Skill UI

Analyzes project dependencies via the dependency-checker plugin to flag security vulnerabilities, outdated packages, and license conflicts before deployment; run it when you need insight on risky npm, pip, composer, gem, or go modules.

Analyzes project dependencies via the dependency-checker plugin to flag security vulnerabilities, outdated packages, and license conflicts before deployment; run it when you need insight on risky npm, pip, composer, gem, or go modules.

This guide provides comprehensive instructions for setting up the Firecrawl SDK, covering both Node.js and Python environments. It details how to install the necessary packages via npm or pip, and how to securely configure the API key using environment variables. Use this guide when initializing web scraping functionality or integrating Firecrawl into a new development project.

This skill acts as an expert architect for scaffolding robust, production-ready applications using TypeScript. It generates complete, structured project templates for various types, including Next.js full-stack apps, React/Vite SPAs, and Node.js APIs. It incorporates modern tooling like pnpm, Vite, and Next.js features, ensuring type safety, proper dependency management, comprehensive testing setups, and adherence to current industry best practices. Use it to accelerate project setup and maintain scalable architecture.

Automate NPM workflows through Composio’s Rube MCP toolkit, including tool discovery, connection management, and schema-compliant execution steps for reliable operations.

Automated help for npm script workflows inside DevOps Basics, offering guided best practices, production-ready configs, and validation for CI/CD or infrastructure requests.

This skill guides the complete setup and configuration of PostHog SDKs for modern applications. It covers best practices for implementing client-side (browser) and server-side (Node.js/Python) event tracking. Users will learn how to install the necessary SDKs via npm or pip, manage environment variables for both Project API Keys and secure Personal API Keys, and initialize the tracking service correctly to ensure accurate and reliable event capture in PostHog.

A structured workflow designed to prevent 'reinventing the wheel.' Before writing custom code, this skill guides the user through analyzing needs, conducting parallel searches across multiple channels (npm, PyPI, GitHub, MCP), evaluating candidate solutions based on maintainability and community support, and making a decision (Adopt, Extend, or Custom Build). It ensures that solutions leverage existing, proven libraries and patterns.

This skill acts as a specialized security expert for analyzing project dependencies. It scans dependencies across multiple ecosystems (e.g., npm, pip, Maven) to identify known vulnerabilities, assess associated risks, and generate Software Bill of Materials (SBOMs). It provides comprehensive insights into supply chain security and offers automated strategies for remediation, ensuring compliance and stability during development.

A comprehensive toolkit for navigating, optimizing, and managing large monorepos built with JavaScript/TypeScript. It supports industry-leading tools like Turborepo, Nx, pnpm, and Lerna. Key features include cross-package impact analysis, selective builds, remote caching, dependency graph visualization, and structured migrations, ensuring fast, reliable CI/CD pipelines for complex codebases.

This guide details proactive threat hunting techniques focused on detecting supply chain compromises. Use it when investigating trojanized software updates, compromised dependencies (npm/PyPI), or tampered build artifacts. It outlines a structured workflow using EDR/SIEM data (CrowdStrike, Splunk) to identify hidden threats and scope the impact of sophisticated attacks.

This tool detects malicious packages mimicking legitimate dependencies in npm and PyPI. It analyzes package names using Levenshtein distance, examines publish date heuristics, and identifies download count anomalies to secure the software supply chain. Ideal for auditing project dependencies and proactively monitoring for supply chain threats.