Skill UI

Authorized security assessment of PostgreSQL, MySQL, MSSQL, MongoDB, and Redis: exposure and TLS review, account role and grantee analysis, dangerous configuration checks (file_priv, xp_cmdshell, COPY PROGRAM, UDF), NoSQL injection, and audit log posture.

Security-focused review of pull requests, commits, and diffs. It classifies risk, analyzes high-risk changes, calculates blast radius, models attack scenarios, and generates an evidence-backed markdown report.

Perform authorized email security reviews including phishing analysis, SPF/DKIM/DMARC authentication checks, BEC pattern investigation, and mailbox token abuse research. Provides workflows for header analysis, IOC extraction, and security awareness design.

This skill enables reviewing defined code diffs from correctness, authorization, and performance perspectives. It supports bounded multi-agent review when authorized, ensuring findings are reproduced centrally. Users must pin repository paths and intended behavior. It does not install orchestration engines but provides a structured procedure for code quality assurance and security validation without overstepping user authority.

This skill identifies bugs, security vulnerabilities, and code quality issues in local branch changes. Designed for reviewing code diffs, auditing security, and ensuring integrity before deployment. It involves mapping attack surfaces, checking checklists like injection and XSS, and verifying fixes without modifying code unless authorized.

Verify that fix commits properly address audit findings without introducing new bugs or security vulnerabilities. Use it to review security remediation commits, confirm root-cause fixes, check for regressions, and validate completeness.

This skill maps engineering changes (code diffs, architecture designs, IaC) to specific financial compliance controls, such as PCI-DSS v4.0 and MAS TRM. It generates an auditable report detailing compliance gaps, required evidence, and concrete remediation steps, helping teams catch violations before formal audits.

Detect exploitable vulnerabilities in GitHub Actions workflows by tracing concrete attack paths from external attackers — pwn requests, expression injection, credential escalation, supply chain risks — and report only verified, evidence-based findings with full exploitation scenarios.

This workflow orchestrates review, tests, commits, and branch pushes using parallel agents to ensure changes move through validation into a pull request. It enforces repository policies, branch protection, and security checks before merging. Ideal for completed implementation work requiring strict validation, automated testing, and compliance with maintainer guidelines without bypassing safeguards.

Read and edit Google Docs through an available authenticated connector or reviewed API integration, with scoped changes and read-back verification. This skill provides instructions for safe document operations, including reading structure, applying targeted edits, and verifying results. It emphasizes authorization, revision preconditions, and avoiding duplicate inserts. Suitable for users who need to automate document content updates while maintaining data integrity and security.

A specialized security auditor for Laravel applications. It analyzes code, APIs, and configurations against OWASP standards to detect vulnerabilities such as XSS, IDOR, SQL injection, and misconfigurations. Ideal for reviewing backend logic to ensure robust data protection and authorization.

Logic Lens is an AI-powered code review skill that uses formal logic frameworks to detect bugs, anti-patterns, and security risks beyond linters. It covers 9 risk categories including null handling, type safety, concurrency, and security injection, providing severity-ranked findings with fix suggestions.