Scan AI Skills and MCP servers before installation. Detect risky scripts, permissions, dependencies, network access, credential exposure, file changes, and suspicious configurations — then generate a clear evidence-based security report.
Analyze failed CI/CD pipelines, identify likely root causes, inspect repository configuration and code context, and produce actionable, validated remediation guidance for GitHub Actions, GitLab CI, Jenkins, and related development pipelines.
A lightweight, defense-focused audit of your own/authorized website or web app, driven by the OWASP Top 10. Non-destructively checks security headers, cookie attributes, XSS/SQLi exposure, dependency CVEs, and WordPress/Next.js-specific points. Each finding comes with a severity and an immediately actionable fix (config and code examples), output as a concise report. For full engagements (RoE, formal report), use the Pentest Engagement Kit. Authorized assets only.
Audits your test suite's output for silently vanished tests, unexplained skips, and suspiciously fast runs — turns green CI into a real signal.
This tool is used for PC hardware inventory management, health checks, device and driver diagnostics, CPU/memory/GPU/storage troubleshooting, SMART and event log analysis, backup planning, disk space analysis, and security cleanup guides for Windows systems. It can be used when users mention Windows hardware, Device Manager, drivers, CPU, memory, graphics card, disk, SSD/NVMe, USB devices, hardware errors, backups, insufficient disk space, crashes, freezes, or physical repairs.
Turn "the site feels slow" into a Core Web Vitals repair plan your team can execute. This download skill helps choose the right measurement surface, establish LCP / INP / CLS baselines, separate lab data from field data, classify root causes, ICE-rank fixes, and write each P0 action with verification method, expected metric movement, and a performance-budget guardrail. Built for conversion drops, launch regressions, and stakeholder pressure where a prettier Lighthouse score is not enough.
在隔離本機環境驗證 webhook 重複通知、簽章、重試與事件亂序，分別檢查 HTTP 傳遞及業務證據。內含 18 種情境、HTML／JSON／JUnit 報告與完整繁中及英文指南。
Verify a versioned software release is genuinely complete — tickets actually implemented (not just closed), docs discoverable (not just present), CI green on all matrix platforms, coverage gated, security scan clean, rollback path tested, and version metadata consistent. Produces a structured READY / NOT READY / BLOCKED report with evidence-backed findings and action items.