Skill UI

A comprehensive toolkit for Product Owners covering the entire agile product lifecycle. It guides the generation of INVEST-compliant user stories, defining detailed acceptance criteria using Given-When-Then, structuring sprint plans, estimating story points, and systematically decomposing large epics into manageable, deliverable tasks. It supports structured backlog management and successful sprint execution following Scrum principles.

Prepares codebases for Trail of Bits security reviews by setting goals, running static analysis, expanding test coverage, pruning dead code, documenting build scope/access, and generating flowcharts, user stories, glossaries, and other reviewer-ready artifacts.

Prepares codebases for Trail of Bits security reviews by setting goals, running static analysis, expanding test coverage, pruning dead code, documenting build scope/access, and generating flowcharts, user stories, glossaries, and other reviewer-ready artifacts.

This skill provides comprehensive observability for the Databricks platform. It enables users to monitor job run histories, track cluster utilization and associated costs (DBU), detect slow SQL queries, and audit access logs. Use it for setting up robust monitoring dashboards, ensuring pipeline health, and optimizing resource consumption across the entire data stack.

This skill guides users through structured workshops to define comprehensive product features from scratch. It adopts dual perspectives (Product Manager and Developer) to gather detailed requirements, user stories, and non-functional needs. The output includes EARS-formatted functional requirements, testable acceptance criteria (Given/When/Then), and detailed implementation checklists, ensuring the feature is complete and ready for development.

This skill specializes in transforming theoretical threat models, risk assessments, and business context into concrete, actionable security requirements. It is essential for writing detailed security user stories, defining robust acceptance criteria, building comprehensive security test cases, and ensuring compliance requirement mapping. Use it when bridging the gap between identifying a vulnerability and specifying how the system must be secured.

Guides teams through writing Mike Cohn‑style user stories with Gherkin acceptance criteria so product needs become actionable, testable development work with shared understanding.

Break large user stories, epics, or features into smaller, independently deliverable stories using systematic splitting patterns so agile teams can reduce risk, improve estimation, and keep value flowing when backlog items grow too big.

Automates the generation of production-ready Playwright end-to-end (E2E) tests. By accepting high-level inputs such as user stories, feature descriptions, or component names, this tool analyzes the codebase, selects appropriate testing templates (e.g., CRUD, login, checkout), and generates structured, best-practice test files. It ensures adherence to modern web testing standards, including proper locator strategies (getByRole), assertion techniques, and project conventions (fixtures, page objects).

This framework provides a systematic methodology for engineering virality, moving beyond luck to design shareable products, ideas, and content. It utilizes the STEPPS model (Social Currency, Triggers, Emotion, Public, Practical Value, Stories) to systematically increase the likelihood of organic sharing and word-of-mouth marketing. Use it when optimizing for shareability or predicting user adoption patterns.

A comprehensive framework designed to help users craft messages, taglines, and value propositions that are not only understood but also remembered and actionable. It utilizes the SUCCESs model (Simple, Unexpected, Concrete, Credible, Emotional, Stories) to elevate ordinary communication into high-impact, sticky content. Ideal for copywriters, marketers, and product managers.

Analyze Linux system artifacts such as auth logs, cron jobs, shell histories, and configuration files to identify persistence mechanisms, trace user activity, and detect unauthorized modifications during investigations.