Skill UI

This tool converts markdown PR writeups containing unified diff blocks and severity-tagged callouts into a single, structured, 2-column HTML review document. It generates a jump-navigation, displays the diff on the left and detailed annotations on the right, and enforces a mandatory named reviewer footer, ensuring WCAG compliance.

This tool standardizes the process of triaging and responding to customer support tickets, emails, or chats. It analyzes incoming text to identify issue type, product area, and severity, then categorizes the ticket, sets a priority level, drafts an empathetic response, and generates internal action items for efficient handling across platforms like Zendesk or Intercom.

This tool conducts structured reviews of various Infrastructure-as-Code (IaC) tools (e.g., Terraform, Pulumi) across multiple cloud providers. It generates an actionable report that categorizes findings by severity (Critical, High, Medium, Low), providing detailed remediation steps and a reusable best-practice checklist for continuous security, compliance, and operational auditing.

This skill performs a systematic, visual, and structural audit of PowerPoint presentations. It checks for layout flaws, text overflow, style inconsistencies, and weak visual hierarchy. Ideal for QAing a deck before a meeting, ensuring readability for specific audiences (e.g., executives, clients), and pinpointing precise fixes with severity ranking.

Hayabusa is a specialized threat-hunting and fast-forensics tool designed to analyze Windows EVTX event logs. It applies a comprehensive library of Sigma detection rules to raw log data, generating a single, prioritized, chronological timeline. The output includes severity levels, MITRE ATT&CK mappings, and detailed metrics, enabling analysts to perform rapid, SIEM-free incident triage and export results for collaborative analysis.

Rewrites overly formal or vague code review comments generated by AI or corporate tools. It cuts out filler phrases like "I noticed..." or "It might be worth considering...", transforming them into direct, actionable feedback. The output uses a clear format (Location: Severity: Observation. Fix.) that sounds like it came from a helpful, experienced teammate, significantly improving the quality and reception of PR feedback.

A structured presentation deck designed for rigorous review of safety incidents, security risks, and policy compliance. It utilizes distinct visual cues, including hazard stripes, L1/L2/L3 severity tiers, and dedicated code blocks for policy review (e.g., YAML). Ideal for red team exercises, post-incident reviews, and high-stakes technical briefings.

Diagnoses full-stack failure modes in agent and LLM applications, including wrapper regressions, memory contamination, tool discipline failures, hidden repair loops, and rendering corruption. Produces severity-ranked findings and code-first fixes for production agent systems.

Scan project dependencies for known CVEs and outdated packages using npm audit and security CLI tools. Covers severity triage, safe opt-in auto-fix workflow, and continuous monitoring hooks before releases or after lockfile changes.

This tool performs static security scanning of declared MCP surfaces using the `harness mcp-scan` command. It reads configuration files like `.mcp/servers.json` and `.harness/claims.json` without executing any tools. The tool flags policy, permission, and dependency issues, exiting with code 1 if findings meet the specified severity threshold. It supports CI integration and graceful degradation when the harness binary is unavailable.

A comprehensive audit worker that integrates Open Infrastructure Architecture (OIA) manifest analysis, threat modeling, and MCP security scanning. It computes a composite worst-case severity score and persists time-stamped audit records in a memory namespace. Primarily designed for scheduled CI/CD pipelines to detect architectural drift and security regressions over time.

This skill generates an enterprise-grade threat model report for MCP surfaces. It categorizes security threats and outputs severity levels like clean, low, medium, or high. Suitable for pre-launch security reviews and periodic audits. It integrates with the harness binary and supports JSON or table formats.