Skill UI

Expert skill for building modern, production-ready Chrome Extensions using Manifest V3 standards. Covers advanced topics including service worker management, content script injection, secure cross-context communication (message passing), and implementing best practices like `declarativeNetRequest` and secure storage APIs.

This script automates the generation of a complete set of favicons (including favicon.ico, various PNG sizes, and SVG) from a single source image. It intelligently detects the project framework (e.g., Next.js, Rails, Gatsby) to place assets in the correct static directory, generates the necessary webmanifest, and updates the project's HTML/layout files with the proper link tags.

Provides a brief overview placeholder for the Numpy skill, indicating the module while noting that the detailed information could not be retrieved from the manifest.

Guides building custom Odoo modules by scaffolding manifests, models, views, and security rules, reviewing existing code, and applying ORM best practices across Community and Enterprise editions.

A comprehensive skill designed for advanced security analysis, detecting malicious behaviors across mobile applications (Android/iOS). It performs multi-layered analysis, including static indicator checks (permissions, manifest), dynamic instrumentation via Frida, network traffic monitoring (C2 communication, exfiltration), and automated scanning (MobSF). Use this when investigating suspicious apps, detecting trojans, or performing malware triage.

Learn how to implement robust container security by integrating the open-source Trivy scanner (from Aqua Security) into your CI/CD pipelines. This guide covers scanning container images, Kubernetes manifests, IaC files, and code repositories to detect critical vulnerabilities, misconfigurations, secrets, and generating Software Bill of Materials (SBOM) for comprehensive supply chain security.

This skill guides the implementation of automated security scanning for Infrastructure as Code (IaC) templates using industry-leading tools like Checkov and tfsec. It focuses on integrating security checks into CI/CD pipelines to detect misconfigurations (e.g., public buckets, open ports) in Terraform, CloudFormation, and Kubernetes manifests before they reach production, thereby enforcing policy-based governance and securing the development lifecycle.

This skill demonstrates how to use Trivy, an open-source security scanner, to perform comprehensive container security assessments. It scans container images, Kubernetes manifests, and Infrastructure as Code (IaC) files for vulnerabilities, misconfigurations, exposed secrets, and license compliance issues. Key features include generating Software Bill of Materials (SBOM) for supply chain transparency and integrating scanning gates into CI/CD pipelines, supporting robust DevSecOps practices.

This comprehensive guide covers the principles and implementation steps for building Progressive Web Apps (PWAs). Learn to integrate essential components like Web App Manifests and Service Workers to ensure your web application offers a reliable, fast, and truly offline-capable experience, mimicking the feel of a native mobile app. Ideal for enhancing web resilience and installability.

Kubesec is a powerful open-source tool designed to perform comprehensive security risk analysis on Kubernetes resource manifests (YAML/JSON). It automatically detects critical misconfigurations, potential privilege escalation vectors, and deviations from industry security best practices. It provides actionable scoring and hardening recommendations, making it essential for CI/CD pipelines, security auditing, and automated compliance checks.

A lightweight CLI tool for systematically comparing various coding AI agents (such as Claude Code, Aider, and Codex) head-to-head. It measures crucial metrics—pass rate, API cost, execution time, and consistency—on reproducible tasks defined via YAML manifests. Use this to objectively select the best agent for your codebase or to validate model updates before production deployment.

Automatically analyzes unfamiliar codebases to generate a comprehensive, structured onboarding guide. It systematically detects package manifests, framework fingerprints, architecture maps, key entry points, and coding conventions. Ideal for new developers joining a project or setting up a repository for the first time.