n8n Issue 创建
Create Linear tickets or GitHub issues following n8n conventions.
⌘K 发布技能 安全扫描
密钥泄漏、SAST、依赖漏洞 · 350 个 Skill
筛选与排序350 个结果
Agent 架构 审计
Full-stack diagnostic for agent and LLM applications.
PR 审查
Review a PR for correctness, security, code quality, and testing issues.
后端 代码 审查
Review backend code for quality, security, maintainability, and best practices based on established checklist rules.
后端 代码 审查
Review backend code for quality, security, maintainability, and best practices based on established checklist rules.
代码 审查
Reviews code for security vulnerabilities, performance issues, and best practices.
Javascriptcore 代
JSC GC reference for Bun.
Humanizer 模型审查
Remove signs of AI-generated writing from text.
设计 指南
> Paperclip's UI is a professional-grade control plane — dense, keyboard-driven, dark-themed by default.
Paperclip 开发
> This skill covers the day-to-day workflows for developing and operating a local Paperclip instance.
seo 审查
Perform a focused SEO audit on JavaScript concept pages to maximize search visibility, featured snippet optimization, and ranking potential Use this skill to perform a focused SEO audit on concept documentation pages for the 33 JavaScript Concepts project.
Docling 技能审计
> Use this skill to parse, convert, chunk, and analyze documents with Docling.
Agent 代码 分析
Agent skill for code-analyzer - invoke with $agent-code-analyzer description: "Advanced code quality analysis agent for comprehensive code r…
Agent 代码 审查 多代理协
Agent skill for code-review-swarm - invoke with $agent-code-review-swarm name: code-review-swarm description: Deploy specialized AI agents t…
Agent 记忆 协调
Agent skill for memory-coordinator - invoke with $agent-memory-coordinator name: memory-coordinator type: coordination description: Manage p…
Agent 技能验证
Agent skill for production-validator - invoke with $agent-production-validator name: production-validator color: "#4CAF50" description: Prod…
Agent 安全 管理器
Agent skill for security-manager - invoke with $agent-security-manager name: security-manager color: "#F44336" description: Implements compr…
Agent v3 安全 Arch
Agent skill for v3-security-architect - invoke with $agent-v3-security-architect name: v3-security-architect version: "3.0.0-alpha" updated: "2026-01-04" description: V3 Security Architect responsible for complete security overhaul, threat modeling, and CVE remediation planning.
Career 运维
AI job search command center -- evaluate offers, generate CVs, scan portals, track applications Determine the mode from $mode: | Input | Mode | |-------|------| | (empty / no args) | discovery -- Show command menu | | JD text or URL (no sub-command) | auto-pipeline |
技能
Manage local skills - list, add, remove, search, edit, setup wizard Meta-skill for managing oh-my-claudecode skills via CLI-like commands.
Impeccable 浏览器审查
Use when the user wants to design, redesign, shape, critique, audit, polish, clarify, distill, harden, optimize, adapt, animate, colorize, extract, or otherwise improve a frontend interface.
Impeccable 浏览器审查
Use when the user wants to design, redesign, shape, critique, audit, polish, clarify, distill, harden, optimize, adapt, animate, colorize, extract, or otherwise improve a frontend interface.
Agent 技能审计
| Evaluate AI agent systems against the OWASP Agentic Security Initiative (ASI) Top 10 — the industry standard for agent security posture.
ai 上下文审计
When the user wants to optimize content for AI search engines, get cited by LLMs, or appear in AI-generated answers.
内容 Strategy
When the user wants to plan a content strategy, decide what content to create, or figure out what topics to cover.
copy 上下文审查
When the user wants to edit, review, or improve existing marketing copy, or refresh outdated content.
seo 审计
When the user wants to audit, review, or diagnose SEO issues on their site.
技能
Manage local skills - list, add, remove, search, edit, setup wizard Meta-skill for managing oh-my-codex skills via CLI-like commands.
Markitdown 技能审计
Convert files and office documents to Markdown.
Humanizer 代码审计
| You are a writing editor that identifies and removes signs of AI-generated text to make writing sound more natural and human.
每日 开发 ask
Your agent's WebSearch for development.
Daily.dev 代码验证
Overcome LLM knowledge cutoffs with real-time developer content.
技能 测试
Validate skill files for structural compliance and behavioral correctness.
无障碍 审查
Run a WCAG 2.1 AA accessibility audit on a design or page.
Brand 审查
Review content against your brand voice, style guide, and messaging pillars, flagging deviations by severity with specific before/after fixes.
Ansible 部署测试
Ansible automation expert for playbooks, roles, inventories, and infrastructure management You are a seasoned infrastructure automation engineer with deep expertise in Ansible.
pdf 代码审计
PDF content extraction and analysis specialist You are a PDF analysis specialist.
技能 安全 Auditor
> Scan and audit AI agent skills for security risks before installation.
技能 Tester
Validate, test, and score the quality of skills within the claude-skills ecosystem.
技能 安全 Auditor
Security auditing for code, configs, and infrastructure.
文档 Reader
Read any common document/data file — PDF, Word (.docx), Excel (.xlsx/.xls), PowerPoint (.pptx), images (OCR), CSV/TSV, plain text, JSON/YAML…
Spring 模型审查
Generates Spring Boot 3.x configurations, creates REST controllers, implements Spring Security 6 authentication flows, sets up Spring Data JPA repositories, and configures reactive WebFlux endpoints.
技能 扫描
Scan agent skills for security issues.
论文 Interpretatio
从论文 PDF 文件或论文 PDF URL 生成通俗易懂、图文并茂、带批判性评估的中文 Markdown 解读，并保存到当前项目的 markdown 目录。
Inkos 上下文审查
Autonomous novel writing CLI agent with web workbench (InkOS Studio) - use for creative fiction writing, standalone short-fiction packages, cover generation, novel generation, style imitation, chapter continuation/import, EPUB export, AIGC detection, and fan fiction.
Learn 会话审计
Create, extract, or update a skill.
ads 技能审计
Multi-platform paid advertising audit and optimization skill.
ads 上下文审计
Amazon Ads deep analysis covering Sponsored Products, Sponsored Brands (incl.
ads 审计
Full multi-platform paid advertising audit with parallel subagent delegation.
ads 方案审计
Google Ads deep analysis covering Search, Performance Max, AI Max, Display, YouTube, and Demand Gen campaigns.
项目 Management
GitHub issue and project-board management for the dotnet/msbuild repo.
ljg 技能 map
扫描 ~/.claude/skills/ 下所有已安装技能，生成一目了然的可视化地图。
技能 Vetter
<!--zh 技能安全审查（Skill Vetter） 安装任何技能之前，必须先执行此审查流程。
gda 分析
Android APK analysis using GDA.exe.
Agent 上下文审计
> Audit the live site, not the source tree alone.
网络 Penetration 测
网络渗透测试的专业技能和方法论 网络渗透测试是评估网络基础设施安全性的重要环节。
Agentation 浏览器启动
Autonomous design critique mode using the Agentation annotation toolbar.
技能 审查
Quality review and audit for Claude Code skills.
技能 审计
Audit codebases for quality, consistency, and broken patterns — use for pre-release or tech debt review Comprehensive, methodical auditing t…
技能 claw
OpenClaw instance administration — manage hosts across macOS, Ubuntu/Debian, Docker, OCI, and Proxmox DETECT PLATFORM FIRST.
技能 代码 审查
Expert multi-AI code review with inline PR comments — use for thorough quality and security analysis Invokes the code-reviewer persona for t…
技能 Coverage 审计
Trace codepaths in diffs, map against tests, auto-generate missing coverage — use before shipping PRs Trace every codepath in a diff, map ea…
技能 文档 同步
Post-ship doc sync across project markdown.
技能 Native Escala
Route ordinary init, review, and security requests to Claude-native capabilities first;
技能 安全 Framing
URL validation and content sanitization for untrusted sources — use when handling external input safely This skill defines security patterns…
Muapi Interior 设
Create professional interior design visualizations — redesign existing rooms, generate new room concepts, or visualize specific furniture st…
Muapi Interior 设
Visualize interior design by generating an empty room and filling it with stylish furniture and decor, or by redesigning an existing room.
Library 创建助手
How the Faebryk component library is structured, how `_F.py` is generated, and the conventions/invariants for adding new library modules.
技能 Improver
Trigger: improve skills, audit skills, refactor skills, skill quality.
Factory 上下文审查
In-depth guide to Factory, a container-based dependency injection system for Swift and SwiftUI.
技能 安装
Install Claude skills from GitHub repositories with automated security scanning.
bug 安全审查
Full pipeline: Recon -> Learn -> Hunt -> Validate -> Report.
Agent 上下文 Loader
'Execute proactive auto-loading: automatically detects and loads agents.md Automatic discovery and loading of AGENTS.md files across project hierarchies for AI coding agents.
Markitdown 技能审计
Convert files and office documents to Markdown.
Salary Market 扫描
Scan live job boards and salary databases to find real-time compensation data for any role and location.
技能 Guardian 安装
Skill Install Guardian v3.0 - Professional Security Audit 当执行安全审计时，必须： 1.
技能 Listing Polis
Improve a skill's public listing before publish.
技能 Releaser
Release skills to ClawhHub through the full publication pipeline — auto-scaffolding, OPSEC scan, dual review (agent + user), force-push rele…
技能 Vetter
Security vetting protocol before installing any AI agent skill.
技能 Vetting
Vet ClawHub skills for security and utility before installation.
Skillshare 技能审计
>- Read-only consistency audit across the skillshare codebase.
技能 Judge
Evaluate Agent Skill design quality against official specifications and best practices.
Wordpress 技能测试
Use when the user asks about WordPress codebases (plugins, themes, block themes, Gutenberg blocks, WP core checkouts) and you need to quickly classify the repo and route to the correct workflow/skill (blocks, theme.json, REST API, WP-CLI, performance, security, testing, release packaging).
Spring 技能验证
Spring Boot 3.x development - REST APIs, JPA, Security, Testing, and Cloud-native patterns.
Feishu 代码创建
>- ├─ 标准图表（思维导图/时序图/类图/饼图/流程图/甘特图） │ ├─ 图整图展示即可，不需要单独编辑节点 → 路径 A（Mermaid 服务端） │ └─ 需要单独编辑每个节点 / Mermaid 含 par / 10+ participant / 30+ 长标签 │…
技能 编写
Design, improve, and evaluate reusable agent skills with high-quality SKILL.md files, precise trigger descriptions, progressive disclosure, and testable behavior.
技能 审查
Critically review a workspace skill and suggest improvements.
技能 扫描
Scan agent skills for security issues.
技能 管理器
Universal consolidation & audit skill for Claude Code skills.
技能 健康检查
Audit skill configurations for correctness and freshness Audits all skill configurations, checks for stale or broken skills, and reports on overall skill health.
数据库 MySQL
MySQL/MariaDB database inspection and queries.
技能 扫描
Scan Clawdbot and MCP skills for malware, spyware, crypto-miners, and malicious code patterns before you install them.
技能 Vetter
Security-first skill vetting for AI agents.
Skillguard 技能审查
Security scanner for AgentSkill packages.
Branding 技能审计
When the user wants to define, audit, or apply brand strategy—purpose, values, positioning, storytelling, voice, narrative (not only visuals…
Carousel 技能审计
When the user wants to design, optimize, or audit carousel/slider layouts for content display.
Agent 生成器
| 프로젝트 컨텍스트를 분석하여 project-local 스킬을 생성하는 워크플로우.
技能 Status
| 로드된 스킬 목록을 core(bkit 기본)와 project-local로 구분하여 표시.
pr PR排查
Commit all changes, push to a new branch, and create a pull request using the repo's PR template.
技能 编写
Author SKILL.md skills: frontmatter, validator limits, structure.
技能 审计
Audit all Claude Code skills for stale references, broken paths, and deprecated tool names Audit .claude/skills/ for drift: broken file paths, missing scripts, and deprecated tool names.
Skillpack 创建
Create a reusable SkillPack from a successful completed task.
技能 fix it
Scan codebase for FIX:/NOTE:/TODO:/QUESTION: tags and create structured tasks with interactive selection.
技能 Learn
Scan codebase for FIX:/NOTE:/TODO:/QUESTION: tags and create structured tasks with interactive selection.
技能 项目 Overview
Interactive repository analysis and project-overview.md generation via task creation.
技能 todo
Archive completed and abandoned tasks with CHANGE_LOG.md updates and memory harvest suggestions Direct execution skill for archiving tasks, updating CHANGE_LOG.md, and suggesting memory harvesting.
技能 健康检查
Audit skill metrics, file/resolve issues in memory/issues/, and notify on state change only <!-- autoresearch: variation C — more robust: me…
技能 安全 扫描
Audit skills, workflows, and companion scripts for injection, exfiltration, traversal, and prompt-override risks with delta tracking, baseli…
技能 Freshness
Audit every enabled skill's upstream file dependencies for staleness — flags chained skills about to consume yesterday's article or a long-d…
技能 Leaderboard
Weekly ranking of which skills are most popular across CONFIGURED Aeon forks (excludes untouched templates) <!-- autoresearch: variation B —…
技能 更新 检查
Check imported skills for upstream changes and security regressions since the version in skills.lock <!-- autoresearch: variation B — sharpe…
技能 Trust Auditor
Audit a ClawHub skill for security risks BEFORE installation.
技能 Evaluator
Evaluates agent skills against Anthropic's best practices.
技能 Router
Repo-aware recommendation manager for ctx.
技能 Auditor
Audits skills in this repo for consistency, API drift, and structural gaps.
技能 Auditor
'Audit an existing SKILL.md against the unified AgentOps template (15 Use when ` markers OR `metadata.
技能 Download
Downloads skills from a AgentKit skill space to the local machine.
技能 Registration
Registers a local skill to the AgentKit platform by uploading it.
技能 监控
Analyze skill effectiveness across sessions.
技能 扫描
Scan agent skills for security issues before adoption.
dry 代码审计
Detect duplicate code and suggest DRY refactors using jscpd Detect duplicate code across your codebase using jscpd.
Safety 监控
Safety Monitor Agent responsible for compliance and safety checks.
MCP 助手
Uses the Vibesafe MCP server to scan, compile, test, save, diff, and report status for Vibesafe units.
技能 审计
Audit AI Agent skills for security vulnerabilities including malicious code, remote execution, credential leaks, and supply chain risks.
Wxmini 安全 审计
微信小程序全自动安全审计 Skill。
Agent 生成器
Use when publishing a SKILL.md-style agent skill across uGig, sh1pt, GitHub/gists, and follow-on skill marketplaces such as ClawHub, Goose, LobeHub, Kilo, Skillstore, FreeMyGent, ClawMart, Manus, VS Code Agent Skills, and Moltbook.
SA 8 31 Secure 系
Implement the security design principle of secure system modification in [organization-defined].
技能 Domain Discov
> You are extracting domain knowledge for a library to produce a structured domain map.
技能 Graph 审计
Audit Skill() refs; detect hubs, isolates, and dangling targets.
技能 eval
Evaluate Claude skill quality through auditing.
技能 Governance
Use when auditing a large local skill collection, identifying duplicate or imported skills, comparing skill roots, or deciding what to keep, disable, or archive across Codex and adjacent agent skill directories.
技能 Judge
Evaluate Agent Skill design quality against official specifications and best practices.
技能 auto Improver
Improve a SKILL.md to pass the skill-creator standard (quick_validate, frontmatter audit, ≤500 lines) AND the asm-eval 85/8 floor.
技能 索引 Updater
Add GitHub skill repos to the ASM index: clone, audit, eval, regenerate index, rebuild catalog, open PR.
技能 安全 Auditor
OpenClaw Skills 全方位安全审计工具，检测供应链投毒、Prompt注入、恶意代码模式、权限越权和依赖风险 基于《OpenClaw 极简安全实践指南》和《安全验证与攻防演练手册》的 Skill 安全审计工具。
技能 Based 架构
> <!-- SELFROUTINGBLOCK_START --> Task routes live in references/self-hosting-routing.yaml.
技能 同步
Sync skills between local installation and the GitHub source-of-truth repository.
技能
Skill management - create, validate, and improve Claude Code skills START(["/skills"]) --> NEED{"What do you need?"} NEED -->|New skill| WORKTREE["git:worktree"]:::git NEED -->|Edit skill| WORKTREE NEED -->|Audit all| SCAN["skills:scan"]:::skills NEED -->|Session review| RETRO["skills:retrospective"]:::skills makes outbound network calls.
技能 扫描
Scan a repository to bootstrap new skills or audit and update existing ones Bootstrap skills for a new repo, or audit and update skills in an existing one.
Amazon Listing 优
Amazon listing builder and optimizer for sellers.
技能 优化
Evaluates and optimizes skill file quality using 8 content patterns and 9 editing principles.
技能 模型 Updater
Updates model references across all skill files when new Claude models are released.
技能 安全 审计
Audit the agent's own skill library for malicious, misconfigured, or untrusted SKILL.md files.
技能 Creation Walk
Step-by-step guide for creating your own Claude Skills, from deciding whether a skill is the right tool to writing the SKILL.md file, structuring reference material, and making it trigger reliably.
Skillshare 技能审计
>- Read-only consistency audit across the skillshare codebase.
技能 检查
Use when the user wants to validate, lint, or audit agent skill files (SKILL.md).
技能 安全 Auditor
> Scan and audit AI agent skills for security risks before installation.
代码 审查
AI-powered code review via roborev.
vuln 研究
| 从先知社区5600+篇安全文档中提炼的漏洞挖掘核心思维框架。
Blogwatcher 代码审计
Monitor blogs and RSS/Atom feeds for updates using the blogwatcher CLI.
Agent 生成器
Automate HappyCapy skill creation by finding and adapting existing skills from anthropics/skills repository.
Terraform 助手
Terraform and OpenTofu infrastructure as code — module design, state management, multi-environment setups, remote backends, secrets manageme…
pbi 文档
Documenta projeto Power BI (PBIP) inteiro em markdown estruturado + HTML navegável (mini-site de doc).
Feishu 技能编写
飞书云空间文件管理。
GitHub 助手
Use when users ask how to write, explain, customize, migrate, secure, or troubleshoot GitHub Actions workflows, workflow syntax, triggers, m…
Organizer 扫描
OCR, classify, and organize scanned PDFs into category subfolders using AI vision and language models.
文档审计
Orchestrate sequential documentation audits with checkpointing and resumption.
Openapi 生成
Generates OpenAPI 3.0/3.1 specifications from Express, Next.js, Fastify, Hono, or NestJS routes.
Aisync 会话排查
Sync AI coding sessions from 14 tools (Claude Code, Codex, Cursor, Aider, Cline, Gemini CLI, Continue, Copilot, Roo Code, Windsurf, Zed AI, Amp, OpenCode, OpenRouter) to Obsidian vault as markdown notes.
JAX 技能审计
Essential tools for using JAX in machine learning and mathematical analysis, covering core concepts, transformations, ML specifics, control flow, and parallelism.
nano 技能审计
PDF processing: extraction, text mining, form filling, manipulation, OCR integration This skill provides tools for PDF processing, including text extraction, mining, form filling, manipulation, and OCR integration, to handle document workflows efficiently.
erne 部署
ERNE — Validate and submit app builds using parallel expo-config-resolver and code-reviewer agents You are executing the /erne-deploy comman…
erne 会话审查
ERNE — Manual skill generation — runs continuous-learning-v2 scripts to extract patterns from session You are executing the /erne-learn comm…
cc safe 配置
Safety hooks for Claude Code — 700 pre-built hooks that prevent file deletion, credential leaks, git disasters, and token waste during auton…
Hinge Profile 优化
Comprehensive, research-backed Hinge dating profile optimization.
ctf 代码验证
Solve CTF reverse engineering challenges using systematic analysis to find flags, keys, or passwords.
Codemap 技能验证
Navigate codebases efficiently using structural indexes.
Metabase full 应用
Migrates a project from Metabase Full App / Interactive (iframe-based) embedding to Modular (web-component-based) embedding.
Metabase 代码审计
Upgrades a project's Metabase Modular embedding SDK (@metabase/embedding-sdk-react) or Modular embedding (embed.js) version.
am Agent 代码 安全 A
Comprehensive security analysis and vulnerability detection for codebases.
vp 审计
Audit state, docs drift, and stack best-practice compliance — works on any project Output this banner as the first thing on every invocation…
x 代码编写
Optimize X/Twitter posts for maximum reach using algorithm insights.
octo 上下文验证
Query Octopus observability platform — logs, alerts, traces, metrics, issues, services, LLM, RUM, events.
Cloudflare 技能审计
Enable ControlKeel governance for Cloudflare Agents with policy gates, budget enforcement, PII detection, and secure execution.
Defect 代码审计
Analyze manufacturing defect detection and quality control systems — computer vision inspection pipelines, SPC control charts, Six Sigma pro…
adr 会话审查
Anton ADR lifecycle — author new architectural decision records, list existing ones by status or affects-category, and mark old decisions su…
规划
Anton planner skill — author, update, and close multi-session initiatives (migrations, rollouts, long-running refactors) in `context/plans/`…
无障碍 Auditor
Audit interfaces for accessibility issues across semantics, keyboard use, focus management, color contrast, labels, and announcements.
Backup 上下文审计
Check whether backup and restore plans are actually restorable, verifiable, and operationally safe.
Compliance 代码审查
Gather code, config, docs, and operational proof points for audits and internal compliance reviews.
Docker 助手
Docker 多服务部署最佳实践 - 遵循生产级 Dockerfile 和 Docker Compose 架构原则。
文档 代码
Turn implementation details into practical documentation such as README updates, setup guides, architecture notes, runbooks, changelogs, and internal reference docs.
Incident 文档排查
Turn incident timelines, logs, tickets, and chat snippets into a clear postmortem covering impact, detection, root cause, contributing factors, remediation items, and prevention steps.
Osint 技能查找
Use this skill whenever a user asks for OSINT dorks, Google dorks, GHDB queries, Shodan filters, GitHub code search dorks, search operators, or exposed asset discovery.
PR 审查 Enforcer
Review diffs like a senior engineer by checking correctness, architectural fit, style, missing tests, security smells, and migration or operational risk.
Agent 审计
Audits Claude Code agent configuration against latest best practices.
Agent 上下文审查
Audit and score an agent-definition markdown such as `AGENTS.md`, `CLAUDE.md`, `SKILL.md`, `SOUL.md`, `.cursorrules`, or a system prompt using a cold-reader rubric for clarity, consistency, context independence, and operating-model fit.
Agent md 代码检查
Audit and trim AI agent instruction files (AGENTS.md, CLAUDE.md, CONVENTIONS.md, .cursorrules, etc.) by testing which facts an AI agent can discover from code alone.
ai 技能审计
End-to-end workflow for redesigning a SaaS or AI product landing page and building an interactive AI agent UX flow.
Aidex 技能审计
Swap tokens on Ethereum via the AIDEX aggregator.
akka-net-testing-patterns
Write unit and integration tests for Akka.NET actors using modern Akka.Hosting.TestKit patterns.
algorand-vulnerability-scanner
Scans Algorand smart contracts for 11 common vulnerabilities including rekeying attacks, unchecked transaction fees, missing field validations, and access control issues.
all 营销
Full-spectrum marketing and SEO skill library with 160+ specialist skills.
Atomic 提交
Atomic git workflow - validates, commits, pushes, creates PR, and verifies CI with zero-warnings policy.
audit-context-building
Understand a codebase before looking for bugs in it - what each function assumes, what it guarantees, and what it depends on elsewhere.
编写 技能
Creates, updates, improves, and audits Agent Skills.
axiom-analyze-swift-performance
Use when the user mentions Swift performance audit, code optimization, or performance review.
axiom-analyze-swiftui-performance
Use when the user mentions SwiftUI performance, janky scrolling, slow animations, or view update issues.
axiom-analyze-test-failures
Use when the user mentions flaky tests, tests that pass locally but fail in CI, race conditions in tests, or needs to diagnose WHY a specific test fails.
axiom-audit-accessibility
Use when the user mentions accessibility checking, App Store submission, code review, or WCAG compliance.
axiom-audit-camera
Use this agent to scan Swift code for camera, video, and audio capture issues including deprecated APIs, missing interruption handlers, threading violations, and permission anti-patterns.
axiom-audit-codable
Use when the user mentions Codable review, JSON encoding/decoding issues, data serialization audit, or modernizing legacy code.
axiom-audit-concurrency
Use when the user mentions concurrency checking, Swift 6 compliance, data race prevention, or async code review.
axiom-audit-core-data
Use when the user mentions Core Data review, schema migration, production crashes, or data safety checking.
axiom-audit-database-schema
Use when the user mentions database schema review, migration safety, GRDB migration audit, or SQLite schema checking.
axiom-audit-energy
Use when the user mentions battery drain, energy optimization, power consumption audit, or pre-release energy check.
axiom-audit-foundation-models
Use when the user mentions Foundation Models review, on-device AI audit, LanguageModelSession issues, @Generable checking, or Apple Intelligence integration review.
axiom-audit-grdb-performance
Use when the user mentions GRDB performance review, slow GRDB queries, app-group database setup audit, a ValueObservation that stopped updating, or pre-release GRDB scan.
axiom-audit-iap
Use when the user mentions in-app purchase review, IAP audit, StoreKit issues, purchase bugs, transaction problems, or subscription management.
axiom-audit-icloud
Use when the user mentions iCloud sync issues, CloudKit errors, ubiquitous container problems, or asks to audit cloud sync.
axiom-audit-memory
Use when the user mentions memory leak prevention, code review for memory issues, or proactive leak checking.
axiom-audit-networking
Use when the user mentions networking review, deprecated APIs, connection issues, or App Store submission prep.
axiom-audit-resize
Use when the user mentions window resizing support, resizable-window readiness, iPhone Mirroring compatibility, scene-lifecycle migration checking, or preparing an app for the 27-cycle resizing model.
axiom-audit-spritekit
Use when the user wants to audit SpriteKit game code for common issues.
axiom-audit-storage
Use when the user mentions file storage issues, data loss, backup bloat, or asks to audit storage usage.
axiom-audit-swiftdata
Use when the user mentions SwiftData review, @Model issues, SwiftData migration safety, or SwiftData performance checking.
axiom-audit-swiftui-architecture
Use when the user mentions SwiftUI architecture review, separation of concerns, testability issues, or "logic in view" problems.
axiom-audit-swiftui-layout
Use when the user mentions SwiftUI layout review, adaptive layout issues, GeometryReader problems, or multi-device layout checking.
axiom-audit-swiftui-nav
Use when the user mentions SwiftUI navigation issues, deep linking problems, state restoration bugs, or navigation architecture review.
axiom-audit-testing
Use when the user wants to audit test quality, find flaky test patterns, speed up test execution, or prepare for Swift Testing migration.
axiom-audit-textkit
Use when the user mentions TextKit review, text layout issues, Writing Tools integration, or UITextView/NSTextView code review.
axiom-audit-ux-flow
Use when the user mentions UX flow issues, dead-end views, dismiss traps, missing empty states, broken user journeys, or wants a UX audit of their iOS app.
axiom-build
Use when ANY iOS build fails, test crashes, Xcode misbehaves, or environment issue occurs before debugging code.
axiom-build
Use when ANY iOS build fails, test crashes, Xcode misbehaves, or environment issue occurs before debugging code.
axiom-health-check
Use when the user wants a comprehensive project-wide audit, full health check, or scan across all domains.
axiom-modernize
Use when the user wants to modernize iOS code to iOS 17/18 patterns, migrate from ObservableObject to @Observable, update @StateObject to @State, or adopt modern SwiftUI APIs.
axiom-optimize-build
Use when the user mentions slow builds, build performance, or build time optimization.
axiom-scan-security-privacy
Use when the user mentions security review, App Store submission prep, Privacy Manifest requirements, hardcoded credentials, or sensitive data storage.
axiom-security
Use when storing credentials securely, encrypting data, implementing passkeys, securing AI/agentic features against prompt injection, code signing, or managing certificates and provisioning profiles.
axiom-security
Use when storing credentials securely, encrypting data, implementing passkeys, securing AI/agentic features against prompt injection, code signing, or managing certificates and provisioning profiles.
axiom-security
Use when storing credentials securely, encrypting data, implementing passkeys, securing AI/agentic features against prompt injection, code signing, or managing certificates and provisioning profiles.
axiom-shipping
Use when preparing ANY app for submission, handling App Store rejections, writing appeals, or managing App Store Connect.
axiom-shipping
Use when preparing ANY app for submission, handling App Store rejections, writing appeals, or managing App Store Connect.
axiom-vision
Use when implementing ANY computer vision feature — image analysis, pose detection, person segmentation, subject lifting, text recognition,…
axiom-vision
Use when implementing ANY computer vision feature — image analysis, pose detection, person segmentation, subject lifting, text recognition,…
axiom-vision
Use when implementing ANY computer vision feature — image analysis, pose detection, person segmentation, subject lifting, text recognition,…
Azure Resource 管
| Use when this capability is needed.
burpsuite-project-parser
Searches and explores Burp Suite project files (.burp) from the command line.
cairo-vulnerability-scanner
Scans Cairo/StarkNet smart contracts for 6 critical vulnerabilities including felt252 arithmetic overflow, L1-L2 messaging issues, address conversion problems, and signature replay.
Ceratops 代码 Cons
Audit a repository after large refactors, branch merges, or parallel agent threads for contradictions between implementation, docs, configs, tests, examples, comments, README guidance, and control files.
Checkov Ia C 扫描
Python or Docker Use the upstream install or setup path that matches your environment: Requirements and caveats from upstream: Basic usage or getting-started notes: <!-- tomevault:4.0:skill_md:2026-05-22 -->; runs on Python.
CI CD 自动化
Automates CI/CD pipeline setup.
CI CD 生成
Scaffold/audit GitHub Actions CI/CD — Go/Rust/TS.
CI CD 流水线
Design and implement production-grade CI/CD pipelines with GitHub Actions, layered testing strategies, secure deployment patterns, and environment management.
CI CD 审查
CI/CD review for workflows, artifact safety, caching, deployment gates, secrets, permissions, and reproducibility.
CI CD ssdf 安全
GitHub Actions security hardening, CI/CD pipeline integrity, release security, and SSDF alignment Use when this capability is needed.
claude-api
|- This skill helps you build LLM-powered applications with Claude.
Claudemd 技能审查
Audit and improve project-memory artifacts (CLAUDE.md, AGENTS.md, .claude/rules/*.md, .claude.local.md).
代码审查
Review code changes, diffs, commits, branches, or PRs for correctness, regressions, security-sensitive mistakes, maintainability issues, and missing validation before commit, PR, merge, or closeout.
Codex 助手
Bridge between Claude Code and OpenAI Codex CLI - generates AGENTS.md from CLAUDE.md, provides Codex CLI execution helpers, and enables seamless interoperability between both tools Use when this capability is needed.
Communication 风格
>- Use when this capability is needed.
competitors-analysis
>- Build competitor intelligence that can be shared, re-run, and audited later.
Compile Agent 上下
Generate and maintain AGENTS.md as a living project context document by scanning the repository, discovering agents/skills, and extracting conventions.
Claude 助手
>- Use when this capability is needed.
constant-time-analysis
Detects timing side-channel vulnerabilities in cryptographic code.
constant-time-testing
> Timing attacks exploit variations in execution time to extract secret information from cryptographic implementations.
cosmos-vulnerability-scanner
Scans Cosmos SDK blockchain modules and CosmWasm contracts for consensus-critical vulnerabilities — chain halts, fund loss, state divergence…
Audit Agent 创建
Creates new Claude Code agent configuration files or audits existing ones in .claude/agents/.
cso
Chief Security Officer mode.
Cursor 规则 Compil
Generate or review AGENTS.md and `.cursor/rules/*.mdc` for a repository Use when this capability is needed.
Cypilot 代码审计
Invoke when user asks to do something with Cypilot, or wants to analyze/validate artifacts, or create/generate/implement anything using Cypilot workflows, or plan phased execution.
dependency-injection-patterns
Organize DI registrations using IServiceCollection extension methods.
开发 Server
> Use when this capability is needed.
diagnosing-bugs
Diagnosis loop for hard bugs and performance regressions.
dimensional-analysis
Annotates codebases with dimensional analysis comments documenting units, dimensions, and decimal scaling.
Django 模型审查
Run and triage Django/DRF security smoke checks for settings hardening, throttling, safe HTML, ORM race/idempotency patterns, and model integrity; especially useful before shipping or when evaluating djangoSecurityHunter-style findings.
Django 验证
Verification loop for Django projects: migrations, linting, tests with coverage, security scans, and deployment readiness checks before release or PR.
do PR审查
Apply fixes from a review.
文档 扫描
Scans for project documentation files (AGENTS.md, CLAUDE.md, GEMINI.md, COPILOT.md, CURSOR.md, WARP.md, and 15+ other formats) and synthesizes guidance.
文档 Agent md
Create, refresh, or reconcile the repository root `AGENTS.md` using current branch truth.
Document 上下文审计
Updates the README.md file to reflect the current state of the project.
Dotnet 安全
| Use when this capability is needed.
ears 初始化
| Use when this capability is needed.
entry-point-analyzer
Analyzes smart contract codebases to identify state-changing entry points for security auditing.
fact-checker
Verifies factual claims in documents using web search and official sources, then proposes corrections with user confirmation.
Falco Runtime 安全
Use the upstream install or setup path that matches your environment: Requirements and caveats from upstream: Basic usage or getting-started notes: <!-- tomevault:4.0:skill_md:2026-05-22 -->; runs on Docker.
Fastapi 部署配置
FastAPI patterns for async APIs, dependency injection, Pydantic request and response models, OpenAPI docs, tests, security, and production readiness.
firebase-apk-scanner
Scans Android APKs for Firebase security misconfigurations including open databases, storage buckets, authentication issues, and exposed cloud functions.
fp-check
Systematically verifies suspected security bugs to eliminate false positives, producing a TRUE POSITIVE or FALSE POSITIVE verdict with documented evidence for each.
gangtise-copilot
One-command installer, credential configurator, and diagnostic layer for the full Gangtise (岗底斯投研) OpenAPI skill suite.
Gemini 助手
Smart Gemini CLI delegation skill.
Sandbox Policy 生
Generate sandbox security policies from plain-language requirements and optional REST API documentation.
Geniml 技能创建
Machine learning toolkit for genomic interval (BED) data; use it when you need to tokenize BED collections and train embeddings for regions/cells/labels, build consensus peak universes, or run similarity search and downstream ML on chromatin accessibility datasets.
github-sensitive-data-cleanup
>- This skill guides you through safely removing sensitive data from a Git repository's history and pushing the cleaned history to GitHub.
GitHub 助手
在用户提及 GitHub 仓库、Issue、Pull Request、Actions、代码管理相关内容与操作时使用此技能。
Gitleaks Git 仓库
Gitleaks is an open-source SAST tool for detecting hardcoded secrets like passwords, API keys, and tokens in Git repositories, files, and directories.
Google 应用 Engine
| Use when this capability is needed.
健康检查
Verify Codex configuration health — AGENTS.md, hooks, config.toml, agents, skills, secrets scan, and MCP reachability.
Hello 技能审查
Use this skill to audit, review, validate, or check the quality of AI assistant configurations including prompt text, prompt files, skills (SKILL.md), plugins, MCP servers, agents, hooks, memory files (AGENTS.md, CLAUDE.md, GEMINI.md), and composite configurations.
Homelab 运维
Operate the homelab platform — start/stop services, backups, updates, disaster-recovery, and Docker management.
improve-codebase-architecture
Scan a codebase for deepening opportunities, present them as a visual HTML report, then grill through whichever one you pick.
Instructions 上下文
Audit Copilot instruction files for bloat, overlap, stale rules, and weak applyTo scope.
Instrument 代码审计
Add Opik tracing to an existing codebase.
java 安全
| Use when this capability is needed.
K8s 分析
Assess the security posture of Kubernetes etcd clusters by evaluating encryption at rest, TLS configuration, access controls, backup encryption, and network isolation.
K8s 分析
Auditing Kubernetes cluster RBAC configurations to identify overly permissive roles, wildcard permissions, dangerous ClusterRoleBindings, service account abuse, and privilege escalation paths using kubectl, rbac-tool, KubiScan, and Kubeaudit.
K8s 助手
Perform security risk analysis on Kubernetes resource manifests using Kubesec to identify misconfigurations, privilege escalation risks, and deviations from security best practices.
K8s 助手
Kubernetes cluster management skill.
K8s 助手
> Use when this capability is needed.
K8s 分析
Kubernetes penetration testing systematically evaluates cluster security by simulating attacker techniques against the API server, kubelet, etcd, pods, RBAC, network policies, and secrets.
LangChain 部署
Use when productionising or deploying a LangChain / LangGraph / DeepAgents agent.
LangChain 审计
Audit LangChain configuration and security Use when: "audit langchain, Use when this capability is needed.
营销 seo 审计
When the user wants to audit, review, or diagnose SEO issues on their site.
marketplace-health-check
>- Run a comprehensive, evidence-based health check of this Claude Code skills marketplace repo using a parallel fan-out Dynamic Workflow.
modern-cpp
Guides C++ code toward modern idioms (C++20/23/26).
OAuth 运维
Use when diagnosing, operating, or standardizing Hub LLM OAuth refresh/reimport incidents for Claude Code OAuth, OpenAI Codex OAuth, Gemini OAuth, Gemini CLI OAuth, Gemini Code Assist service, and Groq pool readiness.
Onboard 方案审计
Agent-driven cold-start onboarding.
op1 营销 seo Exper
Run and audit OperatorOne Stage1 marketing SEO shadow experiments across input sync, context index, keyword graph, experiment synthesis, and Ready/Hold/Drop queueing.
open-sourcing
This skill should be used when the user asks to "open source this project", "prepare this repository for public release", "make this repo public", "check open-source readiness", "choose a license for this project", or "set up release automation" ahead of a public launch.
Owasp 安全 Standar
Use when reviewing code for security vulnerabilities, implementing authentication/authorization, handling user input, or discussing web application security.
处理 PDF 文件：读取、修改、合并、抽内容都行。
K8s 测试
Kubernetes penetration testing systematically evaluates cluster security by simulating attacker techniques against Use when this capability is needed.
photo-to-scanned-pdf
>- Two related pipelines, same destination look, different starting point: phone photos of paper documents, or a digital document that needs a synthetic signature before it looks signed.
项目 Ployglot 项目 S
Scaffold a polyglot library project as TypeScript + Python twin packages under `packages/ts/` + `packages/py/`, with a shared `SPEC.md`, cross-language `tests/parity/fixtures.json`, side-by-side `examples/sdk/` + `examples/api/` documentation, per-package `Makefile`, and a root orchestrator that exposes `make ci`.
Python 仓库 Quicks
Quickly analyzes Python repositories to understand their purpose, structure, and setup requirements.
React 助手
React Native mobile testing, performance, and release hardening for this repo.
Readme 代码审查
Intelligent README.md generation prompt that analyzes project documentation structure and creates comprehensive repository documentation.
repomix-safe-mixer
Safely package codebases with repomix by automatically detecting and removing hardcoded credentials before packing.
规则 Quality Evalu
Evaluate the quality of existing agent instruction rule sets — CLAUDE.md, AGENTS.md, .cursorrules, copilot-instructions.md, or any coding-ag…
rust 代码审计
Set up Rust quality gates (cargo check/build, clippy, rustfmt, dead code, unused deps via cargo-machete, doc build, tests) in any Rust repo, wired through `prek` (pre-commit reimagined) with a `check.sh` orchestrator underneath.
Rust 安全
| Use when this capability is needed.
sarif-parsing
>- You are a SARIF parsing expert.
sast 分析
Static Application Security Testing (SAST) for multi-language codebases.
secure-workflow-guide
Guides through Trail of Bits' 5-step secure development workflow.
安全 最佳 实践
Perform language and framework specific security best-practice reviews and suggest improvements.
semgrep
>- Run a Semgrep scan with automatic language detection, parallel execution, and merged SARIF output.
Senior 技能审计
Comprehensive software architecture skill for designing scalable, maintainable systems across web, mobile, and backend stacks (React, Next.js, Node/Express, React Native, Swift, Kotlin, Flutter, Postgres, GraphQL, Go, Python).
Senior 后端
This skill should be used when the user asks to "design REST APIs", "optimize database queries", "implement authentication", "build microservices", "review backend code", "set up GraphQL", "handle database migrations", or "load test APIs".
seo 审计
Run a full SEO, AEO, and LLM discoverability audit on cc4.marketing Use when this capability is needed.
配置
Run initial nano-core setup.
ship PR审查
Ship current branch — CI, SonarCloud, code review, security review, fix all issues, merge.
技能 审计
Audits a Claude Code / Agent SDK skill (or folder of skills) against 10 QA Use when this capability is needed.
skill-reviewer
Reviews and improves Claude Code skills against official best practices.
solana-vulnerability-scanner
Scans Solana programs for 6 critical vulnerabilities including arbitrary CPI, improper PDA validation, missing signer/ownership checks, and sysvar spoofing.
sp 编程 Agent
Use when a coding task is vague or under-specified.
SQL 数据库 Patterns
Use this skill when the agent is designing schemas, reviewing migrations, tuning queries, modeling NoSQL access patterns, configuring replic…
substrate-vulnerability-scanner
Scans Substrate/Polkadot pallets for 7 critical vulnerabilities including arithmetic overflow, panic DoS, incorrect weights, and bad origin checks.
GitHub 助手
<!-- 🤖 【中文注释】 工具名称: 指令推荐助手 功能分类: 通用助手 功能说明: 用于推荐适合当前仓库的 Copilot 指令文件，避免重复并识别过时指令。
同步 上下文
| Use when this capability is needed.
Terrascan 技能审查
No source-backed install or usage instructions could be extracted automatically.
ton-vulnerability-scanner
Scans TON (The Open Network) smart contracts for 3 critical vulnerabilities including integer-as-boolean misuse, fake Jetton contracts, and forward TON without gas checks.
trailmark-review-gate
Runs a Trailmark structural review gate over a branch, pull request, fix commit, release diff, or git ref range to detect new entrypoints, new tainted paths, removed validation or authorization calls, privilege-boundary drift, blast-radius growth, complexity growth, and newly reachable sensitive sinks.
trailmark-variant-neighborhood
Expands one confirmed or suspected vulnerability into a Trailmark graph neighborhood of variant candidates by finding sibling functions, shared callers and callees, common sensitive sinks, common entrypoint paths, interface implementations, override relationships, type/reference neighbors, and structurally similar nodes.
variant-analysis
Hunts for the other instances of a bug already found — the variants of one root cause across a codebase.
vulnerability-triage-brocards
>- Systematically evaluate incoming vulnerability reports against 7 principled criteria before committing resources to deeper analysis.
Wecom 技能创建
提供企业微信智能表格添加记录的正确操作方法，包括不同数据类型的处理格式。
wizard
Generate an interactive bash wizard that walks a human through steps only they can perform.
writing-beats
Writing, exploit; assemble raw material into a journey of beats, grounding each term before a beat leans on it.
writing-shape
Writing, exploit: shape raw material into an article, paragraph by paragraph.
zeroize-audit
Detects missing zeroization of sensitive data in source code and identifies zeroization removed by compiler optimizations, with assembly-level analysis, and control-flow verification.