Skill UI

Read, validate, and safely export protocols.io protocol data using official REST endpoints, or create non-executing mutation plans. The bundled Python client makes bounded authenticated GET requests only when --execute is supplied.

This guide outlines critical security best practices for design-to-code pipelines using Anima and Figma. It covers securing API credentials by restricting token scopes (e.g., read-only access for Figma), enforcing server-side execution for SDKs, and implementing robust secret management using cloud services like GCP Secret Manager. This minimizes the risk of credential leakage in CI/CD environments.

This guide details essential best practices for securing applications integrated with Anthropic's Claude API. It covers critical security measures including secure API key management (server-side only), robust input validation to prevent cost attacks, defense mechanisms against prompt injection, and implementing per-user rate limiting. Essential reading for maintaining data privacy and system integrity in production environments.

This elite skill acts as an art director and implementation strategist for modern web development. It mandates an 'Image-First' workflow: first generating high-fidelity, premium design images for specific sections (e.g., hero, product features), deeply analyzing these visual references, and only then translating them into clean, structured, and highly implementable frontend code. It is designed to avoid generic AI clichés, ensuring results that are aesthetically superior, structurally sound, and ready for professional deployment.

Generates optimized prompts for AI tools including LLMs, Cursor, Midjourney, and video AI. Activates only when the user asks to write, fix, improve, or adapt a prompt. Extracts intent, routes to the target tool, and outputs a production-ready prompt with minimal clarifying questions.

A comprehensive playbook detailing advanced techniques for post-exploitation security bypass on Linux systems. Covers escaping restricted shells (rbash), evading noexec/read-only filesystems using in-memory execution (DDexec, memfd_create), and circumventing mandatory access controls like AppArmor and SELinux. Essential for penetration testing and red team operations.

A comprehensive guide and pattern library for reviewing, troubleshooting, and safely modifying Cisco IOS and IOS-XE configurations. This skill outlines best practices for using read-only 'show' commands, validating ACL wildcard masks, managing configuration hierarchy, and following stringent change control procedures to prevent network disruptions.

A sophisticated tool for commercial leaders preparing board-ready forecasts. It goes beyond single-number projections by decomposing pipeline into commit, best-case, and pipe-only tiers. It also projects cohort-level Net/Gross Revenue Retention (NRR/GRR) to detect leaky cohorts and scores per-stage funnel confidence, ensuring all assumptions are explicit for executive review.

This skill runs the Bumblebee scanner on macOS/Linux to perform read-only inventory and exposure checks. It detects compromised packages, developer tools, and host configurations against known security advisories. It is primarily used for supply-chain incident response and vulnerability assessment, providing developers with a clear picture of local system exposure.

This skill provides comprehensive management for Opencode's permission system. It allows users to review currently always-allowed commands, suggest safe read-only commands, and configure granular access controls using allow/deny/ask patterns. It is essential for optimizing security, performing system audits, and managing the operational scope of the agent.

This tool provides a read-only view over per-turn decision logs, aggregating data on skill co-occurrence patterns, meta-skill usage statistics, and router fixtures. It returns a structured JSON summary, making it ideal for analyzing historical skill usage, optimizing workflows, and feeding insights into downstream LLM models.

A comprehensive meta-skill for generating auditable compliance reports, suitable for frameworks like GDPR or SOC2 self-assessments. This bundle executes a multi-step process: deep research with citations, generating a signable .docx report, archiving a read-only .pdf version, and saving the evidence chain to memory for future retrieval. It ensures a complete, traceable audit trail.