Skill UI

This adapter acts as a specialized entry point for authorized security analysis, reverse engineering, and CTF tasks using the 'reverse-skill' repository. It guides users through a systematic, multi-step workflow, ensuring that all actions—from setting initial scope to resolving tools—are executed within the defined security contract of the repository. Ideal for defensive testing and deep technical investigations.

Reviews GitHub pull requests in the googleapis/mcp-toolbox repo against the team's reviewer checklist: title conventions, linked issues, logic errors, edge cases, breaking changes, tests, docs, security, and new dependencies, then proposes a paste-ready verdict for the maintainer.

A comprehensive skill for conducting rigorous sanctions screening and export control compliance analysis. It covers individual designations, sectoral restrictions (energy, finance), dual-use goods, international payment systems (SWIFT/USD/EUR), and complex extraterritorial regimes (OFAC, EAR, ITAR, Chinese ECL). The skill enforces strict legal due diligence, requiring real-time source verification and explicitly flagging all potential risks and limitations to prevent legal hallucinations in global transactions.

A specialized tool for real-time compliance screening across international sanctions lists (UN, OFAC, EU, OFSI) and export control regimes (EAR, ITAR). It provides deep analysis of individual designations, sectoral risks, and dual-use goods, mapping jurisdictional requirements across 30+ countries. All findings are mandatory sourced and verified against official databases, ensuring zero hallucination and high legal accuracy for compliance professionals.

Analyzes a Power Pages site project's source code and dependencies for various security issues. It runs static analysis (opengrep) and dependency scanning (trivy) to detect vulnerable packages, hard-coded secrets, license compliance problems, and general code patterns. Use this skill to audit code safety, check dependencies, or perform a comprehensive security audit.

Runs a comprehensive security scan on a live, deployed Power Pages site. It analyzes the site's public surface for vulnerabilities, fetching the latest report and providing a plain-language summary of findings, categorized by severity. Ideal for auditing, testing, or assessing the safety of a production environment.

This skill provides expert guidance on Section 508 compliance and WCAG 2.0 standards for US federal Information and Communication Technology (ICT). Use it for conducting comprehensive accessibility audits, generating VPAT/ACR reports, developing remediation plans, or answering detailed questions about the POUR principles. It covers federal procurement requirements, electronic documents, and diverse accessibility domains.

This skill analyzes code for language and framework-specific security best practices. It is designed to help users write secure-by-default code, passively detect major vulnerabilities, or generate comprehensive, prioritized vulnerability reports. Supports languages including Python, JavaScript/TypeScript, and Go, ensuring robust security standards throughout the development lifecycle.

This is an internal, deterministic consent gate used in the meta-short-drama workflow. It normalizes user-provided draft review comments and post-revision confirmation replies. Its primary function is to enforce a secure, bounded decision process, requiring explicit approval at every stage before any external image or video generation is authorized, thus preventing ambiguous inputs from proceeding.

This skill audits the security and integrity of legal AI components, including skills, prompts, workflows, and tools. It proactively detects prompt injection, malicious code, data exfiltration paths, and supply-chain risks before deployment or trust. Essential for maintaining confidentiality, privilege, and adhering to legal standards in AI environments.

A comprehensive security auditing tool for AI agent skills. It combines deterministic static scanning (SkillSpector) with deep semantic analysis to assess safety, trustworthiness, and potential risks. Determines if a skill is safe to install by checking for over-permissions, malicious behavior, and hidden dependencies.

An expert assistant for mastering SOC 2 compliance, covering all five Trust Services Criteria (Security, Availability, Confidentiality, Processing Integrity, Privacy). Use this skill for gap analysis, drafting policies, documenting controls, gathering audit evidence, and conducting vendor risk reviews, guiding organizations from initial assessment to sustained compliance readiness.