Skill UI

Systematic code maturity assessment using Trail of Bits' 9-category framework, analyzing arithmetic safety, access controls, documentation, MEV risks, testing, and more to deliver evidence-backed scorecards and actionable recommendations.

This skill automatically generates comprehensive and highly structured Pull Request (PR) descriptions directly from Git diffs. It goes beyond simple summaries by automatically adding detailed change categories (e.g., source, test, config), security risk assessments, and required review checklists based on the modified file types. Use this when submitting complex code changes or when the diff is large and requires explicit structure for thorough review.

This meta-skill coordinates the entire design lifecycle, ensuring that ideas are systematically refined through mandatory stages: brainstorming, risk assessment, and multi-agent review. It acts as a process gatekeeper, enforcing adherence to structured steps and mitigating risks before allowing implementation, thus preventing premature or flawed execution.

This skill acts as a specialized expert for transitioning codebases across various frameworks, languages, versions, and platforms. It generates detailed migration plans, automated migration scripts, comprehensive risk assessments, and rollback strategies. Use it when upgrading technology stacks or moving code between disparate systems to ensure minimal disruption and maintain core functionality.

This skill acts as an expert dependency manager, specializing in planning and executing safe, incremental upgrades for project dependencies. It provides comprehensive risk assessment, compatibility analysis, step-by-step migration guides, and robust testing/rollback plans to ensure system stability during major framework updates.

This structured workflow guides the systematic, low-risk modernization of legacy systems using the Strangler Fig pattern. It provides a phased approach, starting with comprehensive assessment (risk, dependency mapping), establishing robust test coverage (contract testing, data management), and implementing incremental migration infrastructure (API gateways, feature flags) to ensure continuous business operation during the transition.

Automates GDPR and German DSGVO workflows by scanning codebases for privacy risks, generating DPIA documentation, and tracking data subject rights requests to support compliance assessments, audits, and planning.

Guides HealthTech and MedTech teams through ISO 27001/27002 ISMS design, risk assessment, control implementation, compliance checking, certification prep, incident response, and automated reporting for audits.

Provides ISO 27001 ISMS audit and certification guidance, covering program planning, risk-based execution, Annex A control assessment, finding management, and Stage 1/Stage 2 documentation support for compliance teams.

This skill finds and compares decentralized finance (DeFi) yield opportunities across various protocols. It aggregates crucial data, including APY/APR calculations, Total Value Locked (TVL), and comprehensive risk assessments. Use it when researching yield farming strategies, comparing cross-chain protocols, or optimizing crypto investment returns.

Provides auto-triggered guidance for creating enterprise risk assessments, covering workflows that span governance, compliance, project management, and integration best practices while validating outputs for production readiness.

This skill acts as an expert risk manager, providing comprehensive guidance on monitoring portfolio risk, calculating R-multiples, and optimizing position limits. It covers advanced quantitative finance topics such as Value at Risk (VaR), correlation analysis, and stress testing using Monte Carlo simulations. Use it for systematic risk assessment, developing hedging strategies (options/futures), and implementing rigorous risk controls in trading workflows.