Skill UI

This tool provides a comprehensive, multi-faceted audit of a codebase's health. It scores the project across critical areas like security vulnerabilities, exposed secrets, dependency risks, and structural integrity. Ideal for senior engineers performing pre-commit or pre-release quality assessments to identify weak spots and generate a prioritized remediation plan.

Designed for regulated environments (GxP/GCP), this skill generates and verifies audit trails compliant with 21 CFR Part 11 standards. It ensures every data processing step leaves an attributable, time-stamped, and tamper-evident record, providing electronic signatures and robust data integrity checks (ALCOA+). It is essential for clinical trials and regulated data governance.

This tool provides a preferred, end-to-end method for modifying code in real-world repositories. It simulates a professional development workflow: cloning the target repository, running changes on a dedicated task branch, and critically, verifying the implementation through an independent red $\to$ green $\to$ regression test loop. It is designed for fixing GitHub issues, implementing new features, or adding functions to existing codebases, ensuring the structural integrity and correctness of the changes.

A specialized downstream skill for analyzing security vulnerabilities in complex agentic systems. This tool is designed for red teaming and penetration testing, focusing on detecting prompt injection, retrieval poisoning, memory contamination, planner drift, and tool boundary abuse within multi-step LLM chains. Use when proving how untrusted inputs compromise system integrity.

This advanced skill specializes in tracing the complete provenance of software artifacts across the entire development lifecycle. It is designed for deep security analysis of CI/CD pipelines, identifying dependency drift, build tampering, package origin, and determining the final artifact consumed at runtime. Use it when investigating integrity vulnerabilities in complex release flows.

This skill implements a critical CI gate to ensure the privacy and performance integrity of de-identification models. It automatically fails the build if the model's recall on held-out PHI data drops below the defined threshold, or if any critical Personally Identifiable Information (PHI) is leaked (leakage must be zero). It enforces strict privacy standards in continuous integration pipelines, blocking unsafe merges.

A sophisticated, multi-agent system designed to perform deep, comprehensive code reviews on pull requests. It covers core elements like code quality, functionality, security vulnerabilities, and testing coverage. Advanced features include detecting scope drift, enforcing SOLID principles, identifying DRY violations, and providing anti-hallucination safeguards for maintain high software integrity.

This skill applies consistent date shifting to clinical text, ensuring that absolute dates are obscured while critically preserving the temporal intervals between medical events. It is essential for longitudinal research or survival analysis where time-to-event data must be preserved under HIPAA Safe Harbor rules. It maintains the integrity of time differences (e.g., length of stay, visit gaps) by applying a stable, per-patient offset.

A comprehensive framework for assessing software supply chain security. It covers generating Software Bill of Materials (SBOM), performing Software Composition Analysis (SCA) on open-source dependencies, auditing CI/CD pipelines, and analyzing container images. This skill helps identify vulnerabilities, ensure build integrity, and verify component provenance across the entire development lifecycle.