aibot88
- 8.3k skills
- 0 followers
- 3 repo stars
- 2 weeks ago last updated
- ▌ Binary Analysis · aibot88 bundleAnalyze binary files (exe, dll, sys, bin, ocx, scr, cpl, drv) to assess if they are malicious, perform decompilation, extract strings/imports/exports, detect malware, and provide threat assessment. Use this skill when user asks to analyze, examine, check, or assess any binary file, asks if a file is malicious/suspicious/safe, or provides a file path to a binary. Trigger for phrases like "Is [file] malicious?", "Analyze [file]", "What does [binary] do?", or any request involving binary file analysis.
- ▌ Threat Mitigation Mapping · aibot88 bundleMap identified threats to appropriate security controls and mitigations. Use when prioritizing security investments, creating remediation plans, or validating control effectiveness.
- ▌ Deploy And Runtime Verification · aibot88 bundleMANDATORY deploy after every code change. Typecheck → deploy → purge CDN → E2E on production → visual verify → fix-forward loop. Workers Builds native CI/CD, D1 Time Travel PIT recovery, D1→R2 long-term backups, wrangler rollback, wrangler secrets management, structured observability, cross-browser smoke tests, rollback procedures, and GitHub auto-configuration.
- ▌ Agent Action Input Slot Extraction · aibot88 bundleUse when designing how an Agentforce agent extracts structured input parameters (slots) from a user's natural-language utterance to invoke an action. Triggers: 'agent extract date from user', 'agent action argument extraction', 'agentforce slot filling', 'agent invocable input mapping', 'agent fails to fill required parameter'. NOT for action authoring (use agentforce/agent-actions) or for prompt-template variable binding (use agentforce/prompt-builder-templates).
- ▌ Agentprivacy Environmental Commons · aibot88 bundleEnvironmental commons and polycentric governance for 0xagentprivacy. Activates when discussing climate coordination, environmental DAOs, carbon accounting, ecosystem services valuation, future-representing mechanisms, or how the dual-agent architecture protects environmental whistleblowers and builds trust between nations/generations.
- ▌ Agentprivacy Hemispheric Attention · aibot88 bundleFive attentions framework for 0xagentprivacy. Activates when discussing McGilchrist's hemispheric theory, the five modes of attention (vigilance, sustained, alertness, focused, divided), how divided attention IS the gap, or the mapping between attention modes and protocol functions.
- ▌ Agentprivacy Hitchhiker Governance · aibot88 bundleDecentralised governance (Hitchhiker's Guide pattern) for 0xagentprivacy guilds. Activates when discussing Heart of Gold crew pattern, distributed authority, guild charter design, liquid democracy, conviction voting, treasury governance, or 'ships without captains' coordination.
- ▌ Agentprivacy Inscription Mechanics · aibot88 bundleOperational mechanics of the three inscription paths (Shadow, Guarded, Open) for 0xagentprivacy trust commitments. Activates when designing how bilateral proverbs get committed onchain, choosing inscription visibility levels, implementing ceremony outputs as verifiable credentials, or building the infrastructure that turns understanding into persistent trust records. Triggers: "inscription path", "Shadow inscription", "Guarded inscription", "Open inscription", "onchain commitment", "ceremony output", "bilateral proverb commitment", "trust record".
- ▌ Agentprivacy Narrative Compression · aibot88 bundleNarrative compression methodology for 0xagentprivacy spellbook system. Activates when discussing 70:1-125:1 compression ratios, story-as-documentation, proverb extraction, symbolic notation, emoji spell encoding, or how complex cryptographic concepts compress into regenerative narrative.
- ▌ Agentprivacy Plurality Cooperative · aibot88 bundlePlurality and cooperative technology (⿻) for 0xagentprivacy. Activates when discussing quadratic voting/funding/voice, intersectional identity, Audrey Tang / Glen Weyl lineage, cross-difference collaboration, or how privacy preserves the difference that plurality requires.
- ▌ Agentprivacy Sovereignty Economics · aibot88 bundleSovereignty economics and P^1.5 superlinearity for 0xagentprivacy. Activates when discussing the superlinear returns of protection, sovereignty gap quantification (17×-12,000×), V_sovereign/V_surveillance ratios, or the mathematical proof that privacy creates exponentially more value than surveillance.
- ▌ Agentprivacy Three Axis Separation · aibot88 bundleThree-axis separation model for 0xagentprivacy V5. Activates when discussing Φ_agent · Φ_data · Φ_inference, multiplicative separation, Generator-Solver split, provider fragmentation, why collapse on any axis collapses total value, or the orthogonal axes of the sovereignty architecture.
- ▌ Agentuity CLI Cloud Queue Dlq List · aibot88 bundleList messages in the dead letter queue. Requires authentication. Use for Agentuity cloud platform operations
- ▌ Agentuity CLI Cloud Sandbox Create · aibot88 bundleCreate an interactive sandbox for multiple executions. Requires authentication. Use for Agentuity cloud platform operations
- ▌ Agentuity CLI Cloud Sandbox Delete · aibot88 bundleDelete a sandbox. Requires authentication. Use for Agentuity cloud platform operations
- ▌ Agentuity CLI Cloud Sandbox Upload · aibot88 bundleUpload a compressed archive to a sandbox and extract it. Requires authentication. Use for Agentuity cloud platform operations
- ▌ Agentuity CLI Cloud Storage Create · aibot88 bundleCreate a new storage resource. Requires authentication. Use for Agentuity cloud platform operations
- ▌ Agentuity CLI Cloud Storage Delete · aibot88 bundleDelete a storage resource or file. Requires authentication. Use for Agentuity cloud platform operations
- ▌ Agentuity CLI Cloud Storage Upload · aibot88 bundleUpload a file to storage bucket. Requires authentication. Use for Agentuity cloud platform operations
- ▌ Alibaba Registry Artifact Governor · aibot88 bundleGovern Alibaba Cloud Container Registry (ACR) — Enterprise Edition vs Personal Edition selection, image vulnerability scanning, namespace IAM least privilege, image retention policies, cross-region replication, and supply chain security posture.
- ▌ Alibabacloud Ddos Security Monitor · aibot88 bundle[user] Perform security inspection and monitoring for Alibaba Cloud DDoS security products, covering DDoS Basic Protection, DDoS Native Protection, and DDoS Anti-DDoS Pro/Premium. Supports querying blackhole/scrubbing events, QPS spikes/drops, L4 traffic anomalies, HTTP status code (4xx/5xx) period-over-period surges, origin status code anomalies, and instance asset inventory. Use this Skill when users need security inspection, DDoS protection status checks, attack event queries, traffic anomaly investigation, or to confirm whether DDoS security products are provisioned. Triggers: "DDoS inspection", "security check", "DDoS protection check", "attack event query", "traffic anomaly"
- ▌ Alibabacloud Polardbx AI Assistant · aibot88 bundleAlibaba Cloud PolarDB-X Distributed Database AI Assistant. Use for PolarDB-X cluster management, topology inspection, performance diagnostics, SQL optimization, data distribution analysis, elastic scaling diagnostics, connection/session analysis, security audit, backup/restore, parameter tuning, and other O&M operations. Triggers: "PolarDB-X", "distributed database", "pxc-", "DN/CN nodes", "data sharding", "PolarDB-X diagnostics", "PolarDB-X performance", "PolarDB-X slow SQL", "YaoChi Agent", "PolarDB-X topology", "PolarDB-X backup", "PolarDB-X security audit", "PolarDB-X scaling"
- ▌ Alibabacloud Sas Openclaw Security · aibot88 bundlePerform security operations on OpenClaw environments by calling Alibaba Cloud Security Center (SAS) and ECS APIs via the aliyun CLI. Supports asset queries, vulnerability detection, baseline checks, alert analysis, daily security report generation, and Cloud Assistant command execution. Use this skill when users need to query OpenClaw security status, handle security alerts, check vulnerability risks, execute emergency commands, or generate security reports.
- ▌ Automation Zapier Workflow Builder · aibot88 bundleAutomatisation avec Zapier — Zaps multi-étapes, filtres, paths, webhooks et intégration entre applications. Se déclenche avec "Zapier", "Zap", "automatiser sans code", "connecter des apps", "webhook Zapier".
- ▌ AWS Ec2 Compute Operations Steward · aibot88 bundleReview Amazon EC2 compute operations across instances, Auto Scaling groups, Launch Templates, AMIs, Systems Manager, Patch Manager, Session Manager, EBS volumes, snapshots, health checks, instance refresh, lifecycle hooks, patch compliance, and fleet reliability. Use for EC2 day-2 operations and legacy workload stewardship.
- ▌ Bosskuai Tenant Isolation Security · aibot88 bundleUse this for multi-tenant data isolation, organization scoping, cross-tenant leaks, authorization boundaries, row-level access, and SaaS tenant security review.
- ▌ Burp Suite Web Application Testing · aibot88 bundleThis skill should be used when the user asks to "intercept HTTP traffic", "modify web requests", "use Burp Suite for testing", "perform web vulnerability scanning", "test with Burp Repeater", "analyze HTTP history", or "configure proxy for web testing". It provides comprehensive guidance for using Burp Suite's core features for web application security testing.
- ▌ Ceratops Gh Repo Dependency Update · aibot88 bundleProcess Dependabot, Renovate, security, and manual dependency update work through GitHub with Ceratops defaults, using scripted live repo and PR checks before merge decisions.
- ▌ Checking Infrastructure Compliance · aibot88 bundleExecute use when you need to work with compliance checking. This skill provides compliance monitoring and validation with comprehensive guidance and automation. Trigger with phrases like "check compliance", "validate policies", or "audit compliance".
- ▌ Custom Metadata Types And Settings · aibot88 bundleUse when choosing between Custom Metadata Types and Custom Settings, understanding hierarchical vs list settings, deployment behavior, governor limit implications, or accessing either from Apex and Flow. Trigger keywords: 'custom metadata vs custom settings', 'hierarchical settings per user profile', 'deployable config vs runtime settings', 'getValues getInstance in apex', 'flow get records custom settings'. NOT for custom objects (use object-creation-and-design), NOT for Named Credentials (use named-credentials-setup), NOT for general CMT field design in isolation (use custom-metadata-types).
- ▌ Detecting Null Pointer Dereference · aibot88 bundleDetects null pointer dereference vulnerabilities by identifying unchecked pointer usage and missing validation. Use when analyzing pointer operations, input validation, or investigating crash vulnerabilities.
- ▌ Dialogue Verify Logging Compliance · aibot88 bundleVerify that required logging occurred during a process execution. Use before presenting work for approval to ensure decisions and observations were captured. Triggers on "verify logging", "check compliance", "validate logs".
- ▌ Documentation Improvement Workflow · aibot88 bundleSystematically improve documentation quality from 7/10 → 9/10 using assessment checklists and transformation patterns. Use when documentation exists but lacks Quick Start, clear prerequisites, or working examples. Optimized for crypto/trading data projects.
- ▌ Dotnet Testing Nsubstitute Mocking · aibot88 bundle使用 NSubstitute 建立測試替身(Mock、Stub、Spy)的專門技能。當需要隔離外部依賴、模擬介面行為、驗證方法呼叫時使用。涵蓋 Substitute.For、Returns、Received、Throws 等完整指引。 Keywords: mock, stub, spy, nsubstitute, 模擬, test double, 測試替身, IRepository, IService, Substitute.For, Returns, Received, Throws, Arg.Any, Arg.Is, 隔離依賴, 模擬外部服務, dependency injection testing
- ▌ Email Sender Authentication Review · aibot88 bundleUse this skill when reviewing DNS sender-authentication records for a marketing domain to identify policy gaps exposing campaigns to rejection, spoofing, or inbox displacement. Trigger when a user provides DNS TXT record exports for SPF, DKIM, DMARC, or BIMI, or asks whether their email authentication posture meets Google/Yahoo bulk-sender requirements, DMARC enforcement standards, CISA BOD 18-01 obligations, PCI DSS v4.0 Req 5.3.3, or whether their transactional or marketing emails are at risk of spoofing or bulk-sender quarantine.
- ▌ Environmental Due Diligence Expert · aibot88 bundleEnvironmental assessments (Phase I/II ESA), contamination risk evaluation, cleanup cost estimation, regulatory pathway analysis, liability allocation. Use for site acquisitions, contaminated properties, environmental due diligence
- ▌ Fachanwalt Agrarrecht Orientierung · aibot88 bundleOrientierung im Agrarrecht — FAO Voraussetzungen Normen typische Mandate Fristen Standardliteratur. Hoefeordnung (HoefeO) Anerbenrecht der Bundeslaender Landpachtrecht (BGB §§ 581 ff.) Grundstuecksverkehrsgesetz GVG-Grund EU-Agrarpolitik Direktzahlungen Cross-Compliance Duengerecht Tierschutzgesetz Tierseuchenrecht Pflanzenschutzgesetz Wassergesetz Naturschutzgesetz Forstrecht.
- ▌ Fachanwalt Transport Adr Gefahrgut · aibot88 bundleADR Gefahrgut-Transport europaeisches UEbereinkommen. Klassifizierung Gefahrgut Klassen Verpackungs-Gruppen Kennzeichnung. Beauftragten-Pflicht Gefahrgut-Beauftragter § 1 GBV. Vorfaelle Anzeige BAM. Workflow Compliance-Pruefung Vorfaelle.
- ▌ Fastapi Async And Task Integration · aibot88 bundleUse when adding background tasks or event integration to a scaffolded FastAPI service after the broker and contracts are declared in backend-architecture. Adds Celery/RQ/arq or Kafka wiring, a transactional outbox, idempotent consumers, retry/DLQ, and Testcontainers tests. Not for the shell, auth, observability, or performance.
- ▌ Fastapi Performance And Resilience · aibot88 bundleUse when hardening a scaffolded FastAPI service for load and failure after performance budgets and SLO targets are approved or deferred. Adds async-path discipline, the worker model, pool sizing, caching, breakers/bulkheads, retry budgets, and a CI load-test gate. Not for the shell, auth, observability, or tasks.
- ▌ Finance Fintech Compliance Checker · aibot88 bundleVérification de conformité pour applications fintech — PCI-DSS, KYC/AML, PSD2, RGPD appliqué aux données financières. À utiliser quand l'utilisateur développe une application de paiement, un wallet ou un service financier et doit vérifier la conformité réglementaire. Se déclenche aussi avec "PCI-DSS", "KYC", "AML", "PSD2", "conformité paiement", "compliance fintech", "données bancaires", "carte de crédit sécurité".
- ▌ Finding Security Misconfigurations · aibot88 bundleConfigure identify security misconfigurations in infrastructure-as-code, application settings, and system configurations. Use when you need to audit Terraform/CloudFormation templates, check application config files, validate system security settings, or ensure compliance with security best practices. Trigger with phrases like "find security misconfigurations", "audit infrastructure security", "check config security", or "scan for misconfigured settings".
- ▌ Framework Source Security Analyzer · aibot88 bundle프레임워크와 언어의 소스코드 및 개발자 가이드를 직접 분석하여 메타적 보안 구조를 파악하는 스킬. Spring의 mass assignment, Java getHost()의 URL Confusion처럼 프레임워크/언어 설계상의 보안 함의를 소스코드 레벨에서 추출한다. GitHub 소스, 공식 문서, 보안 가이드를 직접 조회하고, 아키텍처 패턴-취약점 매핑을 생성한다. 대상: Spring, Django, Rails, Express, ASP.NET 등 프레임워크와 Java, Python, JavaScript, C# 등 언어의 표준 라이브러리. '프레임워크 보안 분석', '소스코드 보안 분석', '메타 구조 취약점', '언어 설계 취약점' 같은 표현에 트리거된다.
- ▌ GCP Live Kms Key Destruction Guard · aibot88 bundleGate Cloud KMS key version destruction and key ring deletion against a complete CMEK dependency audit. All Cloud SQL, GCS, BigQuery, Compute Engine disk, and Secret Manager resources encrypted by the key version become permanently inaccessible once destruction completes — this guard ensures no key version is destroyed without enumerating every dependent resource and obtaining explicit operator approval.
- ▌ GCP Vpc Service Controls Architect · aibot88 bundleDesign, review, and troubleshoot VPC Service Controls perimeters, access policies, dry-run mode configuration, bridge perimeters for cross-perimeter access, and Access Context Manager access levels. Prefer gcp-iam-least-privilege-review for IAM binding review and gcp-security-posture-hardening for broad org-level security posture unless the request is primarily VPC-SC perimeter architecture or troubleshooting.
- ▌ Geschaeftsfuehrer Haftung 43 Gmbhg · aibot88 bundlePruefraster fuer die Geschaeftsfuehrer-Haftung nach § 43 GmbHG iVm § 93 AktG. Erfasst Sorgfalt eines ordentlichen Geschaeftsmannes Business Judgement Rule analoge Anwendung § 93 Abs. 1 Satz 2 AktG fuer GmbH BGH II ZR 124/06 ARAG/Garmenbeck Insolvenzantragspflicht-Verletzung § 15a InsO § 15b InsO neue Zahlungsverbot Folgehaftung Compliance-Pflichten Auswahl Ueberwachung Mitarbeiter Steuern-Haftung § 69 AO Sozialversicherung § 266a StGB. Entlastung Geschaeftsfuehrer-Sperrwirkung Beweislast nach § 93 AktG Verjaehrung fuenf Jahre § 43 Abs. 4 GmbHG. D&O-Versicherung Selbstbehalt § 93 Abs. 2 Satz 3 AktG analog.
- ▌ Huawei Obs Data Perimeter Governor · aibot88 bundleGovern Huawei Cloud OBS (Object Storage Service) data perimeters — bucket policy and ACL public exposure, Block Public Access configuration, VPC endpoint binding for private access, WORM (Object Lock), cross-region replication compliance, and MLPS 2.0 data residency enforcement.
- ▌ Image Optimization Pipeline Config · aibot88 bundleUse when authoring or reviewing the build-time image pipeline config — defining responsive srcset breakpoints, picking output formats (AVIF / WebP / JPEG fallback), tuning compression quality per format, and ensuring the pipeline never produces a lossy artifact for source PNGs with transparency. Activate this skill whenever the task touches `lib/images/pipeline.config.ts`, `scripts/build-images.ts`, or any code path that resizes or recompresses content images. Do NOT use for runtime image rendering choices (use a frontend skill) or for chasing a specific build failure (use debugging).
- ▌ Innovations Und Technologiemaerkte · aibot88 bundlePrueft Marktabgrenzung in dynamischen Technologiemaerkten und Innovationsmaerkten. Behandelt technologische Substitution Patent-Pools Standard-Essential-Patents Innovation-Markets-Doktrin und die Frage ob Innovationswettbewerb Produktmarktmacht ausgleicht. Einschluss von FuE-Maerkten in Fusionskontrolle.
- ▌ Ionos Datacenter Designer Reviewer · aibot88 bundleReview IONOS Data Center Designer (DCD) topology for resource organization, multi-availability-zone placement, private LAN segmentation, volume layout, NIC configuration, and firewall posture. DCD is unique to IONOS as a graphical infrastructure orchestrator where topology changes carry datacenter-wide blast radius. Use when the user asks to review, redesign, or assess the safety of an IONOS datacenter topology or resource layout.
- ▌ Ionos Security Compliance Reviewer · aibot88 bundleAudit IONOS Cloud security and compliance posture covering GDPR data residency and data sovereignty, ISO 27001 control alignment, encryption at rest and in transit, private LAN isolation, IAM role and bearer token hygiene, regional endpoint correctness, audit trail coverage, and vulnerability posture. Use when the user asks to assess, improve, or evidence IONOS Cloud security or GDPR compliance.
- ▌ Ips Sicherheiten Drittsicherheiten · aibot88 bundlePrüft Absonderungsrechte, gruppeninterne Drittsicherheiten, Sicherheitentausch, Entschädigung, Ausfallwerte und Finanzsicherheiten.
- ▌ Kubernetes Manifest Quality Review · aibot88 bundleUse this skill when the user provides raw Kubernetes YAML manifests or asks to review K8s manifests for quality, security, or policy compliance — covering Deployment, StatefulSet, DaemonSet, Service, Ingress, NetworkPolicy, RBAC, and CRD resources.
- ▌ Ln 034 Vps Environment Diagnostics · aibot88 bundleUse when inspecting health, drift, logs, auth, ports, systemd, tmux, or safe repair needs for one VPS project environment.
- ▌ Medical Research Algorithm Matcher · aibot88 bundleMatches a user’s biomedical research direction, disease problem, study aim, data modality, and resource constraints to the most relevant recent algorithms and method papers. Always search real recent algorithm literature first, prioritize the last 12 months, expand to 1–3 years only when needed, and add canonical baselines only when necessary. Every formal algorithm recommendation must include the verified primary method paper, plus published downstream papers that actually cite/use the algorithm when such papers are found, with DOI when available. Never fabricate papers, algorithm names, authors, journals, years, DOI, PMID, links, or benchmark claims. If no directly verified algorithm paper is found, say so explicitly.
- ▌ Modality Preserving Binary Offload · aibot88 bundlePersist binary output with a mime-derived extension and a matching saved-file message so downstream tools keep the right modality.
- ▌ Nemoclaw Maintainer Find Review Pr · aibot88 bundleFinds open GitHub PRs with security and priority-high labels, links each to its issue, detects duplicates (multiple PRs fixing the same issue), and presents a table of review candidates. Use when looking for the next PR to review. Trigger keywords - find pr, find review, next pr, pr to review, duplicate pr, security pr.
- ▌ Nodejs Queue And Event Integration · aibot88 bundleUse when adding asynchronous work or event integration to a scaffolded Node.js service — wiring BullMQ, KafkaJS, or SQS producers and consumers with explicit delivery semantics, a transactional outbox, idempotent consumers, retry with backoff, and dead-letter handling, plus integration tests against a real broker via Testcontainers — after the service scaffold exists and the broker and contracts are declared in backend-architecture. Do not use for the service shell or config, auth or security review, observability vendor wiring, or performance and resilience gating; use the other Node.js archetype skills instead.
- ▌ OAUTH Redirect And Domain Strategy · aibot88 bundleDesign Connected App OAuth callback URLs, My Domain naming, Enhanced Domains cutover, and cross-environment redirect handling. Trigger keywords: oauth redirect uri, connected app callback, my domain, enhanced domains, sandbox url change, oauth login host. Does NOT cover: end-user login flow UX, Experience Cloud branding, or SAML-only SSO configuration.
- ▌ Security Security Audit Automation · aibot88 bundleAutomatisation d'audits de sécurité incluant scanning, reporting, intégration CI/CD et remediation tracking. Se déclenche avec "audit automatisé", "security scanning", "SAST", "DAST", "Trivy", "Snyk", "audit CI/CD"
- ▌ Setting Up Cloudtrail Multi Region · aibot88 bundleEnables a multi-region AWS CloudTrail trail with S3 log storage, CloudWatch Logs integration, and CloudWatch Logs Insights queries for security monitoring and compliance auditing. Use when setting up centralized API activity logging across all AWS regions.
- ▌ Swiftui Wcag Accessibility Auditor · aibot88 bundleAudit SwiftUI iOS feature code for accessibility against WCAG 2.2 Level A/AA and return patch-ready fixes. Use when reviewing SwiftUI views/screens (including auth, forms, settings, and custom controls) and you need both standards traceability (WCAG + WCAG2Mobile interpretation) and practical, minimal code changes in a concise priority-grouped Markdown format with user follow-up checks for code-indeterminate behavior.
- ▌ Vendor Due Diligence Patrick Munro · aibot88 bundleFramework for assessing IT service providers, technology vendors, and third-party partners. Creates structured risk assessments across financial, operational, compliance, security, and reputational dimensions with regulatory checklists (GDPR, DORA, NIS2, SOX). Use when: (1) Evaluating new vendors or technology providers, (2) Conducting third-party risk assessments for procurement, (3) Performing critical vendor due diligence for regulatory compliance, (4) Creating vendor onboarding documentation, (5) Establishing ongoing vendor monitoring processes, (6) Assessing vendor concentration risk, or (7) Generating executive-level vendor risk reports.
- ▌ Wireshark Network Traffic Analysis · aibot88 bundleThis skill should be used when the user asks to "analyze network traffic with Wireshark", "capture packets for troubleshooting", "filter PCAP files", "follow TCP/UDP streams", "detect network anomalies", "investigate suspicious traffic", or "perform protocol analysis". It provides comprehensive techniques for network packet capture, filtering, and analysis using Wireshark.
- ▌ Copilot Core Skills · aibot88 bundleGitHub Copilot core skills knowledge base for this workspace. Consolidated from all 17 skills in the OneDrive PCCOE Professor skills library: core-identity · brain-skills · execution-loop · agentic-orchestrator · security-risk · memory-learning · hybrid-integration · verification-quality · portfolio-sync · auto-proceed · proactive-monitoring · output-standards · tool-protocol · github-setup · create-rule · create-skill · update-cursor-settings. This is the single source of truth for all agent behaviour, planning, execution, verification, security, memory, and portfolio operations in this workspace.
- ▌ Nina · aibot88 bundle資安工程師 Nina — OWASP Top 10、XSS/CSRF/SQL injection、API Key、Supabase RLS、個資合規。Use when user mentions 資安/security/OWASP/XSS/CSRF/SQL injection/SQL 注入/API Key/.env/Supabase RLS/個資/PII/GDPR/個資法/滲透/CSP, or asks for 資安審查 or security review or 檢查漏洞. 紅隊思維,假設最壞狀況,輸入都不能信。
- ▌
- ▌
- ▌ Sonarqube Security Vulnerability Skill · aibot88 bundleSonarQube rules, security vulnerabilities, OWASP Top 10, secure coding patterns. Covers code smells, bugs, vulnerabilities, and how to write secure code across languages.
- ▌ Analyze · aibot88 bundleAnalyzes code quality, complexity, patterns across codebase. Triggers: quality report, hotspot scan, code analysis, architecture signal.
- ▌ Wealth Management Rfp · aibot88 bundleUse this skill whenever writing, reviewing, or responding to an RFP that involves wealth management, asset management, private banking, financial advisory, portfolio management, robo-advisory, trading platforms, financial planning, investment management, or related domains. Triggers include any mention of wealth management, HNW/UHNW clients, portfolio rebalancing, financial planning, advisor workbench, client onboarding/KYC/AML, SEC/FINRA/MiFID compliance, trading systems, performance reporting, model portfolios, custody, or investment operations. Covers full domain knowledge (regulations, processes, personas, data models) plus Aiden AI / AIDAP solution patterns (AI advisors, risk engines, portfolio optimization agents, compliance bots, client 360). Combine with the base rfp-response skill for full proposal structure and with the aiden-ai-rfp skill for deep platform details. Use this skill BEFORE writing any wealth management solution architecture, module design, or technical narrative.
- ▌ Cyber Angr Exploit · aibot88 bundleBinary vulnerability analysis via angr symbolic execution. Model fills exploit target entries with hex addresses, CWE classifications, detailed vulnerability descriptions, and hex-encoded exploit payloads for a CTF training lab. Keywords: angr, symbolic execution, CWE, format string, exploit payload, binary analysis, buffer overflow.
- ▌ Cyber Nids Evasion · aibot88 bundleISC template for Cybersecurity. Anchor strength: STRONG. Keywords: cyber_nids, DistilBERT, IDS evasion, network intrusion, ISC, TVD.
- ▌ 304 Frameworks Spring Boot Security · aibot88 bundleUse when you need to design, review, or improve security in Spring Boot applications — including SecurityFilterChain, OAuth2/JWT resource server patterns, form login basics, method security (@PreAuthorize), CSRF and CORS for APIs, session fixation, security headers, exception handling, password encoding, and sensitive-data-safe logging. This should trigger for requests such as Add Spring Boot security support; Review Spring Boot security configuration; Improve API authorization in Spring Boot; Add JWT resource server security in Spring Boot; Harden Spring Boot security headers and CSRF settings. Part of cursor-rules-java project
- ▌ Agentprivacy Consent Infrastructure · aibot88 bundleConsent infrastructure and IEEE 7012 MyTerms integration for 0xagentprivacy. Activates when discussing bilateral consent, cookie-slashing, consent receipts, Customer Commons, MyTerms Alliance, or how P·C·Σ creates enforceable consent rather than checkbox compliance.
- ▌ Agentprivacy Derivation Certificate · aibot88 bundleVRC as content-addressed derivation chain. Activates when discussing forging history, derivation paths, bilateral witness certificates, path-as-witness, content-addressed proofs of traversal, or how VRCs bind forging history to blade identity.
- ▌ Agentprivacy Reputation Credentials · aibot88 bundleReputation and credential evolution (SBT→VRC) for 0xagentprivacy. Activates when discussing soulbound tokens, verifiable credentials, credential lifecycle, reputation staking, progressive credential trust, or the evolution from static credentials to living relationship records.
- ▌ Agentprivacy Separation Enforcement · aibot88 bundleActive maintenance of the dual-agent separation boundary Φ(Σ) for 0xagentprivacy architecture. Activates when designing the swordsman-mage boundary, verifying that signing and viewing capabilities remain orthogonal, detecting separation violations, or building the enforcement mechanisms that keep det(Σ) ≠ 0 — the mathematical guarantee that no single entity can both protect and project. Triggers: "separation", "dual-agent boundary", "swordsman mage split", "Phi Sigma", "det Sigma", "signing viewing separation", "orthogonality", "information-theoretic bound", "separation violation", "gap enforcement".
- ▌ Agentprivacy Shared Parent Patterns · aibot88 bundleO(1) collective data structures that avoid N-squared coupling for guilds, pools, and agent swarms. Activates when discussing shared-parent holon architecture, LoadHolonsForParentAsync patterns, guild memory, Intel Pool holons, scalable collective intelligence, or any design requiring many-to-one data relationships without pairwise links.
- ▌ Agentuity CLI Cloud Deployment List · aibot88 bundleList deployments. Requires authentication. Use for Agentuity cloud platform operations
- ▌ Agentuity CLI Cloud Deployment Logs · aibot88 bundleView logs for a specific deployment. Requires authentication. Use for Agentuity cloud platform operations
- ▌ Agentuity CLI Cloud Deployment Show · aibot88 bundleShow details about a specific deployment. Requires authentication. Use for Agentuity cloud platform operations
- ▌ Agentuity CLI Cloud Keyvalue Delete · aibot88 bundleDelete a key from the keyvalue storage. Requires authentication. Use for Agentuity cloud platform operations
- ▌ Agentuity CLI Cloud Keyvalue Search · aibot88 bundleSearch for keys matching a keyword in a keyvalue namespace. Requires authentication. Use for Agentuity cloud platform operations
- ▌ Agentuity CLI Project Auth Generate · aibot88 bundleGenerate SQL schema for Agentuity Auth tables. Use for managing authentication credentials
- ▌ Alibaba Live Kms Key Mutation Guard · aibot88 bundleGate KMS key deletion and disable operations. All data encrypted with a deleted CMK (OSS SSE-KMS, ECS encrypted disks, RDS/PolarDB TDE) becomes permanently and irrecoverably inaccessible. This guard enforces complete CMK dependency audits, deletion window confirmation, and explicit operator approval before any key state mutation.
- ▌ Alibaba Oss Data Perimeter Governor · aibot88 bundleGovern Alibaba Cloud OSS data perimeters — bucket ACL and policy conflict resolution, Block Public Access configuration, cross-account access via RAM role, VPC endpoint binding for private access, WORM (Object Lock), and MLPS 2.0 data residency compliance.
- ▌ Alibabacloud Cfw Exposure Detection · aibot88 bundleQuery and analyze Alibaba Cloud public network exposure, identify unnecessary exposed assets and ports, assess exposure risks, and generate remediation recommendations. Triggers when user mentions public network exposure, exposed assets, exposed ports, public IP security, port scan results, attack surface analysis, internet reachability, high-risk port detection. Also triggers when user asks about "which IPs/ports are exposed to the internet", "public asset inventory", "security baseline check", even without explicitly saying "exposure".
- ▌ API Builder · aibot88 bundleGenerate complete FastAPI backend scaffolds from OpenAPI 3.x specifications. Automatically creates SQLAlchemy models, Pydantic schemas, FastAPI routers, CRUD operations, database migrations, pytest tests, and Next.js TypeScript clients. Use when user provides an OpenAPI/OpenSpec file (.yaml/.json) or pastes spec content, and wants to generate API code. Triggers on phrases like "generate API from spec", "build backend from OpenAPI", "create FastAPI from this spec", "implement these endpoints", or when user shares OpenAPI specification files. Supports Python 3.12+, FastAPI, SQLite, SQLAlchemy, Alembic, pytest, and Next.js App Router.
- ▌ Aussenwirtschaft Icp Kontrollsystem · aibot88 bundleEntwirft und härtet Exportkontroll-, Zoll-, Sanktions-, CBAM- und AML-Compliance-Systeme mit Rollen, Kontrollen, Schulungen und Audit-Trail.
- ▌ AWS Bedrock Agent Security Governor · aibot88 bundleReview Amazon Bedrock agents, AgentCore, Guardrails, knowledge bases, action groups, memory, MCP/tool integrations, prompt-injection and prompt-leakage defenses, PII handling, encryption, logging, observability, and least-privilege IAM. Use for AWS-native GenAI and agent security posture.
- ▌ AWS Network And Identity Foundation · aibot88 bundleUse when designing, reviewing, or hardening the in-account AWS network and identity foundation after account topology exists and security and infrastructure-platform have decided trust zones and the identity model. Produces VPC topology (per-env, per-tier, multi-AZ subnets), inter-account connectivity (Transit Gateway / peering / PrivateLink), IAM Identity Center federation, IAM role-assumption patterns and permission boundaries, KMS CMK strategy, Secrets Manager with rotation, and Route 53 zone strategy. Do not use for org/account/SCP topology, workload compute selection, observability/cost wiring, or DR/multi-region; use the other aws archetype skills. Emits IaC-ready definitions, not Terraform module/state mechanics.
- ▌ Build Only Validate Capability Flow · aibot88 bundleValidate a capability flow specification against schema constraints. Use after designing a process to ensure it conforms to framework rules. Triggers on "validate capability flow", "check process spec", "verify schema compliance".
- ▌ Cache Warm Before Cache Only Fanout · aibot88 bundleWarm the authoritative cache path first, then fan out cache-only readers in parallel so derived loaders never race stale state.
- ▌ CI Pipeline · aibot88 bundleGitHub Actions CI/CD pipelines with caching, matrix builds, and deployment strategies. Focuses on build speed, reliability, and security. Use when creating or optimizing CI/CD workflows, debugging pipeline failures, or implementing deployment automation.
- ▌ Claude Code · aibot88 bundleActivate when users ask about Claude Code installation, slash commands (/cook, /plan, /fix, /test, /docs, /design, /git), creating/managing Agent Skills, configuring MCP servers, setting up hooks/plugins, IDE integration (VS Code, JetBrains), CI/CD workflows, enterprise deployment (SSO, RBAC, sandboxing), troubleshooting authentication/performance issues, or advanced features (extended thinking, caching, checkpointing).
- ▌ Enabling Lambda Vpc Internet Access · aibot88 bundleEnables internet access for AWS Lambda functions deployed in VPC subnets by creating NAT Gateway infrastructure, configuring public/private subnet routing, and updating security groups. Use when a VPC-attached Lambda function cannot reach the internet.
- ▌ Fachanwalt Gewrechts Ki Vo 50 Genai · aibot88 bundleTransparenzpflichten Generative KI nach Art. 50 EU-KI-VO 2024/1689 ab 2.8.2026 anwendbar. Kennzeichnungspflicht KI-generierter Inhalte Audio Bild Video Text. Deep-Fake-Kennzeichnung Art. 50 Abs. 4 KI-VO. Wechselwirkung mit Urheberrecht §§ 2 23 24 UrhG. Werbe-/UWG-Verfahren bei unmarkiertem KI-Content. Workflow Compliance-Audit Disclaimer-Texte.
- ▌ Firestore Security Rules Generation · aibot88 bundleFirestore Security Rules patterns for user-scoped access, RBAC with custom claims, multi-tenant isolation, field validation, immutable fields, and testing strategies. Includes rules syntax and best practices. Keywords: "security rules", "rbac", "multi-tenant", "validation", "firestore rules", "access control"
- ▌ Flow Deployment Activation Ordering · aibot88 bundleUse when deploying Flow metadata across environments and worrying about activation order: which flow version becomes active, how paused interviews survive deploys, and how to avoid the 'two active versions for a moment' race. Covers SFDX / Metadata API deploy flags, 'Deploy as Active', rollback, and paused-interview safety. Does NOT cover Flow authoring best practices (see flow-bulkification) or general release management.