Skill UI

This skill functions as a dedicated dependency security expert, specializing in auditing project dependencies. It analyzes codebases for known security vulnerabilities, license compliance issues, outdated packages, and overall supply chain risks. It provides comprehensive, actionable remediation strategies and detailed risk reports to keep software supply chains secure and compliant.

Automates CodeQL database builds, suite selection, and taint-aware scans to surface security and quality issues across supported languages, handling output directories, SARIF results, and extensions in one workflow.

This skill executes CodeRabbit's core workflow, providing automated, in-depth code reviews directly on pull requests. It analyzes code diffs based on custom rules (e.g., API validation, DB security), generates detailed walkthrough summaries, and posts line-level feedback. Ideal for setting up robust CI/CD quality gates and maintaining high code standards throughout the development lifecycle.

This skill guides users on fine-tuning CodeRabbit's review quality. It teaches the AI agent team preferences through PR feedback, integrates custom code guidelines (e.g., security policies), allows customization of the review tone, and implements path filters to drastically reduce false positives and noise. This ensures that all code feedback is highly relevant, actionable, and aligns with specific team standards.

This skill guides the comprehensive, multi-step rollout of CodeRabbit AI code review across an entire organization. It covers setting organization-level defaults, customizing team-specific review rules (e.g., API security, frontend performance), and automating deployment via multi-repo scripts and branch protection enforcement. Use when establishing standardized, high-quality AI code review practices company-wide.

This skill details how to configure CodeRabbit review behavior using a `.coderabbit.yaml` file placed on base branches. It enables setting tailored code quality gates across the development lifecycle, allowing for relaxed reviews on feature branches and highly stringent, security-focused checks for production or release environments, ensuring quality matches risk.

This comprehensive guide details how to implement robust webhook endpoints for CodeRabbit, an AI-powered code review tool. It covers essential security practices, including signature validation (HMAC-SHA256), and provides structured methods for handling various event types (e.g., PR reviews, check run completions, comments). Use this skill when integrating CodeRabbit into CI/CD pipelines to automate notifications, track metrics, and enforce quality gates.

This skill automatically generates comprehensive and highly structured Pull Request (PR) descriptions directly from Git diffs. It goes beyond simple summaries by automatically adding detailed change categories (e.g., source, test, config), security risk assessments, and required review checklists based on the modified file types. Use this when submitting complex code changes or when the diff is large and requires explicit structure for thorough review.

This interactive wizard guides users through setting up the Everything Claude Code (ECC) environment. It allows selective installation of development skills and rules across diverse domains (e.g., Django, Spring Boot, Python, Security) at either the user or project level. It validates paths and optimizes the setup to ensure consistent adherence to best practices.

Automates Istio and Linkerd configuration for microservices, generating production-ready manifests and setup code tailored to your infrastructure, emphasizing security, observability, and traffic management best practices.

Assists container security auditors within the Security Advanced domain by auto-activating when key terms appear, walking through best-practice guidance, producing production-ready code/configurations, and validating results against compliance and threat-modeling standards.

Automatically assists with generating Content Security Policies, offering step-by-step guidance, production-ready code, and validation against common standards whenever you mention or ask about CSP generation.