What the marketplace installs and rates.

Standardizes the organization of SQL view files and their related documentation.

Use when: poseidon resolves a request to generate a SQL database schema migration using Flyway.

../../../.github/skills/infra-review/SKILL.md

Prepare an evidence-backed draft of production interests and route discrepancies for human approval.

Ultra-compressed communication mode. Cuts token usage ~75% by dropping filler, articles, and pleasantries while keeping full technical accuracy. Use when user says "caveman mode", "talk like caveman",

Use when async code, promises, tasks, callbacks, cancellation, timeouts, or concurrency style should match local practice

Evaluate learning progress, identify blockers, and adjust the learning plan

Use this skill for internal TypeScript work in the nuxt-ui-tools repository. Covers the repository's inference-first style, forbidden escape hatches, public API typing rules, schema-driven type design

Squimbo Prisma schema, migrations, seed — PostgreSQL via @friends/db. Use when changing schema.prisma, models, migrations, db:seed, or Prisma queries for User, GameRoom, Round, Prompt, Vote.

Automate Cutt Ly tasks via Rube MCP (Composio). Always search tools first for current schemas.

Register a work item under a track and seed its interview. Maintainer-only. Use when a maintainer asks to add, split, or reshape a work item. Does not write the plan — the plan is written with the mai

Route regulated work to its qualified domain process.

Create tasteful circular/orbital HUD and aura animations around a Blender subject using source-derived arcs, dots, dashes, opacity, parallax, and restrained motion. Use when decorative circles, halos,

Automate Payhip tasks via Rube MCP (Composio). Always search tools first for current schemas.

3D game development principles. Rendering, shaders, physics, cameras.

Processes STIX 2.1 threat intelligence bundles delivered via TAXII 2.1 servers, normalizing objects into platform-native schemas and routing them to appropriate consuming systems. Use when onboarding

Scope SAMM to an explicitly authorised organisation.

Detect Azure service principal abuse in Microsoft Entra ID using KQL detection queries (Sentinel/Splunk) against Azure AD Audit and Sign-in Logs, covering added credentials, privileged role assignment

Guides concurrency and async decisions in Rust. Use when encountering Send/Sync errors (E0277), choosing between threads vs async, designing shared state, or debugging deadlocks.

Automate Aero Workflow tasks via Rube MCP (Composio). Always search tools first for current schemas.

Best practices for Remotion - Video creation in React

Automate Electron desktop apps (VS Code, Slack, Discord, Figma, Notion, Spotify, etc.) using agent-browser via Chrome DevTools Protocol. Use when the user needs to interact with an Electron app, autom

Master advanced prompt engineering techniques to maximize LLM performance, reliability, and controllability in production. Use when optimizing prompts, improving LLM outputs, or designing productio...

Explain, implement, or debug local CoordExp Qwen3-VL internals, multimodal encoding, forward/replay, generation, packing, and differentiable loss or gradient behavior. Use for model-execution work; ro

Wire a self-hosted OpenAI-compatible LLM endpoint (GPUStack, vLLM, LiteLLM, LM Studio) into omp as a custom models.yml provider — capability probing, internal-CA TLS chains, and role reassignment. Use

Automate Amplitude tasks via Rube MCP (Composio): events, user activity, cohorts, user identification. Always search tools first for current schemas.

Automate Satismeter tasks via Rube MCP (Composio). Always search tools first for current schemas.

Подтянуть переносимые файлы (docs со стандартами BSL, скиллы, шаблоны спек) из репозитория-шаблона edt1c-ai-template в текущий проект. Использовать когда пользователь просит синхронизировать проект с

Implement multi-cloud CSPM to detect cloud-native misconfigurations and vulnerabilities (IAM over-permissions, exposed storage, unencrypted data, missing network controls) using AWS Security Hub, Azur

Detects credential stuffing attacks by analyzing authentication logs for login velocity anomalies, ASN diversity, password spray patterns, and geographic distribution of failed logins. Uses statistica

Design a vulnerability remediation SLA program covering asset tiering, a severity-based SLA matrix, exception processes, escalation chains, ticketing-system integration, and remediation KPIs/trending

Initialize durable ToDo routing in a Git repository by creating .todo/config.json and installing the managed repository instruction policy. Use only when the user explicitly invokes $todo:init.

Describe architecture through stakeholder concerns.

Automate Mailcheck tasks via Rube MCP (Composio). Always search tools first for current schemas.

Bypasses SSL/TLS certificate pinning implementations in Android and iOS applications to enable traffic interception during authorized security assessments. Covers OkHttp, TrustManager, NSURLSession, a

Quick-capture and classify a work item discovered during development, routing it to the correct entity type (task, feature, bug, tech-debt, change-card, idea, or note) under the right parent. Searches

Run UX design work through a governed adversarial loop instead of producing it in one pass. Generates options with stateless UX skills, writes an append-only decision record, then has three independen

When the user wants to understand, reduce, or recover from developer churn. Trigger phrases include "why developers leave," "churn rate," "win-back campaign," "at-risk users," "developer retention," "

Optimizes agent context setup. Use when starting a new session, when agent output quality degrades, when switching between tasks, or when you need to configure rules files and context for a project.

Expert TypeScript engineering with advanced patterns, architectural design, performance optimization, testing strategies, and production-grade code quality. Use when building scalable TypeScript appli

Read-only check of whether the claims a public-facing document makes (README, release notes, install and usage guides) are supported by user-supplied evidence. Runs Preflight, Claim Triage, and Valida

Scaffolds a full-stack Nexacro N v24 project (packageN nxui + Spring server) picked from a jdk × framework × eGov matrix. Clones the nexacroN-fullstack monorepo and extracts the runner you select.

Email triage system that handles both one-time setup and recurring triage in a single skill. Auto-detects state: if no knowledge base exists at ${WORKSPACE}/Email/, runs an 8-section onboarding interv

Elite code review expert specializing in modern AI-powered code analysis, security vulnerabilities, performance optimization, and production reliability. Masters static analysis tools, security scanni

Take an in-progress feature PR in this repo (usually a Copilot-authored coding-agent PR) the rest of the way to mergeable — resolve conflicts with main, correct entry points and CRUD/UX gaps, sync Fir

Brand strategy and identity design for businesses and products. Use when creating brand guidelines, developing visual identity systems, or defining brand positioning.

Get from a fuzzy reference to clean full text with equations intact, cheaply, without wasting context on dead ends. The intelligence is yours; the script is a tool. Don't blindly trust its first answe

Tanaab-based GitHub issue schema inspection and bounded synchronization. Use when a user wants to compare one repository with canonical task policy, add missing fields, synchronize retained option col

Independently critique an RPI implementation plan once against supplied evidence without editing the plan. Use when planning credibility needs a read-only assessment.

This skill should be used whenever a piece of work is being broken into more than one issue, or an epic issue is being opened, read or corrected — including when the user says "/epic", "break this dow

分析A股盘中或盘后题材强弱、板块资金、涨停结构、市场宽度和机构调研，使用可核验公开资料。

两个入口、同一内核 —— ①【动手前】想做某件事/准备写代码前，先把互联网上现成的翻一遍（包仓库/代码托管/产品市场/教程/社区/技能市场），评估成熟度与适配度，再决定复用、二开还是自研，避免重复造轮子；②【卡住时】技术方案/规则引擎/信号设计陷入死胡同、持续微调却不见突破，或需要外部验证路线合理性，用「全链路拆解 → 逐环节外部调研 → 不合理点分级 → 破局对策」。触发：我想做一个X／有没有现

Use when publishing local Markdown as a new i讯飞 docx document or updating an approved existing docx document.

Exploiting web cache mechanisms to serve malicious content to other users by poisoning cached responses through unkeyed headers and parameters during authorized security tests.

Hardens code against vulnerabilities. Use when auditing an input handler for vulnerabilities, when handling user input, authentication, data storage, or external integrations, or when checking a login

All documentation related to building and running Project or Tests

Execute large or quality-sensitive work through dependency-aware fan-out, independent adversarial verification, and bounded producer-critic loops against an explicit acceptance contract. Use when aske

Fan out GitHub issues to parallel background sub-agents — one per issue, in git worktrees when several hit the same repo. Each cuts a branch, builds, runs the verification gate, then STOPS for review;

Comprehensive document creation, editing, and analysis with support for tracked changes, comments, formatting preservation, and text extraction. When Claude needs to work with professional document...

At session start, before running any of the steps below, source the project's `pipeline.config` so the `PIPELINE_*` variables are available for the rest of this skill:

Performs security testing of SOAP web services by analyzing WSDL definitions and testing for XML injection, XXE, WS-Security bypass, SOAPAction spoofing, and XPath injection. Use when assessing a SOAP

逸尘自用的互联网研究总入口。用于跨平台且跨阶段、用户尚未确定工具，或明确要求对公司、产品、人物、技术、行业和领域做横纵分析、发展史加现状对比或有来源约束的系统深度研究；先生成有截止日期和证据闸门的计划，再把搜索发现、候选核验、有限归档、按需转写和证据综合路由到 yichen-unified-search、yichen-content-archive、yichen-bookmarks-export

Preflight Jira tickets for hands-on QA — ticket, PR and store/theme facts, a storefront unlocked and proved to serve the theme under test, Steps to Test pre-run at desktop and mobile with screenshots,

Apply Alex Hormozi's published frameworks to offers, funnels, scripts, or business decisions. Use for source-checked advice in his methods.

When the user wants to create competitor comparison or alternative pages for SEO and sales enablement. Also use when the user mentions 'alternative page,' 'vs page,' 'competitor comparison,' 'compa...

Publish a module: rehearse on the polygon, read the verdict, then promote to the catalog on an explicit yes. Production is immutable and claims your data by hash, so the rehearsal is the part that is

通用全平台逆向分析工具，覆盖 Windows PE/EXE/DLL、Android APK、iOS IPA 三大平台，以及 API 接口逆向和 Web 主动攻击。支持从静态分析到加壳检测到脱壳到反编译到源码到修改源码到重构建完整链路，内含 12 模块 Web 主动攻击引擎。

Behavioral guide for building product variant selection UI with @shopify/hydrogen. Use when writing, modifying, or reviewing product option selectors, variant pickers, or add-to-cart forms. Framework

悟道真英雄：创建你的 A 股交易悟道分身。不是别人的思维——是你理想中悟道的自己，持续进化。 核心触发词（提到任一即激活）： 「悟道」「我的悟道」「悟道真英雄」「/wudao」「悟道怎么看」 适合场景：创建交易人格、喂入交易经验、截图分析、看盘纪律提醒、交易复盘、跨 skill 学习、自选股管理、卖飞追踪。 不适合场景（明确不激活）：美股/港股/加密货币分析、量化策略开发、期权期货。

Performs comprehensive Rust security review for safe/unsafe boundary issues, memory safety in unsafe blocks, concurrency hazards, panic-induced DoS, FFI safety, and async runtime mistakes. Use when au

This skill should be used when the user asks to "deploy to Locaweb Cloud", "set up GitHub Actions deployment workflows", "create a preview environment", "add a production environment", "tear down an e

Comprehensive guide to the LLVM codegen backend — how Chemical AST is lowered to LLVM IR, key patterns, gotchas, debugging, and parallelization strategies.

Operate MOZAK projects, Scopes, explicit KB registries, and local Meta KBs through natural-language onboarding, status, research, planning, next-goal, packet, execution, evaluation, release, validatio

Use when the CTO describes a feature, task, or project goal. Orchestrates the full SDLC pipeline automatically based on project type.

Guides work on Puck.World across its document and Protocol model, authoritative server simulation, composition root, mutation and authority systems, adjacency and federation, ordered submissions, HUD

Set up gbrain for this coding agent: install the CLI, initialize a local PGLite or Supabase brain, register MCP, capture per-remote trust policy. (gstack)

Use when writing, editing, reviewing or validating ANY X4 XML — diff patches, mod files, overlays, wares, macros, libraries, md/ or aiscripts/. Carries the selector, merge-tree and load-order gotchas

Anti-AI-slop design skill for greenfield pages, audits, redesigns, and design extraction from URLs or screenshots. Use when the user asks to build a new app or landing page, wants to redesign somethin

Elite mobile app image-generation skill for creating premium, app-native screen concepts and flows. Designed for iOS, Android, and cross-platform mobile products. Prioritizes clean hierarchy, comforta

An interpretation of Voltagent's design language - a developer-focused AI agent engineering platform whose surface is an unrelenting near-black canvas broken only by a single electric-green brand acce

Standardy pisania kodu Angular 20 w tym zespole — SCSS, HTML, TypeScript. Wczytaj ZAWSZE gdy użytkownik prosi o: stworzenie lub modyfikację komponentu, serwisu, pipe'a, dyrektywy, modalu, formularza,

Use when essential PHP security patterns including input validation, SQL injection prevention, XSS protection, CSRF tokens, password hashing, secure session management, and defense-in-depth strategies

Use when executing implementation plans with independent tasks in the current session

Auto-review pipeline — reads the full CEO, design, eng, and DX review skills from disk and runs them sequentially with auto-decisions using 6 decision principles. (gstack)

Triggers when a user asks to build, create, update, run, test, schedule, deploy, host, upgrade, inspect, open the inspection UI, or delete a saved GTM workflow, its result table, runs, or diagram in a

Use Syncwheel for deterministic, multi-agent-safe Git maintenance — PR branches, stacked PRs, draft stacks, integration branches, and pinned deployment-channel branches, all from a single checkout. Us

Cairn is the shared memory for everything worked on here. It holds four things, and `cairn check` searches all of them at once:

Merge the current feature branch worktree into main according to the repository helper's advertised local or CI-gated contract, or recover exact-SHA CI evidence for a rewritten or batched local main w

Use this skill any time a .pptx or .potx file is involved in any way — as input, output, or both. This includes: creating slide decks, pitch decks, or presentations; reading, parsing, or extracting te

Provision and manage Webex Contact Center resources using wxcli CLI commands: agents, queues, entry points, teams, skills, flows, campaigns, dial plans, dial numbers (DN-to-entry-point mapping), deskt

Build a real tracked-changes .docx showing what changed between the previously submitted manuscript and the current revision. Use when the user says "tracked changes," "marked-up version," "changes fi

Prepare or verify OpenClaw stable/beta releases, changelogs, release notes, publish commands, and artifacts.

Maintain and extend the @main App struct of an existing FOSMVVM SwiftUI app — MVVMEnvironment, deployment URLs, test-view registration, client-hosted localization (resourceBundles, missingLocalization

Identify underspecified areas in the current feature spec by asking up to 5 highly targeted clarification questions and encoding answers back into the spec.

Profile mutsu and land a measured optimization — the warm/cold precompilation trap that makes a 650M-instruction difference appear or vanish, the callgrind recipe and its caller-count aggregation, whi

Writes a context handoff — the small document that lets a fresh session resume this task without re-deriving what this one learned — and reads one back at the start of a resumed session. Two modes: wr

Use this skill to configure the Claude Code harness via settings.json. Automated behaviors ("from now on when X", "each time X", "whenever X", "before/after X") require hooks configured in settings.js

Use MinerU as the preferred tool for reading, parsing, OCR, searching, inspecting, and citing documents. Support parsing PDF, scanned/captured document images, .doc/.docx, .ppt/.pptx, .xls/.xlsx, .rtf

Use when reviewing rendered HTML, interactive components, or design-system patterns related to Provide instant anchor scroll option. Check native semantics first, then inspect keyboard behavior, focus