Skill UI

This skill enforces a mandatory, structured gate for starting new implementation tasks. It mandates that all work must be tracked via a GitHub issue, requiring explicit, testable acceptance criteria before any execution can begin. It defines a strict workflow (Problem, Goal, Scope, Acceptance Criteria, Status) to manage task readiness, ensuring that development only proceeds when criteria are fully defined and verifiable.

Validates SKILL.md files against the agentskills specification and Anthropic best practices, catching structure, semantic, naming, and quality issues in a single read-only pass before publishing or debugging skills.

This skill automates the complex and tedious process of porting academic papers written in LaTeX from one publisher's journal template (e.g., Springer) to another (e.g., MDPI, IEEE). It executes a structured multi-stage workflow, including content extraction, structural mapping, systematic fixing of common LaTeX issues (like float placement and math environments), and final compilation to ensure the output adheres to the target journal's specifications.

An advanced reliability wrapper for AI agents that monitors, manages, and recovers from tool call failures. It automatically handles common issues such as truncated JSON responses, API timeouts, rate limits, and mid-chain process breakdowns. By implementing sophisticated failure classification, checkpointing, and learning mechanisms, Guardian ensures complex, multi-step agent workflows remain stable and resilient.

A comprehensive skill for performing deep security audits on Ethereum smart contracts. Utilizes both static analysis (Slither) and symbolic execution (Mythril) to detect critical vulnerabilities such as reentrancy, integer overflows, and access control issues. This process is crucial for ensuring the security and immutability of financial assets before mainnet deployment.

A comprehensive guide for deep packet inspection and network forensics using Wireshark and tshark. This skill is critical for incident response, where it allows users to capture, filter, and analyze network packet data to identify malicious command-and-control traffic, diagnose complex protocol issues, extract indicators of compromise (IOCs), and reconstruct data exfiltration paths. Use it for validating security rules and understanding network anomalies.

A robust security auditing tool designed to scan CI/CD pipeline configurations, such as GitHub Actions YAML, for critical supply chain vulnerabilities. It automatically detects issues like unpinned dependencies, script injection risks, secrets exposure, and dependency confusion, helping teams harden their build systems and maintain secure software development lifecycles.

This tool provides comprehensive network traffic analysis capabilities by querying the Arkime API. Users can search sessions, download PCAPs for forensics, detect sophisticated threats like C2 beaconing (via jitter/interval analysis), spot DNS tunneling patterns, and flag connections to known-bad TLS certificate issuers. Ideal for security assessment and incident investigation.

This tool performs comprehensive security testing on GraphQL APIs by generating deeply nested, recursive, or highly repetitive queries. It specifically aims to identify Denial-of-Service (DoS) vulnerabilities and resource exhaustion issues by overwhelming the server's CPU, memory, or database connections. Essential for security auditors and penetration testers.

This guide provides a comprehensive methodology for auditing essential HTTP security headers, including CSP, HSTS, X-Frame-Options, and Referrer-Policy. It helps identify missing or improperly configured browser-level protections, crucial for mitigating vulnerabilities like XSS, clickjacking, and mixed content issues, ensuring compliance with standards like PCI DSS and SOC 2.

Nikto is a powerful, open-source web server and web application scanner designed for comprehensive vulnerability assessment. It tests over 7,000 potentially dangerous files and checks for critical issues like XSS, SQL injection, outdated versions, and misconfigurations across modern web applications. Ideal for security audit, penetration testing, and validating web server security controls.

Integrates Aqua Security's Trivy scanner into CI/CD pipelines to perform automated vulnerability scanning on Docker images and related artifacts. It detects OS package CVEs, application dependency issues, and Dockerfile misconfigurations. This ensures that only secure, compliant images can proceed to registry push or production deployment by enforcing strict quality gates.