Skill UI

This skill provides a robust and safe mechanism for updating SpecKit templates and configurations from GitHub. It is designed to automatically apply the latest changes while meticulously preserving any existing project customizations, ensuring a non-disruptive workflow. It features a conversational, two-step approval process, guiding the user through the update process, reporting conflicts, and handling fresh installations gracefully. Ideal for developers needing reliable, version-controlled updates to their SpecKit environment.

The /hub:status command provides a comprehensive overview of an AgentHub session. It displays the current state of agent branches, commit counts, frontier status, and recent board updates. This is useful for monitoring ongoing collaborative AI tasks, allowing users to track progress and identify which agents are active or have completed their tasks.

Synchronizes Playwright tests with TestRail by importing cases, annotating tests, creating runs, and pushing results, covering status sync and case updates.

This skill provides expertise in TanStack Query (React Query), a powerful tool for asynchronous state management in modern React and Next.js applications. It covers advanced patterns like data fetching, cache invalidation, optimistic updates, and handling SSR hydration, ensuring highly performant and reliable data layers.

Generate tailored roadmap narratives, release notes, changelogs, and stakeholder updates for executives, engineering, and customer audiences, with structured formats, templates, and checklists for consistent product messaging.

This skill automates the extraction of actionable items, commitments, and follow-ups from meeting notes (e.g., Granola, Grain). It creates structured tasks in Todoist, updates task status, and drafts follow-up emails. Ideal for running daily or post-meeting cron jobs to ensure all commitments are tracked and executed.

A specialized tool and workflow for investigating supply chain attacks. It helps security analysts analyze compromised software updates, trojanized binaries, and dependency artifacts by comparing legitimate versions against suspect files. Key functions include binary diffing, identifying injected code, and documenting code signing anomalies to determine the scope of a security breach.

This skill outlines a comprehensive, structured workflow for managing Microsoft Patch Tuesday security updates. It covers the entire lifecycle, from initial vulnerability triage and risk assessment to testing, staged deployment (Pilot, Production Rings), and final validation, ensuring compliance with risk-based remediation SLAs.

This utility integrates status updates and notifications with Feishu/Lark. It is designed as an internal, zero-impact tool that other complex skills (e.g., experiment runners, review loops) call to report key events like test completion, scoring results, or reaching a checkpoint. It supports both 'push' (fire-and-forget status updates) and 'interactive' (bidirectional approval/rejection) modes, ensuring seamless workflow visibility and robust operation even if configuration is missing.

This guide details proactive threat hunting techniques focused on detecting supply chain compromises. Use it when investigating trojanized software updates, compromised dependencies (npm/PyPI), or tampered build artifacts. It outlines a structured workflow using EDR/SIEM data (CrowdStrike, Splunk) to identify hidden threats and scope the impact of sophisticated attacks.

Assistant for venture fund administrators: ingests capital calls, investments, and cash flows to compute KPIs (TVPI, DPI, IRR, MOIC), model carry/fees, and draft LP quarterly updates via Claude Code + Python.

A lightweight CLI tool for systematically comparing various coding AI agents (such as Claude Code, Aider, and Codex) head-to-head. It measures crucial metrics—pass rate, API cost, execution time, and consistency—on reproducible tasks defined via YAML manifests. Use this to objectively select the best agent for your codebase or to validate model updates before production deployment.