Skill UI

Scans Solana and Anchor programs for six critical security vulnerabilities—arbitrary CPI, improper PDA validation, missing signer/ownership checks, sysvar spoofing, and instruction introspection issues—to support audits and pre-launch reviews.

Structured pre-PR verification loop for Spring Boot projects that runs fast-build checks, static analysis, tests with coverage, security scans, formatting gates, and diff reviews to catch issues before deployment.

A workflow for executing implementation plans by spinning up a fresh subagent for each task and enforcing consecutive spec compliance and code quality reviews so the session stays focused and high-quality without manual context switches.

A specialized skill for conducting comprehensive security architecture reviews, risk assessments, and threat identification. It masters advanced methodologies like STRIDE, PASTA, and attack tree construction. Use this to build secure-by-design systems, identify potential attack vectors, and strengthen system resilience before deployment.

Comprehensive web and mobile design intelligence offering prioritized UX rules, 50+ styles, color palettes, typography pairings, and chart guidance to inform component design, accessibility checks, and landing/dashboard reviews.

This skill scans web application endpoints and cookies to spot missing CSRF safeguards—tokens, double-submit cookies, SameSite attributes, and origin checks—then documents vulnerable paths and mitigation steps for security reviews.

A comprehensive, step-by-step guide for responding to Vercel-related production outages, deployment failures, and platform issues. This runbook covers rapid triage using CLI commands, executing instant rollbacks, investigating root causes (log analysis, diffing), managing communication templates, and conducting thorough postmortem reviews.

This comprehensive guide catalogs common anti-patterns and mistakes when deploying applications on Vercel. It covers critical architectural areas such as secret management (preventing key exposure), optimizing serverless function performance (cold start, timeouts), adhering to Edge Runtime standards, and resolving configuration errors. Use this skill for code reviews, security audits, and onboarding new developers to ensure best deployment practices.

Runs a Lighthouse-based audit that combines performance, accessibility, SEO, and best-practice checks, categorizes issues by severity, and recommends targeted fixes for requested site reviews.

This skill simulates an expert software engineer and systems analyst. It is designed for deep, evidence-based understanding of complex codebases. Users can ask "how does X work" or request architectural reviews, ensuring every claim is grounded in actual code paths, data flows, and dependency chains, following a rigorous multi-iteration process.

Guides the setup of a high-efficiency, AI-augmented local development loop. This skill integrates features like Cascade editing, in-IDE Previews, and Turbo mode command execution, enabling developers to quickly iterate, debug, and commit changes within a structured environment. Ideal for setting up new projects or optimizing existing development workflows.

A comprehensive workflow bundle covering the entire lifecycle of WordPress development. It guides users through creating custom themes, developing functional plugins, integrating WooCommerce, and optimizing performance. Crucially, it includes steps for implementing advanced WordPress 7.0 features such as Real-Time Collaboration (RTC), AI Connectors, and DataViews, ensuring modern, production-ready site builds.