Skill UI

Systematic code maturity assessment using Trail of Bits' 9-category framework, analyzing arithmetic safety, access controls, documentation, MEV risks, testing, and more to deliver evidence-backed scorecards and actionable recommendations.

This skill automatically generates comprehensive and highly structured Pull Request (PR) descriptions directly from Git diffs. It goes beyond simple summaries by automatically adding detailed change categories (e.g., source, test, config), security risk assessments, and required review checklists based on the modified file types. Use this when submitting complex code changes or when the diff is large and requires explicit structure for thorough review.

This meta-skill coordinates the entire design lifecycle, ensuring that ideas are systematically refined through mandatory stages: brainstorming, risk assessment, and multi-agent review. It acts as a process gatekeeper, enforcing adherence to structured steps and mitigating risks before allowing implementation, thus preventing premature or flawed execution.

This skill acts as a specialized expert for transitioning codebases across various frameworks, languages, versions, and platforms. It generates detailed migration plans, automated migration scripts, comprehensive risk assessments, and rollback strategies. Use it when upgrading technology stacks or moving code between disparate systems to ensure minimal disruption and maintain core functionality.

This skill acts as an expert dependency manager, specializing in planning and executing safe, incremental upgrades for project dependencies. It provides comprehensive risk assessment, compatibility analysis, step-by-step migration guides, and robust testing/rollback plans to ensure system stability during major framework updates.

This structured workflow guides the systematic, low-risk modernization of legacy systems using the Strangler Fig pattern. It provides a phased approach, starting with comprehensive assessment (risk, dependency mapping), establishing robust test coverage (contract testing, data management), and implementing incremental migration infrastructure (API gateways, feature flags) to ensure continuous business operation during the transition.

This expert tool automates compliance checks for EU GDPR and German DSGVO. It scans codebases for privacy risks (PII, special data), generates formal Data Protection Impact Assessments (DPIA), and manages the entire lifecycle of Data Subject Access Requests (DSARs), ensuring adherence to strict legal deadlines. Ideal for privacy audits and compliance planning.

A comprehensive skill for implementing and managing Information Security Management Systems (ISMS) aligned with ISO 27001:2022 and global regulatory standards. This tool guides users through critical security processes, including risk assessments, control implementation, gap analyses, and preparing for audits. Essential for HealthTech and MedTech companies ensuring data privacy and compliance.

Provides ISO 27001 ISMS audit and certification guidance, covering program planning, risk-based execution, Annex A control assessment, finding management, and Stage 1/Stage 2 documentation support for compliance teams.

A comprehensive toolset for planning, validating, and executing complex system, database, and infrastructure migrations with zero downtime. It covers critical phases like schema evolution (Expand-Contract), API compatibility checks, risk assessment, and generating automated rollback runbooks. Essential for high-risk transitions where business continuity is paramount.

This skill finds and compares decentralized finance (DeFi) yield opportunities across various protocols. It aggregates crucial data, including APY/APR calculations, Total Value Locked (TVL), and comprehensive risk assessments. Use it when researching yield farming strategies, comparing cross-chain protocols, or optimizing crypto investment returns.

Provides auto-triggered guidance for creating enterprise risk assessments, covering workflows that span governance, compliance, project management, and integration best practices while validating outputs for production readiness.