Skill UI

Automates the final pre-release verification by running documentation, quality, testing, and security gates through the Centinela QA agent before shipment, then records results and verdict in docs for each version.

A comprehensive skill set for senior transportation managers overseeing a large, multi-modal carrier portfolio. It covers the full lifecycle of carrier engagement, including sourcing, compliance checks (FMCSA SAFER), executing complex RFPs, negotiating granular rate components (linehaul, FSC, accessorials), and establishing performance scorecards. Use this skill to optimize logistics costs, mitigate supply chain risks, and ensure consistent service quality across varied freight types.

This guide details how to integrate OWASP ZAP (Zed Attack Proxy) into CI/CD pipelines (GitHub Actions/GitLab) for comprehensive Dynamic Application Security Testing (DAST). It covers configuring baseline, full, and API scans to identify common vulnerabilities like XSS, SQLi, and CSRF in running web applications and REST/GraphQL APIs, ensuring security quality gates in the development lifecycle.

This guide details how to integrate Static Application Security Testing (SAST) tools like CodeQL and Semgrep into your CI/CD pipelines using GitHub Actions. It covers setting up automated vulnerability detection on pull requests, tuning rules to minimize false positives, uploading SARIF results for centralized security reporting, and enforcing quality gates to prevent vulnerable code from merging into protected branches. Essential for DevSecOps and compliance (SOC 2, PCI DSS).

Automates the static security analysis of Android APK/AAB files using the Mobile Security Framework (MobSF). This skill identifies critical vulnerabilities such as hardcoded secrets, insecure permissions, weak cryptography, and structural flaws (mapping to OWASP Mobile Top 10) without requiring application execution. It is essential for integrating security gates into CI/CD pipelines, performing pre-release quality assurance, and enhancing penetration testing coverage.

Integrates Aqua Security's Trivy scanner into CI/CD pipelines to perform automated vulnerability scanning on Docker images and related artifacts. It detects OS package CVEs, application dependency issues, and Dockerfile misconfigurations. This ensures that only secure, compliant images can proceed to registry push or production deployment by enforcing strict quality gates.

AgentFlow transforms your existing Kanban board (Asana, GitHub, Linear) into a self-managing, autonomous AI development pipeline. It orchestrates multiple AI agents through defined stages (Backlog to Done), enforcing deterministic quality gates, performing adversarial reviews, and tracking costs—all visible within your existing project management UI. It provides crash-proof execution and full observability for complex software development lifecycles.

A robust, production-tested pattern for coordinating multiple specialized AI agents. The orchestrator decomposes complex tasks, routes them to the most suitable specialist, prevents redundant or conflicting work (anti-duplication), and enforces mandatory quality gates (e.g., running tests, checking file diffs) to verify results before marking a task as complete. It also includes heartbeat monitoring for task progress.

A comprehensive guide for setting up production-grade CI/CD pipelines for Go projects using GitHub Actions. This skill covers essential quality gates including unit testing, linting (golangci-lint), static analysis security testing (SAST), vulnerability scanning, dependency management, Docker builds, and automated releases using GoReleaser.

This advanced skill automates the enforcement of Python code quality using Ruff. It implements a controlled, iterative workflow that supports safe and unsafe automatic autofixes, formats the code, and reviews diffs after each pass. The process recursively repeats until all findings are resolved or require explicit user decision, ensuring high code consistency and quality gates.

A comprehensive tool for planning and auditing programmatic SEO pages generated at scale from structured data sources (CSV, JSON, APIs). It guides best practices for designing templates, defining scalable URL systems, establishing internal linking strategies (Hub/Spoke), and implementing robust quality gates. Use this when ensuring content uniqueness, preventing thin content penalties, and mitigating risks associated with large-scale, data-driven content generation.

Configure comprehensive CI/CD pipelines for integrating Grammarly's text analysis into your development workflow. This setup uses GitHub Actions to run unit and integration tests on pull requests, validating API connectivity, enforcing content quality gates (e.g., minimum grammar scores), and ensuring documentation quality before merging to the main branch.