Product & Planning

jonmumm Bundle

Multi-milestone autonomous development for large goals. Decomposes a big objective into milestones with validation gates. Orchestrator plans, workers build via TDD in isolated worktrees, independent validators exercise the system as a black box against a validation contract. Fix features close gaps. Converges until all milestones pass. Use when the user says "mission", "missions", wants to build something large (multi-feature, multi-day), or needs structured autonomous development beyond a single backlog.

jonmumm Bundle

Autonomous AFK development loop. Sequentially works through a specs/bugs backlog: grill-me preflight → evals-first surface → pick task → testing-trophy TDD → progressive commits → eval stack (hooks → integration → e2e + screenshots → LLM judges → codex review) → commit → morning briefing. Use when going AFK — lunch, gym, overnight, weekend. Optionally provide duration so the agent can scope work accordingly.

jonmumm Bundle

Create AFK Ralph loop scripts for any task. Interrogates the user to nail down requirements, then generates a complete .ralph/ directory with loop script, backlog, progress tracking, and lessons file. Use when the user wants to run an autonomous Claude loop, create a ralph script, go AFK on a task, run something in a loop while away, batch-process work autonomously, or mentions "ralph", "ralph creator", "afk loop", "create a loop", or "run this while I'm away".

mulesoft Skill

Curate API assets in an API Experience Hub portal. Use when an admin needs to publish Exchange assets to a portal, adjust which minor versions are visible to consumers, or remove assets from a portal. Covers discovery of unpublished assets, publishing, visibility configuration and removal.

mulesoft Skill

Creates a scanner configuration to discover services (such as AI agents, MCP servers, and API metadata) from external platforms like AWS Bedrock, Microsoft Copilot, or Google Vertex AI. Use when setting up scanner discovery, configuring a new scanner, connecting to cloud AI platforms, or importing discovered services into Anypoint Exchange.

nirholas Skill

Runs XActions as an A2A (Agent-to-Agent) compatible agent that serves an Agent Card, accepts JSON-RPC tasks, bridges them onto the 153 MCP tools, streams progress over SSE, and discovers and delegates to other agents. Use when connecting XActions to external AI agents, building multi-agent orchestration, serving or reading an agent card, running the A2A server, or debugging inter-agent auth, discovery, streaming, or task delegation.

nirholas Skill

Explores X/Twitter trending topics, searches for content, and discovers new accounts. Includes trending topic monitoring, keyword search, explore page scraping, and topic discovery. Use when users want to explore trends, search for content, or discover new accounts and topics on X.

qihangzhang-272 Bundle

Turn one explicitly supplied public X post, quote post, or same-author direct thread into source-faithful 1080×1440 cards, a ZIP, contact sheet, and optional MP4 with native video and source audio in place. Use for X card publications and visual archives; do not use for discovery, rewriting, narration, or publishing.

qihangzhang-272 Bundle

Retrieve and archive explicit URLs, local files, URL lists, or precisely named collections as immutable local source packages. Use when the user already knows what should be preserved; do not use for open-ended discovery, recommendations, account crawling, or private collections without current-turn authorization.

cboone Bundle

Planning-document structure guide for multi-milestone formalization roadmaps (Lean, Rocq, Isabelle, HOL, and other proof assistants). A sibling to write-math that governs *document structure*, not mathematical prose. Use whenever a formalization roadmap is the subject of the work, including (1) writing or editing a new roadmap under docs/plans/todo/ that lays out a multi-milestone proof project, (2) reviewing an existing roadmap for structural drift or missing conventions, (3) updating a roadmap when scope, milestones, or verification gates change, (4) deciding whether a planning document should be a roadmap (multi-milestone, long-lived) or a single implementation plan (bounded, short-lived), (5) spinning out a per-milestone plan file from a roadmap entry, (6) auditing a milestone entry for the five required parts, (7) discussing roadmap structure with the user before drafting. Applies regardless of which proof assistant or host library the roadmap targets.

fabioc-aloha Bundle

Patterns for requirements elicitation, BRDs, process analysis, and stakeholder alignment.

fabioc-aloha Bundle

Patterns for organizational change, ADKAR methodology, stakeholder engagement, and adoption strategies.

2233admin Bundle

Create, update, or validate a PRD. Use when the user wants help producing, editing, or validating a PRD.

2233admin Bundle

Product manager for PRD creation and requirements discovery. Use when the user asks to talk to John or requests the product manager.

2233admin Bundle

Deprecated — forwards to bmad-prd (update intent).

2233admin Bundle

Deprecated — forwards to bmad-prd (create intent).

2233admin Bundle

Deprecated — forwards to bmad-prd (validate intent).

hiai-gg Skill

Triage GitHub issues in a repository: classify, prioritize, deduplicate, and route them with evidence. Use when asked to sort an issue backlog, identify duplicates, label issues, or decide what to work on next.

shenyuannext Bundle

通过结构化访谈、异步问卷、决策树和交接简报澄清客户的商业目标、受众、问题、证据、约束、审批与验收标准。适用于客户需求模糊、方案前访谈、项目启动会、传播或营销 brief、多人意见冲突、需要向客户补材料、把会议记录整理成可执行需求，以及跨人员或跨会话交接；不替客户做必须由客户决定的取舍，也不把未知信息补写成事实。

shenyuannext Bundle

将 GEO 全景诊断、机会地图、AI 平台采样结论或品牌事实底座转化为 30/60/90 天实施路线图。方案覆盖页面技术、内容矩阵、标题体系、知识库、外部证据、监测闭环、人员分工和验收指标，并适配 DeepSeek、豆包、千问、Kimi、腾讯元宝。不用于从零开展全景诊断或只撰写单篇内容。

unitoneai Bundle

Performs a SOC 2 Type II readiness gap analysis against AICPA Trust Services Criteria. Auto-invoked when discussing SOC 2 compliance, audit preparation, or security program maturity. Walks through all Common Criteria (CC1-CC9) plus selected additional criteria, identifies gaps, and produces a remediation roadmap with evidence requirements and 90-day action plan.

unitoneai Skill

Conducts access review and entitlement audit against CIS Controls v8 (Controls 5, 6) and NIST SP 800-53 AC family. Auto-invoked when reviewing entitlement certifications, orphaned accounts, role explosion, segregation of duties violations, or quarterly access recertification campaigns. Produces findings with severity, framework mapping, and remediation roadmap.

unitoneai Skill

Performs a HIPAA Security Rule compliance review against all Administrative, Physical, and Technical Safeguards defined in 45 CFR Part 164, Subpart C. Auto-invoked when discussing healthcare data security, ePHI protection, HIPAA audit readiness, or business associate compliance. Evaluates required and addressable implementation specifications, identifies gaps, and produces a remediation roadmap aligned to HHS enforcement priorities.

unitoneai Skill

Performs an ISO 27001:2022 gap analysis against the full ISMS requirements (Clauses 4-10) and all 93 Annex A controls reorganized into four themes. Auto-invoked when discussing ISO 27001 certification readiness, ISMS implementation, or Statement of Applicability development. Identifies control gaps, scores implementation maturity, and produces a remediation roadmap aligned to the 2022 revision structure.

wardawgmalvicious Bundle

Use when running the pbir CLI (install via uv tool install pbir-cli) to inspect or edit local Power BI PBIR reports. Covers path syntax (Report.Report/Page.Page/Visual.Visual with required type suffixes, glob patterns, property dot-notation), verb noun groups — report / page / visual / filter / bookmark / theme / dax / fields / schema / profile / annotation / model — plus discovery verbs (ls / tree / find / cat / get / schema describe) that should run before any mutation, property get/set with glob bulk edits requiring -f, validation and publish flows, download/publish to Fabric workspaces, and batch runs. Detailed per-command flags and arguments live in references/REFERENCE.md. Invoke whenever the user mentions pbir <verb>, pbir-cli, pbir set/get/ls/add/new/rm/validate/publish, or any specific pbir subcommand.

wardawgmalvicious Bundle

Use when scaffolding or building a new Power BI report end-to-end from a published semantic model using the pbir CLI. Covers the 10-step workflow — KPI / filter / granularity requirements, model field discovery via pbir model, pbir new report scaffold, renaming the default Page 1 instead of adding a new one, 3-30-300 visual hierarchy for three viewing distances (glance / scan / investigate), layout math with margin/gap constants (always inspect the scaffolded page first), row-by-row visual placement with explicit coordinates, explicit sort after bind, report vs page filters, extension-measure conditional formatting with theme tokens like good/bad, time-granularity inference from the active date filter, pbir validate + publish, then service-side visual verification — render the published report to PNG via the Power BI exportToFile REST API and review the images (no Power BI Desktop needed). Invoke when user says 'build a report', 'scaffold a dashboard', or 'lay out a KPI page'.

cwijayasundara Skill

PRD-per-sprint evolution route for an existing harness-built (or brownfield) system — grounds a new PRD against the prior requirement spine, produces a human-approved design amendment against the living specs/design/ baseline, then runs /auto. Companion to /build (sprint 1) and /feature (single-story changes).

theyoungastronauts Skill

Generate a structured Product Requirements Document from a feature idea.

traygerbig Skill

Manage projects on Nulab Backlog — issues, wikis, milestones, Git, sprints for Japan's top PM tool

anthonyalcaraz Bundle

Establish trust in a tool by verification, not by its self-description. Flags marketing-gamed tool descriptions ("industry-leading", "trusted by Fortune 500"), requires structured testable capabilities instead of free-text claims, tracks a performance-based trust score (neutral start, successes up, failures and slow calls down), and runs the DRAFT loop — gather boundary-probing experience, learn the gap between documentation and reality, rewrite an AI-optimized spec — until the doc converges with actual behavior. Use when a tool registry ingests third-party or provider-authored descriptions that may be optimized for discovery over accuracy. NOT for tools you authored and fully control, NOT a functional test framework (it discovers doc-vs-reality gaps, it does not assert business correctness), NOT a security scanner.

ardurai Bundle

God-level authentication and authorization protocols: OAuth 2.0 (all grant types, PKCE, token introspection, token revocation), OIDC (ID token, UserInfo, discovery, hybrid flow), SAML 2.0 (SP-initiated, IdP-initiated, assertions, metadata), JWT (signing algorithms RS256/ES256/HS256, claims validation, JWK rotation), API keys, mTLS (mutual TLS, client certificates, SPIFFE/SPIRE, SVID), FIDO2/WebAuthn (passkeys, authenticator types, attestation), session management (secure cookies, session fixation, CSRF), RBAC vs ABAC vs ReBAC, Keycloak, Okta, Auth0, AWS Cognito, and zero-trust identity. Never back down — trace any auth failure to its cryptographic root.

pnp Bundle

Generates a polished, self-contained HTML roadmap or milestone timeline from any project data — SharePoint lists, pasted tables, or a verbal description. Use when asked to build a project roadmap, product roadmap, migration timeline, release plan, onboarding sequence, run-of-show, phase plan, or any visual schedule showing items over time. Interviews the user if data is incomplete, constructs a validated JSON document, then renders it into a single sandbox-safe HTML file. Chooses between two layouts automatically: horizontal roadmap with swimlanes (for phase-range data) or vertical milestone list (for point-in-time events). No external dependencies — output runs inside a SharePoint sandboxed iframe.

pnp Skill

Reviews SharePoint news posts in an intranet site or Site Pages library and flags content that appears obsolete, draft-like, incomplete, poorly targeted, missing ownership, or no longer relevant. It uses only the default Site Pages fields, so it works on any modern SharePoint site. For every post it assigns a review outcome (Keep, Update, Archive, Delete, or Needs owner review) with evidence-based reasons and a severity, and saves a self-contained HTML review dashboard the team can use as a cleanup backlog. It is strictly advisory and read-only - it never deletes, unpublishes, archives, or edits any page. Use when the user says: - "review news" - "news governance" - "audit news posts" - "review our news posts" - "check news quality" - "clean up intranet news" - "news cleanup backlog" - "find outdated news" - "which news posts are obsolete" - "news review report"

unitoneai Skill

Executes a structured incident response workflow based on NIST SP 800-61 Rev 2 and the SANS Incident Handler's Handbook. Auto-invoked when the user reports a security incident, asks how to respond to a breach, or needs help with incident classification, containment decisions, stakeholder notification, or evidence preservation. Produces an incident response plan with severity determination, containment decision tree, communication templates, and escalation criteria.

unitoneai Skill

Performs a NIST Cybersecurity Framework 2.0 assessment across all six functions (Govern, Identify, Protect, Detect, Respond, Recover) and their categories and subcategories. Auto-invoked when discussing cybersecurity maturity, risk posture evaluation, or NIST CSF alignment. Develops current and target organizational profiles, assesses maturity tiers, maps informative references, and produces a prioritized improvement roadmap.

unitoneai Skill

Performs a Zero Trust Architecture maturity assessment against NIST SP 800-207 and the CISA Zero Trust Maturity Model v2. Evaluates all five CISA ZT pillars (Identity, Devices, Networks, Applications & Workloads, Data) across maturity stages. Covers microsegmentation readiness, continuous verification, and produces a pillar-by-pillar maturity scorecard with remediation roadmap.