Skill UI

A framework for breaking down work into clear, small, verifiable tasks. Use for feature implementation, bug fixes, refactoring, or any multi-step work. Emphasizes short plans, specific actions, and project-specific verification.

A comprehensive playbook for optimizing the entire lifecycle of pull requests. It guides developers through systematic pre-flight cleanup, critical self-audits, local test verification, and structuring high-signal PR descriptions to ensure code quality and fast maintainer approval.

Guides QA testers in designing unit, integration, E2E and contract tests that verify real requirements, covering edge cases, acceptance criteria and DoD, with truthful coverage and failure reports.

A disciplined approach for red teaming and security assessments, emphasizing scope authorization, impact verification, and data minimization. Ensures thorough coverage without over-extraction or premature stopping during authorized engagements.

This skill provides command-driven methods to audit and harden security configurations across common SaaS platforms like GitHub, Slack, Google Workspace, and AWS. It covers inventory auditing, OAuth management, identity verification, branch protection, and session policies to prepare for compliance audits and reduce security risks.

Discover, inspect, and safely invoke 2,000+ AI models and APIs through SandBase's local MCP bridge, with schema, price, and checksum verification before any paid call.

This skill enables detection, response, and prevention of software supply chain attacks targeting package registries, container images, and CI/CD pipelines. It includes lockfile auditing, provenance verification using tools like Cosign and SLSA, and emergency response playbooks for compromised dependencies.

This skill provides a systematic, multi-step approach to identify and resolve all failing unit tests within a codebase. It guides the user through smart error grouping (e.g., grouping by ImportError or AttributeError), prioritizing fixes from infrastructure to business logic, and ensuring thorough verification to prevent regressions. Ideal for use after major refactoring, debugging CI/CD failures, or when explicitly tasked with making the test suite pass.

Enrich IOCs and profile threat actors from public sources with defined boundaries. Supports domain, IP, URL, hash, email, and wallet enrichment, plus impersonation and scam investigation. Includes X/Twitter data collection via Xquik, normalization, independent verification, and intelligence package handoff.

Search Google, Bing, Google News and Google Scholar, and read public pages, via the Serply MCP server. Ideal for current facts, technical docs, news, academic research, and source verification with cited links.

This skill guides the systematic triage of project issues and external pull requests (PRs). It moves development items through a defined state machine using roles (e.g., bug, enhancement) and states (e.g., ready-for-agent, wontfix). The process involves context gathering, cross-codebase verification, deep questioning (grilling), and generating comprehensive, agent-ready briefs or marking them for human implementation.

Build communication features using Twilio APIs for SMS, voice calls, WhatsApp Business, and 2FA verification. Supports IVR systems and multi-channel authentication. Essential for integrating programmable messaging and phone verification into applications.