Skill UI

This skill provides deep security review for GitHub Actions workflow files. It focuses on the unique Actions threat model—identifying vulnerabilities like script injection via ${{ }} interpolation, privilege escalation from triggers (e.g., pull_request_target), and ensuring least-privilege permissions for CI/CD pipelines. Use it to audit, secure, or harden existing workflows, preventing attacks from untrusted inputs and supply chain risks.

This tool conducts structured reviews of various Infrastructure-as-Code (IaC) tools (e.g., Terraform, Pulumi) across multiple cloud providers. It generates an actionable report that categorizes findings by severity (Critical, High, Medium, Low), providing detailed remediation steps and a reusable best-practice checklist for continuous security, compliance, and operational auditing.

A comprehensive, pre-deployment, defense-in-depth security audit tool for Solidity smart contracts built with Foundry. It combines static analysis (Slither, Aderyn), symbolic execution (Mythril), property-based fuzz testing, and key hygiene checks to proactively detect critical vulnerabilities like reentrancy, access control flaws, and arithmetic bugs before deployment to any EVM chain.

This skill audits Model Context Protocol (MCP) servers to detect critical AI security vulnerabilities. It scans for tool poisoning, tool shadowing, rug pulls, SSRF, and unauthenticated exposure. Use it before integrating new tools or during security reviews to ensure agent reliability and prevent supply chain attacks.

CHIPSEC is an open-source framework designed to assess the low-level security configuration of x86 platform firmware and hardware. It verifies critical security controls such as SPI flash write protection, BIOS locks, SMM/SMRR configuration, and Secure Boot variable integrity. Users can run automated tests, dump SPI flash memories for forensics, and detect potential firmware implants that persist below the operating system layer.

A comprehensive security auditing tool designed to detect UEFI Secure Boot bypasses and advanced bootkits (like BlackLotus and Bootkitty). It verifies the Secure Boot state, checks the freshness of the dbx revocation list, and hashes EFI boot binaries against known-bad sets. Use this skill for auditing enterprise fleets after major bootkit advisories or for hunting pre-OS persistence on compromised endpoints.

A critical security tool for detecting typosquatted, brandjacked, or misspelled packages across major registries (npm, PyPI, crates.io). It uses advanced techniques like edit-distance and corpus matching to proactively screen dependency names before installation. Ideal for implementing CI/CD gates, auditing lockfile diffs, or reviewing dependency lists sourced from AI models to mitigate supply chain attacks.

A comprehensive skill for managing AWS operational excellence, cost governance, and observability. It provides guidance on pre-deployment cost estimation (TCO), detailed spending analysis using Cost Explorer, setup of CloudWatch alarms, auditing activity via CloudTrail, and overall security posture assessment. Essential for optimizing cloud spending and ensuring reliable infrastructure.

This comprehensive tool guides developers through the entire plugin ecosystem, helping them find and recommend the optimal plugins for any given workflow or task. It covers core coordination, multi-agent collaboration, advanced memory management (Vector DB, RAG), architectural design (ADR/DDD), security auditing, and modern development methodologies. Use it when starting a new project or optimizing existing development pipelines.

This skill provides comprehensive operational controls for long-lived, cloud-hosted agent workloads. It manages the entire lifecycle—from deployment and scaling to observability and security. Features include detailed monitoring (logs, metrics, traces), safety controls (kill switches, least privilege), and robust change management processes (rollout, rollback, auditing). Ideal for mission-critical microservices and background agents.

A comprehensive security auditing tool designed for Claude Code environments. It scans the entire configuration directory for security vulnerabilities, misconfigurations, injection risks, hardcoded secrets, and overly permissive settings. Ideal for initial project setup, pre-commit checks, or routine security hygiene.

Scan entire codebases or specific changes, audit repositories for security issues, and generate verified patch files. Supports scanning whole repositories, branch diffs, or individual commits. Each finding is verified by an agent panel before reporting. Suggested patches are saved as files for manual review and application. Works in auto mode for streamlined security auditing workflows.