Skill UI

This skill guides the end-to-end process of supply chain security by generating standards-compliant Software Bills of Materials (SBOMs) in CycloneDX and SPDX formats. It details using Syft to create inventories, correlating them with vulnerability intelligence via Grype, enforcing CI/CD gates based on severity, and establishing verifiable provenance using Cosign signing. Essential for modern DevSecOps practices.

This specialized skill reviews user interface animations, motion patterns, and interactive code (CSS, Framer Motion, etc.) against a strict, high-craft standard. It evaluates not only functionality but also performance, accessibility, physical correctness, and adherence to motion design principles. Use it when reviewing diffs related to transitions, keyframes, or gestures to ensure the motion feels right, not just that it runs.

This skill guides the verification of software build provenance and signatures using industry standards like SLSA and Sigstore. It leverages tools like cosign and slsa-verifier to enforce keyless OIDC identity and confirm that artifacts were built by trusted sources without tampering. It is essential for hardening CI/CD pipelines and securing the entire software supply chain against advanced attacks.

This advanced protocol forces the AI to conduct a thorough context audit before attempting any complex task. It mandates reading every relevant file, identifying architectural gaps, and providing a detailed orientation statement. It is essential for multi-file modifications, system design, and debugging to prevent acting on assumptions and maintain high code accuracy. The AI cannot proceed until all unknown variables are resolved.

This skill structures a highly controlled, bounded development life cycle for AI agents. It mandates a structured three-phase workflow: Planning (Spec), Implementation (Build), and Verification (Review). It is essential for building complex features from scratch, especially when dealing with ambiguous requirements, high risk, or needing explicit human approval gates to ensure the resulting code meets all defined specifications.

A portable CI gate designed to enforce Core Web Vitals (LCP, CLS, INP) budgets and category score floors on production frontend builds. It integrates into CI pipelines to automatically block pull requests if the performance metrics fall below defined Google standards, ensuring consistently fast and reliable user experiences.

This critical protocol is the ultimate measure for dealing with deeply corrupted, unmaintainable, or structurally rotten code modules. Instead of risky patching, it mandates a controlled, multi-phase process to completely delete the target and rebuild it from scratch. It ensures precise identification of all public interfaces, implicit contracts, and working behaviors (the Preservation List) before any removal occurs, guaranteeing the new implementation matches the original functionality while resolving deep architectural debt.

This guide defines inclusive design, which expands beyond typical accessibility (WCAG) standards. It focuses on ensuring products respect the real-world context, cultural nuances, economic constraints, device limitations, and psychological state of all users. Use this skill when addressing globalization, low-bandwidth environments, diverse user personas, or reducing cognitive load for novice users.

The Application Insights JavaScript SDK is designed to instrument client-side web applications for Real User Monitoring (RUM). It automatically collects crucial telemetry, including page views, user clicks, AJAX dependencies, unhandled exceptions, and custom events. This SDK supports correlating browser-side activity with backend services and includes specialized support for GenAI agent traces following OpenTelemetry standards.

This comprehensive skill acts as a virtual Chief of Staff, guiding founders through a rigorous 12-phase interview process. It systematically gathers and structures every facet of a business—from foundation and strategy to legal and governance—into a compliant Open Knowledge Format (OKF) bundle. Ideal for creating comprehensive, machine-readable company documentation, internal wikis, or knowledge bases for AI agents.

This skill provides a comprehensive test quality review, drawing on established principles from classic engineering texts like xUnit Test Patterns and How Google Tests Software. It diagnoses structural flaws—such as brittleness, decay, and poor coverage—in existing test suites, helping ensure that the codebase and its tests are robust, maintainable, and adhere to high industry standards.

This skill provides a comprehensive set of core UI components (e.g., Box, Button, Input, Card) and implements a structured design system. It guides developers on using design tokens (like `$textPrimary` or `$4`) instead of hard-coded values, ensuring visual consistency and scalability across applications. Ideal for any project requiring standardized, maintainable UI development.