Skill UI

This advanced code review skill forces genuine perspective shifts by employing three hostile reviewer personas: the Saboteur (production breaks), the New Hire (maintainability), and the Security Auditor (OWASP-informed). It ensures that all code reviews are critically rigorous, eliminating superficial "Looks Good To Me" approvals and catching blind spots missed by the original author or general AI models. Use it before merging a PR for maximum confidence.

Assesses AI/ML systems for prompt injection, jailbreak, model inversion, data poisoning, and agent tool abuse using MITRE ATLAS mapping, signature detection, and scoring metrics before deployment.

Checks AWS, Azure, and GCP configurations for IAM escalation paths, public storage exposure, open security groups, and IaC gaps, providing preventive findings with MITRE mapping for cloud posture management workflows.

This skill detects malicious Command and Control (C2) communications tunneled through the DNS protocol. It analyzes DNS query logs for indicators such as DNS tunneling tools (Iodine, dnscat2), Domain Generation Algorithms (DGA), and encoded payloads within TXT/CNAME records. Techniques include Shannon entropy analysis of subdomains, statistical anomaly detection, and machine learning classification. Ideal for network security analysts conducting deep threat hunting and forensic investigations.

This guide details how to implement secure, keyless software signing using the Sigstore ecosystem components (Cosign, Fulcio, Rekor). It establishes cryptographic provenance for container images and binaries by binding identity via OIDC, ensuring verifiable integrity and tamper-proofing throughout the CI/CD supply chain.

Guides teams through classifying and triaging declared security incidents, scoring severity, filtering false positives, routing escalations, and starting forensic collection consistent with NIST SP 800-61.

Structured red team engagement planning that blends MITRE ATT&CK kill-chain ordering, technique scoring, choke point and OPSEC analysis, and crown-jewel targeting into authorized offensive simulations with tooling like the engagement planner.

This skill manages the secure transition of private internal projects to public open-source releases. It executes a three-stage pipeline: Forking (removing secrets), Sanitizing (verifying clean code), and Packaging (generating required documentation like README, setup.sh, and CLAUDE.md). It ensures code safety and readiness before public deployment.

A comprehensive guide to idiomatic and robust Dart/Flutter patterns. Covers essential topics including null safety, immutable state management (Freezed), advanced state solutions (BLoC, Riverpod, Provider), reactive routing with GoRouter, secure networking using Dio, and implementing Clean Architecture principles. Ideal for setting up new, scalable Flutter projects.

Automates Feishu doc edits with seven modes (append, overwrite, replace_range, replace_all, insert_before/after, delete_range) plus optional title sync, letting teams tweak specific sections without rebuilding entire files.

Generates comprehensive, structured landing pages designed for high SEO ranking and AEO (AI Extraction Optimization) citation. This skill builds a complete narrative arc, guiding visitors from awareness to action, and includes critical sections like problem statements, social proof, FAQs, and conversion-focused CTAs for maximum performance.

A comprehensive guide detailing security patterns and audit checklists for Automated Market Maker (AMM) smart contracts in DeFi. Covers critical vulnerabilities such as flash loans, slippage, reentrancy attacks, price manipulation, and integer overflow/underflow. Essential for reviewing major DeFi protocols like Uniswap.