aibot88
- 8.3k skills
- 0 followers
- 3 repo stars
- 2 weeks ago last updated
- ▌ Google Docs 2 · aibot88 bundleInteract with Google Docs - create documents, search by title, read content, and edit text. Use when user asks to: create a Google Doc, find a document, read doc content, add text to a doc, or replace text in a document. Lightweight alternative to full Google Workspace MCP server with standalone OAuth authentication.
- ▌ Ha REST API 2 · aibot88 bundleProvides methods to interact with Home Assistant REST API for entity discovery, state retrieval, and service calls including authentication, entity patterns, service calls, and state queries. Use when working with Home Assistant integrations, controlling devices, querying sensor data, or automating Home Assistant operations.
- ▌ Healthcheck 2 · aibot88 bundleHost security hardening and risk-tolerance configuration for Otto deployments. Use when a user asks for security audits, firewall/SSH/update hardening, risk posture, exposure review, Otto cron scheduling for periodic checks, or version status checks on a machine running Otto (laptop, workstation, Pi, VPS).
- ▌ Hummingbird 2 · aibot88 bundleExpert guidance on Hummingbird 2 web framework. Use when developers mention: (1) Hummingbird, HB, or Hummingbird 2, (2) Swift web server or HTTP server, (3) server-side Swift routing or middleware, (4) building REST APIs in Swift, (5) RequestContext or ChildRequestContext, (6) HummingbirdAuth or authentication middleware, (7) HummingbirdWebSocket, (8) HummingbirdFluent or database integration, (9) ResponseGenerator or EditedResponse.
- ▌ Hyperframes 2 · aibot88 bundleCreate video compositions, animations, title cards, overlays, captions, voiceovers, audio-reactive visuals, and scene transitions in HyperFrames HTML. Use when asked to build any HTML-based video content, add captions or subtitles synced to audio, generate text-to-speech narration, create audio-reactive animation (beat sync, glow, pulse driven by music), add animated text highlighting (marker sweeps, hand-drawn circles, burst lines, scribble, sketchout), or add transitions between scenes (crossfades, wipes, reveals, shader transitions). Covers composition authoring, timing, media, and the full video production workflow. For CLI commands (init, lint, preview, render, transcribe, tts) see the hyperframes-cli skill.
- ▌ Iac Scanner 2 · aibot88 bundleScans Infrastructure as Code for security misconfigurations. Wraps tfsec for Terraform and Checkov for multi-cloud IaC. Use when user asks to "scan Terraform", "IaC security", "infrastructure scan", "tfsec", "checkov", "Terraformセキュリティ", "インフラスキャン".
- ▌ Idea Ingest 2 · aibot88 bundleIngest links, articles, tweets, and ideas into the brain. Fetch content, save to brain with analysis, create author people page, and cross-link. Use when the user shares a link or says "read this", "save this", "think about this".
- ▌ Int Youtube 2 · aibot88 bundleQuery YouTube Data API v3 — channel stats, recent videos, top videos, comments. Supports multi-account (OAuth or API Key). Use when user asks about YouTube metrics, YouTube channel, subscribers, views, videos, engagement, or any reference to YouTube analytics.
- ▌ IOS Logging 2 · aibot88 bundleEnterprise skill for iOS production error observability and logging (iOS 15+, Swift 5.5+). The trigger is OBSERVABILITY intent — the user wants errors captured and visible in production, not just handled. Use when: adding os.Logger or replacing print() with structured logging; setting up or integrating a crash SDK (Sentry, Crashlytics, PostHog); auditing error handling for silent failures (catch blocks with no Logger/ErrorReporter call, try? on network/auth/payment operations, Task {} with no do-catch, Combine .replaceError() killing error visibility); adding privacy annotations to logs; integrating MetricKit for OOM/hang detection; or asking why errors are disappearing silently in production. Also use when reviewing any catch block, try?, or Task {} specifically to ensure errors reach a remote crash reporting service — not just for writing error handling in general.
- ▌ IOS Testing 2 · aibot88 bundleInvoke any time a user is writing iOS/Swift tests or asking why tests behave a certain way — including XCTest versus Swift Testing (@Test/#expect) choices, async ViewModel tests with @Observable or @Published, snapshot testing across device sizes, mocking protocols for dependency injection, setUp/tearDown lifecycle issues, tests that fail on CI but pass locally, flaky async tests, testing VIPER/TCA/MVVM architectures, and coverage gaps on error paths. The trigger is user intent: they are trying to verify, assert, or validate iOS/Swift behavior in a test context, whether they use the word 'testing' or not.
- ▌ Irap Expert 2 · aibot88 bundleAustralian IRAP (Information Security Registered Assessors Program) expert. Provides guidance on ISM controls, Essential Eight maturity levels, ACSC guidelines, and Australian data sovereignty requirements.
- ▌ Java Docker 2 · aibot88 bundleContainerize Java applications - Dockerfile optimization, JVM settings, security
- ▌ Java Health 2 · aibot88 bundleRuns a holistic code health check scoring Security, Tests, Performance and Quality with A-F grades. Use when user asks to "check health", "score this project", "health check", "how good is this code", "overall assessment", or "code quality score".
- ▌ Lead Review 2 · aibot88 bundleAutonomous comprehensive review. Once-through pipeline over /review-health, /review-arch, /review-security, /review-perf, /review-a11y, /review-test, /review-release. Operator-configurable ticket creation at startup — when ON, auto-approves sub-skill ticket proposals per the orchestrator-family contract; when OFF, uniformly declines and surfaces findings in the consolidated report. Auto-detects sub-skills that do not apply (no web content → skip /review-a11y; no tests → skip /review-test).
- ▌ Legal Audit 2 · aibot88 bundleAudit current legal posture — identify gaps in policies, contracts, and compliance
- ▌ Legal Brief 2 · aibot88 bundleGerar briefings contextuais para trabalho jurídico — resumo diário, pesquisa de tópico ou resposta a incidente. Use ao iniciar o dia e precisar de uma varredura de itens jurídicos relevantes por email, calendário e contratos, ao pesquisar uma questão jurídica específica em fontes internas, ou quando uma situação em desenvolvimento (vazamento de dados, ameaça de litígio, consulta regulatória) exige contexto rápido.
- ▌ Legal Pages 2 · aibot88 bundleRequired legal pages for UK/HU lead generation websites. Privacy Policy, Cookie Policy. GDPR compliant. Bilingual templates (EN/HU).
- ▌ Libresource 2 · aibot88 bundlelibresource - Typed resource management with access control. ResourceIndex stores and retrieves resources with policy-based authorization. toInstance converts objects to typed instances. toResourceId parses URI strings. createResourceIndex factory. Use for persisting structured data, managing entities, and enforcing access control.
- ▌ Libtv Video 2 · aibot88 bundleSeedance 2.0 video & image generation via LibTV Gateway - AI text-to-video, image-to-video, video continuation, style transfer, and text-to-image using Seedance 2.0 model. Also supports Kling 3.0, Wan 2.6, Midjourney, Seedream 5.0. Trigger phrases: seedance, generate video, make a video, generate image, make an image, draw, libtv, liblib.
- ▌
- ▌ Build Zoom Meeting Sdk App 2 · aibot88 bundleReference skill for Zoom Meeting SDK. Use after routing to a meeting-embed workflow when implementing real Zoom meeting joins, platform-specific SDK behavior, auth and join flows, waiting room issues, or meeting bot patterns.
- ▌ Nist Expert 2 · aibot88 bundleNIST 800-53 control framework expert. Provides guidance on control families, baseline selection, tailoring, and federal compliance requirements including FedRAMP alignment.
- ▌ Oma Backend 2 · aibot88 bundleBackend specialist for APIs, databases, authentication with clean architecture (Repository/Service/Router pattern). Use for API, endpoint, REST, database, server, migration, and auth work.
- ▌ Oma Scholar 2 · aibot88 bundleScholarly research companion using Knows sidecar spec (.knows.yaml). Generates, validates, reviews, queries, and compares structured research-paper sidecars, and fetches them from knows.academy. Use for academic literature search, survey synthesis, paper authoring assistance, and peer review with token-efficient claim/evidence/relation access.
- ▌ Onchain Pay Open API 2 · aibot88 bundleBinance Onchain Pay enables users to buy cryptocurrency with fiat (e.g., EUR, USD) or send existing crypto from their Binance account directly to any external on-chain wallet address in a single flow—no manual withdrawal needed. Enables partners to integrate crypto buying services: - payment-method-list: Get available payment methods (Card, P2P, Google Pay, Apple Pay, etc.) with limits for a fiat/crypto pair - trading-pairs: List all supported fiat currencies and cryptocurrencies - estimated-quote: Get real-time price quote including exchange rate, fees, and estimated crypto amount - pre-order: Create a buy order and get redirect URL to Binance payment flow - order: Query order status and details (processing, completed, failed, etc.) - crypto-network: Get supported blockchain networks with withdraw fees and limits - p2p/trading-pairs: List P2P-specific trading pairs
- ▌ Ops Monitor 2 · aibot88 bundleUnified APM and monitoring surface. Polls Datadog, New Relic, and OpenTelemetry backends for active alerts, error traces, and entity health. Use --watch for live polling every 60 seconds. Use --setup to configure monitoring credentials.
- ▌
- ▌ Orbit Gmail 2 · aibot88 bundleOpen Orbit briefing skill — selected by the Orbit pipeline when Gmail is the user's only connected connector, or when the user explicitly scopes their daily digest to Gmail. Pulls the past 24 hours of inbox activity (replies awaited, mentions, cc, auto- categorized bulk) from the user's authenticated Gmail connection and renders the digest as the Orbit Daily Digest email opened inside Gmail's reading view. This skill should not be triggered manually — it is invoked by Orbit's daily-digest scheduler against live Gmail data.
- ▌ Pbmm Expert 2 · aibot88 bundleCanadian PBMM (Protected B, Medium Integrity, Medium Availability) expert. Provides comprehensive guidance on ITSG-33 controls, CCCS assessment, Canadian data residency, and Government of Canada cloud security requirements.
- ▌ PDF Decrypt 2 · aibot88 bundle自动猜密码解 PDF(银行账单 / 投资报告 / 信用卡对账单等)。读 ~/.personal_env 的 PDF_ID_* 身份变量,按发行方密码规则生成候选并用 qpdf 试解。当用户提供加密 PDF 且未提供密码("读不了" / "解密一下" / "这个 PDF 加密了")时触发。
- ▌ Pm Red Team 2 · aibot88 bundleAdversarially re-review a PM artifact, recommendation, or AI-generated critique that already exists. Use as a second pass after another skill (pm-evaluator, pm-prd-drafter, pm-decision-coach, pm-value-hypothesis-tester) has produced output, or on any external AI output the user wants pressure-tested before deferring to it. Plays the role of a hostile exec, skeptical board member, or competing PM — looking for what the first pass missed, what bias it brought, and what would not survive a real review. Returns the three load-bearing holes, what's already strong enough to keep, and the specific re-writes that would close the gaps.
- ▌ Reddit Auth 2 · aibot88 bundleReddit authentication management skill. Check login status, log out. Triggered when user asks to check Reddit login status or log out.
- ▌ Relay Audit 2 · aibot88 bundleAudit an existing CI/CD pipeline for slowness, security issues, and reliability gaps. Use when asked to "audit pipeline", "why is CI slow", "pipeline review", or "deployment review".
- ▌ Review Auth 2 · aibot88 bundleProduction-readiness audit for authentication. Use when auth code changes or when auth feels fragile, unclear, or unsafe. Covers OIDC, sessions, tokens, route protection, and secret management.
- ▌ Review Cicd 2 · aibot88 bundleCI/CD and deployment reliability audit. Use when pipeline configs, Dockerfiles, K8s manifests, Skaffold config, or GitHub Actions workflows change. Checks build integrity, environment parity, secret hygiene, and rollback safety.
- ▌ Rust Strict 2 · aibot88 bundleRust security, strictness, and vulnerability prevention rules. Use when writing, reviewing, or auditing Rust code. Complements rust-skills (179 general rules) with security-focused rules: unsafe audit, unwrap/expect bans, error handling hierarchy, secret handling, concurrency safety, input validation for Tauri commands, and release profile hardening. Derived from production Rust projects.
- ▌ Sast Report 2 · aibot88 bundleConsolidate all SAST vulnerability results from the sast/ folder into a single final report ranked by severity and confidentiality impact. Reads all *-results.md files and produces sast/final-report.md. Run after all vulnerability detection skills complete. Use when asked to generate a final report, consolidate findings, or summarize security results.
- ▌ Saudi Legal 2 · aibot88 bundleالخدمات القانونية السعودية — Saudi legal services via Najiz & Wathq APIs for courts, deeds, and power of attorney
- ▌
- ▌ Sf Metadata 2 · aibot88 bundle<!-- Adapted from Jaganpro/sf-skills@ff1ab74 (MIT). This file layers Brite conventions from brite-salesforce/CLAUDE.md §Metadata Authoring (lines 120-143) + §Engineering Standards (lines 37-50). -->
- ▌ Simple Earn 2 · aibot88 bundleBinance Simple-earn request using the Binance API. Authentication requires API key and secret key.
- ▌ Spine Recon 2 · aibot88 bundleBackend reconnaissance — map all routes, middleware, models, dependencies, auth, and assess code quality for project takeover. Use when asked to "understand this backend", "map the API", or "assess code quality".
- ▌ Sub Account 2 · aibot88 bundleBinance Sub-account request using the Binance API. Authentication requires API key and secret key.
- ▌ Tool Domain 2 · aibot88 bundleHistorical stub. This Go binary did not ship in public v0.3.x; current domain/site work lives in /mb-site and packaged Python readiness checks.
- ▌ Tool Stripe 2 · aibot88 bundleHistorical stub. This Go binary did not ship in public v0.3.x; current Stripe/payments work should be revived only behind a fresh decision and explicit provider gates.
- ▌ Touch Audit 2 · aibot88 bundleMobile audit — app size, startup time, crash reporting, store compliance, accessibility, offline behavior. Use when asked for "mobile review", "app store readiness", "mobile performance", or "crash analysis".
- ▌ Truthfinder 2 · aibot88 bundleAlways-active web search safety skill. Classifies every website into SAFE, CAUTION, RISKY, or BLOCKED before reading or citing it. Reads and evaluates real user reviews and feedback to surface genuine sentiment. Detects fake, paid, or astroturfed reviews. Filters misinformation, malware, phishing, and data-harvesting sites. Never visits or relays content from dangerous sources. Protects the user's personal data and software from any site that could steal or exploit it.
- ▌ Ultrareview 2 · aibot88 bundleMulti-agent parallel code review system inspired by Claude Code's /ultrareview. Spawn 5-20 specialized agents (security, logic, performance, edge cases, architecture) to review code simultaneously, cross-validate findings, and produce a consolidated bug report. Use when asked to do deep code review, ultrareview, multi-agent review, comprehensive bug hunting, security audit, or thorough pre-merge code inspection.
- ▌ Viper Uikit 2 · aibot88 bundleUse when working with VIPER architecture in iOS/UIKit apps. Triggers on: creating new VIPER modules (View/Interactor/Presenter/Entity/Router); fixing retain cycles between VIPER layers; removing UIKit imports from Presenters; refactoring massive ViewControllers into VIPER layers; migrating VIPER Views to SwiftUI via UIHostingController; handling navigation with VIPER Routers; moving business logic from Presenter into Interactor; wiring module Builders with dependency injection; testing Presenters or Interactors in isolation; or managing UITabBarController across VIPER modules. Also use when decomposing god ViewControllers, defining module protocol contracts, or phasing an MVC-to-VIPER migration.
- ▌ Voice Style 2 · aibot88 bundleVoice, style, and register in writing across all forms. Covers voice (authorial presence, authenticity, persona, tone), style as choice (diction, syntax, rhythm, density, register), the elements of style (Strunk's principles, economy, parallel construction, definite/specific/concrete language), distinctive voices (stream of consciousness, minimalism, maximalism, vernacular, lyric, journalistic), style analysis (identifying an author's characteristic moves, close reading for technique), register and audience (formal/informal, academic/public, shifting register for effect), and imitation as learning (deliberate practice, pastiche, finding your own voice through others). Use when developing voice, analyzing style, adapting register, or teaching style awareness.
- ▌ Warden Scan 2 · aibot88 bundleAutomated SAST + dependency vulnerability scan. Runs Semgrep (code vulnerabilities) and pip-audit (CVE-matched dependencies) and writes a structured JSON report. Use when asked to "scan for vulnerabilities", "run a security scan", "check for CVEs", or "audit dependencies".
- ▌ XLSX Author 2 · aibot88 bundleProduce a .xlsx file on disk (headless) instead of driving a live Excel workbook — for managed-agent sessions with no open Office app.
- ▌ Xunit Skill 2 · aibot88 bundleGenerates xUnit.net tests in C#. Covers Fact/Theory, constructor injection, IClassFixture, and FluentAssertions. Use when user mentions "xUnit", "[Fact]", "[Theory]", "Assert.Equal", "C# xUnit". Triggers on: "xUnit", "[Fact]", "[Theory]", "Assert.Equal C#", "xUnit.net".
- ▌ A11Y Checker 2 · aibot88 bundleAccessibility audit for CSS covering focus styles, color contrast, text sizing, screen reader support, and WCAG compliance. Provides actionable fixes. Use when auditing accessibility or fixing a11y issues.
- ▌ Ad Acl Abuse 2 · aibot88 bundleActive Directory ACL 滥用攻击方法论。当 BloodHound 发现 GenericAll/WriteDACL/WriteOwner/GenericWrite/ForceChangePassword 等危险 ACE 时使用。覆盖 ACE 枚举、权限滥用链、Shadow Credentials、RBCD 攻击
- ▌ Agents Build 2 · aibot88 bundleUse when adding capabilities to an existing agent project — memory, app integration, VPC, multi-agent, migration, model changes, browser, code interpreter, or resource removal. Triggers on: "add memory", "remember across sessions", "call agent from app", "invoke agent from code", "auth to call agent", "streaming responses", "VPC", "VPC connectivity", "VPC error", "can't reach from VPC", "multi-agent", "A2A", "A2A auth", "orchestrator not delegating", "specialist not called", "migrate Bedrock Agent", "after import", "migration issue", "framework for migration", "change model", "browser tool", "code interpreter", "delete agent", "tear down", "agentcore remove", "cross-account memory", "resource-based policy on memory". Not for connecting to external APIs via Gateway — use agents-connect. Not for scaffolding a new project — use agents-get-started. Not for CLI/dev server errors — use agents-debug. Strands vs LangGraph in a migration context routes here.
- ▌ Alert System 2 · aibot88 bundleAutomated alert system for key events in drug discovery. Use for tracking competitor milestones, clinical trial updates, regulatory decisions, and publications of interest. Keywords: alerts, monitoring, tracking, notifications, competitive intelligence
- ▌ Alex Hormozi 2 · aibot88 bundleTalk to Alex Hormozi about their expertise. Alex Hormozi provides authentic advice using their mental models, core beliefs, and real-world examples.
- ▌ Ato Language 2 · aibot88 bundleReference for the `.ato` declarative DSL: type system, connection semantics, constraint model, and standard library. Use when authoring or reviewing `.ato` code.
- ▌ Auditing SEO 2 · aibot88 bundleAnalyzes a single web page URL for SEO quality, identifying issues with title tags, meta descriptions, heading structure, and content. Use when the user says "audit this page", "check SEO for", or "analyze this URL for SEO". Outputs a structured audit report with prioritized fixes.
- ▌ Wasabeef Claude Code Cookbook Plugins Ja Skills Role 2 · aibot88 bundle特定の専門ロールに切り替えて分析・作業を実行する。「ロールを切り替えて」「セキュリティ専門家として」「アーキテクトとして」「フロントエンド専門家として」「バックエンドとして」「QA として」などで起動。
- ▌ Wasabeef Claude Code Cookbook Plugins Pt Skills Spec 2 · aibot88 bundleCriar especificações detalhadas. Ativa com "escrever spec", "definir requisitos", "design detalhado".
- ▌ Farmountain Sdlc Agent Swarm Agents Skills Cicd Agent 2 · aibot88 bundleSkill: CICDAgent (Pipeline Generation & Test Automation)
- ▌ Compliance Testing 2 · aibot88 bundleRegulatory compliance testing for GDPR, CCPA, HIPAA, SOC2, PCI-DSS and industry-specific regulations. Use when ensuring legal compliance, preparing for audits, or handling sensitive data.
- ▌ Configuring Better Auth 2 · aibot88 bundleImplement OAuth 2.1 / OIDC authentication using Better Auth with MCP assistance. Use when setting up a centralized auth server (SSO provider), implementing SSO clients in Next.js apps, configuring PKCE flows, or managing tokens with JWKS verification. Uses Better Auth MCP for guided setup. NOT when using simple session-only auth without OAuth/OIDC requirements.
- ▌ Cwe Scanner 2 · aibot88 bundleRun deterministic CWE Top 25 checks (Semgrep + custom rules) before and after edits to enforce Constitution principle 7 at G2 Validate. Activate on file edits at risk moderate or high.
- ▌ Building Chat Interfaces 2 · aibot88 bundleBuild AI chat interfaces with custom backends, authentication, and context injection. Use when integrating chat UI with AI agents, adding auth to chat, injecting user/page context, or implementing httpOnly cookie proxies. Covers ChatKitServer, useChatKit, and MCP auth patterns. NOT when building simple chatbots without persistence or custom agent integration.
- ▌
- ▌ Discord Ops 2 · aibot88 bundleTOS-compliant Discord notification monitor. Watches YOUR Discord server for security content forwarded by researchers, matches keywords, and pushes to paper-writer/dogpile via webhooks. Persists to graph-memory for semantic search.
- ▌ Audit Report 2 · aibot88 bundleTemplate and formatting guidelines for security audit reports. Provides consistent structure for findings, severity classification, ASVS mapping, and remediation recommendations.
- ▌
- ▌ Config Env Conventions Amnadtaowsoam Cerebratechai Claud 2 · aibot88 bundleConfig & Environment Conventions
- ▌ Frank Luongt Faos Skills Marketplace Skills Codex Cwe Sa 2 · aibot88 bundle<!-- AUTO-GENERATED by export-skills.py — DO NOT EDIT -->
- ▌ Chaos Engineering Resilience 2 · aibot88 bundleChaos engineering principles, controlled failure injection, resilience testing, and system recovery validation. Use when testing distributed systems, building confidence in fault tolerance, or validating disaster recovery.
- ▌ Dnyoussef When Setting Network Security Use Network Secu 2 · aibot88 bundleNetwork Security Setup SOP
- ▌ Dnyoussef When Configuring Sandbox Security Use Sandbox 2 · aibot88 bundleSandbox Security Configuration SOP
- ▌
- ▌ Oidc 2 · aibot88 bundleOpenID Connect (OIDC) authentication reference. Identity layer on OAuth 2.0. Covers Authorization Code + PKCE flow step by step, ID Token JWT claims, UserInfo endpoint, discovery, Python authlib and Node.js openid-client implementations, and JWT validation.
- ▌ Gmail 2 · aibot88 bundleInteract with Gmail - search emails, read messages, send emails, create drafts, and manage labels. Use when user asks to: search email, read email, send email, create email draft, mark as read, archive email, star email, or manage Gmail labels. Lightweight alternative to full Google Workspace MCP server with standalone OAuth authentication.
- ▌ Bedrock 2 · aibot88 bundleAWS Bedrock foundation models for generative AI. Use when invoking foundation models, building AI applications, creating embeddings, configuring model access, or implementing RAG patterns.
- ▌ Cognito 2 · aibot88 bundleAWS Cognito user authentication and authorization service. Use when setting up user pools, configuring identity pools, implementing OAuth flows, managing user attributes, or integrating with social identity providers.
- ▌ Fedramp 2 · aibot88 bundleAssess FedRAMP/StateRAMP readiness — impact levels, control baselines, 3PAO requirements
- ▌ Kyc Aml 2 · aibot88 bundleAssess KYC/AML/BSA compliance — customer identification, transaction monitoring, suspicious activity reporting
- ▌ Uk Gdpr 2 · aibot88 bundleAssess UK GDPR compliance — post-Brexit requirements, ICO guidance, international transfers
- ▌ Ada Wcag 2 · aibot88 bundleAssess ADA Title III / WCAG 2.2 AA compliance — web accessibility legal requirements
- ▌ Iso27001 2 · aibot88 bundleAssess ISO/IEC 27001 ISMS compliance — Annex A controls, risk treatment, Statement of Applicability
- ▌
- ▌
- ▌ Tool Dns 2 · aibot88 bundleHistorical stub. This Go binary did not ship in public v0.3.x; current DNS/site work lives in /mb-site and packaged Python readiness checks.
- ▌ Eu AI Act 2 · aibot88 bundleAssess EU AI Act compliance — risk classification, prohibited uses, high-risk requirements, transparency
- ▌
- ▌
- ▌ Pr Review 2 · aibot88 bundleReview pull requests for the MiniMax Skills repository. Use when reviewing PRs, validating new skill submissions, or checking existing skills for compliance. Run the validation script first for hard checks, then apply quality guidelines for content review. Triggers: PR review, pull request, validate skill, check skill.
- ▌
- ▌ Burp Suite 2 · aibot88 bundleBurp Suite integration. Manage data, records, and automate workflows. Use when the user wants to interact with Burp Suite data.
- ▌ Ccm Expert 2 · aibot88 bundleCSA CCM expert for cloud security. Deep knowledge of Cloud Security Alliance Cloud Controls Matrix including 197 controls, 17 domains, CAIQ questionnaire, cloud service models (IaaS/PaaS/SaaS), shared responsibility, and framework mappings to ISO 27001, SOC 2, PCI-DSS, NIST.
- ▌ Cdk Escape 2 · aibot88 bundle使用 CDK 进行容器环境渗透和逃逸。当已进入容器环境(Docker/K8s Pod)需要评估逃逸可能性、利用容器漏洞、或进行容器内信息收集时使用。CDK 集成了容器环境评估、多种逃逸技术(privileged/mount/cgroup/lxcfs/runc/内核漏洞)、容器内横向移动。拿到容器 shell 后第一步就应该运行 CDK 评估。涉及容器逃逸、Docker 渗透、K8s 安全、容器提权的场景使用此技能
- ▌ China Pipl 2 · aibot88 bundleGuides compliance with China's Personal Information Protection Law (PIPL, effective 1 November 2021). Covers consent requirements, cross-border transfer mechanisms (CAC security assessment, standard contracts, certification), separate consent triggers, and critical information infrastructure obligations. Keywords: PIPL, China data protection, CAC security assessment, cross-border transfer, separate consent, CIIO.
- ▌ Cis Expert 2 · aibot88 bundleCIS Controls v8 expert for baseline security. Deep knowledge of 18 controls, 153 safeguards, Implementation Groups (IG1/IG2/IG3), and practical implementation guidance for organizations of all sizes.
- ▌ Ciso Coach 2 · aibot88 bundleExpert CISO coaching and mentorship for security leaders in training. Use when the user asks for CISO coach guidance, executive communication advice, security leadership strategies, or needs help translating technical security issues for non-technical audiences. Also activates for discussions about current security events, threat landscape analysis, board-level security topics, risk communication, or security program development from a CISO perspective.