Skill UI

This framework provides a rigorous, multi-dimensional guide for conducting code reviews. It evaluates five critical axes: correctness, readability, architecture, security, and performance. Use this process before merging any code change, especially when reviewing PRs, refactoring, or evaluating code produced by AI agents, to ensure continuous improvement and maintain high code health.

A comprehensive code review tool designed for C#/.NET projects. It evaluates the implementation of key design patterns (Command, Factory, Repository) and adherence to SOLID principles. The review covers architecture, best practices (async/await, logging), security, testability, and clean code principles, providing actionable recommendations for improvement.

This skill performs a comprehensive security audit of Model Context Protocol (MCP) server configurations found in .mcp.json files. It is designed to identify critical vulnerabilities, including hardcoded secrets (API keys, tokens), dangerous shell injection patterns, unpinned dependencies, and compliance issues regarding approved server lists. Use this skill during security reviews, project onboarding, or pre-commit checks to ensure secure deployment.

Conducts comprehensive AI prompt safety reviews that analyze bias, misinformation, injection, and privacy risks while delivering effectiveness evaluations, security guidance, and best-practice recommendations for prompt engineers.

Catalogs 42 cloud-agnostic design patterns that architects can apply when designing, reviewing, or operating distributed systems to boost reliability, performance, messaging, security, and deployment outcomes.

Analyzes PostgreSQL snippets or entire projects to flag anti-patterns, enforce best practices, optimize JSONB/array usage, schema design, custom types, triggers, extensions, and security policies like RLS.

Defines Salesforce Lightning Web Component, Aura, and Visualforce quality/security standards covering SLDS 2 styling, accessibility (WCAG 2.1 AA), data access patterns, component communication rules, XSS/CSRF protections, view state management, and Jest testing requirements for guided UI development and reviews.

A universal assistant for conducting deep code reviews across major SQL databases (MySQL, PostgreSQL, SQL Server, Oracle). It rigorously analyzes SQL code for critical vulnerabilities (like SQL injection), performance bottlenecks, maintainability issues, and adherence to industry best practices. Features include security audits, index optimization recommendations, query structure analysis, and schema design validation, ensuring robust and secure database development.

A comprehensive, five-stage methodology for reviewing code quality. This process systematically checks for requirements compliance, logical correctness, code maintainability, test coverage, and critical security/performance vulnerabilities. It provides actionable feedback categorized by severity (Blocker, Major, Minor, Nit), ensuring high standards for all merged code.

This skill provides a comprehensive framework for conducting high-quality code reviews. It guides developers through checking code across four critical dimensions: Correctness (functional accuracy and edge cases), Maintainability (readability and documentation), Performance (efficiency and resource usage), and Security (input validation and vulnerability management). It also emphasizes providing actionable, constructive, and empathetic feedback.

This guide provides implementation patterns for secure integration with the Podium API using REST API calls. It focuses on establishing robust connections with OAuth2 authentication for managing core business functions, including messaging, retrieving customer reviews, and processing payments. It also details essential error handling strategies.

This framework enforces high output quality, intellectual honesty, and continuous improvement across all AppSec agents. It mandates structured processes, including self-critique loops, anti-rationalization guards, and self-reflection quality gates (≥8 scoring). Applicable during code review, SAST, SCA, and threat modeling, it ensures rigorous and verifiable security analysis.