Skill UI

An internal tool designed to validate candidate meta-skills (SKILL.md) before registration. It performs comprehensive structural linting (G1 rules) and a scheduler dry-run (G2) to ensure the workflow is deterministic, references are correct, and templates resolve properly. It outputs detailed JSON diagnostics.

A utility to generate a static, centered title or end card PNG image. It accepts a main headline, an optional subtitle, background color, and dimensions. It utilizes Pillow, ensuring deterministic rendering suitable for video intros and outros. Supports CJK character wrapping and provides robust font fallbacks, making it reliable for media production pipelines.

This skill provides a deterministic, git-only method to verify claims made by AI agents (e.g., 'done', 'shipped', 'fixed'). Instead of trusting the agent's self-report, it audits the commit's diff and git history using the DOS kernel (`dos verify`, `dos commit-audit`) to confirm if the claimed change genuinely occurred and is backed by non-forgeable evidence. It acts as a critical quality gate.

A crucial post-hoc review skill designed for AI-generated Markdown prose. It audits content against a comprehensive set of 21 stylistic and structural rules using both deterministic mechanical checks and deep semantic judgment. Users can audit a single file to get a detailed scorecard, or compare two drafts (A/B) for regression testing. Furthermore, it can optionally generate a polished, revised copy in a separate file, ensuring the integrity of the original document while significantly improving linguistic quality and adherence to style guides. Ideal for refining AI-written documentation, ...

This skill provides a rigorous, multi-layered audit for User Interfaces, proving layout balance and usability beyond subjective judgment. It combines a deterministic spatial audit (calculating centroid, optical-center, and pixel-oracle balance via explicit math) with a professional usability review based on Nielsen's 10 heuristics, conducted by a separate 'fresh-eyes' judge. Ideal for catching misaligned or poorly structured AI-generated designs.

This skill outlines a systematic, multi-phase workflow for diagnosing hard bugs and performance regressions in complex codebases. It emphasizes the critical necessity of building a tight, deterministic feedback loop (Phase 1) before moving to hypothesis generation. The process guides users through reproducing the failure, minimizing the scope of the issue, and forming actionable, ranked hypotheses.

A comprehensive guide for defense contractors handling Controlled Unclassified Information (CUI). It covers preparing for CMMC Level 2 certification, implementing 110 NIST SP 800-171 controls, calculating the SPRS score using DoD methodology, and managing the POA&M and SSP. Essential for DFARS compliance and external assessments.

This skill guides the comprehensive hardening of LDAP directory services. It addresses common vulnerabilities such as LDAP injection, anonymous binding, and credential harvesting. Users can enforce strong security controls, including LDAPS, channel binding, and granular access control lists (ACLs). It is essential when establishing robust identity access management (IAM) architecture or meeting stringent compliance requirements like NIST standards.

This methodology guides organizations through a comprehensive cybersecurity risk assessment using the NIST SP 800-30 framework. It systematically identifies threat sources, vulnerabilities, and potential threat events. By determining the likelihood and impact of these threats, the process calculates overall risk, resulting in a prioritized, defensible risk register. Essential for compliance (e.g., ISO 27001, HIPAA), system authorization, and strategic risk reporting.

A comprehensive guide to executing the NIST Risk Management Framework (RMF) to achieve an Authorization to Operate (ATO). This covers the full lifecycle, including preparation, system categorization (FIPS 199), control selection and tailoring (SP 800-53 Rev 5), implementation, assessment (SAR), and continuous monitoring. Essential for organizations working under FISMA or FedRAMP.

A comprehensive guide to achieving compliance with the HIPAA Security Rule (45 CFR Part 164). This skill outlines the mandatory steps to protect electronic Protected Health Information (ePHI), including conducting thorough risk analyses, deploying administrative, physical, and technical safeguards, managing Business Associate Agreements (BAAs), and preparing for breach notifications and OCR audits. Essential for Covered Entities and Business Associates.

This skill details the implementation of continuous identity verification for Zero Trust architectures. It covers deploying phishing-resistant Multi-Factor Authentication (FIDO2/WebAuthn), establishing risk-based conditional access policies, and integrating identity governance controls aligned with NIST and CISA frameworks. Learn how to move beyond traditional passwords to dynamic, adaptive security models.