Latest Agent Skills

Fetch current Stripe account balance (test mode)

Scan text or a file for accidentally committed secrets (API keys, tokens)

Create real Stripe test-mode charges for bounded business actions, with an authority-band budget cap and human escalation above the cap.

List available NVIDIA NIM models and their status

Submit an inference job to NVIDIA NIM and return a job ID

Check the status and result of an NVIDIA NIM inference job

List open pull requests in a GitHub repository

Add a comment to a GitHub issue or pull request

Initiate a Stripe payout to the connected bank account

List all scheduled cron tasks managed by Custodian

Parse a URL and return its scheme, host, path, and query params

Decode and inspect a JWT (header, claims, expiry) without verifying signature

Run a read-only SQL query against a SQLite database file

Start a stopped Docker container by name or ID

Invoke a deployed Modal function with JSON arguments

Deploy a Modal function from a local Python file

Stop a running Docker container gracefully

Tail the last N lines of a Docker container's stdout log

List running Docker containers with status and port info

Run a command inside a running Docker container

Anti-pattern detector and design rules for AI coding agents. Catches the specific mistakes AI makes when generating UI: gray text on color, nested cards, broken buttons, missing states. Use before shipping any frontend.

Delete a key from the Custodian KV store

Run a sandboxed shell command with timeout and allowlist

Write content to a file at an allowed path

Run any Replicate model (image gen, audio, video) by version ID

Search for recent news articles on a given topic

Read a file from an allowed path on the local filesystem

List files in an allowed directory path

Search the web using DuckDuckGo and return top results

Fetch and extract visible text from a web page URL

List all keys in the Custodian KV store with optional prefix

Call OpenAI chat completions API with a prompt and system message

Perform an HTTP POST with JSON body and return the response

Store a key-value pair in the Custodian KV store

Retrieve a value by key from the Custodian KV store

Perform an HTTP GET request and return the response body

Stops AI from generating boring, generic UI. Use when building new interfaces, reviewing generated UI, or fixing the flat / generic look that AI tools default to. Anti-slop design principles for premium frontends.

Angular CLI usage, code generation, build configuration, and bundle optimization. Use for Angular CLI/build tasks; defer standalone webpack configuration and generic test-runner setup.

Write Angular component tests using TestBed, ComponentHarness, and HttpTestingController with proper signal input handling. Use when writing component tests, mocking HTTP calls, or testing signal inputs.

Configure Angular Router with lazy-loaded routes, functional guards, and component input binding. Use when defining routes, lazy-loading features, creating route guards, or setting up resolvers.

Configure Android static analysis with Detekt, Ktlint, and Android Lint for CI/CD quality gates. Use for Android-specific lint and quality tooling; defer generic Java Checkstyle, SonarQube, and standalone CI configuration.

Write Android unit, Compose UI, and Hilt-integrated tests. Use when designing test behavior with MockK or coroutine test utilities; defer database/WorkManager-specific recipes to the owning feature skill.

Build high-performance declarative UI with Jetpack Compose. Use when writing Composable functions, optimizing recomposition, hoisting state, or working with LazyColumn and side effects; defer deep-link and navigation routing to android-navigation.

Type React components and hooks with TypeScript patterns. Use when typing React props, hooks, event handlers, or component generics in TypeScript.

Secure Python services against secret leakage, injection, unsafe subprocess calls, and dependency drift. Use when handling env vars, tokens, SQL, file paths, shell commands, auth flows, or Python security gates.

Core Python 3.11+ language standards for typing, dataclasses, imports, pathlib, and stdlib-first code. Use for idiomatic language constructs in Python modules or stubs; defer pytest fixtures, database/client configuration, subprocess security, and other specialized concerns.

Implement Python database access with parameterized SQL, transaction scope, connection helpers, and repository seams. Use when editing Postgres queries, repositories, transactions, pooling, or persistence boundaries in Python.

Implement modern PHP error and exception handling patterns. Use when implementing exception hierarchies, error handlers, or custom exceptions in PHP.

Write PHP following PSR coding standards, SOLID principles, and code-quality guidelines. Use for PHP style, design, refactoring, naming, and guard clauses—not Composer/PSR-4 project configuration.

Secure Next.js App Router with middleware auth, Server Action validation, CSP headers, and taint APIs. Use when adding authentication middleware, validating Server Action inputs with Zod, or preventing secret leakage to client bundles.

Implement JWT authentication, RBAC guards, Helmet hardening, and Argon2 hashing in NestJS. Use when adding auth strategies, role-based access control, CSRF protection, or security headers.

Implement data access patterns, Scaling, Migrations, and ORM selection in NestJS. Use when implementing TypeORM/Prisma repositories, migrations, or database patterns in NestJS.

Write idiomatic Kotlin 1.9+ with null safety, sealed classes, data classes, extension functions, delegates, collections, inline/reified generics, and expression syntax. Use for Kotlin language constructs, Java-to-Kotlin migration, lazy delegates, data classes, backing properties, or inline/reified generics; keep language constructs in scope even inside response models, and defer coroutine configuration, Android Context/framework, Retrofit/OkHttp client setup, and other library-specific recipes.

Secure Go backend services against common vulnerabilities. Use when implementing input validation, crypto, or SQL injection prevention in Go.

Core idioms, style guides, and best practices for writing idiomatic Go code. Use when writing Go code following official style guides and idiomatic patterns.

Implement Go database access with context, pool tuning, transaction boundaries, and repository seams. Use when building repositories, tuning `sql.DB` or `pgx`, or reviewing DB transaction flow in Go.

Benchmark AI skill effectiveness by measuring implementation quality against legacy constraints.

Mitigate a production incident or urgent regression first, then route to root-cause remediation and a postmortem.

Turn an approved PRD or implementation goal into SRS/FRS technical requirements (How), architecture, contracts, and verification decisions.

Review an entire codebase for architecture, engineering health, and exploitable risk; generate a prioritized remediation plan, an evidence-anchored system knowledge document, or both.