Skill UI

This expert skill analyzes codebases to identify, quantify, and prioritize all forms of technical debt—including code complexity, architectural flaws, outdated dependencies, and testing gaps. It calculates the measurable impact of this debt on development velocity, bug rates, and overall business risk. The output provides a comprehensive, actionable, and ROI-driven roadmap for systematic remediation.

An expert AI specialist that integrates advanced static analysis (e.g., CodeQL, SonarQube) with modern DevOps practices. It performs multi-layered code reviews, checking for security vulnerabilities, performance bottlenecks, architectural flaws, and adherence to best practices across various languages. Ideal for CI/CD pipelines and pull request validation.

This skill simulates a senior engineer conducting comprehensive code reviews. It analyzes code diffs and files to identify bugs, security vulnerabilities (e.g., SQL injection, XSS), performance issues (N+1), code smells, and architectural flaws. It is ideal for reviewing pull requests, performing code quality audits, or conducting security assessments, providing structured, actionable, and prioritized feedback.

Guides systematic detection and exploitation of cross-site scripting and HTML injection flaws, covering stored/reflected/DOM vectors, payload crafting, and remediation advice for web security assessments.

This meta-skill coordinates the entire design lifecycle, ensuring that ideas are systematically refined through mandatory stages: brainstorming, risk assessment, and multi-agent review. It acts as a process gatekeeper, enforcing adherence to structured steps and mitigating risks before allowing implementation, thus preventing premature or flawed execution.

Performs a structured, multi-phase audit on local branch changes (diffs) to identify security vulnerabilities, bugs, and code quality issues. It systematically checks for common risks like Injection (SQL, XSS), Broken Authentication, IDOR, CSRF, and business logic flaws, providing detailed severity, evidence, and suggested fixes. Ideal for pre-merge code reviews and security audits.

This skill acts as a comprehensive security scanner specializing in detecting Cross-Site Scripting (XSS) vulnerabilities in client-side code. It performs static analysis across React, Vue, Angular, and vanilla JavaScript, specifically identifying unsafe practices like direct HTML manipulation (innerHTML), raw rendering (v-html), and insecure URL handling. Use it when auditing frontend code for security flaws and needing best practices for secure coding.

This skill outlines step-by-step methods for discovering, confirming, and exploiting Insecure Direct Object Reference flaws via parameter manipulation, HTTP method switching, enumeration, and Burp Suite workflows, enabling authorized testers to document findings and suggest fixes.

Automates guidance and code for identifying insecure deserialization flaws, following Security Fundamentals best practices to help with authentication, input validation, and secure coding checks when that phrase is mentioned.

This skill provides comprehensive guidelines for handling sensitive people datasets from Juicebox AI. It covers critical data classification (PII, search results), required technical controls (AES-256 encryption, field-level masking), and adherence to international privacy regulations like GDPR and CCPA. It ensures users implement lawful data processing, proper consent tracking, and secure data export mechanisms.

This elite workflow simulates the comprehensive process of a Senior Software Engineer and Product Designer. It enforces a rigorous development pipeline: starting with planning, solid architecture, and TDD implementation, through clean code practices, and technical auditing. Crucially, it includes mandatory, pixel-perfect UX visual validation to ensure the output is flawless, consistent, and production-grade.

This advanced workflow emulates an elite Senior Software Engineer and Senior Product Designer, ensuring maximum quality output. It enforces a rigorous, multi-step process including ultra-fast planning, solid architecture design, TDD implementation, clean code refactoring, technical auditing, and crucially, mandatory pixel-perfect UI/UX validation. Use this for complex projects demanding both robust code and flawless visual presentation.