wedabro
Organizationbro-skills - Spec-Driven Development CLI
Categories
Indexed Skills (58)
ponytail
Forces the laziest solution that actually works, simplest, shortest, most minimal. Channels a senior dev who has seen everything: question whether the task needs to exist at all (YAGNI), reach for the standard library before custom code, native platform features before dependencies, one line before fifty. Supports intensity levels: lite, full (default), ultra. Use on ANY coding task: writing, adding, refactoring, fixing, reviewing, or designing code, and choosing libraries or dependencies. Also use whenever the user says "ponytail", "be lazy", "lazy mode", "simplest solution", "minimal solution", "yagni", "do less", or "shortest path", or complains about over-engineering, bloat, boilerplate, or unnecessary dependencies. Do NOT use for non-coding requests (general knowledge, prose, translation, summaries, recipes).
ci-security-scanning-with-strix
Add security scanning to CI/CD with Strix — GitHub Actions, GitLab CI, or any pipeline — so every pull request gets a diff-scoped AI pentest that blocks vulnerable code before it merges, with results as PR comments and SARIF uploaded to code scanning. Covers both the self-hosted open-source CLI (runs in your runner) and the managed app.strix.ai platform (GitHub/GitLab app or API, no runner infra). Use when the user asks to add security scanning, SAST/DAST, pentesting, vulnerability checks, or automated security review to their CI pipeline, pre-merge gate, or PR workflow.
fix-security-vulnerabilities-with-strix
Fix security vulnerabilities found by a Strix pentest (open-source CLI or app.strix.ai cloud) — triage by severity, patch the root cause rather than the symptom, and re-run Strix to prove each fix actually closes the exploit. Handles injection, XSS, SSRF, broken access control, IDOR, and other validated findings. Use after a Strix scan reports findings, or when the user asks to remediate, patch, or fix security issues from a strix_runs report, vulnerabilities.json, findings.sarif, or a cloud scan.
managed-pentesting-with-strix
Run a managed pentest of a web app or API through the app.strix.ai REST API — no local Docker, LLM key, or install needed. Create an API token, register domain/repository assets, launch and poll scans, triage vulnerabilities, export SARIF, download PDF/DOCX pentest reports for SOC 2 and other compliance evidence (Enterprise plan), start PR reviews, and set up schedules and webhooks. Use when the user wants continuous or scheduled pentesting-as-a-service, an auditor-ready pentest report, scans tracked in a team dashboard, or security testing from a sandboxed agent/CI environment with no infrastructure.
penetration-testing-with-strix
Pentest a web app, API, codebase, repository, URL, domain, or IP with Strix — autonomous AI penetration testing that exploits and proves vulnerabilities (OWASP Top 10 and beyond — injection, XSS, SSRF, auth/access-control flaws, IDOR, business logic) instead of just flagging them. Runs self-hosted with the open-source CLI or via the managed app.strix.ai cloud, and returns validated findings with proof-of-concept exploits (Markdown, JSON, CSV, SARIF). Use when the user asks to pentest, hack, security-scan, security-audit, or find vulnerabilities in an app, API, website, or repo.
speckit.ai-engineer
AI & LLM Systems Architect - Design RAG pipelines, vector search, semantic caching, evals, and tool-calling guardrails.
speckit.event-realtime
Realtime & Event Systems Engineer - WebSocket channels, Server-Sent Events, Message Queues, and Transactional Outbox workers.
speckit.payment-fintech
FinTech & Payment Systems Engineer - Idempotency ledger, payment gateways, signature verification, and financial transaction state machines.
speckit.sre-observability
SRE & Observability Specialist - OpenTelemetry distributed tracing, Prometheus metrics, structured logs, and resilience controls.
design-taste-frontend
Implement premium new frontend landing pages, portfolios, editorial sites, and marketing pages without generic AI styling. Use for code-producing web UI work, including responsive layout, typography, assets, and motion. Do not use for broad redesign audits of existing products, image-only concepts, mobile-app screens, dashboards, data tables, or image-first reconstruction; use the dedicated skill instead.
full-output-enforcement
Overrides default LLM truncation behavior. Enforces complete code generation, bans placeholder patterns, and handles token-limit splits cleanly. Apply to any task requiring exhaustive, unabridged output.
gpt-taste
High-motion Awwwards-style frontend direction using GSAP, editorial typography, dense bento composition, and cinematic section choreography. Use only when the user explicitly wants an experimental marketing page or portfolio; do not use for routine product UI, dashboards, or accessibility-critical services.
high-end-visual-design
Teaches the AI to design like a high-end agency. Defines the exact fonts, spacing, shadows, card structures, and animations that make a website feel expensive. Blocks all the common defaults that make AI designs look cheap or generic.
industrial-brutalist-ui
Raw mechanical interfaces fusing Swiss typographic print with military terminal aesthetics. Rigid grids, extreme type scale contrast, utilitarian color, analog degradation effects. For data-heavy dashboards, portfolios, or editorial sites that need to feel like declassified blueprints.
minimalist-ui
Clean editorial-style interfaces. Warm monochrome palette, typographic contrast, flat bento grids, muted pastels. No gradients, no heavy shadows.
speckit.checker
Static Analysis Aggregator - Run static analysis on the codebase.
speckit.devops
Docker Infrastructure & Security Hardening Specialist — Port ENV-first.
speckit.frontend
Frontend Developer - Build production UI components, typed data flows, accessible interactions, responsive states, and performant interfaces without generic styling.
speckit.uiux
UI/UX Architect - Definition of Design System Anti-Slop, UI Components, Spacing, Typography, Responsive Patterns.
stitch-design-taste
Semantic Design System Skill for Google Stitch. Generates agent-friendly DESIGN.md files with strict typography, calibrated color, asymmetric layouts, purposeful accessible motion, and hardware-accelerated performance.
speckit.validate
Implementation Validator - Validate implementation vs overall spec.
speckit.backend
Backend/API Developer - Build production API services, business logic, authentication and authorization, data-safe integrations, reliability controls, and verifiable contracts.
speckit.database
Database Architect - Design schemas, indexes, migrations, query optimization, data integrity, recoverability, and reliable production operations.
speckit.architecture
Software Architect - Make evidence-based system design decisions, document trade-offs and ADRs, and define modular, reliable implementation boundaries.
speckit.ddd
Domain-Driven Design Specialist - Discover bounded contexts and ubiquitous language, then model aggregates, invariants, events, and safe domain boundaries.
speckit.identity-access
Identity and Access Engineer - Design and implement secure authentication, authorization, federation, provisioning, sessions, and account lifecycle controls.
image-to-code
Build or reconstruct a visually important website through an image-first workflow: generate or inspect section references, analyze them, then implement matching responsive code. Use when the user supplies a website image to reproduce or explicitly wants a visual-first web build. Do not use for ordinary frontend edits, image-only deliverables, mobile apps, or brand boards.
imagegen-frontend-mobile
Generate premium app-native mobile screen images and coherent multi-screen flows for iOS, Android, or cross-platform products. Use when the deliverable is mobile UI imagery, screen concepts, or phone-mockup presentations. Produce images only; do not write app code, website sections, or brand-guideline boards.
imagegen-frontend-web
Generate premium horizontal website design-reference images for landing pages, marketing sites, and product pages. Use when the requested deliverable is web design imagery or when an image-first implementation workflow needs upstream section concepts. Produce images only, one standalone image per page section; do not write frontend code or mobile-app screens.
redesign-existing-projects
Upgrades existing websites and apps to premium quality. Audits current design, identifies generic AI patterns, and applies high-end design standards without breaking functionality. Works with any CSS framework or vanilla CSS.
brandkit
Generate premium brand-identity imagery, logo systems, brand-guideline boards, visual-world directions, and identity mockups. Use for image-based brand exploration and presentation systems. Produce brand visuals only; do not implement websites, design mobile product screens, or write application code.
design-taste-frontend-v1
The original v1 taste-skill, preserved for projects depending on its exact behavior. The current default is `design-taste-frontend` (v2 experimental), which is a substantial rewrite. Use this v1 install name only if you need exact backward compatibility.
speckit.wordpress
WordPress Master Architect - Expert in developing core-compliant Themes, Gutenberg Blocks (apiVersion 3), Plugins, Interactivity API, REST API endpoints, WP-CLI automation, and Performance profiling/database optimization.
speckit.clarify
Ambiguity Resolver - Detect and resolve ambiguity in spec.
speckit.implement
Code Builder (Anti-Regression) - Deploy code in tasks with IRONCLAD protocols.
speckit.security
Security Auditor - Audit application security using OWASP guidance, secret scanning, dependency analysis, and threat modeling.
speckit.analyze
Consistency Checker - Analyze consistency between spec, plan, tasks.
speckit.backlog
Backlog Manager - Manage Ideas, Pending Requests and scan TODO/FIXME from codebase.
speckit.checklist
Requirements Validator - Create and validate checklist from spec.
speckit.constitution
Governance Manager - Set up & manage Constitution (Source of Law).
speckit.content
Content Architect - Heading Structure, Readability, Multimodal, Fact-density.
speckit.debug
Systematic Debugger - Diagnose problems, find individual root causes, and recommend fix plans.
speckit.diff
Artifact Comparator - Compares differences between artifacts.
speckit.geo
GEO Strategist - Optimized for AI Search (ChatGPT, Gemini, Perplexity).
speckit.identity
Manage AI personality and behavioral orientation for the project.
speckit.map
Codebase Mapper - Automatically analyze project structure, draw dependency diagrams, and write architectural documents.
speckit.migrate
Legacy Code Migrator - Reverse-engineer existing codebase to SDD standard.
speckit.plan
Technical Planner - Create plan.md from spec (data model, API contracts, research).
speckit.quizme
Logic Challenger (Red Team) - Ask critical questions, find edge cases.
speckit.reviewer
Code Reviewer - Review code according to spec and best practices.
speckit.roadmap
Roadmap Strategist - Manage high-level roadmaps (Milestones) and transitions between Phases.
speckit.seo
Technical SEO Lead - Optimize Meta Tags, Sitemap, Core Web Vitals, Schema.org.
speckit.specify
Feature Definer - Generates spec.md from natural language description.
speckit.status
Progress Dashboard - Displays project progress status.
speckit.tasks
Task Breaker - Create atomic tasks.md, with dependency order from plan.
speckit.taskstoissues
Issue Tracker Syncer - Synchronize tasks.md to issue tracker.
speckit.tester
Test Runner & Coverage - Create test plans, write tests, report coverage.
speckit.uat
UAT Analyzer - Analyze manual acceptance results and process gaps from the User.
Bio shown is the top-scored skill's repo description as a fallback — real GitHub bios land in a future update.