Skill UI

This skill performs external reconnaissance on software supply chain attack surfaces. It identifies public GitHub organizations, internal package names in JS/Python bundles, and Docker images. It checks for dependency confusion vulnerabilities by verifying if internal package names are available on public registries. Requires explicit authorization for offensive security assessments.

This skill enables detection, response, and prevention of software supply chain attacks targeting package registries, container images, and CI/CD pipelines. It includes lockfile auditing, provenance verification using tools like Cosign and SLSA, and emergency response playbooks for compromised dependencies.

This skill covers comprehensive software supply chain security assessments, including SBOM generation, SCA scanning, CI/CD pipeline reviews, and container image audits. It focuses on verifying build integrity, dependency provenance, and vulnerability reachability to ensure secure software delivery and mitigate supply chain risks.

This skill acts as an expert TDD orchestrator, guiding users through the red-green-refactor cycle and coordinating multi-agent testing workflows. It ensures comprehensive test coverage, enforces best practices, and integrates AI-assisted test generation for modern software development. Suitable for complex projects requiring disciplined testing strategies, continuous integration, and quality assurance across various programming languages and frameworks.

This skill acts as an alias for the canonical TDD workflow cycle. It assists developers in implementing Test-Driven Development methodologies by structuring testing cycles and ensuring quality assurance. Use it when working on software development tasks requiring a test-first approach. It redirects to the full TDD cycle implementation for detailed guidance on writing tests before code.

This skill provides pre-configured project scaffolding templates for initiating new applications from scratch. It covers 12 diverse technology stacks including Next.js, Express, Python FastAPI, React Native, Flutter, and more. Users can select the appropriate template based on their project type, such as full-stack web apps, APIs, mobile applications, or desktop software. It streamlines the setup process by offering ready-made structures and configurations tailored to specific development needs.

Master AI-powered test automation using modern frameworks like Playwright and Selenium. This skill covers self-healing tests, CI/CD integration, and quality engineering strategies. Learn TDD, performance testing, and low-code platforms to build scalable testing ecosystems. Optimize test execution with predictive analytics and intelligent data management for high-quality software delivery.

This comprehensive workflow provides a complete cycle of quality assurance for software development. It covers every stage from defining the test strategy (TDD, Unit Testing) through integration, E2E testing, browser automation, performance profiling, security scanning, and final code review. Use this when setting up robust testing infrastructure or ensuring production-ready software quality.

This skill acts as a senior software architect to audit AI-generated or rapidly iterated code. It identifies structural flaws, security risks, and production readiness issues. It evaluates architecture, consistency, robustness, and production risks without rewriting code. Ideal for prototype-to-production transitions and technical debt management.

Create and verify provenance manifests for weather-data inputs and derived artifacts, capturing object identity, selections, software versions, transformations, and checksums to support traceable, replayable, or reproducible workflows.

WGM is a robust, agentic methodology designed to transform vague or rough requirements into working, validated software. It enforces a disciplined workflow across six stages: deep alignment (Grill), structured planning, deterministic iterative building (Loop), mandatory holdout-scenario judging, and final documentation audits. It ensures that the resulting code converges against rigorously tested acceptance criteria rather than relying on single-pass generation.

Generate comprehensive onboarding documentation for software engineers ranging from newcomers to principals. This skill creates two complementary guides: a principal-level overview covering architecture, design principles, and decision logs, and a zero-to-hero contributor guide with setup instructions and workflows. It automatically detects programming languages and includes Mermaid diagrams for clarity.