Skill UI

This skill reviews code differences (diffs) to identify opportunities for improvement in clarity, reusability, efficiency, and overall quality. It employs multiple specialized sub-agents (e.g., Code Reuse, Efficiency, Quality) to audit changes. It can provide high-confidence, behavior-preserving fixes when requested, ensuring the code adheres to best practices without introducing regressions. Best used when refactoring, cleaning up, or auditing a specific code scope.

This comprehensive, zero-trust security auditor scans third-party AI agent skills before installation. It performs a rigorous 6-phase review process, analyzing surface patterns, script integrity, permissions, and supply chain risks. It is designed to detect malicious payloads, credential theft, instruction overrides, and prompt injection attacks, ensuring secure AI development and deployment.

This tool audits the activation metadata of coding skills used by AI agents. It grades skills (A-F) based on description clarity, simulates which skill a prompt will trigger, and identifies metadata collisions where one skill might silently overshadow another. It is essential for ensuring robust, predictable, and reliable AI agent behavior during development and CI processes.

Audit an Agent Skill, MCP server, connector, or desktop extension before installation by tracing code, dependencies, permissions, credentials, data flow, and irreversible actions.

Skill Sentinel audits and evolves a skills ecosystem by analyzing quality, security, cost, governance, documentation, dependencies, and cross-skill duplication, then generates health reports, recommendations, and orchestrates assessments for teams managing multiple automations.

This skill guides the mastery of smart contract security best practices for Solidity. It is essential for writing robust, secure, and efficient contracts, auditing existing code for common vulnerabilities (such as reentrancy, overflow, and access control issues), and implementing secure DeFi protocols. It focuses on preventing common attack vectors while optimizing gas usage.

This skill verifies code implementations strictly adhere to documentation specifications, especially for blockchain smart contracts. It compares code against whitepapers and design documents to identify gaps, undocumented behaviors, or compliance issues. Ideal for auditing protocol implementations, ensuring deterministic alignment between intended logic and actual code execution without relying on prior knowledge.

A static analysis tool that audits SQL code for common cost and performance anti-patterns (e.g., full-table scans, Cartesian joins). It calculates a query health score (0-100) for data warehouses like BigQuery, Snowflake, and Redshift, providing a prioritized, actionable plan with concrete fixes and estimated cost savings. Essential for FinOps and data quality assurance.

This skill enables comprehensive security assessments of SSH services. It covers enumeration, credential attacks, vulnerability exploitation, and configuration auditing using tools like Nmap, Hydra, and Metasploit. Suitable for authorized penetration testing and security research to identify weaknesses in SSH implementations.

This skill provides a structured approach to systematically identify security threats by applying the STRIDE methodology (Spoofing, Tampering, Repudiation, Information Disclosure, Denial of Service, Elevation of Privilege). It is crucial for conducting thorough threat modeling sessions, analyzing system architectures, reviewing security design decisions, and creating robust security documentation for compliance and auditing purposes.

This skill enables detection, response, and prevention of software supply chain attacks targeting package registries, container images, and CI/CD pipelines. It includes lockfile auditing, provenance verification using tools like Cosign and SLSA, and emergency response playbooks for compromised dependencies.

This skill identifies dependencies at heightened risk of exploitation or takeover by evaluating factors like maintainer activity, popularity, and security history. It generates a security report for supply chain attack surface assessment and pre-engagement scoping.