Skill UI

This skill functions as a dedicated dependency security expert, specializing in auditing project dependencies. It analyzes codebases for known security vulnerabilities, license compliance issues, outdated packages, and overall supply chain risks. It provides comprehensive, actionable remediation strategies and detailed risk reports to keep software supply chains secure and compliant.

A powerful tool for comprehensive, offline dependency auditing across 8+ programming ecosystems (e.g., Node, Python, Go, Rust). It identifies critical CVE vulnerabilities, license conflicts, and calculates safe upgrade paths, making it essential for pre-release security checks, legal compliance reviews, and major version migrations.

Automated license compliance scanner guidance for Security Fundamentals, delivering step-by-step practices, best-practice patterns, and production-ready code plus validation to keep authentication, validation, and secure coding efforts aligned.

This skill provides comprehensive license management for Windsurf enterprise deployments. It helps users track seat allocation, monitor usage, optimize subscriptions, and generate compliance reports, ensuring cost efficiency and adherence to licensing rules. Use it when managing enterprise licensing and optimizing resource costs.

This skill demonstrates how to use Trivy, an open-source security scanner, to perform comprehensive container security assessments. It scans container images, Kubernetes manifests, and Infrastructure as Code (IaC) files for vulnerabilities, misconfigurations, exposed secrets, and license compliance issues. Key features include generating Software Bill of Materials (SBOM) for supply chain transparency and integrating scanning gates into CI/CD pipelines, supporting robust DevSecOps practices.

This skill details implementing Software Composition Analysis (SCA) using Snyk. It helps security teams detect known vulnerabilities, check license compliance, and automate dependency remediation within CI/CD pipelines. Learn to integrate scanning into GitHub, GitLab, and Jenkins workflows, generate automated fix PRs, and continuously monitor deployed applications to safeguard the software supply chain.

Trivy is a comprehensive open-source vulnerability scanner used for detecting vulnerabilities, misconfigurations, secrets, and license violations across OS packages, language dependencies, and container images. It integrates seamlessly into CI/CD pipelines for robust security testing and compliance.

This tool provides strategic legal guidance for founders and startup executives, covering critical areas like contract risk review (MSA, NDA, DPA), intellectual property strategy, term sheet decoding, and global regulatory compliance (GDPR, HIPAA, etc.). It surfaces key questions and potential traps to ensure thorough review before legal commitment. NOTE: This is not a substitute for licensed attorney advice.

This skill performs a comprehensive audit of project dependencies, identifying critical security vulnerabilities (CVEs), analyzing license compliance against established policies, and detecting outdated or risky packages. It produces an actionable report including an overall dependency health score and a prioritized, time-bound remediation plan, ensuring the software supply chain is secure and legally compliant.

This skill guides authors through the critical pre-submission decisions for fully Gold Open Access publishing. It helps confirm the Article Processing Charge (APC), check eligibility for waivers/discounts (e.g., low-income status, institutional agreements), and select the appropriate Creative Commons license (CC BY vs CC BY-NC) to ensure funder compliance and adherence to academic standards.