Jitsu Skills

Audits project dependencies for known vulnerabilities, outdated packages, and unused modules. Triggered when a user asks to check for vulnerabilities, audit dependencies, or run a security scan on installed packages. Produces a severity-sorted findings table with one-liner fix commands and cross-references Sonatype for recommended versions.

Pre-publish PII and secrets scrubbing automation for repositories being prepared for open source. Runs regex-based sweeps for email addresses, phone numbers, API keys, spreadsheet IDs, internal URLs, physical addresses, and known team member names. Reports findings with file and line numbers, guides the user through review and replacement with safe sample data, then verifies all patterns are cleared. Triggered when the user asks to scrub PII, prepare a repo for open source, make a repo public, check for secrets, or run a PII audit.

Weighted lead scoring engine that evaluates prospects using Clay MCP enrichment data across five dimensions: company fit, title seniority, tech stack overlap, social presence, and engagement signals. Triggers when the user asks to score leads, prioritize contacts, or rank prospects. Outputs a tiered classification (Hot, Warm, Cold, Skip) with a summary table and top signal per contact for fast decision-making.

Full npm publish pipeline for scoped @0xjitsu packages. Runs pre-flight validation (package.json fields, .npmrc scope, build, tests, dry-run pack), interactive version bump (patch/minor/major), publishes to npm with public access, creates a git tag and GitHub release, then verifies the published package is installable. Triggered when the user asks to publish an npm package, release a new version, ship to npm, or cut a release.

Compiles multi-source meeting briefing documents by pulling event details from Google Calendar, enriching attendee profiles via Slack and Clay, gathering context from Notion, Slack, and Gmail, and assembling a structured markdown prep document. Triggered when the user asks to prepare for a meeting, brief on attendees, compile meeting context, or get ready for a call.

Generates structured changelogs from git history using conventional commit parsing. Reads commits since the last git tag, categorizes them into Added, Fixed, Changed, Breaking Changes, and Internal sections, then prepends a formatted entry to CHANGELOG.md. Falls back to AI-based categorization when commits do not follow conventional format. Triggered when the user asks to generate a changelog, update CHANGELOG, prepare release notes, or review what changed since the last release.

Generates dark-themed, accessible data visualization components using Chart.js or Recharts. Produces glass morphism styled charts that match the user's design system with proper accessibility, responsive sizing, and performance optimization. Triggered when the user asks to create a chart, visualize data, add a graph, or build a dashboard component.

Scans the full git history of a repository for leaked secrets, API keys, tokens, and credentials. Triggered when a user asks to audit commits for exposed credentials, run a pre-publish security check, or scan git history for sensitive data. Produces a severity-ranked findings table with remediation commands. Read-only — never modifies git history automatically.

Translates natural language data model descriptions into production-ready Supabase migrations. Generates CREATE TABLE statements, Row Level Security policies, indexes, and TypeScript types. Triggered when the user asks to design a database schema, create tables, set up Supabase, or generate a migration. Shows full SQL for review before applying anything.

Manages secrets and API keys in the macOS Keychain using the security CLI. Triggered when a user asks to store, retrieve, list, rotate, or delete tokens and credentials. Uses a consistent naming convention with the bbmisa account and uppercase service names. Never exposes secrets in plaintext output or commits them to git.

Scaffolds production-ready R&D proposal and research pitch deck apps using Next.js App Router, Tailwind CSS, and Geist fonts. Generates the full project structure including dark-themed glass morphism UI, citation system, scroll-spy navigation, animated counters, and Lighthouse-ready metadata. Triggered when the user asks to build a research proposal, R&D app, pitch deck, or single-page research site.

Multi-channel drip sequence orchestrator that builds and executes outbound campaigns across email, Slack, and direct messages. Triggers when the user asks to set up an outbound campaign, drip sequence, multi-channel outreach, or creator outreach program. Coordinates Clay enrichment, Gmail drafts, Slack DMs, and scheduled follow-ups with full state tracking in Supabase. Enforces send limits, opt-out compliance, and batch confirmation before any messages go out.

Generates, validates, and installs macOS LaunchAgent plist files for scheduling recurring tasks and daemons. Triggered when a user asks to create a LaunchAgent, schedule a script, automate a recurring macOS task, or set up a background daemon. Uses the com.berna namespace and validates plist syntax before writing. Always confirms before loading.

Merge-field personalization engine that transforms outreach templates into tailored messages using Clay MCP enrichment data. Triggers when the user asks to personalize messages, write outreach emails, or customize templates with contact-specific details. Supports four tone modes and three depth levels, from basic name insertion to hyper-personalized hooks using recent achievements and mutual connections. Enforces anti-patterns to prevent generic slop.