Skill UI

This skill provides a comprehensive security hardening checklist for software projects. It covers network security, authentication, API safety, data protection, secrets management, supply chain security, incident response, and compliance standards like GDPR and PCI-DSS. Use it to review and improve the security posture of your application before production deployment.

This comprehensive, zero-trust security auditor scans third-party AI agent skills before installation. It performs a rigorous 6-phase review process, analyzing surface patterns, script integrity, permissions, and supply chain risks. It is designed to detect malicious payloads, credential theft, instruction overrides, and prompt injection attacks, ensuring secure AI development and deployment.

Squirrel is an advanced, full-cycle AI coding skill designed to guide software development from concept to production. It automatically detects the current project state (greenfield, in-progress, or mature) and adapts an 8-phase engineering pipeline. This comprehensive workflow covers planning, building, rigorous testing, bug hunting, code polishing, documentation, and deployment readiness, ensuring high-quality, maintainable results.

A comprehensive, multi-phase workflow designed for Infrastructure as Code (IaC) using Terraform. It guides users through provisioning cloud resources, creating reusable modules, managing complex state, handling multi-environment deployments, and integrating robust CI/CD pipelines and security practices. Ideal for establishing scalable, repeatable, and auditable cloud infrastructure.

This skill reviews generated or changed test code against universal testing rules before deployment. It prevents common failure modes like mock-heavy unit tests, near-duplicate test bodies, and tests that re-verify the framework. It enforces best practices such as testing behavior over implementation, justifying mocks at system boundaries, and ensuring every test has a clear justification. Use it when reviewing diffs, new test files, or when writing new tests to ensure high-quality, maintainable test suites.

A comprehensive automation toolkit designed to manage the entire Vercel deployment lifecycle and associated infrastructure. Users can programmatically monitor, trigger, and manage deployments, configure custom domains and DNS records, manage environment variables across multiple targets, and oversee project settings and project listings. Essential for implementing robust CI/CD pipelines and managing cloud infrastructure.

This guide details how to deploy and manage web projects on Vercel using token-based authentication via the CLI. It provides comprehensive steps for locating and setting the VERCEL_TOKEN, identifying project IDs, and executing deployment commands (including linking and direct deployment) without relying on interactive login.

This skill enables developers to deploy frontend and full-stack applications on Vercel efficiently. It covers setting up preview environments for pull requests, configuring edge functions, managing environment variables across different stages, and implementing production guardrails. Includes integration with GitHub Actions for automated CI/CD pipelines and security best practices like custom domains and headers.

This skill performs an observability-first audit of deployed Vercel applications. It comprehensively analyzes production metrics, project configurations, and codebase scans to identify potential cost overruns and performance bottlenecks. It provides version-aware, actionable recommendations for improving application efficiency and reducing cloud expenditure.

A comprehensive, multi-phase quality assurance tool designed for Next.js fullstack applications. It verifies production readiness by checking code integrity, build success, SEO metadata, API authentication, route stability, performance, and security vulnerabilities. Use it as a mandatory pre-deployment checklist before promoting an app to production.

A critical skill for reviewing WooCommerce extensions, payment integrations, and checkout logic before deployment. Ensures code follows security standards, HPOS compatibility, proper data handling, and runtime discipline to prevent systematic AI failures.

A specialized tool for auditing WordPress plugins, themes, and blocks before deployment. It checks for security vulnerabilities like SQL injection, XSS, and improper escaping, ensures API correctness, and enforces internationalization standards. Use it to review generated code or perform security assessments on WordPress environments.