Skill UI

Security assessment reference for identifying and testing external SSL VPN and remote-access appliances, including Cisco, Fortinet, Citrix, Palo Alto, Pulse, and F5. For authorized engagements only.

Coordinate a bounded code review from multiple perspectives including correctness, authorization, and performance. This skill describes a review procedure for defined diffs or subsystems. It involves reading diffs, choosing relevant perspectives, recording findings with exact locations, reproducing issues, and resolving disagreements through code or tests. It is a read-only review process that does not install orchestration engines or prove compliance.

Master the full penetration testing lifecycle: reconnaissance, scanning, vulnerability analysis, exploitation and reporting. Covers tools like Nmap, Nikto, theHarvester, OSINT techniques, OWASP web testing and professional report deliverables for authorized security assessments only.

Provides comprehensive guidance on building robust evaluation frameworks for complex agent systems. It addresses the inherent challenges of non-determinism and multiple valid paths, enabling systematic performance testing, validating context engineering choices, and measuring continuous improvements across multiple quality dimensions (e.g., factual accuracy, tool efficiency).

Guidelines for building server-side API routes in Expo Router with EAS Hosting, covering HTTP methods, dynamic routes, environment variables, CORS, error handling, local testing, and deployment.

This skill enables deploying Expo applications to production using Expo Application Services (EAS). It covers building and submitting apps to iOS App Store, Google Play, and TestFlight. Users can configure build profiles, manage version numbers, and publish metadata. Additionally, it supports deploying web bundles and API routes via EAS Hosting, facilitating CI/CD automation for cross-platform mobile development workflows.

This skill enables developers to build Expo development clients using EAS Build for testing native code changes on physical devices. It is recommended for real or production apps instead of Expo Go, supporting local modules, Apple targets, and third-party native modules. Users configure eas.json with developmentClient settings and use commands like eas build to create iOS or Android builds for TestFlight or local installation.

This skill rewrites user prompts to reduce false-positive safety triggers in AI models without bypassing policies or altering intent. It specifically targets cyber, bio/chem, and reasoning classifiers by abstracting sensitive domains and reframing offensive language into defensive equivalents. Useful for developers and researchers needing to test or discuss sensitive topics within safety guardrails.

FAF Go is a guided interview skill designed to help users achieve 100% AI-readiness in their .faf project context files. It leverages Claude Code's AskUserQuestion tool to fill missing project details like goals, stack, and hosting. Users type /faf-go to start, answering questions until the Gold Code score reaches 100%. It supports single and multi-select options for fields like testing and CI/CD.

Master building high-performance asynchronous APIs using FastAPI, SQLAlchemy 2.0, and Pydantic V2. Covers microservices, WebSockets, security, testing, and deployment strategies for production-ready Python backend systems. Includes async patterns, database optimization, and observability.

Implement feature flags for progressive feature rollout using LaunchDarkly, Unleash, or custom solutions. Covers SDK setup, targeting rules, activation strategies, and database-backed implementations for controlled software releases and A/B testing.

This skill provides guidance and patterns for performing web fuzzing using the ffuf tool. It helps identify potential vulnerabilities and test web applications by sending crafted requests. Suitable for security testing and development validation.