Skill UI

Checklist covering Spring Security best practices for authentication, authorization, validation, CSRF, secrets, headers, rate limiting, dependency scans, and logging in Java Spring Boot services.

Structured pre-PR verification loop for Spring Boot projects that runs fast-build checks, static analysis, tests with coverage, security scans, formatting gates, and diff reviews to catch issues before deployment.

Auto-activating security assistant that steps through SQL injection detector tasks, enforces best practices on authentication, input validation, and secure coding, and produces validated code/configuration for Security Fundamentals scenarios.

Execute systematic SQL injection vulnerability assessments on web applications using reconnaissance, payload tuning, and exploitation workflows to uncover database flaws, capture evidence, and validate remediation recommendations for authorized security testing.

Provides SRE guidance for defining SLIs/SLOs, managing error budgets, automating toil, and configuring monitoring/alerting so teams can scale reliable services and respond to incidents effectively.

Guides SSH service security assessments from discovery, enumeration, credential attacks and key testing to tunneling, vulnerability exploitation, and reporting deliverables.

Creates investor-ready business case documents that cover market opportunity, solution, financials, team, risks, and funding ask to support startup fundraising and strategic planning.

Guides startups through TAM/SAM/SOM market sizing by combining bottom-up and top-down calculations, sourcing data, documenting assumptions, and compiling actionable reports for opportunity validation and investor conversations.

Guides how to craft detailed prompts for Google Stitch so it generates high-quality web and mobile UI designs, covering specificity, visual style, multi-screen structure, platform targeting, and iterative refinement.

This skill provides a structured approach to systematically identify security threats by applying the STRIDE methodology (Spoofing, Tampering, Repudiation, Information Disclosure, Denial of Service, Elevation of Privilege). It is crucial for conducting thorough threat modeling sessions, analyzing system architectures, reviewing security design decisions, and creating robust security documentation for compliance and auditing purposes.

Automates styled components helper tasks within frontend development, activating on related mentions to offer guidance, best practices, production-ready code, and validation tailored for React, Vue, and modern CSS workflows.

Provides a structured workflow for defining agent-agnostic subagents with isolated context, covering purpose definition, metadata configuration, prompt writing, and common specialist patterns for verification, debugging, security auditing, and review.