Skill UI

A powerful code review utility designed for SwiftUI projects. It comprehensively analyzes code quality, ensuring adherence to modern Swift APIs, optimal performance, robust data flow management, and compliance with Apple's Human Interface Guidelines and accessibility standards (like VoiceOver and Dynamic Type). Use this tool when writing, refactoring, or reviewing complex SwiftUI implementations to maintain high code hygiene and maintainability.

A suite of 12 production-ready compliance agents and tools designed specifically for HealthTech and MedTech organizations. These skills cover critical international regulations and standards, including ISO 13485, EU MDR, FDA 510(k)/PMA, ISO 27001, GDPR, and risk management (ISO 14971). Use them to automate compliance tasks, manage documentation, conduct audits, and ensure adherence to global medical device standards.

Validate Claude Code plugin directories against Anthropic and Intent Solutions standards, combining structural checks (plugin.json, permissions) with SKILL.md content grading for marketplace readiness.

Deploys AWS Security Hub as a centralized CSPM to aggregate GuardDuty, Inspector, Macie, and partner findings, enforce CIS/AWS/PCI standards, and drive automated remediation plus compliance reporting across multi-account AWS estates.

Implementing AWS Security Hub to centralize findings, map CIS/PCI DSS/NIST standards, and automate remediation with EventBridge/Lambda across multi-account environments for clearer compliance dashboards.

Implements Kubernetes Pod Security Standards via Pod Security Admission policies, covering privileged, baseline, and restricted profiles plus enforcement modes for deploying secure namespaces and workloads in clusters that require compliance and risk control.

Use OPA Gatekeeper as a Kubernetes admission controller to enforce policy-as-code via ConstraintTemplates, Rego rules, and Constraints so clusters validate, mutate, or deny workloads that violate organizational standards.

Guide for writing YAML-based Semgrep rules to detect app-specific vulnerabilities, enforce coding standards, and plug into CI/CD for continuous SAST assurance across multiple languages.

This comprehensive process validates whether users with elevated permissions (like domain admins, service accounts, and cloud IAM roles) still require their access. It enforces the principle of least privilege by systematically reviewing, certifying, and remediating excessive or orphaned high-level access, ensuring compliance with standards like SOC 2, PCI DSS, and SOX.

This tool performs deep security assessments on SOAP web services. It analyzes WSDL definitions and actively tests for critical vulnerabilities such as XML External Entity (XXE) injection, XPath injection, WS-Security misconfigurations, and SOAPAction spoofing. It is essential for securing complex, enterprise-level APIs and ensuring adherence to industry security standards.

Hardens managed EKS, AKS, and GKE clusters by enforcing Pod Security Standards, network policies, RBAC scoping, image admission controls, workload identity, and runtime monitoring for cloud-specific IAM integrations.

This skill provides a comprehensive framework for validating the integrity and recoverability of critical data backups. It goes beyond simple file checks by implementing cryptographic hash verification (SHA-256), simulating automated restore tests in isolated environments, detecting silent data corruption (bit rot), and scanning for signs of ransomware artifacts. It is crucial for ensuring data reliability against cyberattacks and hardware failures, adhering to standards like NIST CSF.