Skill UI

This tool performs a rapid, heuristic security assessment focused on identifying common vulnerabilities listed in the OWASP Top 10. It scans source code for hardcoded secrets, SQL injection risks, XSS vectors, insecure dependencies, and authentication flaws. It is ideal for pre-commit checks or code reviews before merging sensitive changes.

This tool simulates a senior application security engineer, performing a comprehensive, multi-phase audit. It checks for exposed secrets, prompt injection vectors, dependency vulnerabilities (supporting multiple languages), and critical configuration misconfigurations. It provides a scored, prioritized remediation report, ensuring a robust security posture before deployment.

This tool performs a comprehensive security audit of Claude Code configurations. It checks for known malicious skills, vulnerable MCP servers, dangerous patterns (like hidden characters, environment variable harvesting), and exposed secrets across various components (skills, hooks, and system prompts). It generates a detailed, actionable report identifying security risks and compliance issues.

This technique segments unstructured clinical documents (such as HPI, PMH, and A&P sections) into contextually rich, canonical chunks. This is crucial for improving the precision of downstream NLP tasks like Named Entity Recognition (NER) and de-identification. By identifying and normalizing headers and mapping them to LOINC codes, the system ensures that the source context (e.g., historical vs. active) is maintained, leading to significantly more accurate results.

Provides a hardened FastAPI endpoint for OpenMed's core functionalities: clinical Named Entity Recognition (NER), Personally Identifiable Information (PII) extraction, and de-identification. Designed for self-hosted microservices, it handles inference requests, model lifecycle management, and supports dynamic batching, ensuring secure, on-device processing of sensitive clinical data.

This tool captures the complete context of an ongoing session into a highly structured handoff file. It meticulously records key decisions, files modified, current operational status, and a clear, ordered list of next required steps. Use this feature when pausing work, switching tasks, or handing off the project to another instance to ensure zero context loss and immediate resumption.

This skill applies consistent date shifting to clinical text, ensuring that absolute dates are obscured while critically preserving the temporal intervals between medical events. It is essential for longitudinal research or survival analysis where time-to-event data must be preserved under HIPAA Safe Harbor rules. It maintains the integrity of time differences (e.g., length of stay, visit gaps) by applying a stable, per-patient offset.

The Ship command provides a comprehensive, multi-stage checklist for ensuring code readiness before production deployment. It verifies critical quality gates, including running full unit tests, performing security audits, checking for hardcoded secrets, and verifying documentation updates. Use this tool to guarantee the stability and quality of every software release.

This tool analyzes SonarCloud quality issues for a specific pull request (PR). It fetches detailed metrics, including severity, issue type, and violation count, and generates a comprehensive, structured report. The output provides an executive summary, identifies top violating files and rules, and delivers a clear, actionable plan to guide developers toward merging high-quality code.

This skill converts free-text radiology narratives (CT, MRI, X-ray, etc.) into structured, machine-readable data. It automatically identifies and segments key report sections (Technique, Findings, Impression) and extracts critical clinical details such as anatomy, measurements, laterality, BI-RADS/Lung-RADS scores, and follow-up recommendations. It is crucial for building structured medical records and decision support systems.

Generates highly accurate, structured summaries from complex clinical notes, such as discharge summaries, SBAR reports, or problem lists. The core function is to anchor every generated claim to a specific source span within the original text, guaranteeing verifiability and eliminating hallucination. Essential for clinical documentation drafting and chart abstraction.

A comprehensive framework for assessing software supply chain security. It covers generating Software Bill of Materials (SBOM), performing Software Composition Analysis (SCA) on open-source dependencies, auditing CI/CD pipelines, and analyzing container images. This skill helps identify vulnerabilities, ensure build integrity, and verify component provenance across the entire development lifecycle.