Skill UI

Analyze health data trends and patterns over time, including weight, symptoms, medications, and lab results. Identify correlations and significant changes to provide data-driven insights. Supports multi-dimensional analysis and generates interactive HTML visualization reports using ECharts. Ideal for tracking health improvements and monitoring risks.

This skill enables identification and testing of HTML injection vulnerabilities in web applications to assess security risks. It involves using tools like Burp Suite and understanding HTTP structures. Strictly for authorized security assessments, defensive validation, or educational purposes in controlled environments.

This skill identifies authentication flaws in password reset flows, including username enumeration, exposed reset tokens, token replay, and missing rate limits. It helps security professionals assess account recovery security risks and prevent unauthorized access.

This skill helps identify gRPC security vulnerabilities during penetration testing. It includes fingerprinting gRPC servers, enumerating services via reflection, testing authentication bypasses, and checking for DoS risks like HTTP/2 Rapid Reset. Requires explicit authorization for offensive use.

A critical persona for idea validation debates. It identifies flaws, risks, and market challenges, acting as a red team to prevent over-optimism. Use as a sub-agent in the @idea-evaluator skill to rigorously test ideas.

This skill enforces a rigorous data validation protocol by establishing hard boundaries at every point data enters the system (API requests, user input, environment variables, webhooks, etc.). It mandates a four-phase process: detection, trust classification, mandatory filtering (schema validation, sanitization, type checking), and final verification. This prevents untrusted data from reaching core business logic, mitigating risks like SQL injection and XSS.

Detects security risks in multi-agent systems such as data leakage, boundary violations, unencrypted channels, and privilege mismatches. Used when agents collaborate or share context to verify secure communication protocols and access controls.

Implement an ISO/IEC 27001:2022 Information Security Management System: define ISMS scope, run asset-based risk assessments, build the Statement of Applicability, and deploy Annex A controls through the PDCA cycle.

Routes enumerable judgment steps (did it work, which option, how risky) to the Jev judgment model via MCP tools, batching questions into single calls and handling escalated verdicts. For agents needing fast typed decisions without token generation.

This workflow guides developers to build and fix existing Laravel applications effectively. It emphasizes root-cause diagnosis, repository-native implementation, regression coverage, and risk-based verification. Suitable for feature implementation, bug fixing, and maintaining architectural conventions within established codebases.

Analyze and audit judicial and extrajudicial auction edicts. Identify hidden risks, dangerous clauses, debts, occupant issues, and classify the opportunity.

Provides senior-level guidance on Brazilian judicial and extrajudicial property auctions, combining legal, appraisal, market, and risk modules to recommend bidding strategies and investor actions.