Skill UI

This SDK provides comprehensive, production-ready patterns for interacting with the OpenEvidence clinical evidence API. It enables developers to efficiently query medical literature, retrieve clinical guidelines, and generate evidence-based recommendations. Key features include a singleton client for consistent authentication, robust error wrappers (handling retries, invalid keys), and structured data models designed to ensure audit compliance and detailed citation provenance in complex healthcare applications.

Use Sigstore Cosign to sign, attest, and verify container images with keyless OIDC signing, SBOM/vulnerability attestations, and CI/CD admission enforcement for supply chain provenance security.

Implements container build integrity by orchestrating in-toto attestations across CI/CD steps, ensuring signed provenance, SBOMs, and policy-compliant deployment verification in Kubernetes environments.

This guide details the comprehensive process of securing a container registry using Harbor. Learn how to implement advanced security features such as integrated vulnerability scanning (Trivy), image signing (Cosign/Notary), Role-Based Access Control (RBAC), and content trust policies. The workflow covers deployment, policy enforcement, and integrating external authentication like OIDC, ensuring compliant and secure image provenance for Kubernetes environments.

Validates Helm chart provenance, scans rendered templates for misconfigurations, enforces pod security contexts, and hardens RBAC/secrets workflows so Kubernetes deployments stay compliant.

AKF is the native metadata format specifically designed for tracking AI-generated or AI-modified content. It allows users to stamp files (including DOCX, PDF, images, and code) with detailed trust scores, source provenance, and compliance metadata. This tool is essential for professional workflows requiring strict auditing, compliance assurance, and verifiable data lineage, especially concerning regulations like the EU AI Act, HIPAA, and SOX.

Implements Cosign keyless signing with Fulcio certificates, Rekor log audit, and OIDC identity binding so container images and artifacts gain verifiable provenance within CI/CD pipelines.

This skill provides robust mechanisms to verify the integrity of AI agent plugins, tools, and dependencies. It generates deterministic SHA-256 manifests (INTEGRITY.json) for all components, allowing users to detect unauthorized modifications, track provenance, and ensure that deployed assets match their published versions. Use this during CI/CD pipelines, code review, and pre-production promotion to secure the entire agent ecosystem.

Utilize advanced media intelligence to analyze audio, image, video, and text for synthetic manipulation and AI-generated content. This skill detects deepfakes, traces the original AI synthesis source, applies and detects watermarks, verifies speaker identity, and provides comprehensive media provenance analysis, ensuring media authenticity claims are rigorously supported.

This tool functions as a post-task epilogue, designed to audit and record the entire research journey. It scans the conversation history at the end of a coding or research session to extract critical research artifacts, including decisions, experiments, dead ends, claims, heuristics, and major pivots. It systematically writes this provenance data into the structured `ara/` directory, ensuring a faithful and auditable trace of how the project truly evolved.

MockHunter is an advanced skill designed to audit live web pages, providing a comprehensive reality check on visible data. It analyzes every element to determine its true source: whether it is REAL (from the database), MOCK (simulated data), LLM-generated, HARDCODED, BROKEN (broken endpoints), or UNKNOWN. Ideal for auditing AI-generated UIs or reviewing proof-of-concept MVPs before customer sign-off.

This tool simulates a Chief Data Officer’s rigorous review of any plan involving data strategy. It forces consideration of six critical questions—from data decision linkage and consent provenance to architectural fit and M&A readiness—ensuring data initiatives are strategically sound, governed, and defensible throughout their lifecycle.