Skill UI

Performs static security analysis on GitHub Actions workflows that incorporate AI coding agents (e.g., Claude, Gemini, OpenAI). This skill helps identify critical data flow vulnerabilities, such as where attacker-controlled input can reach AI agent prompts or internal systems via CI/CD pipelines, going beyond simple expression checks.

Guides teams through auditing AI visibility, restructuring content into extractable answers, and monitoring citations so that ChatGPT, Perplexity, Google AI Overviews, Claude, Gemini, and Copilot cite your pages instead of only ranking them.

This comprehensive guide helps users build, audit, and debug robust analytics tracking systems using GA4 and Google Tag Manager. It focuses on establishing a consistent event taxonomy and capturing every meaningful user action—from initial visits to complex conversions—ensuring data integrity for accurate decision-making.

This skill establishes a rigorous framework for building deep architectural context by performing ultra-granular, line-by-line analysis of code. It applies methodologies like First Principles and 5 Whys to maintain a stable, evolving mental model of the entire system, making it essential for pre-vulnerability security auditing, threat modeling, and complex architecture reviews.

A command-line utility designed to search, extract, and analyze data from Burp Suite project files (.burp). It allows users to search request/response headers and bodies using complex regex patterns, extract security audit findings, or gather proxy/site map data. Essential for deep analysis of captured HTTP traffic in web security testing, while providing safeguards against large data overflows.

Analyzes a code repository to generate a recommended, minimal set of read-only shell command permissions for Claude Code's settings.json. It automatically detects the project's tech stack (e.g., Python, Node.js, Go), build tools, and monorepo structure, ensuring a safe and evidence-based security baseline for new projects or auditing existing permissions.

This skill simulates a senior engineer's final, deep audit of an entire codebase before committing or pushing to a remote repository. It systematically checks for junk files, dead code, security vulnerabilities (secrets, injection flaws), and performance bottlenecks (N+1 queries). Use this pre-flight check before any major release or public deployment to ensure maximum code quality and production readiness.

A rigorous, security-focused code review process designed for Pull Requests (PRs), commits, and diffs. It moves beyond general reviews by focusing intensely on high-risk areas such as authentication, cryptography, external calls, and value transfer. The methodology is evidence-based, requiring detailed attack scenario modeling and generating comprehensive, auditable markdown reports to identify overlooked vulnerabilities and regressions.

A specialized review tool for identifying critical performance bottlenecks within Django applications. It focuses on validating issues such as N+1 queries, unbounded querysets, missing database indexes, and write loops. Use this when you suspect database slowdowns or memory exhaustion due to inefficient ORM usage, ensuring findings are provable and actionable.

This skill provides comprehensive operational controls for long-lived, cloud-hosted agent workloads. It manages the entire lifecycle—from deployment and scaling to observability and security. Features include detailed monitoring (logs, metrics, traces), safety controls (kill switches, least privilege), and robust change management processes (rollout, rollback, auditing). Ideal for mission-critical microservices and background agents.

This specialized skill acts as an expert AI auditor for Food Safety Modernization Act (FSMA) compliance. It is designed to review critical records, including HACCP plans, Preventive Controls, and Supply Chain documentation for food processing facilities. Use it to simulate FDA inspections, identify compliance gaps (such as missing CCPs or inadequate corrective actions), and receive actionable guidance to ensure the highest standards of food safety.

This specialized AI acts as an auditor for Medical Devices (SaMD) compliance. It reviews critical documentation like Design History Files (DHF) and technical files against major global regulations, including 21 CFR Part 820, IEC 62304, and ISO 13485. It identifies compliance gaps, cites specific regulations, and provides actionable remediation steps to prepare for regulatory audits.