Skill UI

Monitor the real-time progress and overall state of an AgentHub session. This tool displays detailed information including agent branch activity, commit counts, frontier status, and recent board updates, allowing users to effectively track complex multi-agent workflow execution.

A comprehensive methodology for exploiting modern Continuous Integration/Continuous Delivery (CI/CD) pipelines. This skill covers advanced attack vectors across major platforms, including GitHub Actions expression injection, Jenkins RCE, GitLab YAML abuse, and Azure DevOps compromise. Techniques focus on privilege escalation, credential theft, and supply chain poisoning, mapping to MITRE ATT&CK T1195.002.

A comprehensive methodology for offensive security, detailing how to systematically extract secrets from Continuous Integration/Continuous Deployment (CI/CD) pipelines. Techniques covered include dumping environment variables, exploiting misconfigurations in HashiCorp Vault, AWS Secrets Manager, and cloud platform tokens (GitHub, GitLab, etc.). It also guides attackers on OIDC federation abuse, build log analysis, and advanced exfiltration methods, mapping to MITRE ATT&CK T1552.

This is a synthetic, instructional fixture designed solely for verifying the delivery and access of community skills within the OpenSquilla live Skill Hub canary environment. It is crucial for testing platform capability (e.g., resource access validation) and should not be executed for actual functionality or command processing.

Converts an Ouroboros Seed or PM Seed specification into a GitHub Epic issue plus linked Task issues via the gh CLI, with duplicate checks, labels, acceptance criteria, and a plan review step.

Provides a comprehensive setup for Playwright End-to-End (E2E) testing. This skill automatically analyzes your project structure (framework detection, TypeScript/JavaScript) and generates all necessary files: the core playwright.config.ts, standardized folder structure, initial test examples, and full CI/CD workflows (GitHub Actions/GitLab). It ensures your testing environment is production-ready, supporting modern frameworks like Next.js, React, Vue, and Angular.

Use this skill to formally report bugs, file issues, or submit problems encountered with the canvas-apps plugin. It facilitates the submission of detailed bug reports directly to the associated GitHub repository, helping developers track and resolve technical problems.

Reviews GitHub pull requests in the googleapis/mcp-toolbox repo against the team's reviewer checklist: title conventions, linked issues, logic errors, edge cases, breaking changes, tests, docs, security, and new dependencies, then proposes a paste-ready verdict for the maintainer.

Propose labels and categorize GitHub issues for maintainers without direct edits. Checks duplicates, verifies bug info, and drafts comments based on repository rules. Optimizes issue management workflow for googleapis/mcp-toolbox.

A comprehensive guide and set of rules for writing effective, warm, and actionable comments across various development platforms. It helps users structure feedback for GitHub PRs, issue trackers, or Slack messages, ensuring the tone is consistently thoughtful, direct, and focused on clear next steps, rather than simply listing observations.

Draft, create, comment on, triage, and approve GitHub issues using repository policy and YAML Issue Forms, with strict gates for duplicate search, labels, catalog approval, and delegated workflow actions.

Reviews a pull request and posts one consolidated GitHub review with inline comments via the gh CLI. Runs the repo's own checks first, verifies external claims against official docs, then reports correctness, security, and structural findings—each backed by evidence and gated for noise.