Skill UI

Implement comprehensive automated policy enforcement for Shopify apps, ensuring security and adherence to App Store guidelines. This skill includes ESLint rules for detecting hardcoded API secrets, enforcing GraphQL query cost budgets, and running pre-commit hooks and CI checks for critical compliance validations (e.g., GDPR webhooks). Use it when hardening a production-ready Shopify application.

This skill provides comprehensive guidance on implementing robust data governance and security guardrails within Snowflake. It covers advanced features such as network rules, mandatory authentication policies (MFA, Key Pair), session timeouts, and statement-level controls. Use this when enforcing strict security policies, achieving regulatory compliance, or structuring robust data access controls for a Snowflake environment.

Design and implement Arduino integration with Azure IoT Hub and IoT Edge, covering secure provisioning, resilient telemetry, command handling, and production guardrails.

This skill enables the creation of a robust 'harness' system for coding agents within a repository. It addresses the need to prevent repeated AI-generated coding mistakes by implementing durable instructions, guardrails, regression tests, and failure memory. It treats the target repository as the source of truth, ensuring consistency and maintaining high reliability across all automated contributions.

This skill generates a comprehensive Technology Radar document following the ThoughtWorks format. It provides a structured framework for an engineering team to evaluate and categorize all significant technologies (tools, languages, platforms, techniques) into four quadrants (Adopt, Trial, Assess, Hold). It helps establish a shared, explicit technology strategy, detailing adoption rationales, decision trails, and maintenance processes for consistent engineering choices.

This skill assists users in defining, adapting, and designing bounded, structured feedback loops for AI agents. Whether you need to find a suitable existing workflow, fine-tune a published loop, or design a new process from scratch, this tool guides you through a safe, iterative methodology. It emphasizes setting clear stopping rules, guardrails, and verifiable, measurable steps to ensure the automation remains controllable and focused.

Implements comprehensive runtime safety defenses for Large Language Model (LLM), RAG, and agent applications. This skill integrates industry-leading guardrail systems—including Llama Guard 3, NeMo Guardrails, and LLM Guard—to inspect and constrain all input and output data. It is essential for production environments requiring protection against adversarial attacks such as jailbreaks, prompt injection (OWASP LLM01), toxic content, and sensitive data leakage.

NVIDIA garak is an open-source LLM vulnerability scanner designed for comprehensive red-teaming and security assessment. It systematically probes large language models (via OpenAI-compatible APIs, Hugging Face, etc.) using thousands of adversarial prompts. It covers critical vulnerabilities such as prompt injection, jailbreaking, data leakage, and toxicity. Use this tool to establish a repeatable security baseline before or after deployment, validate the effectiveness of safety guardrails, or generate quantitative evidence for AI risk assessments.

Implements a comprehensive defense-in-depth framework for autonomous AI agents that interact with external tools. It mitigates risks like prompt injection or tool misuse by enforcing strict tool allowlisting, binding tools to least-privilege identities, requiring human-in-the-loop approval for high-impact actions, and utilizing policy enforcement (like NeMo Guardrails) to bound the blast radius and ensure compliance.

This skill provides comprehensive techniques for security-testing Retrieval-Augmented Generation (RAG) pipelines. It probes for indirect prompt injection, which occurs when malicious instructions are embedded in retrieved documents, and tests for embedding-space manipulation. Using advanced tools like NVIDIA garak, Promptfoo, and PyRIT against vector stores (FAISS, Chroma, etc.), users can validate retrieval guardrails and secure CI/CD gates against adversarial inputs and data leakage.

Analyze Ahrefs data for SEO metrics including domain rating, backlinks, organic keywords, and content explorer results. Provides live data with confidence weighting and cost guardrails for batch operations.

Generate highly realistic Reddit post cards designed for social media stories and video overlays. This template simulates the full Reddit UI, including vote rails, subreddits, user metadata, and comment counts. Ideal for marketing campaigns, content promotion, or creating engaging, authentic-looking narrative videos.