Productivity

vincentchuwaichow Bundle

Use this skill to statically review Python asyncio reliability: blocking calls that stall the event loop, cancellation correctness, missing timeouts on external awaits, task lifecycle and structured concurrency, backpressure on unbounded fan-out, and context propagation across executor and thread boundaries. Reads source only; it never runs the service or measures actual timing.

mouadja02 Skill

Conventional commits — XML-structured workflow, feat/fix/chore/BREAKING scopes

mouadja02 Skill

Use when starting feature work that needs isolation from current workspace or before executing implementation plans - creates isolated git worktrees with smart directory selection and safety verification

mouadja02 Bundle

Two-layer memory architecture for board meeting decisions. Manages raw transcripts (Layer 1) and approved decisions (Layer 2)

mouadja02 Skill

Things 3 via things CLI: add, list, search, update, delete, verify tasks.

mouadja02 Skill

GitHub contributor context: identity, activity, trust, company/team signal.

mouadja02 Bundle

Repo contribution — read guidance, file issue, branch, commit, PR workflow

openclaw-commons Skill

Task Manager

openclaw-commons Skill

Calendar Sync

openclaw-commons Skill

Email Filters

openclaw-commons Skill

Meeting Notes

openclaw-commons Skill

Luigi Workflow

killvxk Bundle

电子邮件头包含关键元数据，能够揭示邮件的真实来源、路由路径和身份验证状态。分析这些头字段是识别钓鱼（phishing）尝试、验证发件人真实性和收集威胁情报的基础技能。

killvxk Bundle

测试 Web 应用程序邮件功能中的 SMTP 头部注入漏洞，这些漏洞允许攻击者注入额外的邮件头部、修改收件人，并通过联系表单实施垃圾邮件中继。

killvxk Bundle

商业邮件欺诈（BEC）是一种复杂的欺诈方案，攻击者冒充高管、供应商或可信合作伙伴，诱骗员工转账、共享敏感数据或更改付款信息。本技能涵盖使用邮件网关规则、行为分析和财务流程控制进行 BEC 检测。

openclaw-commons Skill

Notion

openclaw-commons Skill

Task Rust

caishengold Bundle

当需要商务邮件、营销邮件、通知邮件时使用。

mouadja02 Skill

npm registry ops: login, whoami, package availability, publish; 1Password tmux auth.

vincentchuwaichow Bundle

Review and advise on Microsoft Teams collaboration and communications governance covering Teams and Microsoft 365 group lifecycle and sprawl, external access and guest sharing controls, sensitivity labels on Teams and groups, meeting and messaging policies, phone and voice governance, and app permission policies. Cert anchor MS-700 Teams Administrator. Static review and advisory only; tenant-wide external-access or sharing-policy changes are live-guard gated. Refuses to weaken guest sharing or external access controls for convenience.

vincentchuwaichow Bundle

Use this skill to statically review npm package publication integrity: whether publish authority relies on OIDC-based trusted publishing rather than a long-lived token, whether the published artifact carries provenance a consumer can verify, whether the release-automation trust path resists compromise, whether the packed tarball and its declarations/source maps expose only what is intended, whether publish-time lifecycle scripts are justified, and whether registry/scope configuration resists dependency confusion. Reads the publish workflow and sanitized configuration only; it never runs a publish or signs anything.

mouadja02 Skill

Use when implementation is complete, all tests pass, and you need to decide how to integrate the work - guides completion of development work by presenting structured options for merge, PR, or cleanup

mouadja02 Skill

Use when preparing for a board meeting and the goal is to survive the adversarial version of it — anticipating every hard question, knowing which numbers must be cold, and shaping a narrative that acknowledges weakness without losing the room.

mouadja02 Bundle

Use when interrupted HTTP downloads resume with Range/If-Range, partial caches may be stale, or 200/206/416 and Content-Range handling could append incompatible bytes.

mouadja02 Bundle

Use when named-zone wall times cross browsers, mobile runtimes, containers, or servers and stale or divergent tzdb rules could change offsets or persisted UTC instants.

mouadja02 Bundle

Use when an npm package-lock omits or misstates OS/CPU/libc-specific optional packages, npm ci fails only on another platform, or a native binary is absent after lockfile regeneration.

killvxk Bundle

调查钓鱼（Phishing）邮件事件，从初始用户举报开始，经过邮件头分析、URL/附件引爆、 受影响用户识别和遏制行动，使用 Splunk、Microsoft Defender 和沙箱分析平台等 SOC 工具。 适用于收到的钓鱼邮件举报需要进行完整事件调查以确定范围和影响时。

killvxk Bundle

通过分析任务创建事件、可疑任务操作和异常调度模式，狩猎攻击者通过 Windows 计划任务实现的持久化。

killvxk Bundle

补丁管理（Patch Management）是识别、测试、部署和验证软件更新以修复组织 IT 基础设施漏洞的系统化流程。有效的补丁管理工作流通过结构化测试、审批门禁和分阶段发布，在降低攻击面的同时将运营中断降至最低。

killvxk Bundle

检测攻击者创建的恶意邮件转发规则，以维持对邮件通信的持久访问，用于情报收集和商业电子邮件入侵（BEC）攻击。

killvxk Bundle

使用 Nessus、Qualys 和 OpenVAS 等工具构建结构化的漏洞扫描工作流， 对基础设施中的安全漏洞进行发现、优先级排序和修复跟踪。适用于 SOC 团队 需要建立定期漏洞评估流程、将扫描结果与 SIEM 告警集成，以及构建 修复跟踪仪表盘的场景。

killvxk Bundle

分析 Microsoft Outlook PST 和 OST 文件，提取电子邮件取证证据，包括邮件内容、邮件头、附件、已删除邮件及元数据，使用 libpff、pst-utils 和取证电子邮件分析工具，适用于法律调查和事件响应。

killvxk Bundle

鱼叉式网络钓鱼（Spearphishing）使用个性化、经过研究的内容针对特定个人，可绕过通用垃圾邮件过滤器。邮件安全网关（SEG）如 Microsoft Defender for Office 365、Proofpoint、Mimecast 和 Barracuda 提供高级检测能力，包括行为分析、URL 引爆、附件沙箱和冒充检测。本技能涵盖配置这些网关以检测和拦截定向钓鱼攻击。

killvxk Bundle

在电子邮件客户端中实现网络钓鱼（Phishing）举报按钮，配合自动化分类工作流，对用户举报的可疑电子邮件进行分析并向举报人反馈结果。

killvxk Bundle

部署 AI 和 NLP 驱动的检测系统，通过分析写作风格、行为模式和上下文异常来识别规避传统基于规则的过滤器的商业邮件欺诈（BEC）攻击。

killvxk Bundle

邮件沙箱在隔离环境中引爆可疑附件和 URL，以检测零日恶意软件和规避性钓鱼载荷。Proofpoint 定向攻击防护（TAP）是业界领先的解决方案，使用多阶段沙箱、URL 重写和预测分析。