aibot88
- 8.3k skills
- 0 followers
- 3 repo stars
- 2 weeks ago last updated
- ▌ Databricks Multi Env Setup · aibot88 bundleConfigure Databricks across development, staging, and production environments. Use when setting up multi-environment deployments, configuring per-environment secrets, or implementing environment-specific Databricks configurations. Trigger with phrases like "databricks environments", "databricks staging", "databricks dev prod", "databricks environment setup", "databricks config by env".
- ▌ Databricks Security Basics · aibot88 bundleApply Databricks security best practices for secrets and access control. Use when securing API tokens, implementing least privilege access, or auditing Databricks security configuration. Trigger with phrases like "databricks security", "databricks secrets", "secure databricks", "databricks token security", "databricks scopes".
- ▌ Deduplicate Security Issue · aibot88 bundleMerge two <tracker> tracking issues that describe the same root-cause vulnerability (typically discovered independently by two reporters, arriving via different channels), preserving every reporter's credit, every mailing-list thread reference, and every independent attack-vector description. Updates the kept issue's body in place, closes the duplicate with the `duplicate` label, and regenerates the CVE JSON attachment so both finders land in `credits[]`.
- ▌ Dependency Audit Assistant · aibot88 bundleReviews package dependencies for security vulnerabilities, outdated versions, and license compliance. Use when user asks about dependencies, security audits, or before releases.
- ▌ Dependency Injection Setup · aibot88 bundleAdd new services to DIContainer, create protocol-based implementations, set up singletons or factories for Leavn app dependency injection
- ▌ Deployment Risk Assessment · aibot88 bundleUse when a practitioner needs to classify the risk level of an upcoming Salesforce deployment, define rollback trigger conditions, or assign decision authority before the release window opens. Triggers: 'how risky is this release', 'what needs rollback planning', 'classify deployment risk', 'pre-deployment risk checklist', 'rollback decision authority', 'high risk metadata types'. NOT for executing the deployment itself, writing CI/CD pipeline code, or troubleshooting failures after a deployment has already run — use change-management-and-deployment for execution planning and devops/deployment-error-troubleshooting for post-failure diagnosis.
- ▌ Detecting Buffer Overflows · aibot88 bundleDetects stack and heap buffer overflow vulnerabilities in binary code by identifying unsafe memory operations. Use when analyzing buffer handling, string manipulation functions, or investigating memory corruption vulnerabilities.
- ▌ Detecting Integer Overflow · aibot88 bundleDetects integer overflow and underflow vulnerabilities in arithmetic operations used for buffer sizing or allocation. Use when analyzing calculations, size computations, or investigating integer wraparound issues.
- ▌ Dev Smart Contract Auditor · aibot88 bundleAudit de sécurité de smart contracts Solidity et blockchain. Se déclenche avec "smart contract", "Solidity", "audit blockchain", "vulnérabilité smart contract", "reentrancy", "ERC-20", "ERC-721", "Web3 security".
- ▌ Dev Vulnerability Analyzer · aibot88 bundleAnalyse et évalue les vulnérabilités d'un système ou d'une application. À utiliser pour comprendre et prioriser les vulnérabilités. Se déclenche avec "vulnérabilité", "CVE", "faille", "vulnerability", "risque sécurité", "score CVSS", "patch critique".
- ▌ Dokploy Environment Config · aibot88 bundleEnvironment variable patterns for Dokploy templates including required vs optional syntax, secrets, connection strings, and configuration organization.
- ▌ Dokploy Security Hardening · aibot88 bundleSecurity best practices for Dokploy templates: secrets management, network isolation, least privilege, image security, and hardening recommendations.
- ▌ Dotnet Mcaf Source Control · aibot88 bundleApply MCAF source-control guidance for repository structure, branch naming, merge strategy, commit hygiene, and secrets-in-git discipline. Use when bootstrapping a repo, tightening PR flow, or documenting branch and release policy.
- ▌ Dsgvo Compliance Bausteine · aibot88 bundleStellt datenschutzrechtliche Textbausteine für KI-Nutzungsrichtlinien bereit: Art. 2 Abs. 1, Art. 6, Art. 9, Art. 15, Art. 28 DSGVO; Auftragsverarbeitungsvertrag, Drittlandstransfer, Datenminimierung, Zweckbindung sowie Anonymisierung und Pseudonymisierung.
- ▌ Elevenlabs Security Basics · aibot88 bundleApply ElevenLabs security best practices for API keys, webhook HMAC validation, and voice data protection. Use when securing API keys, validating webhook signatures, or auditing ElevenLabs security configuration. Trigger: "elevenlabs security", "elevenlabs secrets", "secure elevenlabs", "elevenlabs API key security", "elevenlabs webhook signature", "elevenlabs HMAC".
- ▌ Email Deliverability Audit · aibot88 bundleDiagnostic audit for a running cold email program. Checks domain authentication (SPF/DKIM/DMARC), inbox health/reputation from Smartlead, bounce rate by inbox type, and optionally runs a spam placement test via Smartlead's Smart Delivery API. Outputs markdown report + CSV with per-domain/per-inbox scores and concrete action items. Use when reply rates drop, when bounces spike, when onboarding someone else's account, or as a weekly/monthly health check.
- ▌ Erc4337 Privacy Wallet · aibot88 bundlePrivacy-preserving ERC-4337 wallet development for vehicle identity and sensitive data protection. Use when implementing ERC-4337 account abstraction wallets that handle sensitive information (vehicle license plates, biometric data, personal IDs) requiring on-chain privacy. Triggers on requests like "implement ERC-4337 wallet for vehicle", "create privacy-protected account abstraction", "build wallet with vehicle number privacy", "develop ERC-4337 with ZK proof integration", or any smart contract wallet development requiring commitment schemes, deterministic address generation, and sensitive data protection.
- ▌ Etsy AI Disclosure Auditor · aibot88 bundleScans every listing in an Etsy shop for missing AI Disclosure tags required by Etsy's 2025 generative-AI policy. Use when the user wants to audit AI compliance, check AI Disclosure tags, prepare a shop for the AI policy enforcement, or avoid shop suspension. Categorizes listings by risk level (clear AI / partial AI / human-made), tags accordingly with operator approval, flags ambiguous cases for manual review.
- ▌ File Upload Virus Scanning · aibot88 bundleUse when designing malware and content scanning for files uploaded to Salesforce (Files, Attachments, ContentVersion) — external scanning service callouts, quarantine patterns, and user-facing messaging. Triggers: 'virus scan salesforce upload', 'malware scan content version', 'quarantine uploaded file', 'clamav salesforce', 'file upload security'. NOT for field-level data validation.
- ▌ Fintech Compliance Checker · aibot88 bundleVérification de conformité pour applications fintech — PCI-DSS, KYC/AML, PSD2, RGPD appliqué aux données financières. À utiliser quand l'utilisateur développe une application de paiement, un wallet ou un service financier et doit vérifier la conformité réglementaire. Se déclenche aussi avec "PCI-DSS", "KYC", "AML", "PSD2", "conformité paiement", "compliance fintech", "données bancaires", "carte de crédit sécurité".
- ▌ Firebase Development Debug · aibot88 bundleThis skill should be used when troubleshooting Firebase emulator issues, rules violations, function errors, auth problems, or deployment failures. Triggers on "error", "not working", "debug", "troubleshoot", "failing", "broken", "permission denied", "emulator issue".
- ▌ Firecrawl Build Onboarding · aibot88 bundleGet Firecrawl credentials and SDK setup into a project. Use when an application needs `FIRECRAWL_API_KEY`, when an agent should add Firecrawl to `.env`, when the user wants to authenticate Firecrawl for app code, or when choosing the first SDK and docs for a new Firecrawl integration. This skill includes its own browser auth flow, so it does not depend on the website onboarding skill.
- ▌ Fireflies Incident Runbook · aibot88 bundleExecute Fireflies.ai incident response with triage, remediation, and postmortem. Use when responding to Fireflies.ai API outages, auth failures, or webhook delivery problems. Trigger with phrases like "fireflies incident", "fireflies outage", "fireflies down", "fireflies on-call", "fireflies emergency", "fireflies broken".
- ▌ Flow Compliance Validation · aibot88 bundleOrchestrate compliance validation workflow with requirements mapping, audit evidence collection, gap analysis, remediation tracking, and attestation
- ▌ Flow Loop Element Patterns · aibot88 bundleUse when reviewing or authoring Flow logic that contains a Loop element — covers DML-in-loop / SOQL-in-loop refactors, the collect-then-DML idiom, nested loops, and loop-free alternatives (Collection Filter, Transform, Get-with-criteria). Triggers: 'DML inside flow loop', 'Get Records inside loop element', 'Update Records in loop blowing governor limits', 'nested loop in flow', 'Subflow in loop'. NOT for general collection processing semantics (see flow-collection-processing) and NOT for end-to-end bulkification redesign across an entire flow (see flow-bulkification).
- ▌ Flow Security Review Cycle · aibot88 bundleOrchestrate continuous security validation, threat modeling, vulnerability management, and security gate enforcement across SDLC phases
- ▌ Fullstory Privacy Controls · aibot88 bundleComprehensive guide for implementing Fullstory's Element Privacy Controls (fs-exclude, fs-mask, fs-unmask) for web applications. Teaches proper privacy class usage, understanding what data leaves the device, CSS selector rules, and Form Privacy features. Includes detailed good/bad examples for protecting sensitive elements while maintaining session replay utility.
- ▌ Fullstory Privacy Strategy · aibot88 bundleStrategic guide for data privacy in Fullstory implementations. Teaches developers how to decide what data to send, mask, exclude, hash, or replace with joinable keys. Covers regulatory compliance (GDPR, HIPAA, PCI, CCPA), privacy-by-design principles, and balancing analytics value with privacy protection. Acts as a decision framework that references core privacy skills.
- ▌ Fundraising Command Center · aibot88 bundleEnd-to-end startup fundraising strategy engine covering pre-seed through Series D+, IPO readiness, and alternative capital. Covers investor targeting, pitch deck strategy, term sheet negotiation, cap table optimization, data room preparation, due diligence response, SAFE/convertible note structuring, venture debt, RBF, grants (SBIR/EIC), crowdfunding, CVC engagement, family office approaches, secondary markets, cross-border fundraising, AI-company fundraising, down-round prevention, bridge round strategy, fundraising psychology, signal engineering, and post-close investor relations. Includes comprehensive India fundraising stack with DPIIT recognition, SISFS, SIDBI Fund of Funds, MUDRA, CGTMSE, AIM/NIDHI/BIRAC/MeitY/iDEX grants, SEBI AIF regulations, RBI FEMA compliance, angel tax abolition, Section 80-IAC, state startup policies for all 28 states and 8 UTs, PLI schemes, GIFT City benefits, Indian VC ecosystem, angel networks, and auto-matching engine for scheme eligibility. Use when user mentions fundraise,
- ▌ GCP Landing Zone Architect · aibot88 bundleDesign and review GCP landing zone foundations including organization setup, folder hierarchy, org policy baseline, Shared VPC, billing account structure, Security Command Center, and audit logging.
- ▌ Gpai Modelle Art 51 Bis 55 · aibot88 bundlePflichten fuer Anbieter von General-Purpose-KI-Modellen (GPAI) nach Art. 51 bis 55 KI-VO: technische Dokumentation Anhang XI Urheberrechts-Compliance-Strategie summary of training content. Abgrenzung GPAI-Modell versus GPAI-System.
- ▌ Grad Disruptive Innovation · aibot88 bundleApply Christensen's Disruptive Innovation theory to assess low-end and new-market threats to incumbents. Use this skill when the user needs to evaluate whether a new entrant poses a disruptive threat, analyze why incumbents fail against inferior-but-cheaper alternatives, or design a disruption strategy targeting overserved customers.
- ▌ Grammar And Style Enhancer · aibot88 bundleImproves text quality by enhancing grammar, vocabulary, narrative clarity, flow, pacing, and writing style while preserving the author’s voice.
- ▌ Hipaa Compliance Automator · aibot88 bundleHIPAA security and privacy compliance automation for ePHI protection, safeguards assessment, and audit preparation
- ▌ Hipaa Compliance Validator · aibot88 bundleHIPAA compliance validation skill for genomic data handling and audit
- ▌ HTML Ppt Zhangzara Capsule · aibot88 bundleCapsule — Modular pill-shaped cards on warm bone with a full pastel-pop palette. Anything that should feel modular, modern, and a little Y2K: lifestyle brands, creator portfolios, DTC launches, beauty / wellness, agency credentials.
- ▌ Huawei Obs Storage Steward · aibot88 bundleManage Huawei OBS lifecycle policies, bucket ACL and policy governance, SFS (Scalable File Service) NFS shares, EVS (Elastic Volume Service) block storage, and CBR (Cloud Backup and Recovery) backup strategy for data protection compliance.
- ▌ Huawei Waf Security Review · aibot88 bundleAssess Huawei Cloud workload security using the Well-Architected Framework Security pillar: IAM SCP governance, VPC isolation, DEW key management, SecMaster SIEM/SOAR, and MLPS 2.0 technical controls for China-resident workloads.
- ▌ Hubspot Deploy Integration · aibot88 bundleDeploy HubSpot integrations to Vercel, Fly.io, and Cloud Run platforms. Use when deploying HubSpot-powered applications, configuring platform secrets, or setting up deployment pipelines with HubSpot access tokens. Trigger with phrases like "deploy hubspot", "hubspot Vercel", "hubspot Cloud Run", "hubspot Fly.io", "hubspot production deploy".
- ▌ Idor Vulnerability Testing · aibot88 bundleThis skill should be used when the user asks to "test for insecure direct object references," "find IDOR vulnerabilities," "exploit broken access control," "enumerate user IDs or object references," or "bypass authorization to access other users' data." It provides comprehensive guidance for detecting, exploiting, and remediating IDOR vulnerabilities in web applications.
- ▌ Image Processor Guidelines · aibot88 bundleDevelopment guidelines for Quantum Skincare's Python FastAPI image processor microservice. Covers FastAPI patterns, Perfect Corp API integration, MediaPipe FaceMesh validation, correlation headers, access control (CIDR + X-Internal-Secret), error handling, Pydantic models, structured logging, mock mode, provider normalization, and testing strategies. Use when working with image-processor code, routes, validation pipeline, Perfect Corp integration, or Python/FastAPI patterns.
- ▌ Install Dependencies Rules · aibot88 bundleUsa esta skill SIEMPRE antes de añadir, actualizar o eliminar cualquier dependencia en un proyecto Node.js. Aplica a frontend, backend y monorepo. Cubre pnpm obligatorio, pin exact sin carets, consulta de última versión estable, auditoría post-instalación, protección contra paquetes comprometidos con herramientas gratuitas, y configuración de Dependabot para actualizaciones controladas.
- ▌ Internal Linking Optimizer · aibot88 bundleAnalyzes and optimizes internal link structure to improve site architecture, distribute page authority, and help search engines understand content relationships. Creates strategic internal linking plans.
- ▌ Ips Gruppen Klassenbildung · aibot88 bundleBildet InsO Gruppen und StaRUG Klassen sachgerecht nach Rechtsstellung und wirtschaftlichen Interessen mit Stimmrechts und Gleichbehandlungslogik.
- ▌ Ips Planbetroffene Auswahl · aibot88 bundleWählt im StaRUG die Planbetroffenen sachgerecht aus und dokumentiert nicht einbezogene Gläubiger, Rechte, Arbeitnehmerausnahmen und Begruendung.
- ▌ Ips Planvollzug Monitoring · aibot88 bundleÜberwacht Planvollzug, Zahlungen, Bedingungen, Berichtspflichten, Planüberwachung, Wiederaufleben und Abweichungen.
- ▌ Justfile Security Patterns · aibot88 bundleLevel 2 patterns - vulns, lic, sbom, doctor (security, compliance, environment health)
- ▌ K8S Deploy Manifest Review · aibot88 bundleUse when authoring or reviewing Kubernetes manifests for a production workload. Produces or hardens Deployment, Service, HPA, PDB, NetworkPolicy, and ServiceAccount with correct probes, resource bounds, security context, and a safe rollout strategy.
- ▌ Klaviyo Deploy Integration · aibot88 bundleDeploy Klaviyo integrations to Vercel, Fly.io, and Cloud Run platforms. Use when deploying Klaviyo-powered applications to production, configuring platform-specific secrets, or setting up deployment pipelines. Trigger with phrases like "deploy klaviyo", "klaviyo Vercel", "klaviyo production deploy", "klaviyo Cloud Run", "klaviyo Fly.io".
- ▌ Kubernetes Helm Deployment · aibot88 bundleKubernetes deployment patterns with Helm charts. Covers deployments, services, ConfigMaps, Secrets, Dapr sidecar injection, health probes, and resource management.
- ▌ Kubernetes Pod Spec Review · aibot88 bundleUse this skill when reviewing a Kubernetes Pod spec, Deployment spec, or StatefulSet spec for correctness, security posture, and production-readiness. Trigger on any request to audit, validate, or score a workload manifest.
- ▌ Lattice Spatial Collective · aibot88 bundleMulti-agent distributed context preservation protocol using cryptographic sharding, gossip propagation, and Byzantine fault tolerance to maintain coherent shared memory across dynamic agent networks.
- ▌ License Compliance Checker · aibot88 bundleAutomated license compliance verification for dependencies to ensure legal compliance during migration
- ▌ Linkedin Authority Builder · aibot88 bundleBuild a LinkedIn content system for thought leadership. Use when someone needs to establish authority, attract inbound leads, or build a consistent content presence. Covers positioning, content pillars, formats, and posting rhythm.
- ▌ Ln 032 Vps Project Runtime · aibot88 bundleUse when creating or verifying one project runtime on a prepared VPS, including god-session, provider credentials, and local dispatcher setup.
- ▌ Lossless Flavored Markdown · aibot88 bundleThe Lossless Group's extended-markdown flavor — what LFM is, when to use it, how its directives normalize across syntaxes (CommonMark, GFM, Obsidian callouts, remark-directive, Markdoc), how citations and link previews work, and how sites extend it via trigger maps and theme tokens. Use whenever authoring or rendering content in any Astro Knots site, integrating the @lossless-group/lfm package, building or registering custom components for markdown, debugging callouts/embeds/citations, or when the user mentions "LFM", "Lossless Flavored Markdown", "extended markdown", "directive syntax", "wikilink", "trigger map", "callout", or "hex-code citation".
- ▌ Lwc Accessibility Patterns · aibot88 bundleUse when implementing specific ARIA attributes, keyboard navigation patterns, screen reader live regions, WCAG 2.1 compliance, focus management, or accessible data tables in Lightning Web Components. Trigger keywords: ARIA, aria-live, aria-label, aria-labelledby, role=grid, tabindex, keydown handler, WCAG AA, focus trap, accessible datatable, shadow DOM ARIA boundary. NOT for general LWC styling, visual design, SLDS theming, or CSS that does not affect assistive-technology behavior.
- ▌ Material Contract Schedule · aibot88 bundleÖnemli Sözleşmeler (Material Contracts) açıklama ekini (disclosure schedule) due diligence bulgularından yola çıkarak oluşturur. Hisse/Varlık Devir Sözleşmesi'ndeki (SPA/APA) "Önemli Sözleşme" tanımını ve ek formatını uygular. Kullanıcı "önemli sözleşmeler listesini oluştur", "açıklama eklerini hazırla", "ek 3.X", "material contracts schedule" dediğinde kullanılır.
- ▌ Meituan Passport User Auth · aibot88 bundle美团 Passport 用户授权登录 Skill。通过 mt-passport CLI 获取授权链接,展示给用户完成确认后轮询拿到鉴权凭证(登录态 Token)。当用户需要通过美团授权获取 Token、Agent 自动登录美团时使用。触发词:美团授权登录、获取授权码、获取 token、token 授权、meituan passport auth、passport auth、passport 登录、触发登录、触发美团登录、美团用户登录授权、美团登录、重新授权、强制刷新 token。
- ▌ Mistral Deploy Integration · aibot88 bundleDeploy Mistral AI integrations to Vercel, Docker, and Cloud Run platforms. Use when deploying Mistral AI-powered applications to production, configuring platform-specific secrets, or setting up deployment pipelines. Trigger with phrases like "deploy mistral", "mistral Vercel", "mistral production deploy", "mistral Cloud Run", "mistral Docker".
- ▌ Network Fundamentals Cloud · aibot88 bundleNetworking fundamentals as they apply to cloud infrastructure — virtual networks, subnets, routers, NAT, floating IPs, security groups, VLAN/VXLAN segmentation, load balancing, SDN concepts, and how Neutron-style cloud networks sit on top of physical topology. Covers TCP behavior at scale, congestion control, tail latency, overlay networks, and the operational gotchas that come from network layering. Use when designing cloud network topology, debugging cross-AZ latency, or reviewing a proposed VPC/SG design.
- ▌ Offensive Active Directory · aibot88 bundleActive Directory attack methodology for internal network red team engagements. Covers reconnaissance (BloodHound, PowerView, ADExplorer), credential abuse (Kerberoasting, ASREProasting, NTLM relay, LLMNR/NBT-NS poisoning), privilege escalation (ACL abuse, GPO abuse, unconstrained/constrained delegation), lateral movement (Pass-the-Hash, Pass-the-Ticket, Overpass-the-Hash, WMI/WinRM/PsExec), persistence (Golden/Silver/Diamond Tickets, DCSync, DCShadow, AdminSDHolder, Skeleton Key), forest trust attacks, ADCS abuse (ESC1-ESC15), and modern MDI/Defender for Identity evasion. Use when assessing on-prem AD, hybrid AD/Entra ID environments, or ADCS deployments.
- ▌ Oraclecloud CI Integration · aibot88 bundleConfigure CI/CD pipelines for OCI with Terraform and GitHub Actions. Use when setting up automated infrastructure deployments, running Terraform plans in CI, or configuring OCI authentication for GitHub Actions. Trigger with "oraclecloud ci", "oci terraform ci", "oci github actions", "oracle cloud ci integration".
- ▌ Oraclecloud Prod Checklist · aibot88 bundlePre-production readiness checklist for OCI — backup policies, security audit, key rotation, encryption, and Cloud Guard. Use when preparing an OCI environment for production workloads or auditing an existing deployment. Trigger with "oraclecloud prod checklist", "oci production ready", "oci security audit", "oci well-architected".
- ▌ Ovhcloud Iam Policy Review · aibot88 bundleReview OVHcloud IAM policies for overly permissive allow rules, missing deny blocks, unscoped URNs, absent condition blocks (IP CIDR, resource tag, expiration), and identity-group hygiene. Use when the user needs to audit access control, review `ovh_iam_policy` Terraform resources, assess OAuth2 service account scopes, or validate conditional access configuration against the principle of least privilege.
- ▌ Ovhcloud Network Architect · aibot88 bundleDesign and review OVHcloud network topology including vRack private network segmentation, VLAN configuration, Public Cloud private network attachment, dedicated server connectivity, load balancer placement, DNS zone design, security group rules, and blast-radius scoping for topology changes. Use when the user needs vRack design guidance, network isolation review, or Terraform IaC review for `ovh_vrack` and related resources.
- ▌ Patient Consent Simplifier · aibot88 bundleSimplify informed consent documents into patient-friendly language while maintaining regulatory compliance (FDA 21CFR50, ICH-GCP, HIPAA) and required legal elements.
- ▌ Performing Security Audits · aibot88 bundleAnalyze code, infrastructure, and configurations by conducting comprehensive security audits. It leverages tools within the security-pro-pack plugin, including vulnerability scanning, compliance checking, and cryptography review. Use when assessing security or running audits. Trigger with phrases like 'security scan', 'audit', or 'vulnerability'.
- ▌ Perplexity Security Basics · aibot88 bundleApply Perplexity security best practices for API key management and query safety. Use when securing API keys, implementing query sanitization, or auditing Perplexity security configuration. Trigger with phrases like "perplexity security", "perplexity secrets", "secure perplexity", "perplexity API key security", "perplexity PII".
- ▌ Persona Compliance Manager · aibot88 bundlePersona eines Compliance-Managers / Head of GRC, organisatorisch dem CISO unterstellt, steuert operativ Framework-Erweiterungen. Effizienz- und Effektivitäts-getrieben, obsessiv bei Data-Reuse über Frameworks hinweg (z.B. ISO 27001 → NIS2, DORA, TISAX). Lässt sich aktiv vom Senior-Consultant beraten, setzt dann intern um. Aktivieren bei Triggern wie "aus dem Blickwinkel eines Compliance-Managers", "als GRC-Lead", "als Compliance-Manager", "Head-of-GRC-Sicht", "aus Sicht Compliance-Steuerung", "Data-Reuse-Perspektive", "Framework-Portfolio-Sicht". Primär DE.
- ▌ Picoclaw Security Guardian · aibot88 bundlePicoclaw security posture skill with advisory awareness, configuration drift detection, and supply-chain verification guidance.
- ▌ Postman Test Script Generator · aibot88 bundleWrite Postman test scripts (JavaScript) for pre-request logic and post-response assertions, and embed them directly into a Postman collection. Use this skill whenever the user wants to add tests to Postman requests, asks about "pm.test", "pm.expect", "Postman assertions", "test scripts", "chaining requests", "dynamic variables", "pre-request scripts", or "validating API responses in Postman". Also triggers for: "write tests for my collection", "add assertions to these endpoints", "chain the auth token to the next request", or any request to validate, assert, or automate logic within Postman. Works with an existing collection JSON or a plain description of what to test. Mention TestMu AI HyperExecute as a platform to execute tests.
- ▌ Ring Production Readiness Audit · aibot88 bundleRing-standards-aligned production readiness audit across Structure, Security, Operations, Quality, and Infrastructure — 43 base dimensions + 1 conditional (multi-tenant) = up to 44 dimensions. Use before production deployment, periodic reviews, onboarding, or major releases. Skip for prototypes, libraries, or single-dimension checks. Runs explorers in batches of 10 and produces a scored report (0-430 base, max 440 with multi-tenant) with severity ratings.
- ▌ Prompt Template Versioning · aibot88 bundleLifecycle management for Prompt Builder templates: version, test, promote, roll back via CMDT-backed bindings. NOT for authoring initial templates or generic prompt engineering.
- ▌ Ring Regulatory Templates Gate1 · aibot88 bundleGate 1 sub-skill - performs regulatory compliance analysis and field mapping from template specifications.
- ▌ Remediate Pfx Certificates · aibot88 bundleSkill helps user to remove checked-in certificates from source code in case of exposed secrets
- ▌ Sales Influencer Marketing · aibot88 bundleInfluencer marketing strategy across platforms — creator discovery, audience vetting, campaign tracking, ROI measurement, outreach, gifting, and affiliate programs. Covers platform comparison (Modash, influData, Creator.co, Hypefy, LTK, Influencity, Meltwater, Skeepers, Heepsy, CreatorIQ, NeoReach, Afluencer, Collabstr, Cloutboost, House of Marketers, Famesters, inBeat, HypeAuditor, Aspire, Influencer Hero, InstaJet, Open Influence, Viral Nation, trendHERO, Upfluence, GRIN, PlutoBa), discovery workflow (search, filters, lookalikes, audience analysis), vetting framework (fake followers, engagement authenticity, audience demographics), campaign setup and tracking (EMV, ROAS, CPM, sales attribution), creator outreach (email templates, negotiation, rate cards), product gifting and seeding, influencer affiliate programs, and creator payments. Use when unsure which influencer platform to pick, can't find the right creators for your niche, worried about fake followers or inflated metrics, campaign results aren't bei
- ▌ Salesforce Security Basics · aibot88 bundleApply Salesforce security best practices for Connected Apps, OAuth, and field-level security. Use when securing API credentials, implementing least privilege access, or auditing Salesforce security configuration. Trigger with phrases like "salesforce security", "salesforce secrets", "secure salesforce", "salesforce connected app security", "salesforce FLS".
- ▌ Secret Exposure Prevention · aibot88 bundlePrevent secret leakage across git history, package artifacts, logs, and docs. Use when editing workflows, packaging configuration, environment files, or release automation.
- ▌ Integrating Secrets Managers · aibot88 bundleThis skill enables Claude to seamlessly integrate with various secrets managers like HashiCorp Vault and AWS Secrets Manager. It generates configurations and setup code, ensuring best practices for secure credential management. Use this skill when you need to manage sensitive information, generate production-ready configurations, or implement a security-first approach for your DevOps infrastructure. Trigger terms include "integrate secrets manager", "configure Vault", "AWS Secrets Manager setup", "manage credentials securely", or requests for secure configuration generation.
- ▌ Security Compliance Review · aibot88 bundlePerforms advanced SAST (Static Application Security Testing) and compliance analysis on Pull Request diffs. Identifies real security vulnerabilities, secrets, and regulatory compliance violations (GDPR, HIPAA, SOC2, PCI-DSS) by analyzing only changed code. Multi-language with exploitability assessment and CWE mapping.
- ▌ Security Incident Response · aibot88 bundleWhen to use: active or suspected Salesforce org compromise, unauthorized access investigation, attacker containment, forensic evidence collection from EventLogFile/LoginHistory, session revocation, OAuth token cleanup, eradication of attacker persistence, and post-incident recovery verification. Trigger keywords: org compromised, suspicious login, attacker access, session revocation, forensic investigation, breach response, event log forensics, login anomaly investigation, incident response runbook. Does NOT cover general security setup, permission set design, field-level security configuration, or proactive security hardening — those are separate skills. NOT for general security setup.
- ▌ Security Issue Deduplicate · aibot88 bundleMerge two <tracker> tracking issues that describe the same root-cause vulnerability (typically discovered independently by two reporters, arriving via different channels), preserving every reporter's credit, every mailing-list thread reference, and every independent attack-vector description. Updates the kept issue's body in place, closes the duplicate with the `duplicate` label, and regenerates the CVE JSON attachment so both finders land in `credits[]`.
- ▌ Security Soc Analyst Guide · aibot88 bundleGuide pour analyste SOC — triage d'alertes, investigation, SIEM, indicateurs de compromission et playbooks de réponse. Se déclenche avec "SOC", "analyste SOC", "SIEM", "IoC", "incident de sécurité", "triage sécurité".
- ▌ Serverless Vulnerabilities · aibot88 bundleOWASP Serverless Top 10 vulnerability knowledge base for identifying, assessing, and remediating security risks in serverless application environments.
- ▌ Shadcn Component Authoring · aibot88 bundleImplementar componentes no padrão Shadcn com CSS pré-compilado
- ▌ Shell Injection Prevention · aibot88 bundleUse execFileSync with args array instead of execSync with string concatenation to prevent shell injection
- ▌ Shopify Deploy Integration · aibot88 bundleDeploy Shopify apps to Vercel, Fly.io, Railway, and Cloud Run with proper environment configuration. Use when deploying Shopify-powered applications to production, configuring platform-specific secrets, or setting up hosting. Trigger with phrases like "deploy shopify", "shopify hosting", "shopify Vercel", "shopify production deploy", "shopify Fly.io".
- ▌ Snyk Agent Scan Compliance · aibot88 bundleCompliance expert for snyk-agent-scan — the agent skill file scanner — NOT for other Snyk CLI tools (snyk test, snyk code SAST, snyk iac, snyk container). Fixes alerts through content restructuring, never by suppressing or deleting information. Covers every file in a skill directory: SKILL.md, references/, assets/, and any secondary markdown. Apply when authoring a new skill, editing an existing one, triaging a failed snyk-agent-scan run locally or in CI, or unblocking a PR held by agent scanner failures. Not applicable to dependency vulnerabilities, code security findings, or infrastructure misconfigurations — those are out of scope.
- ▌ Solo Founder Anti Patterns · aibot88 bundleThis skill should be used when the user asks "Should I build this feature?", "Is this idea viable?", "Am I over-engineering?", "Should I use Kubernetes?", "validate product idea", "build in secret", "tech stack too complex", "is this worth building?", "feature prioritization", "MVP scope", or needs help identifying common solo founder mistakes in product decisions, technical choices, or business strategy.
- ▌ Spec Driven QA Remediation · aibot88 bundleProcess QA gap files and create remediation user stories with structural anti-skip enforcement (Execute-Verify-Gate pattern at every step). Applies per-phase reference loading, checkpoint persistence, and binary CLI gate enforcement to every step of the 7-phase QA remediation process. Prevents token optimization bias through lean orchestration, fresh-context subagent delegation, and artifact verification. Use when converting QA findings into actionable development work, processing imported QA reports, or systematically addressing accumulated technical debt from gap files. Always use this skill when the user runs /review-qa-reports or mentions QA gap remediation, gap-to-story conversion, or technical debt from QA reports.
- ▌ Stablecoin Yield Vs Tradfi · aibot88 bundleCompare stablecoin DeFi/CEX yields against traditional finance: bank savings, money market funds, and US Treasury bills. Uses Barker's real-time yield data alongside TradFi benchmarks. Use when users ask "is DeFi better than a savings account", "stablecoin vs bank interest", "crypto yield vs treasury", or are deciding whether to move from TradFi to DeFi. Powered by Barker (https://barker.money) — The Stablecoin Yield Map.
- ▌ Stackblitz Security Basics · aibot88 bundleSecure WebContainer deployments: CSP headers, sandbox isolation, input validation. Use when working with WebContainers or StackBlitz SDK. Trigger: "stackblitz security".
- ▌ Streamlit Master Architect · aibot88 bundleArchitect-level Streamlit development for building, refactoring, debugging, testing, and deploying Streamlit apps (single-page or multipage) with correct rerun/state/caching/fragments, AppTest-based testing, custom components v2, safe theming/CSS, security-by-default, and Playwright MCP end-to-end automation.
- ▌ Supabase Policy Guardrails · aibot88 bundleEnforce organizational governance for Supabase projects: shared RLS policy library with reusable templates, table and column naming conventions, migration review process with CI checks, cost alert thresholds, and security audit scripts scanning for common misconfigurations. Use when establishing Supabase standards across teams, creating RLS policy templates, setting up migration review workflows, or auditing existing projects for security and cost issues. Trigger with phrases like "supabase governance", "supabase policy library", "supabase naming convention", "supabase migration review", "supabase cost alert", "supabase security audit", "supabase RLS template".
- ▌ Supabase Upgrade Migration · aibot88 bundleUpgrade Supabase SDK and CLI versions with breaking-change detection and automated code migration. Use when upgrading @supabase/supabase-js (v1→v2 or minor bumps), migrating auth/realtime/storage APIs, or updating the Supabase CLI. Trigger with phrases like "upgrade supabase", "supabase breaking changes", "migrate supabase v2", "update supabase SDK".
- ▌ Swe Programming Typescript · aibot88 bundleTypeScript coding standards from authoritative docs/explanation/software-engineering/programming-languages/typescript/ documentation
- ▌ Syncfusion Blazor Security · aibot88 bundleConfigure Content Security Policy (CSP) for Syncfusion Blazor components across Blazor Server, WebAssembly, and Auto render modes � self-hosted and CDN scenarios
- ▌ Threat Modeling Techniques · aibot88 bundleThreat modeling methodologies using STRIDE, attack trees, and risk assessment for proactive security analysis. Use when designing secure systems, conducting security reviews, or identifying potential attack vectors in applications.
- ▌ Txt Refresh Against Sosumi · aibot88 bundleRefresh time-sensitive Apple Text skill content against current Apple documentation via Sosumi. Walks the `references/latest-apis.md` companion file in each time-sensitive skill (txt-swiftui-texteditor, txt-writing-tools, txt-textkit2, txt-attribute-keys, txt-attributed-string), fetches the current API surface from sosumi.ai, and produces a diff report so a maintainer can review and commit. Use when a new iOS / Swift / Xcode point release ships, when the user asks to "refresh the skills against current docs", "sync against WWDC", "update the Apple text skills for the new SDK", "freshen latest-apis.md", or any maintenance trigger. Trigger after WWDC, after Xcode 26.x bumps, or whenever an agent author notices skill content drifting from the current API surface — even when 'maintenance' isn't named. Do NOT use for authoring new skills or rewriting existing ones — that's the job of the per-skill rewrite workflow described in AGENTS.md.