Skill UI

Guides analysts through assessing web authentication, credential stuffing, password policies, session tokens, and fixation flows to uncover broken authentication risks before attackers do.

Browser automation expert for debugging flaky tests and running long-lived scrapers using Playwright/Puppeteer, focusing on robust selectors, auto-waits, isolation, and anti-detection practices.

Run comprehensive web application security assessments through Burp Suite’s proxy, repeater, and scanner features to intercept, modify, and analyze HTTP traffic while spotting vulnerabilities for remediation planning.

Guides intercepting HTTP traffic, modifying requests, using Repeater, defining scope, and running Burp Suite scans for systematic web application security testing.

A specialist tool designed to generate, format, and validate comprehensive technical documentation. It supports multiple standards, including Google/NumPy docstrings (for Python), JSDoc (for TypeScript), and full OpenAPI/Swagger specifications. Key features include automated detection of code languages and frameworks, robust validation of code examples (using tools like doctest and OpenAPI linters), and generating structured user guides or site configurations.

Systematic code maturity assessment using Trail of Bits' 9-category framework, analyzing arithmetic safety, access controls, documentation, MEV risks, testing, and more to deliver evidence-backed scorecards and actionable recommendations.

This expert skill analyzes codebases to identify, quantify, and prioritize all forms of technical debt—including code complexity, architectural flaws, outdated dependencies, and testing gaps. It calculates the measurable impact of this debt on development velocity, bug rates, and overall business risk. The output provides a comprehensive, actionable, and ROI-driven roadmap for systematic remediation.

A comprehensive expert system for analyzing software codebases to identify, quantify, and prioritize technical debt across various dimensions (code, architecture, testing, infrastructure). It provides detailed metrics, impact assessments (development velocity, quality loss), and actionable, prioritized remediation roadmaps with clear ROI projections.

This guide helps users manage their CodeRabbit setup, covering plan upgrades (e.g., Free to Pro/Enterprise) and migrating configuration files. It details how to update the .coderabbit.yaml schema to adopt the latest features, advanced workflows, and best practices for enhanced code review automation.

Automates Composio Search workflows through Rube MCP by discovering the latest tool schemas first, validating connections, and executing schema-compliant multi-tool calls for reliable search operations.

Orchestrates an exhaustive, multi-dimensional code review process by coordinating specialized agents (e.g., security, performance, quality, architecture). This workflow covers code quality, architectural integrity, security vulnerabilities (OWASP Top 10), performance bottlenecks, and test coverage, providing consolidated, actionable feedback and remediation guidance.

This skill automatically generates comprehensive and highly structured Pull Request (PR) descriptions directly from Git diffs. It goes beyond simple summaries by automatically adding detailed change categories (e.g., source, test, config), security risk assessments, and required review checklists based on the modified file types. Use this when submitting complex code changes or when the diff is large and requires explicit structure for thorough review.