Skill UI

This expert skill analyzes codebases to identify, quantify, and prioritize all forms of technical debt—including code complexity, architectural flaws, outdated dependencies, and testing gaps. It calculates the measurable impact of this debt on development velocity, bug rates, and overall business risk. The output provides a comprehensive, actionable, and ROI-driven roadmap for systematic remediation.

A comprehensive expert system for analyzing software codebases to identify, quantify, and prioritize technical debt across various dimensions (code, architecture, testing, infrastructure). It provides detailed metrics, impact assessments (development velocity, quality loss), and actionable, prioritized remediation roadmaps with clear ROI projections.

A comprehensive, end-to-end workflow for building product features guided by rigorous data insights. This skill guides users through the entire lifecycle, encompassing exploratory data analysis, forming measurable business hypotheses, designing statistical A/B tests, architecting data pipelines, and implementing robust backend/frontend instrumentation. It ensures that every feature iteration is validated by data and measured for impact.

A protocol that provides LLM agents with persistent structural memory of a codebase. It maps the project as a directed graph, tracking not only dependencies (what imports what) but also the 'reasons' (why it connects). This allows agents to understand context, perform impact analysis, and navigate large repositories without loading the entire source code into the context window.

Impact Analysis Helper automatically activates within enterprise workflows to guide compliance, governance, and integration scenarios; it offers step-by-step best practices, production-ready output, and validation for impact analysis requests.

A specialized skill designed for agents to proactively identify, analyze, and strategize high-impact contributions within trending Open Source repositories. It systematically performs repository discovery, extracts targeted issues (like 'help wanted' or 'good first issue'), and conducts deep feasibility analysis (including mergeability and complexity). Finally, it generates a structured 'Contribution Dossier' with actionable plans, significantly accelerating the process of becoming a top-tier OSS contributor.

Provides prioritized performance optimization recommendations across frontend, backend, and infrastructure, offering bottleneck analysis, impact estimates, and phased implementation roadmaps when users request speed improvements or reviews.

A comprehensive toolkit for navigating, optimizing, and managing large monorepos built with JavaScript/TypeScript. It supports industry-leading tools like Turborepo, Nx, pnpm, and Lerna. Key features include cross-package impact analysis, selective builds, remote caching, dependency graph visualization, and structured migrations, ensuring fast, reliable CI/CD pipelines for complex codebases.

This comprehensive guide details the multi-step workflow for responding to sophisticated phishing incidents. It covers everything from initial triage and detailed email header analysis to analyzing malicious URLs and attachments in sandboxes. Key steps include determining the scope of impact, implementing immediate containment actions (like purging emails and revoking sessions), and executing thorough remediation to neutralize the threat and recover affected accounts.

A comprehensive guide for SOC analysts and digital forensics experts. This skill covers the entire lifecycle of a phishing incident, from initial user report and header analysis (SPF, DKIM, DMARC) to detonating malicious URLs/attachments in sandboxes. It guides users on scoping the attack, identifying impacted users via SIEM/proxy logs, and executing containment measures like email purges.

Provides a structured workflow for performing initial triage of security incidents. This process uses established frameworks (NIST SP 800-61r3 and SANS PICERL) to classify the incident type, assign severity based on business impact, and determine the necessary containment and escalation steps. Ideal for analyzing SIEM/EDR alerts, suspicious user reports, or matching threat intelligence.

This skill activates the P7 Senior Engineer mode, designed for rigorous, solution-driven execution under P8 supervision. It is used when the user explicitly requests 'P7模式' or when invoked as a sub-task executor by P8. The process involves three key stages: designing a detailed implementation plan and impact analysis, executing the core coding, and finally, completing a mandatory three-question self-review, ensuring high quality and comprehensive verification.