Skill UI

Runs AgentShield to audit Claude Code configuration files and MCP components for secrets, injection risks, and overly permissive settings, offering CLI, JSON/Markdown/HTML reports, auto-fix, Opus deep analysis, and CI-ready GitHub Action hooks to harden new or existing projects.

A comprehensive fullstack development toolkit designed to accelerate project setup and maintain code health. It provides project scaffolding for popular stacks (Next.js, FastAPI, MERN, Django), generating complete boilerplate code, Docker configurations, and environment templates. Furthermore, the Code Quality Analyzer audits existing codebases for critical security vulnerabilities, complexity metrics, and dependency issues, ensuring high standards throughout the development lifecycle. Ideal for new project initiation and routine code auditing.

Provides Windsurf projects with dependency tree analysis, vulnerability scanning, and update planning, helping developers audit npm/yarn/pnpm/pip packages, plot safe migrations, and apply verified upgrades.

Systematically examines project dependencies, using GitHub data to highlight single-maintainer, unmaintained, unpopular, or otherwise risky packages before audits so teams can focus security efforts and propose better-maintained alternatives.

Command-line helper that drives the burpsuite-project-file-parser extension and Burp Suite Professional to search headers, bodies, and audit data from .burp project files while enforcing safe truncation and size checks.

Analyzes a repository’s stack, tooling, and structure to recommend Claude Code settings.json permissions, compiling safe read-only commands when onboarding or auditing projects.

Designs and audits website architecture, URL hierarchies, navigation zones, and internal linking to improve crawlability, topical authority, and SEO outcomes across existing or new projects.

Evaluates a project’s dependencies for indicators of exploitation risk such as unmaintained code, single maintainers, high-risk features, missing security contacts, or past CVEs, guiding pre-engagement scoping and reporting to highlight high-risk components.

Functions as a Chief Security Architect assistant that performs STRIDE/PASTA threat modeling, OWASP checks, Red/Blue team simulations and incident response playbooks to harden any project before production.

Audit Google Cloud IAM using gcloud CLI, Policy Analyzer, and IAM Recommender to flag over-privileged bindings, primitive roles, service-account keys, and cross-project risks during security assessments and compliance reviews.

Implement GCP Organization Policy constraints to enforce security guardrails across an entire resource hierarchy, restricting risky configurations, enforcing encryption, and auditing compliance programmatically at organization, folder, and project scopes.

Structured verification loop for Laravel projects that runs environment checks, linting/static analysis, tests with coverage, security audits, migrations, and build/deployment readiness before PRs or deployments.