Skill UI

This framework enforces high output quality, intellectual honesty, and continuous improvement across all AppSec agents. It mandates structured processes, including self-critique loops, anti-rationalization guards, and self-reflection quality gates (≥8 scoring). Applicable during code review, SAST, SCA, and threat modeling, it ensures rigorous and verifiable security analysis.

This domain-agnostic skill ranks impediments, risks, and gaps by using a specialized value-stream scoring model. It evaluates countermeasures based on four criteria: Return on Investment (ROI), Cost to Implement, Ease of Deployment, and Risk Factor. A proprietary formula calculates a final Priority score (1-100), allowing users to quickly determine the optimal sequence for remediation, improvement backlogs, or triage items.

This skill runs an automated evolution process designed to systematically optimize the seven core policy surfaces of an AI agent harness (e.g., planner, contextBuilder, reviewer). By mutating these policies and scoring the variants in a sandbox, it identifies crucial performance improvements without requiring expensive foundation model retraining. It is ideal for empirical configuration tuning and establishing optimized baselines.

This tool executes a GEPA learning cycle, automating the evolution and optimization of policy prompts against a scored task corpus. Instead of relying on manual prompt iteration, it measures performance improvements, identifying the best working 'harness genome.' It is ideal for measuring sustainable improvements in task performance and supports a free, cost-estimating dry-run mode before committing to actual model calls.

This tool executes the advanced `metaharness/darwin` security benchmark (ADR-155). It rigorously evaluates the security detection capabilities of AI systems against a controlled ground-truth corpus, providing critical metrics like TPR, FPR, and patch-pass rates. It compares the champion model against multiple baselines, offering empirical data crucial for iterative security improvement and drift detection.