Skill UI

A deep-dive session designed to stress-test a technical plan against an existing domain model. This process forces the user to resolve ambiguities, sharpen terminology, and validate decisions by cross-referencing code and existing documentation (CONTEXT.md, ADRs). It ensures architectural rigor and completeness before implementation.

This skill automates the complex process of resubmitting an already polished academic paper to a different conference or journal. It is designed for scenarios where the core content, experiments, and bibliography must remain untouched, but the paper needs micro-edits to accommodate new venue constraints, page limits, or prior reviewer feedback. It ensures the new submission is generated as a separate, sibling directory to maintain the integrity of prior submissions.

This router entry point is designed for comprehensive testing of file access, download endpoints, and file upload workflows. Use this guide when validating file paths, detecting Local File Inclusion (LFI), or analyzing vulnerabilities in preview, storage, or extraction processes. It helps categorize whether the security issue relates to path traversal or insecure data processing chains.

This advanced playbook covers escalating prototype pollution into Remote Code Execution (RCE) and Cross-Site Scripting (XSS). It details exploitation techniques across various environments, including Node.js child_process, EJS, Pug, Handlebars, and client-side libraries like jQuery and Lodash. It is designed for security researchers and penetration testers to systematic locate and exploit deep merge sinks and framework gadgets.

A specialized CLI alias designed to implement the PUA P9 protocol, simulating the role of a P9 tech lead for AI coding assistance (Codex/Claude Code). This tool helps users structure complex development tasks by focusing on writing precise prompts, managing execution steps, and strictly adhering to a defined professional protocol, minimizing direct code implementation unless reassigned. It ensures rigorous process management and evidence-based output.

This tool functions as a command-line interface (CLI) alias for conducting a structured PUA survey. It guides the user through the survey process, collects confidential local responses, and manages configuration data in `~/.pua/config.json`. It is designed for seamless integration within developer environments using Codex/Claude Code.

A specialized Codex CLI alias designed to check the operational status of the PUA agent or team. This tool reports current active states, corresponding Process IDs (PID), Time To Live (TTL), and identifies stale or inactive records. It is primarily used for system debugging and monitoring agent health via the command line.

The FLOW framework is an evidence-led operating model designed for the AI-search era. It structures the entire SEO process into five distinct, systematic stages: Find, Leverage, Optimize, Win, and Local. By utilizing a comprehensive library of 41 AI-driven prompts, it guides users away from ad-hoc querying toward structured, evidence-backed analysis, ensuring consistency across keyword research, backlink strategies, and local optimizations.

This tool automatically converts design screenshots or visual exports into structured, functional Vue 3 Composition API components. It supports popular UI libraries like Vant, Element Plus, and Ant Design Vue. By batch converting screenshots, it streamlines the development process from raw design assets to reusable, production-ready code, significantly boosting frontend development efficiency.

This skill is designed for orchestrating complex, multi-step processes. It helps manage workflows, coordinate different components, and ensure systematic execution of tasks from planning to completion. Ideal for complex automation scenarios and structured project management.

This skill is designed for conducting comprehensive production audits. It helps users systematically check processes, identify quality gaps, and ensure compliance standards are met in a production environment. (Note: The provided content is a translation placeholder.)

A risk-paranoid, mandatory review process designed to interrogate any plan that touches sensitive customer data, regulatory compliance, or production access. It forces consideration of critical security pillars including STRIDE threat modeling, blast radius quantification, detection mechanisms (MTTD), incident response runbooks, regulatory notification windows, and third-party vendor security posture. Essential before deploying features handling PII, PHI, or before compliance audits (SOC 2, HIPAA, GDPR).