Skill UI

A specialized assistant designed to act as a senior software architect. It critiques code generated by AI tools or rapidly prototyped code, moving beyond simple syntax checks. The auditor identifies deep structural flaws, technical debt, architectural weaknesses, and production risks (e.g., security vulnerabilities, poor error handling, tight coupling) that make code fragile or unsuitable for deployment.

This skill simulates a senior engineer's final, deep audit of an entire codebase before committing or pushing to a remote repository. It systematically checks for junk files, dead code, security vulnerabilities (secrets, injection flaws), and performance bottlenecks (N+1 queries). Use this pre-flight check before any major release or public deployment to ensure maximum code quality and production readiness.

This comprehensive guide details the use of FFUF, a fast web fuzzer written in Go. It is designed for advanced security penetration testing, providing techniques for content discovery, subdomain enumeration, parameter fuzzing, and POST data testing. Learn to master the FUZZ keyword, advanced filtering, and auto-calibration to efficiently identify hidden paths and potential vulnerabilities in web applications.

Leverages Monte Carlo-based simulation to spot potential software vulnerabilities by feeding randomized inputs into modules, tracking failure likelihoods, and highlighting risky code paths for security testing.

Automated Rust Security Auditor for analyzing crate source code to spot vulnerabilities, dependency issues, and unsafe patterns before deployment across teams.

This skill provides a structured workflow for porting existing Semgrep security rules to multiple target languages. It guides users through applicability analysis, test-first rule creation, and validation for each language variant, ensuring consistent and accurate security coverage across polyglot codebases.

A rigorous, multi-phase auditing skill designed for blockchain protocols. It verifies whether the implemented smart contract code strictly adheres to the detailed specifications provided in whitepapers, design documents, or technical specifications. It performs exhaustive, line-by-line semantic analysis to identify gaps, inconsistencies, and deviations across logic, invariants, and security guarantees, making it essential for formal compliance checking in decentralized systems.

This tool systematically audits a project's dependencies to identify potential supply chain security risks. It evaluates critical factors such as maintenance status, contributor count, popularity, and the presence of high-risk features. It is ideal for pre-security audits, assessing the overall attack surface, and mitigating risks before deployment.

A comprehensive enterprise-grade security engine designed to discover, classify, protect, and govern all credentials, API keys, and secrets across the entire application lifecycle. It provides continuous governance by auditing code repositories, CI/CD pipelines, runtime logs, and infrastructure configurations to prevent exposure and enforce least privilege principles. Ideal for implementing DevSecOps best practices.

Perform comprehensive technical SEO audits covering crawlability, indexability, security, and mobile performance. Analyze robots.txt, sitemaps, canonical tags, and Core Web Vitals. Includes guidance on managing AI crawler access and blocking training bots while maintaining search visibility.

Performs a GEO-focused technical SEO audit covering crawlability, indexability, security, performance, SSR, and AI crawler access to keep both search engines and AI agents from losing visibility.

This tool detects abnormal access patterns across major cloud storage services (AWS S3, GCS, Azure Blob Storage). By analyzing audit logs like CloudTrail, it uses statistical baselines and time-series anomaly detection to identify suspicious activities such as after-hours bulk downloads, access from new IPs, or unusual API call spikes. It is crucial for investigating potential data exfiltration incidents or building robust cloud security detection rules.