Skill UI

A robust security auditing tool designed to scan CI/CD pipeline configurations, such as GitHub Actions YAML, for critical supply chain vulnerabilities. It automatically detects issues like unpinned dependencies, script injection risks, secrets exposure, and dependency confusion, helping teams harden their build systems and maintain secure software development lifecycles.

This guide enforces the 'spec-first' principle in software development, treating the specification as a non-negotiable contract. It outlines a rigorous, multi-stage workflow detailing mandatory sections (Functional/Non-Functional Requirements, Acceptance Criteria, API Contracts, Data Models) and bounded autonomy rules. Users learn how to define the system 'must do' before writing a single line of code, thereby minimizing rework and eliminating scope creep.

AgentFlow transforms your existing Kanban board (Asana, GitHub, Linear) into a self-managing, autonomous AI development pipeline. It orchestrates multiple AI agents through defined stages (Backlog to Done), enforcing deterministic quality gates, performing adversarial reviews, and tracking costs—all visible within your existing project management UI. It provides crash-proof execution and full observability for complex software development lifecycles.

This skill manages comprehensive software development life cycle operations—including issue triage, PR reviews, version releases, bug fixing, and marketing content generation. It operates using a parallel "agent army" of dynamic agents (10-20 per task), requiring the user to adopt an Engineering Manager (EM) mindset. Key principles involve rigorous citation checking (anti-hallucination) and applying multiple roles (Product Owner, Open Source Contributor, Architect) simultaneously to ensure robust, safe, and user-centric outcomes across all platforms.

This skill provides comprehensive guardrails for handling Protected Health Information (PHI) in US healthcare software. It guides development teams on data classification, security best practices, access control, and audit logging to ensure strict adherence to HIPAA regulations. Use it when dealing with patient data storage, transmission, or processing to prevent breaches and maintain compliance.

Hookify rules enable developers to define custom, event-driven workflows using Markdown files with YAML frontmatter. These rules monitor specific operational events (such as bash commands, file edits, or user prompts) and can trigger warnings or block operations when predefined regex patterns are matched. They are essential for enforcing coding standards, preventing dangerous operations, and guiding development adherence in complex software environments.

Test-Driven Development (TDD) is a software development process where tests are written before the actual implementation code. The core cycle involves three steps: RED (write a failing test), GREEN (write minimal code to pass the test), and REFACTOR (clean up the code while ensuring tests remain passing). This methodology is crucial for building robust, maintainable, and bug-free codebases, making it ideal for implementing new features or fixing bugs.

This meta-skill set provides a structured framework covering the entire software development lifecycle (SDLC). It guides developers through every phase, from initial concept refinement and requirement specification to incremental implementation, testing, code review, and deployment. It enforces critical professional behaviors like surfacing assumptions, managing ambiguity, and maintaining scope discipline to ensure high-quality, robust engineering outcomes.

A comprehensive workflow designed for Product Managers and technical leads to systematically identify, prioritize, and document missing features in a software project. It guides users through project understanding, gap analysis, applying a scoring matrix for prioritization, developing detailed Minimum Viable Product (MVP) specifications, and structuring the output as actionable development issues (e.g., GitHub Issues) with dependency mapping and workload optimization.

This guide implements the Red-Green-Refactor cycle, the core methodology of Test-Driven Development (TDD). It teaches developers to first write a failing test (RED), then implement the minimum required code to make the test pass (GREEN), and finally improve the structure and clarity of the code without changing its behavior (REFACTOR). Use this guide when mastering TDD, ensuring robust unit test coverage, or following best practices for writing resilient software.

Performs a systematic and structured investigation to determine the true source of bugs, errors, and unexpected system behavior, rather than merely treating symptoms. This method utilizes techniques like the Five Whys, hypothesis-driven testing, stack trace analysis, and gathering evidence (logs, git diffs) across multiple phases. It is ideal for complex, intermittent, or deeply rooted technical issues in software development.

This comprehensive automation toolkit manages core Bitbucket functionalities, including repositories, workspaces, pull requests, and issues. It enables programmatic control over development workflows—from creating and reviewing pull requests to listing repos, tracking issues, and managing workspace members. Essential for integrating CI/CD pipelines and streamlining the entire software development lifecycle.