Coding & Dev Tools

PHP type juggling and weak comparison (`==`) bypass. Use when authentication, HMAC/signature checks, or token validation uses loose equality, numeric coercion, or hash comparisons without strict types — common in legacy PHP and CTF-style code paths.

Complete PortSwigger deep-dive with exact payloads for every lab variant including zero-day techniques

CRLF injection playbook. Use when user input reaches HTTP response headers, Location redirects, Set-Cookie values, or log files where carriage-return/line-feed characters can split or inject content.

Complete PortSwigger deep-dive with exact payloads for every lab variant including zero-day techniques

Entry P1 category router for file access and upload workflows. Use when testing download endpoints, file paths, local file inclusion, upload flows, preview pipelines, archive extraction, or storage and sharing boundaries.

Execute advanced evasion by injecting malicious code into the memory space of a legitimate, suspended process (Process Hollowing). This skill details techniques to bypass static and dynamic analysis by masking malicious activity behind trusted processes like svchost.exe or explorer.exe.

Official Anthropic SDK for Claude AI with chat, streaming, function calling, and vision capabilities

Catches type errors before runtime using static type checking with gradual typing, strict mode, and Protocol support for Python projects.

Creates elaborate, multi-component HTML artifacts using React, Tailwind CSS, and shadcn/ui, then bundles them into a single self-contained HTML file.

Phoenix operations and deployment: releases, runtime configuration, clustering, libcluster, telemetry/logging, secrets, assets, background jobs, and production hardening on the BEAM.

Create detailed implementation plans with bite-sized tasks for engineers with zero codebase context

Test quality inspection framework for reviewing test coverage, identifying gaps, and ensuring comprehensive validation

bcc reference tool

Use when calculating CNC speeds and feeds, selecting cutting tools, referencing G-code commands, looking up material cutting data, or computing machining parameters.

Distributed control system manager

Plan resources, track inventory, and coordinate departments with reporting. Use when allocating resources, managing stock, or tracking department KPIs.

ISO standard compliance checker

Manufacturing execution system tracker

Process text with NLP. Use when tokenizing, analyzing sentiment, extracting entities, summarizing documents, or measuring similarity.

PLC programming reference — ladder logic, structured text, function blocks, and IEC 61131-3 standards. Use when writing PLC programs, debugging rungs, or reviewing automation logic.

Manage SMS templates with variable substitution and formatting. Use when preparing bulk messages.

Compress, extract, list, and encrypt ZIP archives in batch. Use when archiving files, extracting packages, listing contents, encrypting backups, or batching.

Copy operations reference — file duplication, rsync patterns, CoW, buffer strategies, and cross-platform sync. Use when duplicating files, syncing directories, or implementing copy-on-write.

diff reference tool

EULA drafting reference — license grant, restrictions, termination, IP ownership, and enforceability. Use when drafting or reviewing End User License Agreements for software products.

Gemini CLI for one-shot Q&A, summaries, and generation.

Formally verify programs by writing Lean 4 proofs. Trigger this skill whenever the user wants to formally verify code, generate Lean 4 proofs, prove properties about algorithms or smart contracts, verify invariants, convert program logic into formal specifications, or anything involving Lean 4 and formal verification. Also trigger when the user mentions "qedgen", "lean proof", "formal proof", "verify my code", "prove correctness", "formal verification", or wants mathematical guarantees about their implementation.

Search GIF providers with CLI/TUI, download results, and extract stills/sheets.

Foodora-only CLI for checking past orders and active order status (Deliveroo WIP).

Manage Apple Notes via the `memo` CLI on macOS (create, view, edit, delete, search, move, and export notes). Use when a user asks SolanaOS to add a note, list notes, search notes, or manage note folders.

Extract single frames or short clips from videos using ffmpeg.

Manage Apple Reminders via remindctl CLI (list, add, edit, complete, delete). Supports lists, date filters, and JSON/plain output.

Solana development patterns used in the Pump SDK — Anchor IDL-based program interaction, SPL Token and Token-2022 management, transaction construction with instruction composition, RPC batching, and cross-program coordination.

Use when the user wants to run, monitor, or debug the SolanaOS Seeker daemon and Telegram command flow

Secure Solana wallet generation using official Solana Labs libraries — Ed25519 keypairs, memory zeroization, vanity address generation, offline-only operation, and multi-language implementations (Rust, TypeScript, Bash).

当需要系统性地规划个人生活、职业发展或特定项目，以摆脱外部干扰、聚焦核心目标时