Skill UI

Perform authorized security assessments and penetration testing to validate system controls. Includes reconnaissance, scanning, exploitation, and reporting phases. Requires explicit written permission and defined scope before executing any probes or exploits. Focuses on identifying vulnerabilities and providing remediation recommendations for DevOps environments.

This skill enables diagnosing performance bottlenecks in applications and infrastructure through profiling, tracing, and load testing. It covers observability setup, latency optimization, caching strategies, and scalability planning. Ideal for optimizing backend, frontend, and distributed systems to ensure high throughput and reliability.

Optimize Linux system performance by configuring kernel parameters, analyzing bottlenecks, and tuning resources like memory, CPU, and network. Includes monitoring tools and sysctl settings for production environments.

This skill provides comprehensive management for Opencode's permission system. It allows users to review currently always-allowed commands, suggest safe read-only commands, and configure granular access controls using allow/deny/ask patterns. It is essential for optimizing security, performing system audits, and managing the operational scope of the agent.

Guides choosing the right output format (plain, markdown, djot, HTML, JSON, DocTags) and token-reduction level for Xberg document extraction, based on downstream consumers like LLMs, RAG systems, parsers, or human review.

This skill helps plan work by creating a concise Product Development Requirement (PDR) and implementation-sized tasks within the YYLO Ledger system. It reads project instructions, defines scope, risks, and acceptance criteria, then registers tasks using CLI commands. It ensures proper task ownership and dependencies without starting actual implementation or deployment.

Manage containers using Podman's daemonless, rootless container engine. Covers basic commands, pods, systemd integration, networking, storage, and registry configuration for security-conscious environments.

This skill provides expertise in writing strict POSIX-compliant shell scripts for maximum portability across Unix-like systems. It focuses on shell-agnostic scripting compatible with dash, ash, sh, and bash in POSIX mode. Key areas include defensive programming, portable error handling, safe argument parsing, and cross-platform compatibility. It ensures scripts run on Linux, BSD, Solaris, AIX, and macOS without relying on GNU-specific features or bash extensions.

Design efficient PostgreSQL schemas using best practices for data types, indexing, and constraints. Covers normalization, partitioning, and performance optimization for scalable database systems.

A comprehensive playbook for optimizing the entire lifecycle of pull requests. It guides developers through systematic pre-flight cleanup, critical self-audits, local test verification, and structuring high-signal PR descriptions to ensure code quality and fast maintainer approval.

Provides comprehensive techniques for escalating privileges from low-privileged users to root or administrator on Linux and Windows systems, covering sudo, cron, capabilities, token impersonation, and Active Directory attacks for authorized penetration testing.

This comprehensive guide outlines world-class product design principles, mimicking Apple's standard. It covers building robust design systems, defining essential design tokens (color, typography, spacing, motion), structuring UI components (atoms to organisms), optimizing UX flows, and designing engaging onboarding experiences. Ideal for product designers and PMs needing to establish a cohesive, scalable visual language and improve overall user experience.