Product & Planning

davidlam-oss Bundle

OpenPrd UI Context skill：区分 greenfield、brownfield 与局部修正，基于已确认 PRD、可选 CodeGraph 和本地证据提出专业 UI/UX 方向，并在用户确认后编译 PRODUCT.md、DESIGN.md 和 Impeccable handoff。

davidlam-oss Skill

面向现有项目、参考项目和模糊需求的持续 OpenPrd discovery。

davidlam-oss Bundle

OpenPrd 需求入口与 PRD 分流 skill：判断用户可见需求类型和内部 L0/L1/L2 路由码，决定直接澄清、mini-plan 或正式 PRD，并选择通用 / 面向个人消费者场景 / 面向企业服务场景 / 以 Agent 为主要使用场景的 PRD 视角。对用户复述时不要直接把 consumer / b2b / agent 当展示词；这些枚举值只用于内部记录和命令。

idkwhatimd0ing Skill

One-shot project bootstrapper. Runs domain-to-spec, scaffold-frontend, and (if needed) scaffold-backend sequentially, with user confirmation between steps. Produces AGENTS.md, PRD.md, a Next.js app in client/, and optionally a FastAPI app in server/. Use when starting a brand new project and the user wants the full stack in one go.

idkwhatimd0ing Skill

Turns domain expertise into a technical specification AND writes AGENTS.md + PRD.md to the repo root. Run this FIRST, before any other scaffold skill. Takes your profession and desired outcome, lists constraints, identifies error-prone steps, proposes the simplest buildable flow, and commits the result as AGENTS.md and PRD.md so every other skill can read it. Use at the very start of a new project.

idkwhatimd0ing Skill

PRD-driven backend scaffold. Reads AGENTS.md and PRD.md from the repo root and creates a FastAPI app inside server/ with optional Supabase integration and one stub route per entry listed under PRD.md > Backend Routes. Refuses to run if AGENTS.md and PRD.md do not exist, or if PRD.md says Backend Needed? = No. Run AFTER scaffold-frontend.

idkwhatimd0ing Skill

PRD-driven frontend scaffold. Reads AGENTS.md and PRD.md from the repo root and creates a Next.js + TypeScript + Tailwind app inside client/ with pages, navigation, and placeholder components that match the PRD. Refuses to run if AGENTS.md and PRD.md do not exist. Run this AFTER domain-to-spec.

idkwhatimd0ing Skill

Turn a PRD or product description into a production-grade Vercel v0 prompt. Researches industry conventions, picks a bold aesthetic direction, selects fancy UI libraries (shadcn/ui, Aceternity UI, Magic UI, Motion), and assembles a specific, high-signal prompt using v0's product-surface + context-of-use + constraints framework. Use when the user wants to generate a website or app UI with Vercel v0.

xiaolai Skill

Complete bug bounty workflow — recon (subdomain enumeration, asset discovery, fingerprinting, HackerOne scope, source code audit), pre-hunt learning (disclosed reports, tech stack research, mind maps, threat modeling), vulnerability hunting (IDOR, SSRF, XSS, auth bypass, CSRF, race conditions, SQLi, XXE, file upload, business logic, GraphQL, HTTP smuggling, cache poisoning, OAuth, timing side-channels, OIDC, SSTI, subdomain takeover, cloud misconfig, ATO chains, agentic AI), LLM/AI security testing (chatbot IDOR, prompt injection, indirect injection, ASCII smuggling, exfil channels, RCE via code tools, system prompt extraction, ASI01-ASI10), A-to-B bug chaining (IDOR→auth bypass, SSRF→cloud metadata, XSS→ATO, open redirect→OAuth theft, S3→bundle→secret→OAuth), bypass tables (SSRF IP bypass, open redirect bypass, file upload bypass), language-specific grep (JS prototype pollution, Python pickle, PHP type juggling, Go template.HTML, Ruby YAML.load, Rust unwrap), and reporting (7-Question Gate, 4 validation gate

xiaolai Skill

Complete bug bounty workflow — recon (subdomain enumeration, asset discovery, fingerprinting, HackerOne scope, source code audit), pre-hunt learning (disclosed reports, tech stack research, mind maps, threat modeling), vulnerability hunting (IDOR, SSRF, XSS, auth bypass, CSRF, race conditions, SQLi, XXE, file upload, business logic, GraphQL, HTTP smuggling, cache poisoning, OAuth, timing side-channels, OIDC, SSTI, subdomain takeover, cloud misconfig, ATO chains, agentic AI), LLM/AI security testing (chatbot IDOR, prompt injection, indirect injection, ASCII smuggling, exfil channels, RCE via code tools, system prompt extraction, ASI01-ASI10), A-to-B bug chaining (IDOR→auth bypass, SSRF→cloud metadata, XSS→ATO, open redirect→OAuth theft, S3→bundle→secret→OAuth), bypass tables (SSRF IP bypass, open redirect bypass, file upload bypass), language-specific grep (JS prototype pollution, Python pickle, PHP type juggling, Go template.HTML, Ruby YAML.load, Rust unwrap), and reporting (7-Question Gate, 4 validation gate

treasoni Bundle

Install, configure, migrate, and validate a portable manifest registry for agent workflows, skills, subagents, and hooks. Use when a project needs manifest.yaml-based discovery, artifact versioning, dependency checks, capability declarations, permission-policy review, or reusable agent-platform setup.

treasoni Bundle

Install, configure, migrate, and validate a portable manifest registry for agent workflows, skills, subagents, and hooks. Use when a project needs manifest.yaml-based discovery, artifact versioning, dependency checks, capability declarations, permission-policy review, or reusable agent-platform setup.

justinmchoi Skill

Turn the current conversation context into a PRD and publish it to the project issue tracker. Use when user wants to create a PRD from the current context.

justinmchoi Skill

Break a plan, spec, or PRD into independently-grabbable issues on the project issue tracker using tracer-bullet vertical slices. Use when user wants to convert a plan into issues, create implementation tickets, or break down work into issues.

justinmchoi Bundle

Sets up an `## Agent skills` block in AGENTS.md/CLAUDE.md and `docs/agents/` so the engineering skills know this repo's issue tracker (GitHub or local markdown), triage label vocabulary, and domain doc layout. Run before first use of `to-issues`, `to-prd`, `triage`, `diagnose`, `tdd`, `improve-codebase-architecture`, or `zoom-out` — or if those skills appear to be missing context about the issue tracker, triage labels, or domain docs.

zh30 Bundle

Use when an independent developer asks for SEO, keyword research, ranking, 关键词, 搜索优化, or an SEO plan for a PRD, live URL, or page code. Researches demand and intent, maps primary and supporting terms to pages, and specifies on-page, technical, and content actions.

zh30 Bundle

Use when an independent developer asks to turn an idea, research notes, interviews, feature list, or rough spec into a decision-ready MVP PRD or 产品需求文档. Defines problem, users, goals, scope and non-goals, requirements, flows, metrics, risks, milestones, and acceptance criteria.

zh30 Bundle

Use when an independent developer asks to turn an idea, research notes, interviews, feature list, or rough spec into a decision-ready MVP PRD or 产品需求文档. Defines problem, users, goals, scope and non-goals, requirements, flows, metrics, risks, milestones, and acceptance criteria.

zh30 Bundle

Use when an independent developer asks for SEO, keyword research, ranking, 关键词, 搜索优化, or an SEO plan for a PRD, live URL, or page code. Researches demand and intent, maps primary and supporting terms to pages, and specifies on-page, technical, and content actions.

zh30 Bundle

Use when an independent developer needs to recruit, interview, or debrief real customers. Plans 5–15 Mom Test–style interviews and synthesizes past behavior, current workarounds or spend, pain frequency, and willingness to switch; includes 用户访谈 and 客户发现 requests.

zh30 Bundle

Use when an independent developer asks to turn an idea, research notes, interviews, feature list, or rough spec into a decision-ready MVP PRD or 产品需求文档. Defines problem, users, goals, scope and non-goals, requirements, flows, metrics, risks, milestones, and acceptance criteria.

zh30 Bundle

Use when an independent developer needs to recruit, interview, or debrief real customers. Plans 5–15 Mom Test–style interviews and synthesizes past behavior, current workarounds or spend, pain frequency, and willingness to switch; includes 用户访谈 and 客户发现 requests.

zh30 Bundle

Use when an independent developer needs to recruit, interview, or debrief real customers. Plans 5–15 Mom Test–style interviews and synthesizes past behavior, current workarounds or spend, pain frequency, and willingness to switch; includes 用户访谈 and 客户发现 requests.

zh30 Bundle

Use when an independent developer needs to recruit, interview, or debrief real customers. Plans 5–15 Mom Test–style interviews and synthesizes past behavior, current workarounds or spend, pain frequency, and willingness to switch; includes 用户访谈 and 客户发现 requests.

azuread Skill

Create work items in Azure DevOps from a feature plan. Handles ADO metadata discovery (area path, iteration, assignee), work item creation, and dependency linking. Triggers include "create the PBIs", "create work items", "push PBIs to ADO".

signalpilot-labs Bundle

Load FIRST before any dbt project work. Covers the full 8-step dbt workflow: project scanning, skill loading, validation, macro discovery, research, technical spec, SQL writing, and verification. Also covers output shape inference, incremental model handling, and what to trust in YML.

m19803261706 Bundle

Codex 侧 CX 需求收集。创建需求文档、评估规模，并同步共享 cx core 的 feature 注册信息。

m19803261706 Bundle

Codex 侧 CX 任务规划。读取 PRD/Design，生成任务清单、任务文档与共享状态。

m19803261706 Bundle

Codex 侧 CX 技术设计。基于 PRD 生成设计文档与契约，并与共享 cx core 保持一致。

postmelee Skill

Create and update the Hyper-Waterfall daily task board (`mydocs/orders/yyyymmdd.md`). Apply milestone table format, status update rules, and backlog section rules. When task-start, task-stage-report, task-final-report, or pr-merge-cleanup updates the daily task board, it follows this SKILL's format.

postmelee Skill

创建并更新 Hyper-Waterfall daily task board（`mydocs/orders/yyyymmdd.md`）。 应用 milestone table format、status update rules 和 backlog section rules。 当 task-start、task-stage-report、task-final-report 或 pr-merge-cleanup 更新 daily task board 时，遵循此 SKILL 的格式。

eugenezhangco-spec Skill

Turn a one-line objective into a step-by-step construction plan for multi-session, multi-agent engineering projects. Each step has a self-contained context brief so a fresh agent can execute it cold. Includes adversarial review gate, dependency graph, parallel step detection, anti-pattern catalog, and plan mutation protocol. TRIGGER when: user requests a plan, blueprint, or roadmap for a complex multi-PR task, or describes work that needs multiple sessions. DO NOT TRIGGER when: task is completable in a single PR or fewer than 3 tool calls, or user says "just do it".

surya8991 Skill

Meta-orchestrator that classifies tasks and routes to the right combination of installed skills across caveman (output compression), superpowers (dev workflow), anthropic-skills (business/domain expertise), and wired tactical libraries (wshobson, davila7, impeccable, anthropic-official). 26 routing categories including whole-codebase analysis via repomix-pack, LLM/AI app dev, a live task dashboard, meta skill discovery, and curated tactical skill libraries (wshobson, davila7) for backend/security/CI-CD/database depth. Also scaffolds the canonical project-doc spine (README/AGENTS.md/CLAUDE.md/PROJECTLOG.md) in new projects via `/agent-master scaffold`. Invoke with /agent-master. Use as default entry point for ambiguous or multi-domain requests.

jawhnycooke Bundle

Guides creation and organization of Claude Code plugin directory structure, including the plugin manifest (plugin.json), component directories (commands, agents, skills, hooks), MCP server configuration, auto-discovery mechanism, portable path references with ${CLAUDE_PLUGIN_ROOT}, and file naming conventions. Activates when the user asks to create a plugin, scaffold a plugin, organize plugin components, set up plugin.json, or needs guidance on plugin architecture.

dasein108 Skill

Use to produce and publish a chosen Slope Studio backlog bet, then bind the run to the marketing journal so it can be measured later.

dasein108 Skill

Use when deciding what short video to make next for a Slope Studio channel: generate falsifiable viral bets and persist them to the marketing backlog.