Skill UI

An expert assistant for mastering SOC 2 compliance, covering all five Trust Services Criteria (Security, Availability, Confidentiality, Processing Integrity, Privacy). Use this skill for gap analysis, drafting policies, documenting controls, gathering audit evidence, and conducting vendor risk reviews, guiding organizations from initial assessment to sustained compliance readiness.

Tinte is an agent-native infrastructure designed for generating, compiling, and managing consistent design systems from a single source of truth. It maintains a graph of 13 semantic OKLCH color tokens, compiling them into multiple formats including shadcn/ui presets, VS Code themes, and terminal configurations. Use it to ensure brand consistency, extract themes from images (via AI), and generate code previews with professional styling.

This expert skill advises critical infrastructure owners and operators (pipelines, railroads, public transit) on complying with complex TSA cybersecurity directives. It provides deep knowledge of CRMP, CIP, CAP, IT/OT segmentation, and incident reporting protocols. Use it for gap assessments, policy drafting, and security architecture reviews related to transportation critical systems.

This skill analyzes excessively large Pull Requests (PRs) that exceed established line budgets (e.g., 400 lines). It automatically splits these massive changes into smaller, focused, and sequential PRs using advanced chaining or stacking strategies. This process is crucial for protecting reviewer focus, ensuring reviews can be completed within a manageable time budget (e.g., ≤ 60 minutes), and maintaining high code quality during complex feature integration.

A skill that captures Guixingren's AI technology media creation mindset, featuring Silicon Valley first-line perspectives, China-US dual-line narratives, rapid news aggregation structure, and AI community productization operations. Suitable for AI industry news writing, Silicon Valley reporting, China-US AI comparison analysis, developer tool reviews, and AI community operations, including hackathons, podcasts, and offline events.

Framework for AI media writing inspired by Synced. Focuses on paper-first reporting, quantitative data, academic plus industry parallelism, layered analysis, and productized content. Applies to deep tech reviews, model benchmarks, industry trend reports, and editorial commentary.

Reviews a pull request and posts one consolidated GitHub review with inline comments via the gh CLI. Runs the repo's own checks first, verifies external claims against official docs, then reports correctness, security, and structural findings—each backed by evidence and gated for noise.

This skill performs a read-only audit to identify missing, weak, or stale test coverage in codebases. It analyzes full repositories or specific scopes like PRs, features, and APIs to recommend concrete test cases. It prioritizes high-risk areas and ensures behavior is properly covered without executing tests or performing security reviews.

This skill performs comprehensive security audits, threat modeling using STRIDE/PASTA, and infrastructure hardening. It supports Red/Blue Team exercises, OWASP compliance checks, code reviews, and incident response planning. Ideal for securing projects, identifying vulnerabilities, and ensuring robust security posture across development and operational environments.

Conduct periodic access reviews and certifications for AWS IAM, GitHub, Okta, and other identity providers, with automated reporting, certification workflows, and unused permission detection.

Comprehensive tool for finding and fixing WCAG 2.2 accessibility violations across codebases or live web pages. Operates in two modes: Report mode generates a prioritized, detailed, non-editing audit report (ideal for code reviews), while Fix mode performs an audit-edit-verify loop directly on the target to apply necessary fixes.

AgentFlow transforms your existing Kanban board (Asana, GitHub, Linear) into a self-managing, autonomous AI development pipeline. It orchestrates multiple AI agents through defined stages (Backlog to Done), enforcing deterministic quality gates, performing adversarial reviews, and tracking costs—all visible within your existing project management UI. It provides crash-proof execution and full observability for complex software development lifecycles.