aibot88
- 8.3k skills
- 0 followers
- 3 repo stars
- 2 weeks ago last updated
- ▌ Forms Router · aibot88 bundleRouter for web form development. Use when creating forms, handling validation, user input, or data entry across React, Vue, or vanilla JavaScript. Routes to 7 specialized skills for accessibility, validation, security, UX patterns, and framework-specific implementations. Start here for form projects.
- ▌ Fuzzing Apis · aibot88 bundleConfigure perform API fuzzing to discover edge cases, crashes, and security vulnerabilities. Use when performing specialized testing. Trigger with phrases like "fuzz the API", "run fuzzing tests", or "discover edge cases".
- ▌ GCP Services · aibot88 bundleConfigure GCP IAM, Secret Manager, and VPC networking with security best practices. PROACTIVELY activate for: (1) setting up service accounts and IAM permissions, (2) managing secrets in Secret Manager, (3) configuring VPC and firewall rules. Triggers: "iam", "secret manager", "vpc"
- ▌ Gdpr Privacy · aibot88 bundleUse when implementing GDPR compliance, handling data subject requests, conducting DPIAs, managing consent, or responding to data breaches - covers all key GDPR requirementsUse when ", " mentioned.
- ▌ Gh Create Pr · aibot88 bundleCreate or update GitHub pull requests using the repository-required workflow and template compliance. Use when asked to create/open/update a PR so the assistant reads `.github/pull_request_template.md`, fills every template section, preserves markdown structure exactly, and marks missing data as N/A or None instead of skipping sections.
- ▌ Ghost Writer · aibot88 bundleProduce first drafts that match a writer's authentic voice using their Voice DNA Document. Consumes DNA documents from writing-dna-discovery skill. Generates 2 meaningfully different drafts with headlines, confidence assessment, decision notes, and DNA refinement suggestions. Collaborative partner that evaluates, pushes back, and advocates for quality. Handles blog posts, essays, newsletters, and more.
- ▌ Domain Setup · aibot88 bundleConfigure your industry domain, country, and regulatory context — agents automatically adapt to your business
- ▌ Don Leidraad · aibot88 bundleNeRDS software development guidelines for Dutch government projects. Use when making architectural decisions, setting up CI/CD, implementing security practices, handling privacy requirements, or ensuring accessibility compliance in government software.
- ▌ Don Security · aibot88 bundleSecurity standards and authentication tools for Dutch government software. Use when implementing DigiD, eHerkenning, OAuth, OIDC, PKIoverheid, or other Dutch government authentication and security standards.
- ▌ Drk Postgres · aibot88 bundlePostgreSQL 16 & Drizzle ORM Best Practices für DRK-Digitalisierungstools. Verwende diesen Skill bei Variante-B-Apps (Server + Datenbank) für Schema-Design, Migrations, Security (RLS), Query-Optimierung und Docker-Konfiguration.
- ▌ Editorial QA · aibot88 bundlePre-publish QA framework for content. Brief adherence, voice consistency, fact accuracy, structure and clarity, AI-content audit, SEO and AEO compliance, internal linking and schema validation, QA at scale via sampling, the QA workflow, and the discipline that distinguishes catch-problems QA from checkbox QA. Triggers on editorial QA, content review, pre-publish review, content audit, content QA process, AI-content audit, hallucination check, content sampling, programmatic QA, voice consistency check, brief adherence check. Also triggers when a content team is shipping sloppy work, when AI-co-authored content is reaching publish unaudited, when a QA process burns reviewers out, or when a programmatic SEO set needs sampling discipline.
- ▌ Eks Security · aibot88 bundleEKS security hardening and best practices. Use when configuring cluster security, implementing pod security, managing secrets, preparing for compliance audits, hardening infrastructure, scanning containers, or responding to security incidents.
- ▌ Electron Pro · aibot88 bundleDesktop application specialist building secure cross-platform solutions. Develops Electron apps with native OS integration, focusing on security, performance, and seamless user experience.
- ▌ Email Sender · aibot88 bundleSend and read emails via SMTP/IMAP using configured accounts (Web.de, Gmail, etc.). Supports plain text, HTML emails, attachments, CC/BCC, IMAP reading, searching, thread tracking, and summarization. Features retry-logic, timeout handling, and proper logging. Uses credentials from .env file.
- ▌ Emulate Seed · aibot88 bundleGenerate emulate seed configs for stateful API emulation. Wraps Vercel's emulate tool for GitHub, Vercel, Google OAuth, Slack, Apple Auth, Microsoft Entra, AWS (S3/SQS/IAM), Okta, Resend, Stripe, and MongoDB Atlas APIs. Not mocks — full state machines where create-a-PR-and-it-appears-in-the-list, send-an-email-and-retrieve-from-local-inbox. Use when setting up test environments, CI pipelines, integration tests, or offline development.
- ▌ Evm Analysis · aibot88 bundleDeep EVM bytecode analysis and decompilation capabilities for smart contract security, gas optimization, and reverse engineering. Provides tools for analyzing opcodes, storage layouts, proxy patterns, and bytecode verification.
- ▌ Excalicl4ude · aibot88 bundleSessione interattiva su canvas Excalidraw bidirezionale. Usa questa skill quando l'utente vuole discutere visivamente di un'idea, fare brainstorming su un canvas, disegnare insieme un'architettura, creare diagrammi interattivamente, o collaborare visivamente su qualsiasi concetto. Attiva anche quando l'utente dice "apri un canvas", "disegna", "vediamolo visivamente", "facciamo uno sketch", "discutiamone su un canvas", "fammi vedere", o qualsiasi variante che implichi collaborazione visiva.
- ▌ Exploit Test · aibot88 bundleGenerate a runnable exploit-validation command (Nuclei template, Metasploit module hint, AI-assisted Python script, or curl-based PoC) against a user-specified authorised target. Use when validating that a fix actually closed the vulnerability path, confirming a patch deployed correctly, or producing a copy-pasteable test command for QA. The skill never executes — the user runs.
- ▌ Feed Curator · aibot88 bundleFetch raw feed items from feed-server to Inbox/feeds/raw/ with dedupe and noise filter. Does NOT summarize, classify P0-P3, write knowledge notes, or update daily note — those steps are removed (2026-05-01 redesign: AI no longer authors substance into knowledge/). Trigger on: /feed-curator, "fetch feeds", "pull feeds", scheduled cron. Skip when: user wants summaries or analysis (use /knowledge after triage instead).
- ▌ File Cleanup · aibot88 bundleSession-based file cleanup for privacy compliance. Use to delete temporary files, uploaded clinical notes, generated outputs, and expired logs to maintain HIPAA-friendly operations.
- ▌ Find Bangers · aibot88 bundleUse when the user asks for 'bangers' on X (Twitter) - breakout tweets with exceptional engagement relative to the author's usual performance. Surfaces anomalously high-performing tweets for inspiration or trend-spotting. Read-only.
- ▌ Dev Supabase · aibot88 bundleBackend development with Supabase. Trigger when the user wants to configure auth, the database, or Supabase storage.
- ▌ Devops Agent · aibot88 bundleYour on-call DevOps assistant — one-click deploy, monitoring setup, scheduled backups, and fault diagnosis. Safety-first design with confirmation prompts, dry-run mode, snapshot rollback, and audit logging. (中文) 一键部署、监控搭建、定时备份、故障诊断,安全公约贯穿全局。
- ▌ Di Migration · aibot88 bundleAutomate migration between Kotlin/Android dependency injection frameworks. Covers Hilt → Koin, Dagger → Koin, Toothpick → Koin, Kodein → Koin, Koin 3.x → Koin 4.x upgrades, Koin DSL → Koin 4.x Safe DSL with Compiler Plugin, and Koin KSP Annotations → Koin Compiler Plugin. Use this skill whenever the user mentions migrating, converting, or switching DI frameworks, refactoring from Hilt/Dagger/Toothpick/Kodein to Koin, removing Hilt/Dagger/Toothpick/Kodein, upgrading Koin versions, migrating from classic Koin DSL to Koin Safe DSL or annotations with Compiler Plugin, or moving from KSP-based annotations to the Koin Compiler Plugin. Also trigger when the user pastes Hilt/Dagger/Toothpick/Kodein module code and asks to convert it, when they want compile-time verification for Koin modules, or when they mention "dependency injection migration", "replace Hilt with Koin", "move away from Dagger", "migrate from Toothpick", "migrate from Kodein", "Kodein to Koin", "convert DSL to annotations", "add Koin compiler", "Koin
- ▌ Diff Summary · aibot88 bundleOne-call structured triage of a git diff. Returns per-file role classification (source/test/config/doc/generated/build/fixture/migration), risk tier (low/medium/high) with reasons, public-API touch detection, co-changed-test detection, secret-risk path flagging, and aggregate stats. Replaces the 5-20 Read calls an agent burns reading each modified file individually to figure out "what kind of change is this and how risky is it". Stateless, no network, stdlib Python only.
- ▌ Digitalocean · aibot88 bundleDigitalOcean infrastructure — Droplets, managed databases, Spaces, load balancers, firewalls, DNS management
- ▌ Discover API · aibot88 bundleAutomatically discover API design skills when working with REST APIs, GraphQL schemas, API authentication, OAuth, JWT, rate limiting, API versioning, error handling, or endpoint design. Activates for backend API development tasks.
- ▌ Docker Guide · aibot88 bundleDocker container guidelines for production deployments. Apply when editing `Dockerfile`, `docker-compose.yml`, or `.dockerignore` files. Use for multi-stage builds, security hardening, image slimming. Keywords: Dockerfile, multi-stage, alpine/distroless, layer caching, non-root, secrets, health checks, BuildKit.
- ▌ Domain Infra · aibot88 bundlePadrões de infraestrutura Kubernetes, secrets, clusters e operações GitOps no Yby CLI
- ▌ Tmdd Threat Modeling · aibot88 bundleCreate and manage TMDD threat models grounded in actual codebase architecture. Use when the user wants to threat-model a system, add a feature, create security threat mappings, run tmdd commands, or work with .tmdd/ YAML files.
- ▌ Cve Research · aibot88 bundleResearch CVEs and security advisories for project dependencies. Uses Exa, NVD API, OSV.dev, and GitHub Advisory Database to find known vulnerabilities.
- ▌ Dast Scanner · aibot88 bundleDynamic Application Security Testing execution and management. Configure and execute OWASP ZAP and Nuclei scans, run authenticated scanning, manage scan policies and scope, correlate findings with SAST results, and generate comprehensive vulnerability reports.
- ▌ Data Privacy · aibot88 bundleUnderstanding and managing what digital services collect, store, share, and infer about you. Covers password security and entropy, multi-factor authentication, privacy settings, data minimization, the difference between first-party and third-party tracking, cookies and fingerprinting, privacy laws (GDPR, CCPA), and how to respond to data breaches. Use when helping a learner make informed decisions about what to share, with whom, and under what terms.
- ▌ Data Storage · aibot88 bundleImplement client-side data storage with localStorage, IndexedDB, or SQLite WASM. Use when storing user preferences, caching data, or building offline-first applications.
- ▌ Datadog Auth · aibot88 bundleTroubleshoot Datadog API authentication issues (401/403 errors), understand API keys vs app keys, and configure correct regions. Use when hitting auth errors or setting up Datadog API access.
- ▌ Dem Pipeline · aibot88 bundleRun DEM lineament analysis to identify unmapped fault structures. Use when visually confirming orphan earthquake clusters, mapping fault extensions, or finding dark earthquake sources. Triggers on "DEM analysis", "lineament", "edge detection", "drainage analysis".
- ▌ Deps Upgrade · aibot88 bundleDependency-upgrade campaign — outdated scan, batch-by-severity, breaking-change remediation, lockfile audit. Use when CVEs require remediation, when a major upstream version lands, when stack compatibility forces a sweep, or on a scheduled (quarterly) hygiene cadence. CVE-driven bumps consume security audit findings as input.
- ▌ Dev Delegate · aibot88 bundleInternal skill used by dev-implement during Phase 5 of /dev workflow. NOT user-facing - should only be invoked by dev-ralph-loop inside each implementation iteration. Handles Task agent spawning with TDD enforcement and two-stage review (spec compliance + code quality).
- ▌ CLI Services · aibot88 bundleEffect.Service patterns for CLI infrastructure. Covers service definition, Layer composition, and dependency injection for CLI applications.
- ▌ Cloud Finops · aibot88 bundleExpert FinOps guidance covering cloud, AI, and SaaS technology spend. Includes AI cost management, GenAI capacity planning, Anthropic billing, AWS (EC2, Bedrock, Savings Plans, CUR, commitment strategy), Azure (reservations, Savings Plans, AHB, OpenAI PTUs, portfolio liquidity), GCP (Vertex AI, Compute Engine, BigQuery), tagging governance, SaaS management (SAM, licence optimisation, SMPs, shadow IT), AI coding tools (Cursor, Claude Code, Copilot, Windsurf, Codex), ITAM, Databricks, Snowflake, OCI, and GreenOps. Use for any query about technology cost, commitment portfolio management, rightsizing, cost allocation, SaaS sprawl, AI dev tool spend, or connecting spend to business value. Built by OptimNow.
- ▌ Cm Test Gate · aibot88 bundleComplete guide to setting up a reliable test gate for any project — covers stack detection, 4 core test files, script wiring, secret hygiene, and Cloudflare Workers/Pages patterns. Use when starting a new project, adding CI to an existing one, or when "tests pass but production breaks." Companion to cm-safe-deploy and cm-project-bootstrap.
- ▌ Zoom Cobrowse Sdk · aibot88 bundleReference skill for Zoom Cobrowse SDK. Use after routing to a collaborative-support workflow when implementing browser co-browsing, annotation tools, privacy masking, remote assist, or PIN-based session sharing.
- ▌ Code Auditor · aibot88 bundlePerforms comprehensive codebase analysis covering architecture, code quality, security, performance, testing, and maintainability. Use when user wants to audit code quality, identify technical debt, find security issues, assess test coverage, or get a codebase health check.
- ▌ Coder Convex · aibot88 bundleSelf-hosted Convex development in Coder workspaces with authentication, queries, mutations, React integration, and environment configuration
- ▌ Consent Flow · aibot88 bundleGenerates GDPR/CCPA/DPDP privacy consent flows with granular category preferences, consent state persistence, audit logging, and ATT (App Tracking Transparency) integration. Use when user needs privacy consent UI, cookie/tracking consent, or compliance management.
- ▌ Convex Audit · aibot88 bundleAudit Convex—schema, security, runtime edges, migrations, function risk. Triggers—review, contract, remediate. Not greenfield spec (convex-feature-spec).
- ▌ Covered Call · aibot88 bundleImplement covered call options strategy for income generation on long stock positions. Use when seeking to enhance returns through option premium collection while maintaining stock ownership. Covers structure, risk management, Greeks analysis, execution mechanics, and regulatory compliance for covered call writing programs.
- ▌ Cpg Analysis · aibot88 bundleDeep code property graph analysis with Joern CPG (AST+CFG+PDG) and CodeQL for control flow, data flow, taint analysis, and security auditing
- ▌ Create Specs · aibot88 bundleTransform reverse-engineering documentation into GitHub Spec Kit format. Initializes .specify/ directory, creates constitution.md, generates specifications from reverse-engineered docs, and sets up for /speckit slash commands. This is Step 3 of 6 in the reverse engineering process.
- ▌ Crypto Audit · aibot88 bundleAudit cryptographic implementations for weak algorithms, insecure defaults, predictable randomness, key management issues, and timing attacks. Use when reviewing security-critical crypto code.
- ▌ Cryptography · aibot88 bundleComprehensive cryptography guidance covering encryption algorithms, password hashing, TLS configuration, key management, and post-quantum considerations. Use when implementing encryption, choosing hashing algorithms, configuring TLS/SSL, managing cryptographic keys, or reviewing cryptographic implementations.
- ▌ Csharp Rules · aibot88 bundleC#/.NET coding rules from ai-toolkit: coding-style, frameworks, patterns, security, testing. Triggers: .cs, .csproj, .sln, ASP.NET, ASP.NET Core, EF Core, LINQ, NUnit, xUnit, dotnet. Load when writing, reviewing, or editing C#/.NET code.
- ▌ Ctrl C V Tdd · aibot88 bundleTest-pattern doctrine. Tests are copyable from ~/.claude/patterns/tests/, three categories: input boundary, contract, effect. Make sure to consult this skill whenever code changes touch a boundary where someone else's code meets yours, even if the user doesn't say "test" or "TDD" — Claude tends to ship untested boundary code, and this skill prevents the Saturday phone call. TRIGGER when: code under change has external callers (other modules, cron, CLI, HTTP/RPC clients, "外部调用", "被外部调用"); persists state (DB write, file write, redis/cache, session storage, anything that survives the request); calls third-party API/SDK; task is classified as LARGE per ctrl-c-v sizing (4+ files, new capability, new architecture, new external contract) — LARGE always triggers TDD regardless of caller scope; user mentions tests, TDD, 测试, boundary, contract, mock, fixture, red/green; business domain involves payments, queues, webhooks, auth, external integration. SKIP when: code change is purely internal helpers used only by caller
- ▌ Cube Sandbox · aibot88 bundleCube Sandbox 安全沙箱执行技能。当需要安全执行 Python 代码、Shell 命令,或需要隔离环境运行不受信任的代码时使用。 适用场景: (1) 用户要求"在沙箱中执行代码"、"跑一段 Python"、"安全执行"、"隔离环境运行"; (2) 需要执行可能有副作用的代码(文件操作、网络请求、安装包等),希望通过沙箱隔离风险; (3) 需要读写沙箱内文件、挂载宿主机目录到沙箱; (4) 需要控制沙箱网络策略(完全断网、白名单、黑名单); (5) 需要暂停/恢复沙箱(保留内存快照以实现快速复用)。 Cube Sandbox 兼容 E2B SDK,通过环境变量 E2B_API_URL 指向 Cube 部署地址即可使用。
- ▌ Baseline Kit · aibot88 bundleOpenClaw 安全配置基线生成器和审计工具。生成开发/团队/企业/隔离环境的安全配置模板,并审计现有配置的安全问题(网络暴露、认证限流、技能来源限制、审计日志、备份策略、密钥卫生)。
- ▌ Blog Cluster · aibot88 bundleSemantic topic cluster planning and automated execution engine for claude-blog. Performs SERP-based keyword research, groups keywords by search intent and SERP overlap, builds a hub-and-spoke cluster architecture, generates an interactive SVG cluster map, and executes the full cluster by orchestrating blog-write calls with shared cluster context and automatic internal-link injection. Fills the strategy-to-execution gap: blog-strategy plans the blueprint, blog-cluster builds the house. Use when user says "blog cluster", "topic cluster", "content cluster", "cluster plan", "cluster execute", "pillar content", "hub and spoke", "content ecosystem", "cluster map".
- ▌ Book To Post · aibot88 bundleSearch for books using Google Books API (by title or ISBN) and generate a Hugo markdown post with book metadata including cover, description, author, etc. Use when the user provides a book title or ISBN.
- ▌ Browser Pair · aibot88 bundleCollaborative headed browser session for UI work. Launch Playwright Chromium visible to the user, handle auth, then interactively drive the browser while the user watches and gives real-time visual feedback. Edit code and refresh to verify fixes live. Use when the user says 'browser pair', 'paired browser', 'let's look at this together', 'open chromium', or wants to iterate on UI with live visual feedback.
- ▌ Abmahnung · aibot88 bundleAbmahnung versenden (Sendemodus) oder eine erhaltene Abmahnung triagieren (Empfangsmodus). Verwenden bei Marken-, Urheber-, Patent- oder UWG-Verstößen. Produziert einen Abmahnungsentwurf mit modifizierter Unterlassungserklärung, Streitwert und Kostenansatz (RVG) oder ein Optionen-Memo zur erhaltenen Abmahnung.
- ▌ Cf Analytics · aibot88 bundleTrack content quality scores, pipeline timing, and compliance trends with insights and alerts.
- ▌ Chatgpt Send · aibot88 bundlePosle zpravu do ChatGPT vlakna pres Playwright CDP — ovlada Edge prohlizec a zapise zpravu primo do ChatGPT input boxu. Pouzij kdyz uzivatel explicitne chce ODESLAT zpravu: 'chatgpt-send', '/chatgpt-send', 'spust chatgpt-send', nebo 'posli [neco] do chatgpt pres playwright/CDP'. Parametry: project= (Legal/Coding/LG13), thread= (URL), message= (text), special= (/github /search). Nepouz: kdyz uzivatel jen mluvi o chatgpt, chce precist odpoved (→ chatgpt-force-read), nebo chce second-opinion (→ chatgpt-ask).
- ▌ Check Stripe · aibot88 bundleAudit Stripe integration: configuration, webhooks, subscription logic, security. Outputs structured findings. Use log-stripe-issues to create issues. Invoke for: Stripe audit, payment review, subscription analysis.
- ▌ CI Standards · aibot88 bundleCI/CD standards knowledge for validating project compliance with CI conventions
- ▌ Cis Controls · aibot88 bundleExpert CIS Controls v8 (CIS Top 18) advisor — implementation group scoping (IG1/IG2/IG3), control gap assessments, safeguard-level guidance, asset inventory, software inventory, data protection, secure configuration, account management, access control, continuous vulnerability management, audit log management, email and web browser protections, malware defenses, network infrastructure management, network monitoring and defense, application software security, incident response, penetration testing, and CIS Controls mapping to NIST CSF, ISO 27001, SOC 2, and CMMC. Use for any question about CIS Controls, CIS Benchmarks, Implementation Groups, or prioritized cyber hygiene for any organization size.
- ▌ Clasp Master · aibot88 bundleFull-stack CLASP (Command Line Apps Script) orchestration — from local dev to deployed Google Workspace automation. Use this skill whenever the user mentions clasp, Apps Script CLI, GAS local development, deploying Google Apps Script, syncing scripts with Drive, automating Sheets/Docs/Forms/Slides from the terminal, Google Workspace automation via code, or any workflow that involves clasp push/pull/deploy/run. Also trigger when the user says things like "quiero automatizar con AppScript", "deploy un script de Sheets", "versionar mi Apps Script", or "conectar clasp a Drive/Notion/Calendar". This skill covers installation, auth, multi-account, project lifecycle, version/deployment management, remote execution, TypeScript, Git integration, .claspignore, MCP mode, and enterprise patterns (ADC, service accounts). When in doubt, use this skill.
- ▌ Claude Peers · aibot88 bundleDiscover, message, and coordinate AI coding agents (Claude Code, Codex CLI) running on the same machine via a shared Unix socket broker backed by SQLite. Supports cross-session task delegation, peer summaries, and session lifecycle management. Triggers on 'peer agents', 'cross-session communication', 'message Codex', 'inter-agent messaging', 'coordinate agents'.
- ▌ Claude Vault · aibot88 bundleUse this skill whenever the user mentions API keys, passwords, tokens, credentials, secrets, .env files, OAuth tokens, or any sensitive value that needs to end up in code, config, or a command. The skill stores secrets in a vault that the model never reads — you reference them by name and let the claude-vault CLI inject the actual values.
- ▌ Clawsec Feed · aibot88 bundleSecurity advisory feed package for OpenClaw-related threats and vulnerabilities. The upstream feed is updated daily; local automation is handled by clawsec-suite or the operator.
- ▌ Clawtributor · aibot88 bundleCommunity incident reporting for AI agents. Contribute to collective security by reporting threats.
- ▌ Cleanup Code · aibot88 bundleComprehensive codebase cleanup across 11 quality dimensions: dead code, duplication, weak types, circular deps, defensive cruft, legacy code, AI slop, type consolidation, security, performance, and async patterns. Analyzes code with confidence scoring and verifies changes with build/test gates. Use when codebase has accumulated tech debt, after major feature work, before releases, or when code quality metrics are declining. Trigger with "/cleanup-code-code", "clean up the codebase", "remove dead code", "fix code quality".
- ▌ CLI Discover · aibot88 bundleDiscover which CLI tools are installed, their versions, and authentication status
- ▌ AWS Patterns · aibot88 bundleAWS infrastructure patterns and best practices for Terraform. Provides VPC, IAM, S3, and security group scaffolds. Use when developing AWS infrastructure.
- ▌ Axiom Design · aibot88 bundleUse when making design decisions, implementing HIG patterns, Liquid Glass, SF Symbols, typography, or structuring app entry points and authentication flows.
- ▌ Axiom IOS UI · aibot88 bundleUse when building, fixing, or improving ANY iOS UI including SwiftUI, UIKit, layout, navigation, animations, design guidelines. Covers view updates, layout bugs, navigation issues, performance, architecture, Apple design compliance.
- ▌ Azure Basics · aibot88 bundleAzure cloud services, resource management, and Azure CLI patterns. Use when working with Azure resources, resource groups, ARM templates, az commands (az vm, az network, az storage, az aks), Azure naming conventions, RBAC policies, networking (VNet, NSG, Application Gateway), or implementing Azure best practices for resource organization, cost management, and security.
- ▌ Azure Devops · aibot88 bundleManage Azure DevOps projects, work items, repos, PRs, pipelines, wikis, test plans, security alerts, variable groups, environments/approvals, branch policies, and attachments. Use when user asks to: manage sprints, create/update work items, list repos, create PRs, run pipelines, search code, manage wiki pages, check security alerts, manage variable groups, approve deployments, or configure branch policies. Covers 13 domains with 99 tools via REST API.
- ▌ Azure Policy · aibot88 bundleExpert knowledge for Azure Policy development including troubleshooting, best practices, decision making, security, configuration, integrations & coding patterns, and deployment. Use when authoring Machine Configuration packages, deploying via ARM/Bicep/Terraform, enforcing security baselines, migrating from DSC, or querying compliance with Resource Graph, and other Azure Policy related development tasks. Not for Azure Blueprints (use azure-blueprints), Azure Role-based access control (use azure-rbac), Azure Resource Manager (use azure-resource-manager), Azure Security (use azure-security).
- ▌ Backend Core · aibot88 bundleLanguage-agnostic backend patterns: API design, authentication, security, databases. Use when: designing APIs, implementing auth, securing endpoints, modeling data. Triggers: "api design", "rest api", "graphql", "authentication", "jwt", "oauth", "security", "owasp", "database schema", "migrations", "sql".
- ▌ Backend Rust · aibot88 bundleModern Rust backend with Axum, SQLx, tokio + CI/CD automation. Use when: building Rust APIs, high-performance services, or needing build/test/lint/audit automation. Triggers: "axum", "rust backend", "rust api", "sqlx", "tokio", "cargo build", "cargo test", "clippy", "rustfmt", "cargo-audit", "cross-compile", "rust ci", "release build", "rust security", "shuttle", "actix".
- ▌ AI Auditability · aibot88 bundleImplementing comprehensive logging, tracking, and audit trails for AI systems to ensure compliance and enable debugging.
- ▌ Auditing SEO · aibot88 bundleAnalyzes a single web page URL for SEO quality, identifying issues with title tags, meta descriptions, heading structure, and content. Use when the user says "audit this page", "check SEO for", or "analyze this URL for SEO". Outputs a structured audit report with prioritized fixes.
- ▌ Auth Configs · aibot88 bundleConfigure Supabase authentication providers (OAuth, JWT, email). Use when setting up authentication, configuring OAuth providers (Google/GitHub/Discord), implementing auth flows, configuring JWT settings, or when user mentions Supabase auth, social login, authentication setup, or auth configuration.
- ▌ Auth Handler · aibot88 bundleManage authentication, authorization, and user sessions. Use when dealing with login, sign-up, API protection, middleware, or user data fetching.
- ▌ Auth Package · aibot88 bundleThis skill should be used when the user asks to "add authentication", "protect a route", "use auth hooks", "integrate Auth0", "add login/logout", "use AuthProvider", "verify JWT", or mentions @mbe/auth, OIDC, access tokens, or authentication in React or Fastify.
- ▌ Auth Pattern · aibot88 bundleAuth reference สำหรับโปรเจกต์ KAM-WEB-SCHOOLJOB — Dual Auth (Supabase + Prisma), signup/signin flow, useAuthStore interface, role-based guard, redirect pattern ใช้เพื่อลด Token โดยไม่ต้องอ่านโค้ด auth ซ้ำทุก session และป้องกัน bug จาก dual-system mismatch
- ▌ Author Skill · aibot88 bundleAuthor a new Cody skill and ship it end-to-end. Writes skills/<name>/SKILL.md, commits on the secret-agent-skills-bank branch (Cody's own branch), and fast-forwards main to the same commit so the existing publish-gateway-bundle workflow rebundles skills/** and pulls them onto the gateway. No human review step. Use when the user asks Cody to create a new skill. Do NOT use to edit an existing skill.
- ▌ Authz Review · aibot88 bundleUse when reviewing authorization end-to-end — route → gate → policy → query scope → response filter — before changes to permissions, tenants, ownership, or admin flows.
- ▌ Avv Pruefung · aibot88 bundleAVV-Prüfung nach Art. 28 DSGVO: Klausel-für-Klausel-Analyse gegen das eigene Playbook, Prüfung von Sub-Auftragsverarbeiter-Klauseln, Drittland-Transferfolgenabschätzung (TIA), EU-Standardvertragsklauseln (EU-SCC) und EU-US Data Privacy Framework (DPF). Richtung (Auftragsverarbeiter oder Verantwortlicher) wird automatisch erkannt.
- ▌ API Spectral · aibot88 bundleAPI specification linting and security validation using Stoplight's Spectral with support for OpenAPI, AsyncAPI, and Arazzo specifications. Validates API definitions against security best practices, OWASP API Security Top 10, and custom organizational standards. Use when: (1) Validating OpenAPI/AsyncAPI specifications for security issues and design flaws, (2) Enforcing API design standards and governance policies across API portfolios, (3) Creating custom security rules for API specifications in CI/CD pipelines, (4) Detecting authentication, authorization, and data exposure issues in API definitions, (5) Ensuring API specifications comply with organizational security standards and regulatory requirements.
- ▌ App Roentgen · aibot88 bundleDurchleuchtet eine Android-App systematisch und vollstaendig wie ein Roentgengeraet — extrahiert ALLE Funktionen, Bildschirme, Klick-Pfade, Paywall-Stufen und Hidden Features aus dem Quellcode, damit Werbeaussagen 1:1 gegen die tatsaechliche Funktionalitaet geprueft werden koennen. Nutze diesen Skill IMMER wenn der Benutzer sagt "App durchleuchten", "App roentgen", "Roentgen-Skill", "App-Architektur extrahieren", "Feature-Inventar", "was kann die App genau", "Werbeaussagen pruefen", "Werbeaussagen-Audit", "UWG-Audit", "Paywall-Audit", "Marketing-Compliance", "Feature-Audit", "Compliance-Pruefung", "App-Analyse fuer Rechtssicherheit", "rechtssichere Werbung pruefen", "stimmt was wir versprechen mit der App ueberein", "App komplett analysieren", "alle Funktionen einer App auflisten", oder generell jede Android-App systematisch durchleuchtet werden soll. Auch triggern bei Voice-Schreibweisen wie "Roentgen", "X-Ray", "Durchleuchten" im Kontext von Apps. Funktioniert fuer beliebige Android-Apps (modernes Kotlin/Co
- ▌ Appsec Owasp · aibot88 bundleUse this skill when securing web applications, preventing OWASP Top 10 vulnerabilities, implementing input validation, or designing authentication. Triggers on XSS, SQL injection, CSRF, SSRF, broken authentication, security headers, input validation, output encoding, OWASP, and any task requiring application security hardening.
- ▌ Arch Domains · aibot88 bundleRequired for any work in src/domains/. Covers business rule ownership, port type placement, two injection styles, and intra-domain composition.
- ▌ Argo CD Apps · aibot88 bundleAuthor and maintain Argo CD `Application` and `ApplicationSet` manifests as a GitOps consumer (publisher), targeting Argo CD v3.3 / v3.4 (May 2026). Covers source types (Helm, Kustomize, OCI, multi-source, plugin), sync policies + options + waves + hooks, ApplicationSet generators (List, Cluster, Git, Matrix, Merge, SCMProvider, PullRequest, Plugin, ClusterDecisionResource), Progressive Sync (Beta), Source Hydrator (still Alpha), AppProjects, RBAC, sync impersonation (`destinationServiceAccounts`), GPG/cosign signature verification, GitOps repo layout (mono vs poly, app-of-apps vs ApplicationSet — Argo recommends ApplicationSet first), troubleshooting drift / OutOfSync / sync loops / stuck-deletion / hook failures, and v3.0→v3.4 changes (annotation tracking default, SSA-migration regression, CVE-2026-42880 Secret leak). NOT for installing or operating the Argo CD control plane (HA, Dex, repo-server tuning, UI customization).
- ▌ Argocd Audit · aibot88 bundleAudits ArgoCD Application manifests and raw K8s resources for anti-patterns, security issues, and best practice violations. Use when asked to audit, review, or check ArgoCD/GitOps quality. Generates a comprehensive report under reports/YYYY-MM-DD/argocd-audit.md. (project)
- ▌ Ato Language · aibot88 bundleReference for the `.ato` declarative DSL: type system, connection semantics, constraint model, and standard library. Use when authoring or reviewing `.ato` code.
- ▌ Audit Expert · aibot88 bundleExpert-level security auditing, compliance, code review, and vulnerability assessment
- ▌ Audit Report · aibot88 bundleTemplate and formatting guidelines for security audit reports. Provides consistent structure for findings, severity classification, ASVS mapping, and remediation recommendations.
- ▌ XLSX Author · aibot88 bundleProduce a .xlsx file on disk (headless) instead of driving a live Excel workbook — for managed-agent sessions with no open Office app.
- ▌ Xunit Skill · aibot88 bundleGenerates xUnit.net tests in C#. Covers Fact/Theory, constructor injection, IClassFixture, and FluentAssertions. Use when user mentions "xUnit", "[Fact]", "[Theory]", "Assert.Equal", "C# xUnit". Triggers on: "xUnit", "[Fact]", "[Theory]", "Assert.Equal C#", "xUnit.net".
- ▌ Yida Server API · aibot88 bundleYida (宜搭) server-side OpenAPI via DingTalk Open Platform. Use when calling Yida APIs from external systems — form CRUD, batch operations, process/workflow management, task approval, attachments. Authentication via DingTalk OAuth2 access_token. Trigger keywords: 宜搭, yida, API, 表單, form, 流程, process, 審批, approval, 服務端, server.