Agent 架构 审计
Full-stack diagnostic for agent and LLM applications.
⌘K 发布技能 合规 / 风控
审计、风险评估 · 458 个 Skill
筛选与排序458 个结果
PR 审查
Review a PR for correctness, security, code quality, and testing issues.
后端 代码 审查
Review backend code for quality, security, maintainability, and best practices based on established checklist rules.
后端 代码 审查
Review backend code for quality, security, maintainability, and best practices based on established checklist rules.
代码 审查
Reviews code for security vulnerabilities, performance issues, and best practices.
项目 规划
| You are an expert project planner who breaks down complex projects into achievable, well-structured tasks.
Sprint 规划
| You are an expert scrum master who facilitates effective sprint planning for agile teams.
Strategy 头脑风暴
| You are a strategic advisor who provides high-level thinking and business decision guidance.
文档审查
Review, improve, rewrite, author, or plan Storybook documentation in /docs.
Caveman 审查
> Write code review comments terse and actionable.
seo 审查
Perform a focused SEO audit on JavaScript concept pages to maximize search visibility, featured snippet optimization, and ranking potential Use this skill to perform a focused SEO audit on concept documentation pages for the 33 JavaScript Concepts project.
Agent PR审查
> Spawn and coordinate agents for complex multi-agent tasks.
Agent 规划
Agent skill for planner - invoke with $agent-planner type: coordinator color: "#4ECDC4" description: Strategic planning and task orchestrati…
Agent 审查
Agent skill for reviewer - invoke with $agent-reviewer color: "#E74C3C" description: Code review and quality assurance specialist priority:…
Agent 安全 管理器
Agent skill for security-manager - invoke with $agent-security-manager name: security-manager color: "#F44336" description: Implements compr…
Agent Sparc 协调
Agent skill for sparc-coordinator - invoke with $agent-sparc-coordinator name: sparc-coord type: coordination description: SPARC methodology…
Agent 技能规划
Agent skill for trading-predictor - invoke with $agent-trading-predictor name: trading-predictor description: Advanced financial trading agent that leverages temporal advantage calculations to predict and execute trades before market data arrives.
Agent v3 安全 Arch
Agent skill for v3-security-architect - invoke with $agent-v3-security-architect name: v3-security-architect version: "3.0.0-alpha" updated: "2026-01-04" description: V3 Security Architect responsible for complete security overhaul, threat modeling, and CVE remediation planning.
CI CD 自动化
Automates CI/CD pipeline setup.
TypeScript 审查
Review TypeScript and JavaScript code changes for compliance with Metabase coding standards, style violations, and code quality issues.
Creating 金融 模型
This skill provides an advanced financial modeling suite with DCF analysis, sensitivity testing, Monte Carlo simulations, and scenario planning for investment decisions A comprehensive financial modeling toolkit for investment analysis, valuation, and risk assessment using industry-standard methodologies.
Visual 设计 Founda
Apply typography, color theory, spacing systems, and iconography principles to create cohesive visual designs.
Claude 助手
按最佳实践创建或更新 CLAUDE.md 文件，以便为 AI agent 提供最优的项目入门上下文 在继续之前，你必须先考虑用户输入（如果不为空）。
Claude 助手
Create or update CLAUDE.md files following best practices for optimal AI agent onboarding You MUST consider the user input before proceeding (if not empty).
Impeccable 浏览器审查
Use when the user wants to design, redesign, shape, critique, audit, polish, clarify, distill, harden, optimize, adapt, animate, colorize, extract, or otherwise improve a frontend interface.
Impeccable 浏览器审查
Use when the user wants to design, redesign, shape, critique, audit, polish, clarify, distill, harden, optimize, adapt, animate, colorize, extract, or otherwise improve a frontend interface.
Agent 代码审计
| Patterns for adding safety, trust, and policy enforcement to AI agent systems.
Agent 技能审计
| Evaluate AI agent systems against the OWASP Agentic Security Initiative (ASI) Top 10 — the industry standard for agent security posture.
Agent 技能审查
| Generate and verify integrity manifests for AI agent plugins and tools.
Agentic 代码审查
| Patterns for self-improvement through iterative evaluation and refinement.
ai 上下文审计
When the user wants to optimize content for AI search engines, get cited by LLMs, or appear in AI-generated answers.
内容 Strategy
When the user wants to plan a content strategy, decide what content to create, or figure out what topics to cover.
copy 上下文审查
When the user wants to edit, review, or improve existing marketing copy, or refresh outdated content.
seo 审计
When the user wants to audit, review, or diagnose SEO issues on their site.
深度 研究
Universal deep research tool — a domain-agnostic 13-agent team for rigorous academic research on any topic.
Brainstorm 头脑风暴
Activate brainstorming mode for collaborative discovery and creative problem-solving.
Agent md 同步
Analyze code changes on the current branch and recommend updates to AGENTS.md files that have become stale.
技能 测试
Validate skill files for structural compliance and behavioral correctness.
无障碍 审查
Run a WCAG 2.1 AA accessibility audit on a design or page.
Brand 审查
Review content against your brand voice, style guide, and messaging pillars, flagging deviations by severity with specific before/after fixes.
comp 分析
Analyze compensation — benchmarking, band placement, and equity modeling.
Compliance 检查
Run a compliance check on a proposed action, product feature, or business initiative, surfacing applicable regulations, required approvals, and risk areas.
Legal 上下文审查
Assess and classify legal risks using a severity-by-likelihood framework with escalation criteria.
Skillify 技能审查
| A feature is "properly skilled" when all 11 checklist items pass.
Agent 生成器
Project management expert for Agile, estimation, risk management, and stakeholder communication A certified project management professional with deep experience leading software projects using Agile methodologies, managing cross-functional teams, and delivering complex products on schedule.
Trader hand 技能
Expert knowledge for autonomous market intelligence and trading — technical analysis, risk management, Alpaca API, financial data sources Fo…
技能 安全 Auditor
> Scan and audit AI agent skills for security risks before installation.
技能 Tester
Validate, test, and score the quality of skills within the claude-skills ecosystem.
技能 安全 Auditor
Security auditing for code, configs, and infrastructure.
Implementing 代码审
'Implement network segmentation based on the Purdue Enterprise Reference Classify all network assets and data flows according to the Purdue Model hierarchy.
Spring 模型审查
Generates Spring Boot 3.x configurations, creates REST controllers, implements Spring Security 6 authentication flows, sets up Spring Data JPA repositories, and configures reactive WebFlux endpoints.
技能 扫描
Scan agent skills for security issues.
Finance core 分析
Use when multiple plausible dates exist and "latest" is not implied.
Tester 代码审计
Use when running tests.
技能 管理器
> Remove or quiet a community skill after install.
Inkos 上下文审查
Autonomous novel writing CLI agent with web workbench (InkOS Studio) - use for creative fiction writing, standalone short-fiction packages, cover generation, novel generation, style imitation, chapter continuation/import, EPUB export, AIGC detection, and fan fiction.
Portfolio 技能规划
Use this skill for making final portfolio allocation decisions, determining optimal position sizing, and providing actionable trading recommendations based on risk assessments.
Trading 技能规划
Use this skill for developing and evaluating trading strategies by synthesizing technical analysis, market sentiment, and risk management principles into actionable trading recommendations.
agentic-actions-auditor
Audits GitHub Actions workflows for security vulnerabilities in AI agent integrations including Claude Code Action, Gemini CLI, OpenAI Codex, and GitHub AI Inference.
ads 技能审计
Multi-platform paid advertising audit and optimization skill.
ads 上下文审计
Amazon Ads deep analysis covering Sponsored Products, Sponsored Brands (incl.
ads 审计
Full multi-platform paid advertising audit with parallel subagent delegation.
ads 方案审计
Google Ads deep analysis covering Search, Performance Max, AI Max, Display, YouTube, and Demand Gen campaigns.
ads 技能审计
LinkedIn Ads deep analysis for B2B advertising.
ads 模型发布
Meta Ads deep analysis covering Facebook, Instagram, and Threads advertising in the Andromeda + GEM + Lattice era.
ads API审计
TikTok Ads deep analysis covering creative quality, tracking, bidding, campaign structure, and TikTok Shop under the TikTok USDS Joint Venture (post Jan 2026 divestiture).
项目 Management
GitHub issue and project-board management for the dotnet/msbuild repo.
技能 Vetter
<!--zh 技能安全审查（Skill Vetter） 安装任何技能之前，必须先执行此审查流程。
Agent 上下文审计
> Audit the live site, not the source tree alone.
技能 Quality 审查
This skill should be used when the user asks to "analyze skill quality", "evaluate this skill", "review skill quality", "check my skill", or "generate quality report".
技能 审查
Quality review and audit for Claude Code skills.
技能 写作
Write and improve agent skills (SKILL.md files).
技能 审计
Audit codebases for quality, consistency, and broken patterns — use for pre-release or tech debt review Comprehensive, methodical auditing t…
技能 claw
OpenClaw instance administration — manage hosts across macOS, Ubuntu/Debian, Docker, OCI, and Proxmox DETECT PLATFORM FIRST.
技能 代码 审查
Expert multi-AI code review with inline PR comments — use for thorough quality and security analysis Invokes the code-reviewer persona for t…
技能 Coverage 审计
Trace codepaths in diffs, map against tests, auto-generate missing coverage — use before shipping PRs Trace every codepath in a diff, map ea…
技能 调试
Debug issues methodically — use when stuck on errors, test failures, or unexpected behavior NO FIXES WITHOUT ROOT CAUSE INVESTIGATION FIRST…
技能 Native Escala
Route ordinary init, review, and security requests to Claude-native capabilities first;
技能 并行 Agent
Decompose large tasks across parallel agents — use for migrations, multi-file refactors, or batch work DISCOVER DEFINE DEVELOP DELIVER (prob…
技能 安全 Framing
URL validation and content sanitization for untrusted sources — use when handling external input safely This skill defines security patterns…
技能 ship
Package and finalize completed work for delivery — use when a feature is done and ready to ship Finalize and deliver completed work with Mul…
技能 Staged 审查
Review code in two passes: spec compliance then quality — use for thorough PR or feature reviews This generated Codex skill preserves an enf…
技能 写作 规划
Create zero-context implementation plans with bite-sized tasks — use for multi-step feature planning Write comprehensive implementation plan…
技能 Improver
Trigger: improve skills, audit skills, refactor skills, skill quality.
bc 检查
Analyze a qlty pull request (or the current branch) for backwards-incompatible behavior changes.
Factory 上下文审查
In-depth guide to Factory, a container-based dependency injection system for Swift and SwiftUI.
apm 上下文审计
> APM (Agent Package Manager) is the open-source package manager for AI coding agents.
技能 安装
Install Claude skills from GitHub repositories with automated security scanning.
bug 安全审查
Full pipeline: Recon -> Learn -> Hunt -> Validate -> Report.
Agent 生成器
Authors and structures professional-grade agent skills following the agentskills.io spec.
Comptable PR配置
| Co-pilote comptable, fiscal et facturation pour entreprises françaises.
技能 Guardian 安装
Skill Install Guardian v3.0 - Professional Security Audit 当执行安全审计时，必须： 1.
技能 Listing Polis
Improve a skill's public listing before publish.
技能 Releaser
Release skills to ClawhHub through the full publication pipeline — auto-scaffolding, OPSEC scan, dual review (agent + user), force-push rele…
技能 Vetter
Security vetting protocol before installing any AI agent skill.
技能 Vetting
Vet ClawHub skills for security and utility before installation.
论文 Spine
Internal orchestrator — users should use /paperspine to start a full workflow.
Skillshare 技能审计
>- Read-only consistency audit across the skillshare codebase.
Skillshare 更新 文档
>- Sync website documentation with recent code changes.
技能 Judge
Evaluate Agent Skill design quality against official specifications and best practices.
技能 Evolve
Refine, create, or retire your own skills based on recurring patterns from past sessions You are evolving your own skills.
Wordpress 技能测试
Use when the user asks about WordPress codebases (plugins, themes, block themes, Gutenberg blocks, WP core checkouts) and you need to quickly classify the repo and route to the correct workflow/skill (blocks, theme.json, REST API, WP-CLI, performance, security, testing, release packaging).
Spring 技能验证
Spring Boot 3.x development - REST APIs, JPA, Security, Testing, and Cloud-native patterns.
Weather 代码验证
Keep activity suggestions safe and respect local conditions
技能 编写
>- Use when creating a new skill, reviewing or auditing skill structure and frontmatter, or debugging skill loading and triggering issues.
技能 编写
Design, improve, and evaluate reusable agent skills with high-quality SKILL.md files, precise trigger descriptions, progressive disclosure, and testable behavior.
技能 审查
Critically review a workspace skill and suggest improvements.
技能 Auditor
A comprehensive auditor for any agent skill — including Manus, OpenClaw/ClawHub, Claude, LobeHub, or custom SKILL.md-based skills.
超级能力 Brainstorm
Produces a structured brainstorm: goals, constraints, risks, options, recommendation, and acceptance criteria.
超级能力 规划
Writes an implementation plan with small steps, exact files to touch, and verification commands.
超级能力 工作流
Enforces a disciplined workflow for coding, debugging, refactoring, and automation: brainstorm -> plan -> implement with verification (prefer TDD) -> review -> finish.
技能 扫描
Scan agent skills for security issues.
技能 管理器
Universal consolidation & audit skill for Claude Code skills.
Gold 分析
Analyze gold, gold-linked ETFs, and gold miners through macro drivers, positioning, and event risk Use this skill when the user asks about gold, gold-linked ETFs such as GLD, or gold miners and wants a structured market read rather than a generic headline summary.
技能 健康检查
Audit skill configurations for correctness and freshness Audits all skill configurations, checks for stale or broken skills, and reports on overall skill health.
技能 扫描
Scan Clawdbot and MCP skills for malware, spyware, crypto-miners, and malicious code patterns before you install them.
技能 Vetter
Security-first skill vetting for AI agents.
Skillguard 技能审查
Security scanner for AgentSkill packages.
Branding 技能审计
When the user wants to define, audit, or apply brand strategy—purpose, values, positioning, storytelling, voice, narrative (not only visuals…
Carousel 技能审计
When the user wants to design, optimize, or audit carousel/slider layouts for content display.
技能 基准测试
Benchmark AI skill effectiveness by measuring implementation quality against legacy constraints.
Kicad 技能规划
>- Use when the user says things like "compare designs", "what changed", "diff my schematic", "show changes from main", or "diff base vs head".
技能 审计
Audit all Claude Code skills for stale references, broken paths, and deprecated tool names Audit .claude/skills/ for drift: broken file paths, missing scripts, and deprecated tool names.
技能 健康检查
Audit skill metrics, file/resolve issues in memory/issues/, and notify on state change only <!-- autoresearch: variation C — more robust: me…
技能 修复
Diagnose and fix failing or degraded skills automatically — systemic-first triage, per-category playbooks, verification plan <!-- autoresear…
技能 安全 扫描
Audit skills, workflows, and companion scripts for injection, exfiltration, traversal, and prompt-override risks with delta tracking, baseli…
技能 分析
Weekly fleet-level skill-run analytics — ranks skills by 7d run count, surfaces success rates, exit-taxonomy distribution, and anomaly flags…
技能 Freshness
Audit every enabled skill's upstream file dependencies for staleness — flags chained skills about to consume yesterday's article or a long-d…
技能 更新 检查
Check imported skills for upstream changes and security regressions since the version in skills.lock <!-- autoresearch: variation B — sharpe…
技能 编写
> Create new agent skills that work across Claude Code (CLI/IDE) and IBM Bob.
技能 Trust Auditor
Audit a ClawHub skill for security risks BEFORE installation.
技能 Evaluator
Evaluates agent skills against Anthropic's best practices.
Agent 生成器
Authors and structures professional-grade agent skills following the agentskills.io spec.
技能 Auditor
Audits skills in this repo for consistency, API drift, and structural gaps.
技能 Auditor
'Audit an existing SKILL.md against the unified AgentOps template (15 Use when ` markers OR `metadata.
Agent 生成器
Scaffold a new SKILL.md.
审查
Review code changes against WooCommerce iOS standards Review the current changes for compliance with WooCommerce iOS conventions.
src 技能审计
实战 SRC / 众测 / Bug bounty 漏洞挖掘工作流 skill。
技能 扫描
Scan agent skills for security issues before adoption.
Safety 监控
Safety Monitor Agent responsible for compliance and safety checks.
Status 上下文审计
Show sprint progress Show current sprint progress with minimal token usage.
技能 审计
Audit AI Agent skills for security vulnerabilities including malicious code, remote execution, credential leaks, and supply chain risks.
Wxmini 安全 审计
微信小程序全自动安全审计 Skill。
SA 8 31 Secure 系
Implement the security design principle of secure system modification in [organization-defined].
技能 Domain Discov
> You are extracting domain knowledge for a library to produce a structured domain map.
技能 编写
Guide creating Claude Code skills with TDD and persuasion principles.
技能 Graph 审计
Audit Skill() refs; detect hubs, isolates, and dangling targets.
技能 eval
Evaluate Claude skill quality through auditing.
技能 Governance lo
Use when the user asks to review a skill, analyze skill quality, update a skill version, or run a repeatable keep/disable/archive decision loop from real failures instead of abstract best practices.
技能 Governance
Use when auditing a large local skill collection, identifying duplicate or imported skills, comparing skill roots, or deciding what to keep, disable, or archive across Codex and adjacent agent skill directories.
技能 Judge
Evaluate Agent Skill design quality against official specifications and best practices.
技能 auto Improver
Improve a SKILL.md to pass the skill-creator standard (quick_validate, frontmatter audit, ≤500 lines) AND the asm-eval 85/8 floor.
技能 索引 Updater
Add GitHub skill repos to the ASM index: clone, audit, eval, regenerate index, rebuild catalog, open PR.
技能 安全 Auditor
OpenClaw Skills 全方位安全审计工具，检测供应链投毒、Prompt注入、恶意代码模式、权限越权和依赖风险 基于《OpenClaw 极简安全实践指南》和《安全验证与攻防演练手册》的 Skill 安全审计工具。
需求文档 v05 Technic
Determine technologies needed to build the product, making build/buy/integrate decisions during PRD v0.5 Red Team Review.
技能 Qualitaetspru
Qualitaet installierter Skills prüfen: Normaktualitaet, Description-Qualitaet, Struktur-Compliance.
Agent 生成器
Skill permission analysis, one-time authorization, analyze skill permissions, batch authorization Automatically analyze permissions required by all skills in Claude Code and generate one-time authorization commands.
技能
Skill management - create, validate, and improve Claude Code skills START(["/skills"]) --> NEED{"What do you need?"} NEED -->|New skill| WORKTREE["git:worktree"]:::git NEED -->|Edit skill| WORKTREE NEED -->|Audit all| SCAN["skills:scan"]:::skills NEED -->|Session review| RETRO["skills:retrospective"]:::skills makes outbound network calls.
技能 扫描
Scan a repository to bootstrap new skills or audit and update existing ones Bootstrap skills for a new repo, or audit and update skills in an existing one.
技能 验证
Validate skill files meet the standard format and naming conventions Skills operate on either sandbox (safe) or management (requires approval) targets: | Type | Target | Auto-approve?
Amazon Listing 优
Amazon listing builder and optimizer for sellers.
Dropshipping 产品
Product research for dropshipping businesses.
技能 优化
Evaluates and optimizes skill file quality using 8 content patterns and 9 editing principles.
技能 安全 审计
Audit the agent's own skill library for malicious, misconfigured, or untrusted SKILL.md files.
技能 编写
Guidelines for writing Agent Skills that comply with the agentskills.io specification.
skill-reviewer
Review skill PRs with structured severity-rated feedback covering token budgets, routing conflicts, required sections, and repo conventions.
技能 Creation Walk
Step-by-step guide for creating your own Claude Skills, from deciding whether a skill is the right tool to writing the SKILL.md file, structuring reference material, and making it trigger reliably.
技能 编写
>- Use when creating a new skill, reviewing or auditing skill structure and frontmatter, or debugging skill loading and triggering issues.
Skillshare 技能审计
>- Read-only consistency audit across the skillshare codebase.
Skillshare 更新 文档
>- Sync website documentation with recent code changes.
ring 测试 技能 Subag
| Run scenarios without the skill (RED — watch agent fail), write skill addressing those failures (GREEN), then close loopholes (REFACTOR).
技能 Sonar
Lifecycle guard.
技能 Tester CI
Validates all CI skills in this repo.
技能 检查
Use when the user wants to validate, lint, or audit agent skill files (SKILL.md).
技能 安全 Auditor
> Scan and audit AI agent skills for security risks before installation.
技能 Tester
> The agent validates skill packages for structure compliance, tests Python scripts for syntax and stdlib-only imports, and scores quality across four dimensions (documentation, code quality, completeness, usability) with letter grades and improvement recommendations.
代码 审查
AI-powered code review via roborev.
vuln 研究
| 从先知社区5600+篇安全文档中提炼的漏洞挖掘核心思维框架。
gen 技能审计
运行代码生成并检查变更。
Powerpoint PR审计
|- <powerpointprofessionalsuite> <highfidelitycreation> The preferred method for precise layout positioning: </highfidelitycreation> <template_structure>
更新 deps
Audit all outdated dependencies with detailed research on changelogs, breaking changes, bug fixes, and deprecations.
Powerpoint 技能审查
| Use when MCP returns no images, or when page-region cropping is needed:.
Andrej 技能审查
Minimal, goal-driven, surgical coding workflow adapted from forrestchang/andrej-karpathy-skills for OMK.
pbi 文档
Documenta projeto Power BI (PBIP) inteiro em markdown estruturado + HTML navegável (mini-site de doc).
Testcase 写作 plus
Parse requirement and analysis files, then generate high-quality test cases.
提示词 Engineering
Universal prompt engineering techniques for any LLM.
Lawyer 技能审查
| Analyze events through the disciplinary lens of law, applying rigorous legal methodologies (statutory interpretation, case law analysis, l…
文档审计
Orchestrate sequential documentation audits with checkpointing and resumption.
Canonical 数据 map
Single source of truth for all paths, naming conventions, and data formats across the OpenClaw Greek Accounting system.
risk 技能测试
Manages financial risks through quantitative analysis, modeling, and mitigation strategies.
sns 代码规划
SNS posting patterns and strategy
erne PR审查
ERNE — Autonomous ticket execution — polls a provider, picks up ready tickets, and runs the full ERNE pipeline (validate, plan, code, test,…
mlx 技能审查
Use when working with Apple's MLX or MLX-LM: fact-checking current behavior against upstream source/runtime, patching MLX-based repos, porting PyTorch/JAX code to MLX, validating lazy evaluation, indexing, compilation, streams, channels-last layouts, Metal kernels, quantization, caches, and local MLX model loading or generation on Apple silicon.
Angular 技能审计
Angular 21.x SPA development skill with TailwindCSS 4.x and daisyUI 5.5.5.
AI 技能 Improve
Improves an existing skill based on real project pain (prior eval corpora under .ai-engineering/evals/, Engram cross-session observations, L…
cc safe 配置
Safety hooks for Claude Code — 700 pre-built hooks that prevent file deletion, credential leaks, git disasters, and token waste during auton…
Hinge Profile 优化
Comprehensive, research-backed Hinge dating profile optimization.
hs 技能验证
ACTIVATE THIS SKILL FOR ANY SHELL COMMAND OR FILE READ.
am Agent 代码 重构
Improve code structure, performance, and maintainability through systematic refactoring.
am Agent 代码 安全 A
Comprehensive security analysis and vulnerability detection for codebases.
vp 审计
Audit state, docs drift, and stack best-practice compliance — works on any project Output this banner as the first thing on every invocation…
Cloudflare 技能审计
Enable ControlKeel governance for Cloudflare Agents with policy gates, budget enforcement, PII detection, and secure execution.
代码库深度分析
Performs comprehensive deep analysis of entire codebase and deployment pipeline to identify issues in production environment.
Defect 代码审计
Analyze manufacturing defect detection and quality control systems — computer vision inspection pipelines, SPC control charts, Six Sigma pro…
Agent 浏览器
Automates browser interactions for web testing, form filling, screenshots, and data extraction.
无障碍 Auditor
Audit interfaces for accessibility issues across semantics, keyboard use, focus management, color contrast, labels, and announcements.
api 上下文审查
Check whether code changes silently broke API contracts, behavior, schemas, or compatibility expectations.
Backup 上下文审计
Check whether backup and restore plans are actually restorable, verifiable, and operationally safe.
bom cost 优化
Propose lower-cost bill-of-material substitutions while preserving critical requirements, interfaces, and risk constraints.
Capacity 规划 Assi
Estimate scaling risks, bottlenecks, and saturation points before traffic spikes or launches.
Citation 检查
Check whether claims are adequately supported by cited sources and flag weak or mismatched citations.
Compliance 代码审查
Gather code, config, docs, and operational proof points for audits and internal compliance reviews.
cost Hotspot 查找
Identify cloud and platform spend hotspots, waste, and likely optimization wins.
Customer 项目排查
Classify support requests, ask the right follow-up questions, choose the correct troubleshooting path, and draft responses in the desired support tone.
数据 Analyst 工作流
Clean and inspect datasets, check assumptions, compute summary statistics, find anomalies, and translate results into plain-English takeaways with charts when useful.
Dependency 升级 Sc
Plan safe dependency upgrades by identifying version jumps, breaking changes, migration steps, and validation needs.
设计 系统 Enforcer
Review UI changes against spacing, typography, tokens, component usage, and design-system constraints.
Dockerfile 上下文验证
Improve Dockerfiles for image size, caching, security, reproducibility, and multi-stage build hygiene.
Feature 方案验证
Design staged feature-flag rollouts, guardrails, monitoring, and rollback logic for risky product changes.
Hardware 代码验证
Validate power, buses, firmware, interfaces, and low-level sanity checks during hardware bringup.
Incident 文档排查
Turn incident timelines, logs, tickets, and chat snippets into a clear postmortem covering impact, detection, root cause, contributing factors, remediation items, and prevention steps.
K8s 助手
Review Kubernetes manifests, deployment defaults, probes, resources, security context, and rollout safety.
Knowledge 上下文验证
Identify what documentation is missing by comparing support issues, product behavior, and existing docs.
Literature 审查 Ma
Map papers by topic, method, findings, gaps, and trends.
Meeting 会话规划
Convert raw meeting notes, transcripts, or chat logs into decisions, action items, owners, due dates, risks, and follow-up questions.
迁移 Assistant
Plan and carry out technical migrations such as dependency upgrades, framework changes, runtime version bumps, routing changes, schema moves, or package reorganizations.
移动端 发布 检查
Validate mobile release readiness by checking build artifacts, versioning, store requirements, crash risk, config, and pre-ship blockers.
Personal 运维 Assi
Run a lightweight personal operating system by reviewing tasks and notes, clustering priorities, drafting weekly plans, surfacing risks, and turning messy inputs into clear next actions.
Policy 代码审查
Explain what changed between old and new policy documents and why the differences matter.
PR 审查 Enforcer
Review diffs like a senior engineer by checking correctness, architectural fit, style, missing tests, security smells, and migration or operational risk.
Query 优化
Review SQL queries, execution plans, schema usage, and indexes to propose safer faster alternatives.
10x 分析
Build (or refresh) a structured hypothesis on whether a specific company can grow 5x and 10x in valuation over the next 5 years, then track it.
Agent 审计
Audits Claude Code agent configuration against latest best practices.
Agent 上下文审查
Audit and score an agent-definition markdown such as `AGENTS.md`, `CLAUDE.md`, `SKILL.md`, `SOUL.md`, `.cursorrules`, or a system prompt using a cold-reader rubric for clarity, consistency, context independence, and operating-model fit.
Agent 生成器
Guide humans through creating effective instruction rules for coding agents (Copilot, Claude Code, Cursor, Windsurf, Aider, AGENTS.md, CLAUDE.md, .cursorrules, copilot-instructions.md).
agentic-actions-auditor
Audits GitHub Actions workflows for security vulnerabilities in AI agent integrations including Claude Code Action, Gemini CLI, OpenAI Codex, and GitHub AI Inference.
Agent md 代码检查
Audit and trim AI agent instruction files (AGENTS.md, CLAUDE.md, CONVENTIONS.md, .cursorrules, etc.) by testing which facts an AI agent can discover from code alone.
ai 代码测试
Write a professional Software Design Document (SDD) for an AI agent or AI-powered product before writing code.
akka-net-testing-patterns
Write unit and integration tests for Akka.NET actors using modern Akka.Hosting.TestKit patterns.
algorand-vulnerability-scanner
Scans Algorand smart contracts for 11 common vulnerabilities including rekeying attacks, unchecked transaction fees, missing field validations, and access control issues.
all 营销
Full-spectrum marketing and SEO skill library with 160+ specialist skills.
Analyzing 模型审查
Evaluates ML applications in investment with feature engineering, model selection, and implementation considerations for alpha generation.
audit-augmentation
> Projects findings from external tools (SARIF) and human auditors (weAudit) onto Trailmark code graphs as annotations and subgraphs.
audit-context-building
Understand a codebase before looking for bugs in it - what each function assumes, what it guarantees, and what it depends on elsewhere.
audit-prep-assistant
Prepares codebases for security review using Trail of Bits' checklist.
编写 技能
Creates, updates, improves, and audits Agent Skills.
axiom-accessibility
Use when fixing or auditing ANY accessibility issue — VoiceOver, Dynamic Type, color contrast, touch targets, WCAG compliance, App Store acc…
axiom-accessibility
Use when fixing or auditing ANY accessibility issue — VoiceOver, Dynamic Type, color contrast, touch targets, WCAG compliance, App Store acc…
axiom-accessibility
Use when fixing or auditing ANY accessibility issue — VoiceOver, Dynamic Type, color contrast, touch targets, WCAG compliance, App Store acc…
axiom-ai
Use when implementing, testing, or evaluating ANY Apple Intelligence, on-device AI, or speech-to-text feature.
axiom-ai
Use when implementing, testing, or evaluating ANY Apple Intelligence, on-device AI, or speech-to-text feature.
axiom-ai
Use when implementing, testing, or evaluating ANY Apple Intelligence, on-device AI, or speech-to-text feature.
axiom-analyze-crash
Use when the user has a crash log (.ips, MetricKit JSON, legacy .crash text, .xccrashpoint bundle, or pasted text) that needs analysis.
axiom-analyze-swift-performance
Use when the user mentions Swift performance audit, code optimization, or performance review.
axiom-analyze-triage
Use when the user wants to triage a CORPUS of production crashes/hangs from an aggregator (Sentry, App Store Connect) — grouped, counted iss…
axiom-audit-accessibility
Use when the user mentions accessibility checking, App Store submission, code review, or WCAG compliance.
axiom-audit-camera
Use this agent to scan Swift code for camera, video, and audio capture issues including deprecated APIs, missing interruption handlers, threading violations, and permission anti-patterns.
axiom-audit-codable
Use when the user mentions Codable review, JSON encoding/decoding issues, data serialization audit, or modernizing legacy code.
axiom-audit-concurrency
Use when the user mentions concurrency checking, Swift 6 compliance, data race prevention, or async code review.
axiom-audit-core-data
Use when the user mentions Core Data review, schema migration, production crashes, or data safety checking.
axiom-audit-database-schema
Use when the user mentions database schema review, migration safety, GRDB migration audit, or SQLite schema checking.
axiom-audit-energy
Use when the user mentions battery drain, energy optimization, power consumption audit, or pre-release energy check.
axiom-audit-foundation-models
Use when the user mentions Foundation Models review, on-device AI audit, LanguageModelSession issues, @Generable checking, or Apple Intelligence integration review.
axiom-audit-grdb-performance
Use when the user mentions GRDB performance review, slow GRDB queries, app-group database setup audit, a ValueObservation that stopped updating, or pre-release GRDB scan.
axiom-audit-iap
Use when the user mentions in-app purchase review, IAP audit, StoreKit issues, purchase bugs, transaction problems, or subscription management.
axiom-audit-icloud
Use when the user mentions iCloud sync issues, CloudKit errors, ubiquitous container problems, or asks to audit cloud sync.
axiom-audit-liquid-glass
Use when the user mentions Liquid Glass review, iOS 26 UI updates, toolbar improvements, or visual effect migration.
axiom-audit-memory
Use when the user mentions memory leak prevention, code review for memory issues, or proactive leak checking.
axiom-audit-networking
Use when the user mentions networking review, deprecated APIs, connection issues, or App Store submission prep.
axiom-audit-resize
Use when the user mentions window resizing support, resizable-window readiness, iPhone Mirroring compatibility, scene-lifecycle migration checking, or preparing an app for the 27-cycle resizing model.
axiom-audit-spritekit
Use when the user wants to audit SpriteKit game code for common issues.
axiom-audit-storage
Use when the user mentions file storage issues, data loss, backup bloat, or asks to audit storage usage.
axiom-audit-swiftdata
Use when the user mentions SwiftData review, @Model issues, SwiftData migration safety, or SwiftData performance checking.
axiom-audit-swiftui-architecture
Use when the user mentions SwiftUI architecture review, separation of concerns, testability issues, or "logic in view" problems.
axiom-audit-swiftui-layout
Use when the user mentions SwiftUI layout review, adaptive layout issues, GeometryReader problems, or multi-device layout checking.
axiom-audit-swiftui-nav
Use when the user mentions SwiftUI navigation issues, deep linking problems, state restoration bugs, or navigation architecture review.
axiom-audit-testing
Use when the user wants to audit test quality, find flaky test patterns, speed up test execution, or prepare for Swift Testing migration.
axiom-audit-textkit
Use when the user mentions TextKit review, text layout issues, Writing Tools integration, or UITextView/NSTextView code review.
axiom-audit-ux-flow
Use when the user mentions UX flow issues, dead-end views, dismiss traps, missing empty states, broken user journeys, or wants a UX audit of their iOS app.
axiom-build
Use when ANY iOS build fails, test crashes, Xcode misbehaves, or environment issue occurs before debugging code.
axiom-build
Use when ANY iOS build fails, test crashes, Xcode misbehaves, or environment issue occurs before debugging code.
axiom-concurrency
Use when writing ANY async code, actors, threads, or seeing ANY concurrency error.
axiom-concurrency
Use when writing ANY async code, actors, threads, or seeing ANY concurrency error.
axiom-concurrency
Use when writing ANY async code, actors, threads, or seeing ANY concurrency error.
axiom-data
Use when working with ANY data persistence, database, storage, CloudKit, migration, or serialization.
axiom-data
Use when working with ANY data persistence, database, storage, CloudKit, migration, or serialization.
axiom-data
Use when working with ANY data persistence, database, storage, CloudKit, migration, or serialization.
axiom-debug-tests
Use this agent for closed-loop test debugging - automatically analyzes test failures, suggests fixes, and re-runs tests until passing.
axiom-design
Use when making design decisions, implementing HIG patterns, Liquid Glass, SF Symbols, typography, or structuring app entry points and authentication flows.
axiom-design
Use when making design decisions, implementing HIG patterns, Liquid Glass, SF Symbols, typography, or structuring app entry points and authentication flows.
axiom-design
Use when making design decisions, implementing HIG patterns, Liquid Glass, SF Symbols, typography, or structuring app entry points and authentication flows.
axiom-fix-build
Use when the user mentions Xcode build failures, build errors, or environment issues.
axiom-games
Use when building ANY 2D or 3D game with SpriteKit, SceneKit, or RealityKit, or adding touch controls or game controller support.
axiom-games
Use when building ANY 2D or 3D game with SpriteKit, SceneKit, or RealityKit, or adding touch controls or game controller support.
axiom-games
Use when building ANY 2D or 3D game with SpriteKit, SceneKit, or RealityKit, or adding touch controls or game controller support.
axiom-health-check
Use when the user wants a comprehensive project-wide audit, full health check, or scan across all domains.
axiom-implement-iap
Use when the user wants to add in-app purchases, implement StoreKit 2, or set up subscriptions.
axiom-integration
Use when integrating ANY iOS system feature - Siri, Shortcuts, widgets, IAP, localization, privacy, alarms, calendar, reminders, contacts, background tasks, push notifications, timers.
axiom-integration
Use when integrating ANY iOS system feature - Siri, Shortcuts, widgets, IAP, localization, privacy, alarms, calendar, reminders, contacts, background tasks, push notifications, timers.
axiom-integration
Use when integrating ANY iOS system feature - Siri, Shortcuts, widgets, IAP, localization, privacy, alarms, calendar, reminders, contacts, background tasks, push notifications, timers.
axiom-media
Use when working with camera, photos, audio, haptics, ShazamKit, or Now Playing.
axiom-media
Use when working with camera, photos, audio, haptics, ShazamKit, or Now Playing.
axiom-media
Use when working with camera, photos, audio, haptics, ShazamKit, or Now Playing.
axiom-networking
Use when implementing or debugging ANY network connection, API call, or socket.
axiom-networking
Use when implementing or debugging ANY network connection, API call, or socket.
axiom-networking
Use when implementing or debugging ANY network connection, API call, or socket.
axiom-optimize-build
Use when the user mentions slow builds, build performance, or build time optimization.
axiom-performance
Use when app feels slow, memory grows, battery drains, or diagnosing ANY performance issue.
axiom-performance
Use when app feels slow, memory grows, battery drains, or diagnosing ANY performance issue.
axiom-profile-performance
Use when the user wants automated performance profiling, headless Instruments analysis, or CLI-based trace collection.
axiom-resolve-spm
Use when the user mentions SPM resolution failures, "no such module" errors, duplicate symbol linker errors, version conflicts between packages, or Swift 6 package compatibility issues.
axiom-run-tests
Use when the user wants to run XCUITests, parse test results, view test failures, or export test attachments.
axiom-security
Use when storing credentials securely, encrypting data, implementing passkeys, securing AI/agentic features against prompt injection, code signing, or managing certificates and provisioning profiles.
axiom-security
Use when storing credentials securely, encrypting data, implementing passkeys, securing AI/agentic features against prompt injection, code signing, or managing certificates and provisioning profiles.
axiom-security
Use when storing credentials securely, encrypting data, implementing passkeys, securing AI/agentic features against prompt injection, code signing, or managing certificates and provisioning profiles.
axiom-shipping
Use when preparing ANY app for submission, handling App Store rejections, writing appeals, or managing App Store Connect.
axiom-shipping
Use when preparing ANY app for submission, handling App Store rejections, writing appeals, or managing App Store Connect.
axiom-shipping
Use when preparing ANY app for submission, handling App Store rejections, writing appeals, or managing App Store Connect.
axiom-swift
Use when reviewing Swift code for modern idioms, working with noncopyable types, implementing drag and drop, adding debug deep links, or building for tvOS.
axiom-swift
Use when reviewing Swift code for modern idioms, working with noncopyable types, implementing drag and drop, adding debug deep links, or building for tvOS.
axiom-swift
Use when reviewing Swift code for modern idioms, working with noncopyable types, implementing drag and drop, adding debug deep links, or building for tvOS.
axiom-swift-simplifier
Use when the user wants to simplify Swift code, reduce boilerplate, or make Swift more readable and idiomatic without changing behavior.
axiom-swiftui
Use when building, fixing, or improving ANY SwiftUI UI — views, navigation, layout, animations, performance, architecture, gestures, debuggi…
axiom-swiftui
Use when building, fixing, or improving ANY SwiftUI UI — views, navigation, layout, animations, performance, architecture, gestures, debuggi…
axiom-test-simulator
Use when the user mentions simulator testing, visual verification, push notification testing, location simulation, screenshot capture, OR live accessibility validation (VoiceOver announcements, Dynamic Type, ADA checks) on the simulator.
axiom-testing
Use when writing ANY test, debugging flaky tests, making tests faster, or choosing Swift Testing vs XCTest.
axiom-testing
Use when writing ANY test, debugging flaky tests, making tests faster, or choosing Swift Testing vs XCTest.
axiom-testing
Use when writing ANY test, debugging flaky tests, making tests faster, or choosing Swift Testing vs XCTest.
axiom-tools
Use when asking how to use Axiom or what skills exist, capturing console with xclog, symbolicating .ips/MetricKit/.crash crashes with xcsym, driving/validating simulator UI & accessibility with xcui, or analyzing xctrace/CPU profiles with xcprof.
axiom-tools
Use when asking how to use Axiom or what skills exist, capturing console with xclog, symbolicating .ips/MetricKit/.crash crashes with xcsym, driving/validating simulator UI & accessibility with xcui, or analyzing xctrace/CPU profiles with xcprof.
axiom-uikit
Use when bridging UIKit and SwiftUI, modernizing UIKit apps (scene lifecycle, resizability), debugging Auto Layout, Combine, TextKit, PencilKit, or UIKit animations.
axiom-uikit
Use when bridging UIKit and SwiftUI, modernizing UIKit apps (scene lifecycle, resizability), debugging Auto Layout, Combine, TextKit, PencilKit, or UIKit animations.
axiom-uikit
Use when bridging UIKit and SwiftUI, modernizing UIKit apps (scene lifecycle, resizability), debugging Auto Layout, Combine, TextKit, PencilKit, or UIKit animations.
axiom-validate-screenshots
Use when the user mentions App Store screenshot validation, screenshot review, checking screenshots before submission, or verifying screenshot dimensions and content.
axiom-watchos
Use when building ANY watchOS app — app structure, independent apps, Watch Connectivity, Smart Stack widgets, complications, controls, Relev…
axiom-watchos
Use when building ANY watchOS app — app structure, independent apps, Watch Connectivity, Smart Stack widgets, complications, controls, Relev…
axiom-watchos
Use when building ANY watchOS app — app structure, independent apps, Watch Connectivity, Smart Stack widgets, complications, controls, Relev…
后端 架构
> Use when this capability is needed.
brand
Brand voice, visual identity, messaging frameworks, asset management, brand consistency.
brand
Brand voice, visual identity, messaging frameworks, asset management, brand consistency.
burpsuite-project-parser
Searches and explores Burp Suite project files (.burp) from the command line.
c-review
Performs comprehensive C/C++ security review for memory corruption, integer overflows, race conditions, and platform-specific vulnerabilities.
cairo-vulnerability-scanner
Scans Cairo/StarkNet smart contracts for 6 critical vulnerabilities including felt252 arithmetic overflow, L1-L2 messaging issues, address conversion problems, and signature replay.
Ceratops 代码 Cons
Audit a repository after large refactors, branch merges, or parallel agent threads for contradictions between implementation, docs, configs, tests, examples, comments, README guidance, and control files.
CI CD 生成
Scaffold/audit GitHub Actions CI/CD — Go/Rust/TS.
CI CD 审查
CI/CD review for workflows, artifact safety, caching, deployment gates, secrets, permissions, and reproducibility.
CI CD ssdf 安全
GitHub Actions security hardening, CI/CD pipeline integrity, release security, and SSDF alignment Use when this capability is needed.
Claudemd 技能审查
Audit and improve project-memory artifacts (CLAUDE.md, AGENTS.md, .claude/rules/*.md, .claude.local.md).
Clawdfolio 代码测试
> Quantitative portfolio toolkit for professional investors.
code-maturity-assessor
Systematic code maturity assessment using Trail of Bits' 9-category framework.
代码审查
Review code changes, diffs, commits, branches, or PRs for correctness, regressions, security-sensitive mistakes, maintainability issues, and missing validation before commit, PR, merge, or closeout.
Codebase 技能审计
| Use when this capability is needed.
Codex 助手
Build Codex-native workflows for open-source maintenance.
competitors-analysis
>- Build competitor intelligence that can be shared, re-run, and audited later.
cosmos-vulnerability-scanner
Scans Cosmos SDK blockchain modules and CosmWasm contracts for consensus-critical vulnerabilities — chain halts, fund loss, state divergence…
crap-analysis
Analyze code coverage and CRAP (Change Risk Anti-Patterns) scores to identify high-risk code.
Audit Agent 创建
Creates new Claude Code agent configuration files or audits existing ones in .claude/agents/.
cso
Chief Security Officer mode.
dependency-injection-patterns
Organize DI registrations using IServiceCollection extension methods.
design-review
Designer's eye QA: finds visual inconsistency, spacing issues, hierarchy problems, AI slop patterns, and slow interactions — then fixes them…
devex-review
Live developer experience audit.
differential-review
> Security-focused code review for PRs, commits, and diffs.
dimensional-analysis
Annotates codebases with dimensional analysis comments documenting units, dimensions, and decimal scaling.
Django 模型审查
Run and triage Django/DRF security smoke checks for settings hardening, throttling, safe HTML, ORM race/idempotency patterns, and model integrity; especially useful before shipping or when evaluating djangoSecurityHunter-style findings.
文档 Agent md
Create, refresh, or reconcile the repository root `AGENTS.md` using current branch truth.
Dotnet 安全
| Use when this capability is needed.
entry-point-analyzer
Analyzes smart contract codebases to identify state-changing entry points for security auditing.
Falco Runtime 安全
Use the upstream install or setup path that matches your environment: Requirements and caveats from upstream: Basic usage or getting-started notes: <!-- tomevault:4.0:skill_md:2026-05-22 -->; runs on Docker.
Fastapi 部署配置
FastAPI patterns for async APIs, dependency injection, Pydantic request and response models, OpenAPI docs, tests, security, and production readiness.
Federated 学习 Hom
This skill covers the implementation of privacy-preserving machine learning Use when this capability is needed.
fft 上下文编写
Drive the FFT_demo_dash holodeck system — scene triggers, agent commentary, canvas presets, and live weather mirroring — to produce impactfu…
firebase-apk-scanner
Scans Android APKs for Firebase security misconfigurations including open databases, storage buckets, authentication issues, and exposed cloud functions.
Fleet 管理器
Monitors the fleet of concurrent workflows across every registered domain (api/shared/domains.py).
fp-check
Systematically verifies suspected security bugs to eliminate false positives, producing a TRUE POSITIVE or FALSE POSITIVE verdict with documented evidence for each.
frontend-design
产出有设计感、能直接上线的前端界面，不只是「能跑」。
frontend-visual-qa
>- Audit the interface the user can actually see.
Sandbox Policy 生
Generate sandbox security policies from plain-language requirements and optional REST API documentation.
git-safety-net
>- Prevent losing work in a tangle of branches/stashes/rebases, and recover it forensically when something already went sideways.
github-contributor
A phase-based playbook for shipping pull requests that maintainers actually want to merge.
Golang 根因排查
Troubleshoot Golang programs systematically - find and fix the root cause.
graph-evolution
> Builds Trailmark code graphs at two source snapshots and computes a structural diff.
健康检查
Verify Codex configuration health — AGENTS.md, hooks, config.toml, agents, skills, secrets scan, and MCP reachability.
Hello 技能审查
Use this skill to audit, review, validate, or check the quality of AI assistant configurations including prompt text, prompt files, skills (SKILL.md), plugins, MCP servers, agents, hooks, memory files (AGENTS.md, CLAUDE.md, GEMINI.md), and composite configurations.
i18n-expert
This skill should be used when setting up, auditing, or enforcing internationalization/localization in UI codebases (React/TS, i18next or si…
Implementing 文件
Configure AIDE (Advanced Intrusion Detection Environment) for file integrity monitoring including baseline creation, Use when this capability is needed.
K8s 助手
Kubernetes NetworkPolicies provide pod-level network segmentation by defining ingress and egress rules that control Use when this capability is needed.
Instructions 上下文
Audit Copilot instruction files for bloat, overlap, stale rules, and weak applyTo scope.
ios-design-review
Visual design audit for iOS apps on real hardware.
ios 技能审查
> Use when this capability is needed.
java 安全
| Use when this capability is needed.
K8s 审计
This skill covers hardening managed Kubernetes clusters on EKS, AKS, and GKE by implementing Pod Security Standards, network policies, workload identity, RBAC scoping, image admission controls, and runtime security monitoring.
K8s 分析
Assess the security posture of Kubernetes etcd clusters by evaluating encryption at rest, TLS configuration, access controls, backup encryption, and network isolation.
K8s 分析
Auditing Kubernetes cluster RBAC configurations to identify overly permissive roles, wildcard permissions, dangerous ClusterRoleBindings, service account abuse, and privilege escalation paths using kubectl, rbac-tool, KubiScan, and Kubeaudit.
K8s 分析
Audit Kubernetes cluster security posture against CIS benchmarks using kube-bench with automated checks for control plane, worker nodes, and RBAC.
K8s 助手
Perform security risk analysis on Kubernetes resource manifests using Kubesec to identify misconfigurations, privilege escalation risks, and deviations from security best practices.
K8s 助手
Pod Security Standards (PSS) define three levels of security policies -- Privileged, Baseline, and Restricted -- enforced by the Pod Security Admission (PSA) controller built into Kubernetes 1.25+.
K8s 助手
Kubernetes NetworkPolicies provide pod-level network segmentation by defining ingress and egress rules that control traffic flow between pods, namespaces, and external endpoints.
K8s 分析
Implement Kubernetes network segmentation using Calico NetworkPolicy and GlobalNetworkPolicy for zero-trust pod-to-pod communication.
K8s 助手
Use when building a Kubernetes Operator — custom controllers that reconcile CRD state.
K8s 分析
Kubernetes penetration testing systematically evaluates cluster security by simulating attacker techniques against the API server, kubelet, etcd, pods, RBAC, network policies, and secrets.
K8s 助手
Kubernetes and Helm standards for manifests, charts, values files, RBAC, workloads, networking, policy, validation, or deployment review.
LangChain 审计
Audit LangChain configuration and security Use when: "audit langchain, Use when this capability is needed.
营销 seo 审计
When the user wants to audit, review, or diagnose SEO issues on their site.
marketplace-health-check
>- Run a comprehensive, evidence-based health check of this Claude Code skills marketplace repo using a parallel fan-out Dynamic Workflow.
Codex 迁移
>- Use when this capability is needed.
Mugiwara 技能审计
> Use when this capability is needed.
Onboard 方案审计
Agent-driven cold-start onboarding.
op1 营销 seo Exper
Run and audit OperatorOne Stage1 marketing SEO shadow experiments across input sync, context index, keyword graph, experiment synthesis, and Ready/Hold/Drop queueing.
open-sourcing
This skill should be used when the user asks to "open source this project", "prepare this repository for public release", "make this repo public", "check open-source readiness", "choose a license for this project", or "set up release automation" ahead of a public launch.
openclaw
>- Use when - "为什么甲虾能用 DeepSeek，乙虾不行？
opentelemetry-net-instrumentation
Provides guidance for implementing OpenTelemetry instrumentation in .NET codebases, covering tracing (Activities/Spans), metrics, logs, naming conventions, error handling, performance, SDK setup, resources, context propagation, and API design best practices.
Owasp 安全 Standar
Use when reviewing code for security vulnerabilities, implementing authentication/authorization, handling user input, or discussing web application security.
panel-review
Reviews a code target by launching a panel of specialist auditor agents and merging their reports.
K8s 测试
Kubernetes penetration testing systematically evaluates cluster security by simulating attacker techniques against Use when this capability is needed.
plan-design-review
Designer's eye plan review — interactive, like CEO and Eng review.
plan-devex-review
Interactive developer experience plan review.
product-analysis
Multi-path parallel product analysis that combines Claude Code agent teams and Codex CLI for cross-model test-time compute scaling.
项目 Ployglot 项目 S
Scaffold a polyglot library project as TypeScript + Python twin packages under `packages/ts/` + `packages/py/`, with a shared `SPEC.md`, cross-language `tests/parity/fixtures.json`, side-by-side `examples/sdk/` + `examples/api/` documentation, per-package `Makefile`, and a root orchestrator that exposes `make ci`.
qa-expert
This skill should be used when establishing comprehensive QA testing processes for any software project.
React 助手
React Native mobile testing, performance, and release hardening for this repo.
Researchbuddy 技能
Use when publishing or updating the ResearchBuddy Homebrew tap.
rf 方案规划
Юрист-профессионал по законодательству РФ.
规则 Quality Evalu
Evaluate the quality of existing agent instruction rule sets — CLAUDE.md, AGENTS.md, .cursorrules, copilot-instructions.md, or any coding-ag…
rust 代码审计
Set up Rust quality gates (cargo check/build, clippy, rustfmt, dead code, unused deps via cargo-machete, doc build, tests) in any Rust repo, wired through `prek` (pre-commit reimagined) with a `check.sh` orchestrator underneath.
rust-review
Performs comprehensive Rust security review for safe/unsafe boundary issues, memory safety in unsafe blocks, concurrency hazards, panic-induced DoS, FFI safety, and async runtime mistakes.
Rust 安全
| Use when this capability is needed.
sast 分析
Static Application Security Testing (SAST) for multi-language codebases.
secure-workflow-guide
Guides through Trail of Bits' 5-step secure development workflow.
安全 最佳 实践
Perform language and framework specific security best-practice reviews and suggest improvements.
semgrep
>- Run a Semgrep scan with automatic language detection, parallel execution, and merged SARIF output.
Senior 后端
This skill should be used when the user asks to "design REST APIs", "optimize database queries", "implement authentication", "build microservices", "review backend code", "set up GraphQL", "handle database migrations", or "load test APIs".
Sentry 文档审计
| Use when this capability is needed.
seo 审计
Run a full SEO, AEO, and LLM discoverability audit on cc4.marketing Use when this capability is needed.
sharp-edges
Identifies error-prone APIs, dangerous configurations, and footgun designs that enable security mistakes.
ship PR审查
Ship current branch — CI, SonarCloud, code review, security review, fix all issues, merge.
skf Export 技能
Package for distribution and inject context into CLAUDE.md/AGENTS.md/.cursorrules.
技能 审计
Audits a Claude Code / Agent SDK skill (or folder of skills) against 10 QA Use when this capability is needed.
solana-vulnerability-scanner
Scans Solana programs for 6 critical vulnerabilities including arbitrary CPI, improper PDA validation, missing signer/ownership checks, and sysvar spoofing.
spec-to-code-compliance
Check code against the documentation that specifies it - which requirements hold, which the code contradicts, which are absent, and what the code does that no document mentions.
Spinngo 上下文测试
When the user/agent
SQL 数据库 Patterns
Use this skill when the agent is designing schemas, reviewing migrations, tuning queries, modeling NoSQL access patterns, configuring replic…
subagent-driven-development
Use when executing implementation plans with independent tasks in the current session Execute plan by dispatching a fresh implementer subagent per task, a task review (spec compliance + code quality) after each, and a broad whole-branch review at the end.
substrate-vulnerability-scanner
Scans Substrate/Polkadot pallets for 7 critical vulnerabilities including arithmetic overflow, panic DoS, incorrect weights, and bad origin checks.
supply-chain-risk-auditor
Audits a project's dependencies for supply-chain risk: version-matched advisories for direct dependencies and the full lockfile tree, abandoned or archived upstreams, npm publisher concentration, and install-time script execution.
Swift 审查
Review Swift/iOS code: SwiftUI, Combine, UIKit, App Store guidelines and iOS architecture Use when this capability is needed.
Terraform 助手
**UTILITY SKILL** — Reusable Azure Terraform patterns: hub-spoke, private endpoints, diagnostics, AVM-TF modules.
Terraform 助手
Terraform and OpenTofu standards for .tf, .tfvars, .tofu, modules, providers, state, plans, policy checks, and IaC review.
token-integration-analyzer
Token integration and implementation analyzer based on Trail of Bits' token integration checklist.
ton-vulnerability-scanner
Scans TON (The Open Network) smart contracts for 3 critical vulnerabilities including integer-as-boolean misuse, fake Jetton contracts, and forward TON without gas checks.
trailmark
Builds and queries multi-language source and binary code graphs for security analysis.
trailmark-finding-triage
Performs graph-assisted triage of a single security finding, SARIF result, weAudit annotation, suspicious function, or report excerpt using Trailmark reachability, entrypoint paths, taint, privilege-boundary, blast-radius, caller/callee, and neighborhood evidence.
trailmark-review-gate
Runs a Trailmark structural review gate over a branch, pull request, fix commit, release diff, or git ref range to detect new entrypoints, new tainted paths, removed validation or authorization calls, privilege-boundary drift, blast-radius growth, complexity growth, and newly reachable sensitive sinks.
trailmark-structural
Runs full Trailmark structural analysis by building a graph, running `preanalysis()`, and reporting hotspots, taint, blast radius, privilege boundaries, attack surface, and version-gated Trailmark 0.4+/0.5+ data such as proxy counts, subgraph edges, type/reference summaries, and entrypoint attributes.
variant-analysis
Hunts for the other instances of a bug already found — the variants of one root cause across a codebase.
vulnerability-triage-brocards
>- Systematically evaluate incoming vulnerability reports against 7 principled criteria before committing resources to deeper analysis.
writing-beats
Writing, exploit; assemble raw material into a journey of beats, grounding each term before a beat leans on it.
writing-shape
Writing, exploit: shape raw material into an article, paragraph by paragraph.
zeroize-audit
Detects missing zeroization of sensitive data in source code and identifies zeroization removed by compiler optimizations, with assembly-level analysis, and control-flow verification.