Browse The Skill Store

A multi-stage, evidence-grounded academic review agent modeled on the AAAI-26 AI Review Pilot research.

Automated, high-precision code reviews that detect bugs, security flaws, and performance bottlenecks in your PRs.

Convert source code into OpenAPI 3.0 specs or Markdown docs via static analysis of Express, FastAPI, and more.

Automated test generation with edge case analysis and framework-native syntax for TS, Python, Go, and Rust.

skill install safety gate

by Roy Yuen

Free

Automated security and compatibility firewall for installing AI agent skills and Codex/OpenClaw packages.

codegraph ast grep

by servrox

Free

Supercharge repo exploration and refactoring with semantic call-graph tracing and structural AST pattern matching.

Audit your codebase for technical debt and generate a prioritized, actionable remediation report.

High-precision test gap analysis that prioritizes untested code by risk and identifies missing edge cases.

legacy system archaeologist

by J. Trejo

Free

Reconstruct architecture and map risks in inherited legacy codebases with evidence-based auditing and migration plans.

Elite technical due diligence and architecture hardening for scale, security, and enterprise readiness.

🕸️ Codebase Graph

by JustHandled Labs

$25

Map any repo into an interactive D3 dependency graph plus a Markdown onboarding guide: entry points, module relationships, circular dependencies, and dead-code candidates, with refactor suggestions. Parses TypeScript, Python, Java, Go, and Rust imports, exports, and calls. Self-contained HTML, no source changes.

Professional-grade git diff auditor that identifies security vulnerabilities and code smells before you merge.

Audit codebases for structural debt, TODOs, and dependency rot to generate prioritized remediation reports.

🗺️ Change Impact Mapper

by JustHandled Labs

$13

Map the blast radius of a code change before you run the whole suite. For the files and functions you changed, it lists what imports or calls them, which tests cover them, flags any change with no covering test, and warns when a file has a lot of dependents. It tells an agent what its edit might break instead of making it guess. Resolves Python and JavaScript/TypeScript.

Audit frontend code for WCAG 2.2 AA compliance with prioritized remediation steps and deep semantic analysis.

Scan multi-language codebases for unused variables, orphaned functions, and unreachable code with severity ranking.

🧭 Doc Drift Detector

by JustHandled Labs

$13

Catch documentation that drifted from your code. Flags functions and methods named in your docs that are gone from the source, CLI flags documented but missing from the arg parser, env vars the docs mention but the code never reads, example imports of modules that no longer exist, and npm scripts or Make targets your docs reference but the project does not define. Cross-references your README and docs against Python and JS/TS source.

Codebase Architecture Improver

by Arnstein Larsen

$12.99

Systematically refactor large codebases, eliminate circular dependencies, and define clean module boundaries.

code review buddy

by Roy Yuen

$5

Structured, severity-aware code reviews focusing on security, bugs, and performance across all major languages.

Security Audit & Compliance Toolkit

by Arnstein Larsen

$12.99

A professional-grade toolkit for SAST code reviews, PII scanning, and automated compliance gap analysis.

⚔️ Guardrail Fallback Linter

by JustHandled Labs

$12

Find the LLM integration code that breaks when a model blocks a response or falls back to a different model. Flags calls with no try/except or refusal branch, responses used or parsed with no guard for a blocked or empty answer, and hardcoded model ids with no fallback handling. Built for the Fable 5 era, where a high-risk call is blocked and silently falls back to Opus 4.8.

🔳 QR Payload Auditor

by JustHandled Labs

$5

Audit the decoded text a QR code carries before you print it on something. Flags URLs that are not absolute, link shorteners that hide the real destination, unsafe schemes (javascript:, data:, file:), payloads too long to scan reliably, malformed Wi-Fi or contact payloads, and exposed credentials like a Wi-Fi password or a token sitting in a URL. It audits the decoded payload you paste; it does not read images.

Generate source-safe repository audits and repair handoff bundles without mutating your code.

project intelligence suite v1.2

by S0lidByte

$5.99/mo

Master orchestrator that routes engineering tasks to 18 specialized AI skills with persistent project context.