Skill UI

Audits GitHub Actions workflows that invoke AI coding agents to surface prompt injection and sandbox risks, tracing attacker-controlled inputs through env vars, reusable actions, and workflow references before deployment or code review.

Detects missing zeroization of secrets and flags compiler-optimized removals with mandatory assembly/IR evidence, helping auditors verify C/C++/Rust cryptographic code through dataflow, CFG, and runtime validation.

Guides engineers through a disciplined four-phase debugging workflow so they investigate root causes, analyze patterns, test hypotheses, and implement fixes based on evidence before touching code.

This model provides an engineering operational framework for teams that leverage AI agents to generate large volumes of code. It shifts the focus from simple syntax to process quality, robust architecture design, rigorous testing, and systematic risk control, ensuring the development of highly stable and reliable systems in AI-assisted environments.

This skill helps users create a new Git branch that strictly adheres to established project naming conventions (e.g., Sentry standards). It automatically determines the appropriate branch type (such as `feat`, `fix`, `chore`, etc.) and generates a descriptive, standardized branch name by analyzing the provided work description or local code differences (diff). It guides the entire branching workflow, ensuring proper lineage and classification for code submissions.

This guide provides a deep, investigation-driven methodology for reviewing Django and Django REST Framework (DRF) codebases. It helps identify critical authorization gaps, focusing on Insecure Direct Object References (IDOR) and object-level access failures. Learn how to trace data flows, analyze custom managers, and verify that users can only access resources they are explicitly authorized to view or modify.

Use this guide to build and manage Expo development clients using EAS Build. This is the recommended setup for production-grade testing, allowing developers to test custom native code, local modules, and advanced features that exceed Expo Go's capabilities. It covers local builds, TestFlight submission, and connecting to the Metro bundler.

Learn how to handle errors in TypeScript using functional patterns like `Either` and `TaskEither`, eliminating messy try/catch blocks. This guide teaches that errors are simply data, allowing you to write cleaner, more predictable, and type-safe code that explicitly handles potential failures through explicit return values.

A comprehensive quick reference for the Option type within fp-ts. This pattern is crucial for handling nullable, optional, or potentially missing values in a functional and type-safe manner. It allows developers to safely compose operations (mapping, flatMapping) on data that might not exist, eliminating verbose null checks and ensuring robust, predictable code flow in TypeScript.

This skill acts as an expert resource for the Makepad layout system. It helps users generate correct layout code and explain advanced UI concepts like flow direction, alignment, padding, and spacing. Use it when positioning, aligning, or structuring widgets in a Makepad application, ensuring responsive and complex UI compositions.

This assistant specializes in the Makepad shader system. It helps users write, debug, and understand complex shader code using SDF2d and GLSL principles. Use it when developing custom widget backgrounds, advanced graphics, gradients, or visual effects that require low-level GPU rendering control within the Makepad framework.

This skill provides a structured workflow for porting existing Semgrep security rules to multiple target languages. It guides users through applicability analysis, test-first rule creation, and validation for each language variant, ensuring consistent and accurate security coverage across polyglot codebases.