Skill UI

This skill enables comprehensive static analysis of frontend codebases to detect Cross-Site Scripting (XSS) vulnerabilities. It identifies unsafe DOM manipulation, improper sanitization, and injection points across frameworks like React, Vue, and Angular. Use it to secure client-side applications against critical security risks.

A portable, framework-agnostic observability system for React and React Native apps. It defines typed event taxonomies, implements non-blocking analytics fan-out, reports real-user Core Web Vitals, and manages user consent. Ensures SSR safety and prevents vendor failures from breaking the application.

A portable discipline for the write path in React or React Native apps using a query/cache layer. It codifies the optimistic-update lifecycle including canceling in-flight queries, snapshotting affected caches, patching instantly, rolling back verbatim on error, and invalidating on success. Ensures the UI feels instant, remains safe on failure, and maintains cache coherence across detail and list views.

Expert in secure frontend coding practices specializing in XSS prevention, output sanitization, and client-side security patterns. Provides guidance on CSP configuration, safe DOM manipulation, input validation, clickjacking protection, and secure redirects.

Master advanced Git techniques such as interactive rebase, cherry-pick, bisect, worktrees and reflog to keep a clean commit history, apply hotfixes across branches, locate bug-introducing commits, and safely recover lost commits or branches.

This workflow orchestrates review, tests, commits, and branch pushes using parallel agents to ensure changes move through validation into a pull request. It enforces repository policies, branch protection, and security checks before merging. Ideal for completed implementation work requiring strict validation, automated testing, and compliance with maintainer guidelines without bypassing safeguards.

This skill safely stages, commits, and pushes Git changes using conventional commit messages. It activates when users explicitly request to push or save work remotely. It includes safety gates to inspect changes, check upstream branches, and respect protected branch policies. It ensures atomic updates and validates commit messages before pushing to the remote repository.

Automate GitHub operations like issues, pull requests, branches, and workflows using Rube MCP. Ensures repository policy compliance and safe programmatic changes. Ideal for CI/CD integration and repository maintenance tasks requiring strict access control and verification.

Read and edit Google Docs through an available authenticated connector or reviewed API integration, with scoped changes and read-back verification. This skill provides instructions for safe document operations, including reading structure, applying targeted edits, and verifying results. It emphasizes authorization, revision preconditions, and avoiding duplicate inserts. Suitable for users who need to automate document content updates while maintaining data integrity and security.

Estimate the required memory for inference of Safetensors or GGUF models from the Hugging Face Hub using HTTP Range requests, without downloading weights. Supports optional KV cache estimation for LLMs and VLMs.

Hono is a minimal and ultrafast web framework built entirely on Web Standards (Request/Response/fetch). It allows developers to build high-performance APIs and full-stack applications that run seamlessly across multiple environments, including Cloudflare Workers, Deno, Bun, and Node.js. It is ideal for edge deployment, Backend for Frontend (BFF) layers, and type-safe backend services.

Rules and patterns for building AI demos on Hugging Face Spaces with ZeroGPU hardware, covering @spaces.GPU, quota tuning, CUDA constraints, and concurrency safety.