Skill UI

This skill outlines a systematic workflow for addressing review comments and issue feedback on GitHub Pull Requests (PRs) using the GitHub CLI (`gh`). It guides users through inspecting comments, planning fixes, applying code changes, and finally responding to the threads as resolved, ensuring a streamlined code review process.

Prepares codebases for Trail of Bits security reviews by setting goals, running static analysis, expanding test coverage, pruning dead code, documenting build scope/access, and generating flowcharts, user stories, glossaries, and other reviewer-ready artifacts.

Prepares codebases for Trail of Bits security reviews by setting goals, running static analysis, expanding test coverage, pruning dead code, documenting build scope/access, and generating flowcharts, user stories, glossaries, and other reviewer-ready artifacts.

This skill provides a comprehensive checklist for performing rigorous code security reviews. It covers critical areas such as secrets management, input validation, preventing SQL injection, secure authentication (JWT, RLS), and mitigating XSS/CSRF vulnerabilities. Essential for developers building features that handle sensitive data or user input.

This skill provides comprehensive guidelines based on Clean Code principles, transforming merely functional code into highly readable, maintainable, and robust software. It covers best practices for naming conventions, function design (small, single responsibility), error handling (exceptions over return codes), formatting, and adhering to Test-Driven Development (TDD). Use this skill when writing new features, reviewing pull requests, or refactoring legacy systems to improve overall code quality.

This skill serves as an expert guide for writing, reviewing, and optimizing AWS CloudFormation templates. It covers foundational best practices, including utilizing parameterized environments, implementing nested stacks, managing stateful resources with deletion policies, and ensuring production-grade infrastructure consistency. Use it when building robust and maintainable Infrastructure as Code (IaC) for AWS.

This skill acts as a code education expert, specializing in breaking down complex code, algorithms, or system architecture. It transforms difficult technical concepts into understandable explanations using clear narratives, visual diagrams, and step-by-step breakdowns. Ideal for creating learning materials, onboarding guides, or detailed technical reviews for developers of all levels.

An expert AI specialist that integrates advanced static analysis (e.g., CodeQL, SonarQube) with modern DevOps practices. It performs multi-layered code reviews, checking for security vulnerabilities, performance bottlenecks, architectural flaws, and adherence to best practices across various languages. Ideal for CI/CD pipelines and pull request validation.

This comprehensive checklist provides a systematic framework for conducting thorough code reviews. It covers critical areas including functionality, security vulnerabilities, performance optimization, and overall code maintainability. Use it when reviewing pull requests, conducting code audits, or standardizing team development practices.

This skill helps transform code reviews from simple gatekeeping into a powerful knowledge-sharing mechanism. It guides users through systematic analysis of code changes, focusing on correctness, security, performance, and maintainability. Use it when reviewing pull requests, establishing best practices, or mentoring developers to ensure high-quality, robust codebase development.

This skill simulates a senior engineer conducting comprehensive code reviews. It analyzes code diffs and files to identify bugs, security vulnerabilities (e.g., SQL injection, XSS), performance issues (N+1), code smells, and architectural flaws. It is ideal for reviewing pull requests, performing code quality audits, or conducting security assessments, providing structured, actionable, and prioritized feedback.

Learn how to integrate CodeRabbit as a mandatory Continuous Integration (CI) gate within your GitHub repository. This comprehensive guide demonstrates setting up branch protection rules, creating GitHub Actions workflows, and enforcing CodeRabbit's reviews to ensure high code quality before merging. Includes advanced setup for PR size checks and notification mechanisms.