tokens and accessibility guidelines like WCAG.