aibot88

@aibot88 source repo

8.3k skills
0 followers
3 repo stars
2 weeks ago last updated

▌
Feature Spec Author · aibot88 bundle
Draft detailed engineering specs from an approved PRD. Use when generating or updating the engineering specification for a feature, before implementation begins.

3 repo stars
▌
Fedramp Rev5 Expert · aibot88 bundle
FedRAMP Rev 5 authorization expert. Provides guidance on traditional authorization paths, SSP/SAP/SAR/POA&M documentation, NIST 800-53 Rev 5 control implementation, and 3PAO assessment preparation.

3 repo stars
▌
Festival Operations · aibot88 bundle
Expert knowledge for running winter festival operations covering customer experience, security, vendor relations, lost & found, and marketing communications

3 repo stars
▌
Figma Data Handling · aibot88 bundle
Handle Figma API data correctly: comments, versions, user data, and privacy compliance. Use when working with Figma comments API, version history, or ensuring GDPR compliance for Figma user data. Trigger with phrases like "figma data", "figma comments", "figma versions", "figma GDPR", "figma user data".

3 repo stars
▌
Final Quality Check · aibot88 bundle
Install the quality line every pie passes through before going on display — wire CI/CD, E2E testing, design-system compliance, and visual-regression gates. Run once before /sell-slice; also invocable standalone on any project.

3 repo stars
▌
Firebase Operations · aibot88 bundle
Performs Firebase Firestore operations. Use when querying collections, creating/updating/deleting documents, using batch writes, or working with Timestamps. Includes pagination, transactions, and security rules patterns.

3 repo stars
▌
Fix Vulnerabilities · aibot88 bundle
Fix Dependabot security vulnerabilities in Java/Gradle projects using severity-based processing, dependency substitution strategies, and dependency graph verification. Use when Dependabot alerts need resolution with proper CI validation.

3 repo stars
▌
Flare Dapp Pitfalls · aibot88 bundle
Hard-won, cross-project lessons from building, deploying, and operating Flare-family (Flare / Songbird / Coston2) dApps. Use this skill whenever the user is: deploying or interacting with a Flare/Songbird/Coston2 contract, building a frontend with RainbowKit + Wagmi for Flare chains, writing Foundry fork tests against Flare-family state, claiming or rotating FTSO reward redistributors, debugging a stuck or silently-failing transaction, choosing RPC endpoints for browser vs server use, or troubleshooting MetaMask / wallet connection on Flare. Trigger on any mention of: Flare RPC, Songbird canary, Coston2 testnet, FTSO reward claim, WNAT vote-power, FlareDrops, FtsoRewardRedistributor, FlaresRewardsRedistributorForNft, Enosys redistributor, RainbowKit MetaMask hang, Ankr origin locked, Multicall3 on Flare, EIP-150 63/64 gas, eth_getLogs 30-block cap, "why is my Flare contract test failing in CI", "why did my claim transaction return zero", "Wrap SGB to WSGB", or any question about gotchas specific to Flare-fami

3 repo stars
▌
Flow Next Interview · aibot88 bundle
Interview user in-depth about an epic, task, or spec file to extract complete implementation details. Use when user wants to flesh out a spec, refine requirements, or clarify a feature before building. Triggers on /flow-next:interview with Flow IDs (fn-1-add-oauth, fn-1-add-oauth.2, or legacy fn-1, fn-1.2, fn-1-xxx, fn-1-xxx.2) or file paths.

3 repo stars
▌
Implementing Flutter Social Auth · aibot88 bundle
Social authentication and OAuth/SSO for Flutter supporting Google Sign-In, Apple Sign-In, Facebook Login, and LINE Login. Use when implementing social login, OAuth flows, sign-in with Google/Apple/Facebook/LINE, SSO integration, third-party authentication, platform credential configuration (SHA-1 fingerprint for Android, Service ID for Apple, App ID for Facebook, Channel ID for LINE), native auth flows, minimal viable examples, error handling patterns, or troubleshooting authentication failures, token handling, and sign-in errors (ApiException, PlatformException).

3 repo stars
▌
Framer Install Auth · aibot88 bundle
Install and configure Framer SDK/CLI authentication. Use when setting up a new Framer integration, configuring API keys, or initializing Framer in your project. Trigger with phrases like "install framer", "setup framer", "framer auth", "configure framer API key".

3 repo stars
▌
Fristenbuch Fuehren · aibot88 bundle
Zentrales Fristenbuch fuer die Kanzlei mit Haupt- und Vorfristen ueber alle Rechtsgebiete. Berechnet Fristbeginn nach den jeweiligen Verfahrensordnungen (ZPO StPO SGG FGO VwGO FamFG AO BGB) Vier-Tages-Fiktionen bei Postzustellung (PostModG seit 1.1.2025; bis 31.12.2024 drei Tage). Trennt Notfristen (BRAO-Haftungsrisiko) von Beobachtungsfristen. Setzt Vorfristen typisch fuenf Werktage vor Hauptfrist; bei BRAO-relevanten Notfristen sieben Werktage. Eskalation an Sekretariat und zustaendigen Anwalt bei Vorfristerreichung. Audit-Trail jeder Fristaenderung.

3 repo stars
▌
Fullstory Ecommerce · aibot88 bundle
Industry-specific guide for implementing Fullstory in e-commerce and retail applications. Covers conversion funnel optimization, product interaction tracking, cart abandonment analysis, checkout flow privacy (PCI compliance), and customer journey mapping. Includes detailed examples for product pages, cart, checkout, and post-purchase experiences.

3 repo stars
▌
Fusionauth Webhooks · aibot88 bundle
Receive and verify FusionAuth webhooks. Use when setting up FusionAuth webhook handlers, debugging JWT signature verification, or handling authentication events like user.create, user.login.success, user.registration.create, or user.delete.

3 repo stars
▌
Gamma Common Errors · aibot88 bundle
Debug and resolve common Gamma API errors. Use when encountering authentication failures, rate limits, generation errors, or unexpected API responses. Trigger with phrases like "gamma error", "gamma not working", "gamma API error", "gamma debug", "gamma troubleshoot".

3 repo stars
▌
Gamma Data Handling · aibot88 bundle
Handle data privacy, retention, and compliance for Gamma integrations. Use when implementing GDPR compliance, data retention policies, or managing user data within Gamma workflows. Trigger with phrases like "gamma data", "gamma privacy", "gamma GDPR", "gamma data retention", "gamma compliance".

3 repo stars
▌
GCP Workspace Pivot · aibot88 bundle
GCP 到 Google Workspace 的穿越攻击方法论。当已获取 GCP Service Account 或 Project 权限并发现目标组织使用 Google Workspace、需要从云平台穿越到企业邮件/文档/管理控制台、或发现 Domain-Wide Delegation 配置时使用。覆盖 Domain-Wide Delegation 滥用、OAuth 范围利用、Workspace API 数据窃取（Gmail/Drive/Calendar/Admin Directory）、以及 Workspace 持久化技术

3 repo stars
▌
Generate Repository · aibot88 bundle
Generate repository class for SQLite data access with CRUD methods, row mapping, and TypeScript types. Use when creating new database tables or data access layers.

3 repo stars
▌
Generating API Docs · aibot88 bundle
Create comprehensive API documentation with examples, authentication guides, and SDKs. Use when creating comprehensive API documentation. Trigger with phrases like "generate API docs", "create API documentation", or "document the API".

3 repo stars
▌
Generating Zoom SQL · aibot88 bundle
Genere un fichier Zoom SQL (.dhsp) complet avec les 27 procedures obligatoires du cycle de vie ecran CRUD (creation, modification, suppression, consultation). Inclut les appels framework (Select, PreInsert, PostInsert, etc.), la construction de conditions de selection, la gestion des reservations, et les hooks de personnalisation. Ecrit en ISO-8859-1+CRLF. A utiliser pour creer l'interface utilisateur d'une entite metier (troisieme fichier du pattern 3 fichiers).

3 repo stars
▌
Github Actions Docs · aibot88 bundle
Use when users ask how to write, explain, customize, migrate, secure, or troubleshoot GitHub Actions workflows, workflow syntax, triggers, matrices, runners, reusable workflows, artifacts, caching, secrets, OIDC, deployments, custom actions, or Actions Runner Controller, especially when they need official GitHub documentation, exact links, or docs-grounded YAML guidance.

3 repo stars
▌
Github Evidence Kit · aibot88 bundle
Generate, export, load, and verify forensic evidence from GitHub sources. Use when creating verifiable evidence objects from GitHub API, GH Archive, Wayback Machine, local git repositories, or security vendor reports. Handles evidence storage, querying, and re-verification against original sources.

3 repo stars
▌
Github Pull Request · aibot88 bundle
Creates, updates, and merges GitHub pull requests using GitHub CLI. Handles the complete PR lifecycle including validation, creation, labeling, review, squash merge, and automatic semantic versioning with git tags. Use when user wants to create a PR, update existing PR, merge with squash, manage PR workflow, or create releases with version tags. Requires GitHub CLI (gh) installed and authenticated. Works with project-specific conventions for JordiNodeJS/thesimpsonsapi.

3 repo stars
▌
Github Windows Auth · aibot88 bundle
Diagnose and fix GitHub authentication issues on Windows when pushing fails with "Repository not found" or wrong-account errors. Use when git push fails despite the repo existing, when multiple GitHub accounts are in play (personal + org), or when Windows Credential Manager has stale credentials. Trigger on phrases like "push failed", "repository not found", "wrong account", "gh auth", "credential", "git push 403", or any push error after a gh auth login.

3 repo stars
▌
Go Dependency Audit · aibot88 bundle
Audit Go module dependencies: detect outdated packages, check for known vulnerabilities, review go.mod hygiene, identify unused or redundant deps, and evaluate dependency quality. Use when auditing dependencies, checking for CVEs, cleaning up go.mod, upgrading modules, or evaluating third-party packages. Trigger examples: "check dependencies", "audit deps", "go.mod review", "update modules", "vulnerability scan", "govulncheck". Do NOT use for code-level security issues (use go-security-audit) or architecture review (use go-architecture-review).

3 repo stars
▌
Go Interface Design · aibot88 bundle
Go interface design patterns: implicit interfaces, consumer-side definition, interface compliance verification, composition, the accept-interfaces-return-structs principle, and common pitfalls. Use when designing interfaces, decoupling packages, defining contracts, reviewing interface usage, or refactoring for testability. Trigger examples: "design interface", "accept interfaces return structs", "interface compliance", "consumer-side interface", "interface composition". Do NOT use for HTTP handler patterns (use go-api-design) or general code review (use go-code-review).

3 repo stars
▌
Google Calendar MCP · aibot88 bundle
Step-by-step guide for setting up Google Calendar MCP server in Claude Code CLI. Use when users want to (1) connect Google Calendar to Claude Code, (2) set up the @cocal/google-calendar-mcp server, (3) configure OAuth credentials for Google Calendar API, or (4) troubleshoot Google Calendar MCP connection issues.

3 repo stars
▌
Grad Agenda Setting · aibot88 bundle
Apply agenda-setting theory (McCombs & Shaw) to analyze how media salience transfers to public perception. Use this skill when the user needs to study media influence on public opinion priorities, evaluate issue salience transfer across media and public agendas, or design communication strategies that leverage agenda-setting effects — even if they say 'why is everyone talking about this topic', 'how does media shape public priorities', or 'which issues get attention and why'.

3 repo stars
▌
Grad Paradox Theory · aibot88 bundle
Apply Smith and Lewis's paradox theory to identify and manage organizational tensions across performing, organizing, belonging, and learning dimensions. Use this skill when the user needs to diagnose persistent either/or tensions, design dynamic equilibrium strategies that embrace both poles, or when they ask 'why does solving this problem make it worse', 'how do we pursue exploration AND exploitation simultaneously', or 'why do our strategic tensions keep recurring despite resolution attempts'.

3 repo stars
▌
Grad Policy Streams · aibot88 bundle
Apply Kingdon's multiple streams framework to analyze how problems, policies, and politics converge to open policy windows. Use this skill when the user needs to explain why certain policies get adopted while others don't, identify policy windows and entrepreneurial opportunities, or analyze the agenda-setting process in public policy — even if they say 'why did this policy pass now', 'policy window', or 'how do issues get on the agenda'.

3 repo stars
▌
Grad Social Capital · aibot88 bundle
Apply social capital theory (Putnam, Coleman, Bourdieu, Burt) to analyze how network structures and trust generate value or impose constraints. Use this skill when the user needs to evaluate bridging vs bonding capital, identify structural holes or network closure benefits, assess community or organizational trust dynamics, or when they ask 'how does our network create value', 'are we too insular', or 'where are the structural holes we can exploit'.

3 repo stars
▌
Gtasks Todo Manager · aibot88 bundle
Manages to-do items across multiple Google accounts using the Google Tasks API. Use when the user needs to create, update, complete, or organize tasks in Google Tasks, manage task lists, or view tasks across multiple Google accounts. Supports personal Gmail, Google Workspace, and organization-provisioned accounts with secure OAuth authentication.

3 repo stars
▌
Guest User Security · aibot88 bundle
Use when hardening the Experience Cloud guest user profile, controlling unauthenticated access to records and Apex, or investigating data exposure through guest SOQL. Covers object permissions, sharing model enforcement for unauthenticated users, and Apex execution context. NOT for Experience Cloud site creation (use Experience Cloud skills) or for authenticated external user security (use security/experience-cloud-security).

3 repo stars
▌
Handler Hosting AWS · aibot88 bundle
AWS hosting handler - centralized AWS operations including authentication, resource deployment, verification, and querying. Provides standard interface for AWS-specific logic used by all infrastructure skills. Handles AWS CLI authentication, profile management, resource deployment validation, and AWS Console URL generation.

3 repo stars
▌
Hex Security Basics · aibot88 bundle
Apply Hex security best practices for secrets and access control. Use when securing API keys, implementing least privilege access, or auditing Hex security configuration. Trigger with phrases like "hex security", "hex secrets", "secure hex", "hex API key security".

3 repo stars
▌
Hipaa Breach Notify · aibot88 bundle
Implements HIPAA breach notification requirements under 45 CFR §164.400-414. Covers individual notification within 60 days, HHS reporting thresholds (500+ immediate, under 500 annual), state attorney general notification, media notification for 500+ in a state, and breach risk assessment. Keywords: HIPAA breach notification, HHS reporting, OCR breach portal, individual notice, state attorney general.

3 repo stars
▌
Hvac Specifications · aibot88 bundle
Look up HVAC equipment specifications (capacity, efficiency, dimensions, electrical requirements) by brand and model number. Use when the user mentions equipment specs, model numbers, AHU, VAV, chiller, boiler, pump, fan specifications, or needs to find manufacturer data sheets. Searches manufacturer websites and processes PDF spec sheets with security safeguards.

3 repo stars
▌
Iac Terraform Audit · aibot88 bundle
Audit Terraform, OpenTofu, Terragrunt, and Pulumi modules for state, provider pinning, security (Checkov/tfsec), module hygiene, environment separation, drift, and cost. One sub-agent per module. Static, live, and apply modes.

3 repo stars
▌
Ibkr Evaluate Order · aibot88 bundle
Evaluate a proposed single-leg order through full pre-trade validation. Use when the user requests to buy or sell a specific instrument and you need to assess portfolio impact, concentration, and profile compliance before any approval or execution. Call ibkr-place-order after this skill to execute an approved order.

3 repo stars
▌
Image Metadata Tool · aibot88 bundle
Extract EXIF metadata from images including GPS coordinates, camera settings, and timestamps. Map photo locations and strip metadata for privacy.

3 repo stars
▌
Implementing Casbin · aibot88 bundle
Implement role-based (RBAC) and attribute-based (ABAC) access control in Go using Casbin. Covers model configuration, GORM adapters, Chi/gRPC middleware, and production patterns. Use when implementing authorization in Go services.

3 repo stars
▌
Interactive Fiction · aibot88 bundle
Diagnose branching narrative problems. Use when choices feel meaningless, when branching is unmanageable, when player agency conflicts with authored story, or when interactive elements break narrative flow.

3 repo stars
▌
Interview Questions · aibot88 bundle
Generate competency-based and behavioral interview questions with legal compliance validation

3 repo stars
▌
Iso42001 Specialist · aibot88 bundle
ISO/IEC 42001:2023 AI Management System (AIMS) specialist for compliance teams running internal audits. Three decisions: (1) Where are the gaps against Clauses 4-10 and what do we close first? (2) What goes in the AI risk register and which Annex A controls treat each risk? (3) What's the 12-month internal audit plan that satisfies Clause 9.2? Use when preparing for certification, scoping internal audit cycles, or onboarding AI systems into an existing ISMS (27001) / QMS (13485) program. NOT an executive AI strategy skill (see chief-ai-officer-advisor). NOT EU AI Act compliance (see compliance-team-eu-ai-act).

3 repo stars
▌
Java Spring Advisor · aibot88 bundle
Développement Java avec Spring Boot, Spring Security et l'écosystème Spring. Se déclenche avec "Java", "Spring Boot", "Spring", "JPA", "Hibernate", "Maven", "Gradle", "Spring Security", "microservices Java".

3 repo stars
▌
Java Spring Service · aibot88 bundle
Creates complete Spring Boot services following best practices and layered architecture. Use when building REST APIs, creating Spring services, setting up controllers, implementing repositories, adding Spring Boot applications, configuring dependency injection, creating RESTful endpoints, adding OpenAPI documentation, or building microservices. Works with Spring Boot 2.x and 3.x, Spring Data JPA, Spring Web, and Spring Security.

3 repo stars
▌
Junta Leiloeiros V2 · aibot88 bundle
Skill: Leiloeiros das Juntas Comerciais do Brasil workflow skill. Use this skill when the user needs Coleta e consulta dados de leiloeiros oficiais de todas as 27 Juntas Comerciais do Brasil. Scraper multi-UF, banco SQLite, API FastAPI e exportacao CSV/JSON and the operator should preserve the upstream workflow, copied support files, and provenance before merging or handing off.

3 repo stars
▌
Jutsu Bun Bun Sqlite · aibot88 bundle
Use when working with SQLite databases in Bun. Covers Bun's built-in SQLite driver, database operations, prepared statements, and transactions with high performance.

3 repo stars
▌
Karpathy Metric Pre · aibot88 bundle
Use this when: red-team my optimization metric, find ways to game my metric, metric pre-mortem, adversarial metric evaluation, gaming vectors for my KPI, what could an agent exploit in my metric, metric failure modes, proxy divergence risk, eval contamination, silent degradation from optimization, metric gaming pre-mortem, is my metric robust enough for auto-improvement, build secondary metrics, evaluation diversity plan, metric countermeasures, what does overfitting look like in my system, holdout scenario design, disappearance test, metric gaming attack surface, is my metric gameable, optimization agent failure modes, what could go wrong with my eval, unsupervised optimization risk, metric red team

3 repo stars
▌
Loom Security Scan · aibot88 bundle
Quick routine security checks for secrets, dependencies, container images, and common vulnerabilities. Use for lightweight pre-commit and CI scans with tools like Semgrep, Trivy, gitleaks, cargo audit, npm audit, and pip-audit. Not a substitute for deep audits (use loom-security-audit).

3 repo stars
▌
Maintain Design Md · aibot88 bundle
How to author and maintain a `DESIGN.md` file at the root of any Lossless project (site, splash page, plugin landing, fundraise deck) following Google Stitch's open spec. Use whenever a project is missing a `DESIGN.md` and an agent needs the project's visual identity in machine-readable form; whenever the user mentions "design tokens", "design system", "DESIGN.md", or "Stitch spec"; whenever theme/CSS-token work changes the runtime values (new CSS custom property in `:root`, renamed token, new mode, new component pattern, refreshed palette, refreshed typography scale) and the documented contract has drifted; whenever a sibling skill (`generate-consistent-og-images`, `theme-system`, `astro-knots`) needs to read locked design values; whenever the user says "the agent doesn't know what color we use" or "let's write down the design system." Encodes (1) the Stitch spec's frontmatter token groups (colors, typography, rounded, spacing, components) and the eight prose sections in canonical order, (2) the maintenance

3 repo stars
▌
Makepad 2 0 Events · aibot88 bundle
CRITICAL: Use for Makepad 2.0 event and action handling. Triggers on: makepad event, makepad action, MatchEvent, handle_event, handle_actions, on_click, on_render, on_return, on_startup, script_eval!, script_apply_eval!, button clicked, text changed, slider changed, checkbox toggled, Hit, FingerDown, FingerUp, KeyDown, KeyUp, Focus, ids!, TextCopy, TextCut, SelectionHandleDrag, PopupDismissed, clipboard, selection, IME, ImeAction, popup window events, video inputs, camera events, 事件, 动作, 点击, 输入, 回调, 交互, 事件处理, 剪贴板, 选择, 弹出窗口

3 repo stars
▌
Manage Secrets Env · aibot88 bundle
Opinionated defaults and full lifecycle playbook for secrets and environment variables. Decides where a secret or env-specific value lives (constant, .env, CI secret, env var), scaffolds .env.example and .gitignore, and manages the lifecycle end to end — add, update, rotate, remove, migrate between buckets, audit cross-environment drift, provision new environments. High-stakes companion to project-conventions. Language-agnostic.

3 repo stars
▌
Marketing Red Team · aibot88 bundle
When the user wants to critically review marketing output for errors, inconsistencies, and risks. Also use when 'red team,' 'challenge,' 'devil's advocate,' 'tegenargumenten,' 'kritische review,' 'hallucinatie check,' 'fact check,' 'sanity check,' 'tegenstrijdigheden,' 'critical review,' 'challenge my assumptions.' For comprehensive QA scoring, see marketing-qa.

3 repo stars
▌
MCP Server Best Practices · aibot88 bundle
Production-ready patterns and best practices for MCP servers - architecture, security, performance, and maintenance

3 repo stars
▌
MCP Server Builder · aibot88 bundle
Build production-ready MCP (Model Context Protocol) servers with tool definitions, resource providers, prompt templates, and transport configuration. Covers OpenAPI-to-MCP conversion, TypeScript and Python implementations, testing strategies, authentication, and deployment. Use when exposing APIs to AI agents, building tool servers, or creating MCP integrations.

3 repo stars
▌
MCP Server Manager · aibot88 bundle
Configure and manage MCP (Model Context Protocol) servers in Claude Code CLI. Use this skill when adding, removing, listing, or troubleshooting MCP servers, or when questions arise about MCP configuration, transport types, scopes, or authentication. Essential for connecting Claude Code to external tools, databases, and APIs.

3 repo stars
▌
Measure Okr Grader · aibot88 bundle
Scores completed OKR sets at cycle close with KR-level scoring per the canonical OKR type enum (committed | aspirational | learning | operational_health | compliance_or_safety), committed-vs-aspirational interpretation, evidence quality assessment, learning synthesis, and next-cycle recommendations. Refuses to retroactively change targets or shrink committed scope, average away guardrail KRs, treat 0.7 as success for committed or compliance_or_safety KRs, equate effort with impact, or use scores for individual performance. Hands off to iterate-lessons-log, iterate-retrospective, define-hypothesis, measure-dashboard-requirements, measure-instrumentation-spec, and foundation-okr-writer.

3 repo stars
▌
Miro Common Errors · aibot88 bundle
Diagnose and fix Miro REST API v2 errors by HTTP status code. Use when encountering Miro API errors, debugging failed requests, or troubleshooting authentication and permission issues. Trigger with phrases like "miro error", "fix miro", "miro not working", "debug miro", "miro 401", "miro 403", "miro 429".

3 repo stars
▌
Miro Data Handling · aibot88 bundle
Implement Miro REST API v2 data handling with PII detection in board content, data export via API, retention policies, and GDPR/CCPA compliance patterns. Trigger with phrases like "miro data", "miro PII", "miro GDPR", "miro data export", "miro privacy", "miro compliance".

3 repo stars
▌
Ml Vulnerabilities · aibot88 bundle
OWASP Machine Learning Top 10 vulnerability knowledge base for identifying, assessing, and remediating security risks in machine learning systems.

3 repo stars
▌
Moai Foundation Cc · aibot88 bundle
Canonical Claude Code authoring kit covering Skills, sub-agents, plugins, slash commands, hooks, memory, settings, sandboxing, headless mode, and advanced agent patterns. Use when creating Claude Code extensions or configuring Claude Code features.

3 repo stars
▌
Moai Platform Auth · aibot88 bundle
Authentication and authorization specialist covering Auth0, Clerk, and Firebase Auth. Use when implementing authentication, MFA, SSO, passkeys, WebAuthn, social login, or security features.

3 repo stars
▌
Moai Tool Ast Grep · aibot88 bundle
AST-based structural code search, security scanning, and refactoring using ast-grep (sg CLI) with pattern matching and code transformation across 40+ languages. Use for structural search or codemod operations.

3 repo stars
▌
Moex Server Access · aibot88 bundle
Безопасная работа с production-сервером Фрейм (таймфрейм.рф) через SSH — деплой файлов, выполнение команд в контейнерах, чтение логов, БД-запросы. Соблюдает rate-limit и fail2ban защиту через single-connection patterns. Триггер когда пользователь говорит «задеплой на сервер», «посмотри логи прода», «выполни SQL на проде», «обнови файл в контейнере», «restart api», «check production», «прод не работает», или просит любое действие требующее SSH к 103.88.243.232.

3 repo stars
▌
Multilingual Score · aibot88 bundle
Use when the user wants to score translated or localized content quality — check translation accuracy, cultural adaptation, brand voice preservation, formatting integrity, and compliance alignment.

3 repo stars
▌
Multiplayer Basics · aibot88 bundle
Use when implementing multiplayer — MultiplayerAPI, ENet/WebSocket peers, RPCs, and authority model

3 repo stars
▌
Naftiko Capability · aibot88 bundle
Skill for authoring, validating, and debugging Naftiko Capability YAML files (spec v1.0.0-alpha1). Activate when the user wants to: write a new capability document, add or change authentication on a consumed API, configure orchestration steps or parameter mappings, set up a forward proxy, expose an MCP server or Skill server, configure external references for secrets, add a control port for health checks and metrics, enable OpenTelemetry observability, or run the Spectral linter. The Naftiko Specification defines modular, composable capabilities that consume external APIs and expose REST, MCP, Skill, or Control adapters.

3 repo stars
▌
Naming Conventions · aibot88 bundle
Use when performing a full naming audit across a codebase, stack profile, or API surface for convention compliance

3 repo stars
▌
Navan Debug Bundle · aibot88 bundle
Use when collecting diagnostic data from a Navan API integration — OAuth token inspection, API response capture, connectivity testing, and request/response logging. Trigger with "navan debug bundle" or "debug navan api".

3 repo stars
▌
Navan Install Auth · aibot88 bundle
Set up OAuth 2.0 authentication for the Navan REST API. Use when configuring a new Navan integration or rotating API credentials. Trigger with "install navan", "setup navan auth", "navan credentials", "navan oauth".

3 repo stars
▌
Nestjs Code Review · aibot88 bundle
Provides comprehensive code review capability for NestJS applications, analyzing controllers, services, modules, guards, interceptors, pipes, dependency injection, and database integration patterns. Use when reviewing NestJS code changes, before merging pull requests, after implementing new features, or for architecture validation. Triggers on "review NestJS code", "NestJS code review", "check my NestJS controller/service".

3 repo stars
▌
Nginx Configurator · aibot88 bundle
Configuration Nginx — reverse proxy, SSL/TLS, load balancing, caching et security headers. Se déclenche avec "Nginx", "nginx.conf", "reverse proxy", "SSL Nginx", "load balancer Nginx".

3 repo stars
▌
Nist Csf 20 Expert · aibot88 bundle
NIST Cybersecurity Framework v2.0 expert. Reference-depth knowledge of the six Functions (Govern, Identify, Protect, Detect, Respond, Recover), Categories and Subcategories, Profiles (Current vs Target), Tiers, Implementation Examples, and the practitioner workflow of using CSF as a board-readable cybersecurity outcomes language. Backed by the SCF crosswalk for control-by-control mechanics.

3 repo stars
▌
No Code Automation · aibot88 bundle
Use this skill when building workflow automations with Zapier, Make (Integromat), n8n, or similar no-code/low-code platforms. Triggers on workflow automation, Zap creation, Make scenario design, n8n workflow building, webhook routing, internal tooling automation, app integration, trigger-action patterns, and any task requiring connecting SaaS tools without writing full applications.

3 repo stars
▌
Nullcost Recommend · aibot88 bundle
MUST use for developer provider recommendations involving free tier, free trial, cheap, pricing, best value, hosting, Node hosting, Next.js, auth, Postgres, database, email API, transactional email, SaaS stack, API platform, GPU compute, remote MCP endpoints, or low setup friction. Auto-trigger for plain prompts like "what are some free tier hosting providers for Node projects", "find me hosting with a free tier", "cheap GPU provider", or "free tier hosting for a remote MCP endpoint"; also use when the user explicitly types `/nullcost-recommend`. Call Nullcost before answering from model knowledge or web. Do not use this for domain/registrar/TLD prompts.

3 repo stars
▌
Offensive Security Skill · aibot88 bundle
Offensive security tools and techniques integration

3 repo stars
▌
Offensive Wpa2 Psk · aibot88 bundle
WPA/WPA2-PSK attack methodology — four-way handshake capture via targeted deauthentication, PMKID attacks (no client required), hcxdumptool / hcxpcapngtool conversion to hashcat hc22000 format, GPU-accelerated cracking with dictionary, mask, and rule-based attacks, vendor default-PSK generators (UPC, Sky, BT, etc.), 802.11r FT key cracking, opportunistic key cache analysis, and signal-level optimization. Use when the in-scope network is WPA/WPA2 Personal — the most common consumer/SMB encryption mode.

3 repo stars
▌
Offensive Wpa3 Sae · aibot88 bundle
WPA3 / SAE (Simultaneous Authentication of Equals) attack methodology — transition-mode (mixed WPA2/WPA3) downgrade, Dragonblood side-channel attacks (CVE-2019-9494, 9495, 13377, 13456), SAE auth flooding for AP CPU exhaustion, Hash-to-Element (H2E) timing analysis, group downgrade, and 6 GHz / Wi-Fi 6E spec implications (PMF mandatory, no transition mode allowed). Use when target advertises WPA3-SAE or WPA3-Personal/Enterprise, or operates in 6 GHz where WPA3 + PMF are required by spec.

3 repo stars
▌
Op Secret Template · aibot88 bundle
Generate `op://` secret references for every field on a 1Password item. Output is ready to paste into a `.env` template.

3 repo stars
▌
Orchestrate Review · aibot88 bundle
Use when user asks to "deep review the code", "thorough code review", "multi-pass review", or when orchestrating the Phase 9 review loop. Provides review pass definitions (code quality, security, performance, test coverage), signal detection patterns, and iteration algorithms.

3 repo stars
▌
Oss Bucket Exploit · aibot88 bundle
对象存储（S3/OSS/COS/OBS）Bucket 误配利用。当发现 AWS S3、阿里云 OSS、腾讯云 COS、华为云 OBS 等对象存储服务，或在 HTTP 响应中看到 x-amz-*、x-oss-*、x-cos-* 等 Header 时使用。覆盖 Bucket 枚举、ACL 误配检测、公开读写利用、Bucket 接管、Object 遍历、任意文件上传、Policy 策略滥用。发现任何云存储桶相关的资产或 URL（*.s3.amazonaws.com、*.oss-cn-*.aliyuncs.com、*.cos.*.myqcloud.com 等）都应使用此技能。优先使用 coscli/tccli 操作腾讯云 COS，awscli 操作 AWS S3

3 repo stars
▌
Owasp API Security · aibot88 bundle
OWASP API Security Top 10 testing patterns, injection payloads, auth bypass vectors, and security test generation for REST APIs. Use when writing security tests, reviewing API endpoints for vulnerabilities, or auditing input validation.

3 repo stars
▌
Owasp Zap Security · aibot88 bundle
Deep integration with OWASP ZAP for automated security scanning, vulnerability detection, and API security testing. Execute spider/active scans, analyze alerts, generate security reports, and integrate with CI/CD pipelines.

3 repo stars
▌
Payroll Processing · aibot88 bundle
Run payroll end-to-end — gross-to-net calculations, tax withholding, benefits deductions, contractor payments, and compliance filings.

3 repo stars
▌
Pci Dss Specialist · aibot88 bundle
PCI DSS v4.0 payment card industry data security standard compliance, assessment, and implementation. Use for PCI DSS, payment card security, cardholder data, PCI compliance, payment security, PCI assessment, SAQ, ROC, QSA, credit card security, payment processing security, PCI scoping, tokenization, payment terminal security, CDE security, and merchant compliance.

3 repo stars
▌
Performing Penetration Testing · aibot88 bundle
This skill enables automated penetration testing of web applications. It uses the penetration-tester plugin to identify vulnerabilities, including OWASP Top 10 threats, and suggests exploitation techniques. Use this skill when the user requests a "penetration test", "pentest", "vulnerability assessment", or asks to "exploit" a web application. It provides comprehensive reporting on identified security flaws.

3 repo stars
▌
Pentest Engagement · aibot88 bundle
Penetration testing engagement planning — scoping, ROE drafting, phased timeline, MITRE ATT&CK mapping, kickoff/closeout dokumantasyonu. Triggers on engagement plan, ROE, rules of engagement, scoping, pentest plan, phased plan, MITRE mapping, attack matrix, kickoff, closeout.

3 repo stars
▌
Pentest Metasploit · aibot88 bundle
Penetration testing framework for exploit development, vulnerability validation, and authorized security assessments using Metasploit Framework. Use when: (1) Validating vulnerabilities in authorized security assessments, (2) Demonstrating exploit impact for security research, (3) Testing defensive controls in controlled environments, (4) Conducting authorized penetration tests with proper scoping and authorization, (5) Developing post-exploitation workflows for red team operations.

3 repo stars
▌
Performance Budget · aibot88 bundle
Performance budget tanımı + CI enforcement. Web Vitals (LCP/INP/CLS), JS/CSS bundle size, API p95/p99 latency, DB query, memory/CPU, cost budget. PR-time gate (size-limit, Lighthouse CI, k6 threshold). RUM authoritative (CrUX/Datadog/SpeedCurve). Regression detection trend-based.

3 repo stars
▌
PHP Audit Pipeline · aibot88 bundle
PHP Web 全链路白盒代码安全审计流水线（多文件版编排）。作为总编排参考，按 Sink 类型调用各子审计 skill（`php-route-mapper/php-auth-audit/php-route-tracer/php-*-audit`），并复用统一输出与分级标准。

3 repo stars
▌
PHP Frontend Audit · aibot88 bundle
PHP 源码前端交互类漏洞审计。当在 PHP 白盒审计中需要检测前端安全相关漏洞时触发。覆盖 5 类前端风险: XSS(反射/存储/DOM)、CSRF(Token 验证缺失)、开放重定向(header Location 可控)、CRLF 注入(HTTP 响应拆分)、会话与 Cookie 安全(固定/劫持/属性)。需要 php-audit-pipeline 提供的数据流证据。

3 repo stars
▌
Dartai Post Task Reviewer · aibot88 bundle
Forked-context deep post-task reviewer — preloads verdict schema + OWASP security + deep code analysis + PM/docs accuracy + replan lens. 對抗深度後任務審查（fork上下文）。 Use when: dispatch post-task-reviewer subagent, deep review after fast gates, OWASP audit, PM/docs accuracy check, replan recommendation

3 repo stars
▌
Pr Crisis Response · aibot88 bundle
Manage PR crises using classification, golden hour response, crisis statement templates (3C framework), and reputation recovery planning. Use this skill when the user faces negative media coverage, a viral complaint, product safety issues, executive misconduct, or any situation threatening brand reputation — even if they say 'we're getting destroyed on social media', 'draft a response to this article', 'how do we handle this PR disaster', or 'prepare for potential backlash'.

3 repo stars
▌
Pr Security Review · aibot88 bundle
Use this skill to review a PR or diff for security regressions. Do not use it for full-repository audits or legal contract review.

3 repo stars
▌
Principle Security · aibot88 bundle
Security design principles — trust boundaries and input validation, authentication vs authorization, secrets handling, secure defaults and defense in depth, lightweight threat modeling, cryptography hygiene, attack-surface minimization. Auto-load when designing auth, discussing authn or authz, handling secrets, defining trust boundaries, validating untrusted input, considering SSRF or CSRF, choosing session or JWT mechanics, configuring TLS, picking an encryption primitive, or weighing least-privilege trade-offs.

3 repo stars
▌
Privacy API Design · aibot88 bundle
Design privacy API patterns including data subject API for DSAR endpoints, consent API for preference management, deletion API with cascading delete orchestration, and audit API for compliance reporting. Provides OpenAPI specifications, error handling, rate limiting, and authentication patterns.

3 repo stars
▌
Project Ambassador · aibot88 bundle
The project's institutional memory and decision authority. Acts as an autonomous representative of the project — its goals, architecture, conventions, constraints, and intent. Use this skill whenever the active agent or another skill needs clarification about the project before proceeding. Triggers on: "/project-ambassador", "/ambassador", "ask the ambassador", "check with the ambassador", "what does the project want", "what's the project's stance on", or when any skill produces clarifying questions that the user redirects here. Also triggers when the user says "let the ambassador decide", "the ambassador knows", "don't ask me, ask the project", or similar delegation phrases. Use proactively when you're about to ask the user a question about project intent, conventions, or architecture — consult the ambassador first. If invoked without a prompt, performs a project knowledge audit.

3 repo stars
▌
Prompt Engineer Prompt Scaffolding · aibot88 bundle
Defensive prompt scaffolding, injection prevention, safety guardrails. 防禦提示架構、注入防護、安全護欄之法。 Use when: building user-facing prompts, hardening against injection attacks, adding safety layers to system prompts.

3 repo stars
▌
Pyinstaller Config · aibot88 bundle
Configure PyInstaller for Python binary builds with spec files and bundling options.

3 repo stars

8,341 published skills · page 57 of 84