aibot88
- 8.3k skills
- 0 followers
- 3 repo stars
- 2 weeks ago last updated
- ▌ Skyvern · aibot88 bundleAI-powered browser automation — navigate sites, fill forms, extract structured data, log in with stored credentials, and build reusable multi-step workflows using natural language. Install: pip install skyvern && skyvern setup
- ▌ Snapper · aibot88 bundleCDP browser screenshots for capturing authenticated web pages. Use when you need pixel-perfect PNG screenshots of authenticated sites like Google Sheets, dashboards, or admin panels.
- ▌ Solodit · aibot88 bundleSearch 50,000+ smart contract vulnerabilities from Cyfrin Solodit. 8 MCP tools with intelligent caching for searching, filtering, and analyzing blockchain security findings.
- ▌ Spotify · aibot88 bundleControl Spotify — play music, search the catalog, manage playlists and library, inspect devices and playback state. Loads when the user asks to play/pause/queue music, search tracks/albums/artists, manage playlists, or check what's playing. Assumes the Hermes Spotify toolset is enabled and `hermes auth spotify` has been run.
- ▌ Ssllabs · aibot88 bundleComprehensive TLS/SSL analysis via Qualys SSL Labs — grades cipher suites, certificate chains, protocol versions, and known vulnerabilities
- ▌ Tap Web · aibot88 bundleAccess websites, search the web, and extract clean content using the `tap` CLI. Supports structured site scripts, readable page extraction, and browser automation for tabs, screenshots, forms, cookies, JavaScript evaluation, and network capture. Use for web lookup, page reading, content extraction, browser interaction, authenticated sessions, request interception, or CDP-connected desktop apps.
- ▌ Thirdit · aibot88 bundleScans and analyses third-party dependencies and IaC configurations for security vulnerabilities. - User asks to scan dependencies, libraries, or third-party components - User mentions "thirdit", "SCA", "dependencies", "vulnerable libraries", "CVE" - User wants to check IaC files (Dockerfiles, Kubernetes manifests, cloud configs) - User asks "what third-party vulnerabilities do I have?"
- ▌ Updater · aibot88 bundleAudit toolkit health, freshness, security, standards. Keywords: updater, audit, outdated, stale, security, OWASP, refresh, check links, standards, compliance
- ▌ Upfetch · aibot88 bundleLoad this skill for any up-fetch task: `up(fetch, getDefaultOptions?)`, `upfetch(url, options?)`. Covers dynamic defaults, auth, request shaping, validation, error handling, lifecycle timing, and runtime caveats.
- ▌ Urlscan · aibot88 bundleSubmit URLs for automated malware and phishing analysis, then retrieve safety verdicts and screenshots via urlscan.io
- ▌ Varlock · aibot88 bundleSecure environment variable management with Varlock. Use when handling secrets, API keys, credentials, or any sensitive configuration. Ensures secrets are never exposed in terminals, logs, traces, or Claude's context. Trigger phrases include "environment variables", "secrets", ".env", "API key", "credentials", "sensitive", "Varlock".
- ▌ Voyager · aibot88 bundleE2E testing specialist. Playwright/Cypress/WebdriverIO configuration, Page Object design, auth flows, parallel execution, visual regression, a11y testing, and CI integration. Validates entire user journeys.
- ▌ Wst CLI · aibot88 bundleCLI para organizar PDFs y libros con metadata generada por IA, búsqueda full-text (SQLite FTS5) y backups a iCloud o S3. Úsala cuando el usuario pida buscar, mostrar, ingestar o respaldar libros/PDFs en su biblioteca wst — por ejemplo "pasame tal libro a mi iPad", "ingestá esta carpeta a mi biblioteca", "mostrame qué libros tengo de Sagan", "hacé backup a iCloud del libro 12".
- ▌ 10x Team · aibot88 bundleYou MUST use this when building projects end-to-end. Orchestrates all 12 team roles — automatically switches between CTO, architect, PM, engineers, SRE, security, DBA, QA, and EM based on the current phase of work. Starts with brainstorming before any implementation.
- ▌ Security · aibot88 bundleProtect your SaaS app from common vulnerabilities. Use when building auth, handling user data, or deploying features. Covers authentication, data protection, API security, and OWASP Top 10 for non-technical founders using AI tools.
- ▌ Add Gcal · aibot88 bundleAdd Google Calendar integration to Deus. Agents can list, create, update, and delete calendar events. Guides through GCP OAuth setup, token generation, keep-alive timer, and CLI command installation.
- ▌ Ado Sync · aibot88 bundleHelp and guidance for Azure DevOps synchronization with SpecWeave increments. Use when asking how to set up ADO sync, configure credentials, or troubleshoot integration issues. For actual syncing, use /sw-ado:sync command.
- ▌ Agentkit · aibot88 bundleCoinbase AgentKit - Toolkit for enabling AI agents with crypto wallets and onchain capabilities. Use for building autonomous agents that can execute transfers, swaps, DeFi operations, NFT minting, smart contract deployment, and gasless transactions via Smart Wallets.
- ▌ AI Check · aibot88 bundleDetect AI/LLM-generated text patterns in research writing. Use when: (1) Reviewing manuscript drafts before submission, (2) Pre-commit validation of documentation, (3) Quality assurance checks on research artifacts, (4) Ensuring natural academic writing style, (5) Tracking writing authenticity over time. Analyzes grammar perfection, sentence uniformity, paragraph structure, word frequency (AI-typical words like 'delve', 'leverage', 'robust'), punctuation patterns, and transition word overuse.
- ▌ AI Media · aibot88 bundleAI Media Generator — generování produktových fotek a B-roll videí přes fal.ai. Expert-level prompting pro food/beverage/FMCG produkty. Image gen (FLUX, Seedream) + Image-to-Video (Kling, Veo). 5-vrstvá prompt anatomie pro konzistentně kvalitní výstupy. Trigger: "ai media", "vygeneruj fotku", "rozpohybuj", "B-roll", "product shot", "ai obrázek", "ai video", "/ai-media"
- ▌ AI Mlops · aibot88 bundleProduction MLOps and ML/LLM/agent security skill for deploying and operating ML systems in production (registry + CI/CD, serving, monitoring/drift, evaluation loops, incident response/runbooks, and governance), including GenAI security (prompt injection, jailbreaks, RAG security, privacy, and supply chain).
- ▌ Altman Z · aibot88 bundleAltman Z''スコアによる信用リスク分析。企業の倒産リスクを定量評価し、安全圏/グレーゾーン/危険圏に分類する。「倒産リスク」「信用リスク」「財務健全性」「Altman」「Z-score」「安全性分析」と聞かれたときに使用。
- ▌ Aot Guru · aibot88 bundleSpecialized Native AOT, trimming, and optimization expert for morphir-dotnet. Expert in single-file trimmed executables, AOT compilation, size optimization, and guiding toward AOT-compatible features. Use when troubleshooting compilation, diagnosing trimming issues, optimizing binary size, implementing reflection workarounds, or maintaining best practices. Triggers include "AOT", "Native AOT", "trimming", "single-file", "size optimization", "reflection error", "IL2026", "IL3050", "PublishAot", "PublishTrimmed", "source generator", "Myriad".
- ▌ Kairos Aprender · aibot88 bundleAuto-extração de padrões de domínio regulado. Quando o dev resolve um problema complexo de compliance, extrai como padrão reutilizável que é auto-injetado em situações similares. Use quando o usuário disser "kairos aprender", "extrair padrão", "registrar padrão", "salvar como padrão".
- ▌ Ast Grep · aibot88 bundleUse for ast-grep: ast-grep run, sg scan, sg test, sg new, new rule, sgconfig.yml, inline-rules, stdin, json, optional chaining, rule catalog, meta variables, pattern objects, nthChild stopBy, range field, metadata url, caseInsensitive glob, severity off, include metadata, rule order, kind pattern, positive rule, kind esquery, debug-query, static analysis, tree-sitter parser, pattern yaml api, search rewrite lint analyze, textual structural, ast cst, named unnamed, kind field, ambiguous pattern, effective selector, meta variable detection, lazy multi, strictness smart, relaxed signature, string fix, fix config, expandEnd, replace substring, toCase separatedBy, rewriter, rewrite joinBy, find patch, barrel import, ruleDirs testConfigs, libraryPath languageSymbol, dynamic injected, custom language, TREE_SITTER_LIBDIR, language injection, styled components, language alias, languageGlobs, expandoChar, napi parse, python api, programmatic API.
- ▌ Auth Web Cloudbase · aibot88 bundleComplete guide for CloudBase Auth v2 using Web SDK (@cloudbase/js-sdk@2.x) - all login flows, user management, captcha handling, and best practices in one file.
- ▌ B2c Slas · aibot88 bundleManage SLAS (Shopper Login and API Access Service) clients. Use when configuring shopper authentication, creating API clients for PWA/headless, managing OAuth scopes (including custom scopes like c_loyalty), or debugging token issues.
- ▌ Binutils · aibot88 bundleGNU binutils skill for binary manipulation and analysis. Use when using ar for static libraries, strip or objcopy for binary processing, addr2line for converting addresses to source locations, strings for text extraction, or c++filt for C++ name demangling. Activates on queries about ar, strip, objcopy, addr2line, strings, c++filt, ranlib, or binary post-processing tasks.
- ▌ Biz Swot · aibot88 bundleConduct SWOT analysis with TOWS matrix for strategic planning. Use this skill when the user needs to evaluate a company, product, or project by identifying strengths, weaknesses, opportunities, and threats, or wants to generate strategic options from internal and external factors. Also use when the user mentions competitive positioning, strategic assessment, or asks 'what are our advantages and risks', even without naming SWOT explicitly.
- ▌ Brakeman · aibot88 bundleStatic analysis security vulnerability scanner for Ruby on Rails applications. Use when analyzing Rails code for security issues, running security audits, reviewing code for vulnerabilities, setting up security scanning in CI/CD, managing security warnings, or investigating specific vulnerability types (SQL injection, XSS, command injection, etc.). Also use when configuring Brakeman, reducing false positives, or integrating with automated workflows.
- ▌ Btr List · aibot88 bundleBrowse LOCAL BTR context tree (NOT ByteRover/brv). Use when the user asks "what contexts do we have", "show all domains", "list topics in auth", "list BTR contexts", "show BTR domains", "browse BTR", or wants to explore available knowledge.
- ▌ C Review · aibot88 bundlePerforms comprehensive C/C++ security review for memory corruption, integer overflows, race conditions, and platform-specific vulnerabilities. Use when auditing native C/C++ applications, reviewing daemons or services for memory safety, or hunting integer overflow / use-after-free / race conditions in userspace code.
- ▌ C3 Audit · aibot88 bundleUse when verifying C3 documentation quality - checks methodology compliance (layer rules, structure, diagrams) and implementation conformance (docs vs code drift)
- ▌ Ccxt PHP · aibot88 bundleCCXT cryptocurrency exchange library for PHP developers. Covers both REST API (standard) and WebSocket API (real-time). Helps install CCXT, connect to exchanges, fetch market data, place orders, stream live tickers/orderbooks, handle authentication, and manage errors in PHP 8.1+. Use when working with crypto exchanges in PHP projects, trading bots, or web applications. Supports both sync and async (ReactPHP) usage.
- ▌ Cg Cloud · aibot88 bundleInvoke when the user wants to understand or manage the cloud layer — publishing, governance, adopt/sync/unpublish, account authentication, registry configuration, or whether to use cg vs a self-hosted registry. Covers both conceptual questions ("what does X mean") and operational ones ("how do I log in", "how do I add a registry"). Fires on "how does cloud work", "explain publishing", "what's governance", "open vs protected", "why can't I push this widget", "what does adopt do", "should I use cg or my own registry", "manage my cloud account", "how do I log in to cartograph", "how do I add a registry", "list my registries", "who am I logged in as", "whoami", "how do I connect to a new registry". Does NOT fire on one-off agent MCP calls made as part of a task (e.g. the agent calling checkin_widget with publish=true). Does NOT fire on config/defaults intent — that's cg-config. Does NOT fire on reviewing an incoming proposals queue — that's cg-proposals.
- ▌ Chaingpt · aibot88 bundleBuild with the ChainGPT Web3 AI developer platform. Full API/SDK reference and project scaffolding for: Web3 AI Chatbot & LLM, AI NFT Generator, Smart Contract Generator, Smart Contract Auditor, AI Crypto News, AgenticOS Twitter agents, and Solidity LLM. Use when building blockchain apps, Web3 chatbots, NFT tools, smart contract tools, crypto news feeds, AI agents, or integrating any ChainGPT API. Triggers: chaingpt, web3 ai, nft generator, smart contract audit, crypto news api, agenticos, solidity llm, cgpt, blockchain ai, token analytics.
- ▌ Chainlit · aibot88 bundleExpert guidance for building conversational AI applications with Chainlit framework in Python. Use when (1) creating chat interfaces for LLM applications, (2) building apps with OpenAI, LangChain, LlamaIndex, or Mistral AI, (3) implementing streaming responses, (4) adding UI elements like images, files, charts, (5) handling user file uploads, (6) implementing authentication (OAuth, password), (7) creating multi-step workflows with visible steps, (8) building RAG applications with document upload, or (9) deploying chat apps to web, Slack, Discord, or Teams.
- ▌ CI Audit · aibot88 bundleCI/CD pipeline audit for speed, cost, reliability, and security. 10 dimensions (CI1-CI10): caching, parallelism, conditional execution, artifacts, secret handling, action pinning, timeouts, Docker optimization, test integration, and pipeline speed. Primary support: GitHub Actions. Detection-level: GitLab CI, CircleCI. Switches: zuvo:ci-audit full | [path] | --speed-only | --security-only
- ▌ Claimify · aibot88 bundleExtract and structure claims from discourse into analyzable argument maps with logical relationships and assumptions. Use when analyzing arguments, red-teaming reasoning, synthesizing debates, or transforming conversations into structured claim networks. Triggers include "what are the claims," "analyze this argument," "map the logic," or "find contradictions."
- ▌ Tray Clientes · aibot88 bundleAPI de Clientes da Tray. Utilize quando o desenvolvedor precisar gerenciar dados de clientes da loja: listagem, consulta, cadastro, atualização e exclusão. Inclui campos de pessoa física (CPF) e jurídica (CNPJ), validações brasileiras e gestão de newsletter.
- ▌ Craftcms · aibot88 bundleCraft CMS 5 plugin and module development — extending Craft with PHP. Covers the full extend surface: elements, element queries, services, models, records, project config, controllers, CP templates, migrations, queue jobs, console commands, field types, native fields, events, behaviors, Twig extensions, utilities, widgets, filesystems, permissions, debugging, testing, GraphQL, and Craft configuration (config/app.php, config/general.php, Redis, SMTP, database replicas). Triggers on: beforePrepare(), afterSave(), defineSources(), defineTableAttributes(), attributeHtml(), MemoizableArray, getConfig(), handleChanged, $allowAnonymous, $enableCsrfValidation, BaseNativeField, EVENT_DEFINE_NATIVE_FIELDS, FieldLayoutBehavior, EVENT_REGISTER, EVENT_DEFINE, EVENT_BEFORE, EVENT_AFTER, CraftVariable, registerTwigExtension, DefineConsoleActionsEvent, PHPStan, Pest, plugin development, module development, custom element type, custom field type, webhook, API endpoint, queue job, batch processing, data sync, migration, CP sec
- ▌ Crucible Nano · aibot88 bundleCRUCIBLE NANO v4.0 - Compact skill for context-limited sessions (~3KB). XAUUSD Strategist & Backtest Quality Guardian for NautilusTrader. FOCO: Backtest realism validation, XAUUSD analysis, prop firm compliance. DROID: crucible-gold-strategist.md tem conhecimento COMPLETO. Triggers: "Crucible", "backtest", "realism", "XAUUSD", "gold", "setup", "validate"
- ▌ Ctf Misc · aibot88 bundleMiscellaneous CTF challenge techniques. Use for trivia, automation scripts, encoding puzzles, RF/SDR signal processing, or challenges that don't fit other categories.
- ▌ Ctrl C V · aibot88 bundleCoding doctrine for any task that creates, modifies, or refactors code in a programming language. Make sure to consult this skill whenever the user is about to write, edit, debug, or ship code, even if they don't explicitly ask for "best practices" — Claude's default of generating new code from scratch produces code no one can grep, copy, or ship next Friday, and this skill enforces a copy-paste-first workflow that compounds into tomorrow's shortcuts. TRIGGER when: user asks to write/add/fix/implement code; request mentions a function/class/module/component/endpoint/script; user shares an error and asks to fix; user wants code review of a diff or PR; file changes touch *.py *.ts *.tsx *.js *.jsx *.go *.rb *.rs *.java *.kt *.swift *.cpp *.c *.h *.cs *.php *.lua *.sh; user opens or enters a new project for the first time (no CLAUDE.md present yet). SKIP when: pure markdown/config edit (yaml, json, toml, env); conceptual question without code-change intent ("how does X work"); diary / journal / retro / supplemen
- ▌ Cve Scan · aibot88 bundleScan project dependencies for known CVEs using native audit tools (npm, pip, composer, cargo, go, bundler, dart)
- ▌ Dast Zap · aibot88 bundleDynamic application security testing (DAST) using OWASP ZAP (Zed Attack Proxy) with passive and active scanning, API testing, and OWASP Top 10 vulnerability detection. Use when: (1) Performing runtime security testing of web applications and APIs, (2) Detecting vulnerabilities like XSS, SQL injection, and authentication flaws in deployed applications, (3) Automating security scans in CI/CD pipelines with Docker containers, (4) Conducting authenticated testing with session management, (5) Generating security reports with OWASP and CWE mappings for compliance.
- ▌ Dataflow · aibot88 bundleKailash DataFlow - zero-config database framework with automatic model-to-node generation. Use when asking about 'database operations', 'DataFlow', 'database models', 'CRUD operations', 'bulk operations', 'database queries', 'database migrations', 'multi-tenancy', 'multi-instance', 'database transactions', 'PostgreSQL', 'MySQL', 'SQLite', 'MongoDB', 'pgvector', 'vector search', 'document database', 'RAG', 'semantic search', 'existing database', 'database performance', 'database deployment', 'database testing', or 'TDD with databases'. DataFlow is NOT an ORM - it generates 11 workflow nodes per SQL model, 8 nodes for MongoDB, and 3 nodes for vector operations.
- ▌ DB Audit · aibot88 bundleDatabase performance and safety audit. 70+ checks across 13 dimensions (DB1-DB13): query patterns, indexes, schema design, connections, transactions, migrations, caching, query optimization, ORM anti-patterns, observability, data lifecycle, DB security, and migration deployment safety. Code-level checks for all ORMs. Optional live analysis via PostgreSQL or MySQL connection. Switches: zuvo:db-audit full | [path] | [file] | --schema | --queries | --connections | --live <conn>
- ▌ Detector · aibot88 bundleDetects SpecWeave context and provides workflow documentation for available commands. Use when learning SpecWeave commands, understanding available slash commands (/sw:increment, /sw:do, /sw:progress, /sw:done), or getting workflow guidance. Explains command syntax and recommended workflow patterns.
- ▌ Dev Auth · aibot88 bundleModern web auth implementation (better-auth, Lucia, NextAuth/Auth.js, Clerk, Supabase Auth). Trigger when the user wants to add login, signup, sessions, OAuth, magic links, 2FA, or when existing auth code is detected to audit or migrate.
- ▌ Ring Dev Helm · aibot88 bundleMandatory skill for creating and maintaining Helm charts following Lerian conventions. Enforces standardized chart structure, values organization, template patterns, security defaults, and dependency management.
- ▌ Dev Impl · aibot88 bundleThis skill should be used when the user asks to "dev-impl", "タスクを実装", "テストファースト実装", "implement task", "実装を開始", "クイック修正", "quick fix", "dev-impl auth 001". TDDをガードレールとしたテストファースト実装を行う。通常モード(Plan+タスク指定)とクイックモード(直接指示)に対応。
- ▌ Dev Role · aibot88 bundleKích hoạt khi người dùng muốn Claude đóng vai hoặc hỗ trợ công việc của nhóm Phát triển (Development) trong dự án phần mềm outsource. Bao gồm: Tech Lead, Senior Developer, Junior Developer, DevOps Engineer, DBA, Mobile Developer, Security Engineer. Dùng skill này khi người dùng đề cập: thiết kế technical solution, code review, viết code, review architecture, CI/CD pipeline, database design, technical documentation, debug, refactor, technical debt, pull request, branching strategy, deployment, hay bất kỳ yêu cầu kỹ thuật liên quan đến lập trình và hạ tầng. Luôn ưu tiên skill này khi người dùng hỏi "với tư cách Tech Lead", "review code này", "thiết kế module", "giúp tôi debug", "viết technical design", "setup CI/CD".
- ▌ Devspace · aibot88 bundleGuide for working with DevSpace, a Kubernetes development tool that automates building, deploying, and developing applications. Use when users need to create or modify devspace.yaml configuration files, build and deploy images to Kubernetes, manage multi-environment deployments with profiles, upload files to pods, or troubleshoot DevSpace workflows. Includes patterns for CI/CD integration, image tagging strategies, and secret management.
- ▌ Don Data · aibot88 bundleData standards and practices for Dutch government applications. Use when working with government data formats, implementing data exchange standards, or ensuring data quality compliance.
- ▌ Eks Irsa · aibot88 bundleIAM Roles for Service Accounts (IRSA) for EKS pod-level AWS permissions. Use when configuring pod IAM access, setting up AWS service integrations, implementing least-privilege security, troubleshooting OIDC trust relationships, or deploying AWS controllers.
- ▌ Zoom Meeting Sdk Electron · aibot88 bundleZoom Meeting SDK for Electron desktop applications. Use when embedding Zoom meetings in an Electron app with the Node addon wrapper, JWT auth, join/start flows, settings controllers, and raw data integration.
- ▌ Evidence · aibot88 bundleCollect and store point-in-time compliance evidence snapshots for audit trail.
- ▌ Exploits · aibot88 bundleAnalyze exploit intelligence for a vulnerability against the current repository
- ▌ Feedback · aibot88 bundleManages OrchestKit learning system including feedback status, usage pattern tracking, and privacy/analytics consent. Supports pause/resume learning, data export, privacy policy display, and bug reporting. Tracks learned patterns and agent performance metrics. Use when reviewing learned patterns, pausing learning, or managing data consent.
- ▌ Fsd Docs · aibot88 bundleFeature-Sliced Design (FSD) v2.1 공식 문서를 Progressive Disclosure 방식으로 제공하는 지식 스킬. 레이어/슬라이스/세그먼트, Public API, cross-imports, v2.0→v2.1 pages-first 마이그레이션, Next.js·NuxtJS·React Query·SvelteKit·Electron 통합, Authentication·i18n·Types·Theme·SSR 등 실무 가이드를 포함한다. 사용자가 FSD·Feature-Sliced·레이어 구조·슬라이스·pages-first·FSD 도입/마이그레이션을 언급하거나, 프론트엔드 폴더 구조·아키텍처 방법론에 대해 질문할 때 참고할 관련 섹션을 references/ 에서 로드해 답한다. Triggers — "FSD", "Feature-Sliced", "레이어", "슬라이스", "pages-first", "v2.1 마이그레이션", "FSD 도입", "프론트엔드 아키텍처".
- ▌ Gc Vault · aibot88 bundlegc-vault でラップされた GCP プロジェクトに対して gcloud / gcloud storage / bq / terraform 等のコマンドを実行する際に使用する。直接の gcloud auth login やローカル credentials に頼らず、1Password に保管された bootstrap SA キーから短命の借用トークンを発行してコマンドを実行する。
- ▌ GCP Auth · aibot88 bundleGoogle Cloud Platform (GCP) の Application Default Credentials 認証を実行。BigQuery や Cloud Storage 等の GCP サービス利用前に「GCP認証して」と言うだけで認証手順をガイド。
- ▌ Geo Lint · aibot88 bundleSEO & GEO content linter — validates Markdown/MDX files for AI search visibility using 92 deterministic rules (35 GEO, 32 SEO, 14 content quality, 8 technical, 3 i18n). Runs an autonomous lint-fix loop: scan content, read structured violations, fix them, re-lint until clean. Use when optimizing content for AI citations, auditing SEO compliance, checking GEO readiness, or running pre-publish content validation. Triggers on: "geo-lint", "lint content", "SEO audit", "GEO", "content optimization", "AI search", "citation readiness".
- ▌ Grad Emh · aibot88 bundleApply the Efficient Market Hypothesis (Fama, 1970) to evaluate information incorporation in asset prices across weak, semi-strong, and strong forms. Use this skill when the user needs to assess market efficiency, determine if a trading strategy can generate abnormal returns, evaluate event studies, or when they ask 'can technical analysis work', 'does the market already know this', or 'is this anomaly exploitable'.
- ▌ Guardiao · aibot88 bundleRevisa segurança de código, arquitetura, incidentes e dependências de terceiros para identificar vulnerabilidades reais, fragilidades exploráveis, risco de supply chain e mitigações seguras. Use em security review, incidente, validação pré-produção/compliance, auditoria de bibliotecas e scripts ou revisão de APIs, serviços, front-end, back-end, banco, uploads, webhooks e integrações externas.
- ▌ MCP Tester Hot Swap · aibot88 bundle"Hot-swap MCP server binary without disconnecting clients. 熱換MCP伺服器二進位,不斷客端連接。 Use when: hot swap mcp server, update mcp without restart, replace mcp binary, reload mcp server, live update mcp"
- ▌ HTML Ppt · aibot88 bundleHTML PPT Studio — author professional static HTML presentations in many styles, layouts, and animations, all driven by templates. Use when the user asks for a presentation, PPT, slides, keynote, deck, slideshow, "幻灯片", "演讲稿", "做一份 PPT", "做一份 slides", a reveal-style HTML deck, a 小红书 图文, or any kind of multi-slide pitch/report/sharing document that should look tasteful and be usable with keyboard navigation. Triggers include keywords like "presentation", "ppt", "slides", "deck", "keynote", "reveal", "slideshow", "幻灯片", "演讲稿", "分享稿", "小红书图文", "talk slides", "pitch deck", "tech sharing", "technical presentation".
- ▌ HTTP API Cloudbase · aibot88 bundleUse CloudBase HTTP API to access CloudBase platform features (database, authentication, cloud functions, cloud hosting, cloud storage, AI) via HTTP protocol from backends or scripts that are not using SDKs.
- ▌ Iac Scan · aibot88 bundleTerraform / OpenTofu / Nix / k8s manifest misconfiguration detection — open security groups, missing encryption, public S3/GCS, IAM wildcards, plaintext secrets, missing tags. Use when reviewing an IaC PR, gating `terraform apply` / `tofu apply`, auditing existing state for drift, or building a compliance report for cloud configuration.
- ▌ Plaid Identity Expert · aibot88 bundleExpert on Plaid Identity product for retrieving account holder information. Covers identity verification, KYC compliance, name/address retrieval, and fraud prevention. Invoke when user mentions Plaid Identity, account holder info, KYC, identity verification, or user information.
- ▌ Inet API · aibot88 bundleInternet.nl batch API voor het geautomatiseerd testen van meerdere domeinen op internetstandaarden. Authenticatie, batch requests, polling, resultaten JSON, dashboard-integratie. Triggers: internet.nl API, batch API, bulk scan, compliance dashboard, internet.nl batch, API credentials, geautomatiseerd testen, domeinenscan, monitoring dashboard
- ▌ Nis2 · aibot88 bundleEU NIS2 Directive (Directive (EU) 2022/2555) compliance advisor for essential and important entities — entity classification, Art. 21 risk management measures, Art. 23 incident reporting timelines (24h/72h/1 month), Art. 20 governance obligations, supply chain security (Art. 26), gap assessments, policy drafting, ISO 27001 alignment, and penalty exposure analysis. Use for NIS2 readiness, transposition questions, ENISA guidelines, supervisory differences between essential and important entities, and cross-border coordination.
- ▌ Nmap · aibot88 bundleProfessional network reconnaissance and port scanning using nmap. Supports various scan types (quick, full, UDP, stealth), service detection, vulnerability scanning, and NSE scripts. Use when you need to enumerate network services, detect versions, or perform network reconnaissance.
- ▌ Noir · aibot88 bundleZero-knowledge circuit design with Noir (Aztec's ZK DSL). TRIGGER when: working with .nr files, Nargo.toml, ZK circuits/proofs, Aztec contracts, zoir extension, or discussing zero-knowledge proof design. Covers circuit architecture, constraint optimization, ZK-specific security, and Aztec integration. DO NOT TRIGGER when: only Noir language syntax is needed (droo-stack handles that), or working with Solidity (use solidity-audit skill).
- ▌ Odoo · aibot88 bundleOdoo engineering workflows for addon development, codebase exploration, debugging, architecture/refactor review, manifest/docs sync, and routing to migration work. Use when the user mentions Odoo, addons, modules, manifests, models, XML views, security CSVs, record rules, Odoo shell, OWL/QWeb/assets, or when an Odoo codebase is detected.
- ▌ Agent Board CLI · aibot88 bundleCommand-line task management tool for AI coding agents and humans. Provides local SQLite-based task boards for tracking work items, checklists, and comments without requiring an external API. Use this skill when: - Managing multi-step coding tasks - Tracking progress on complex implementations - Breaking down work into checkable subtasks - Documenting decisions and progress via comments - Coordinating work across agent sessions
- ▌ Pep8 · aibot88 bundleEnforces modern Python 3.11+ coding standards, PEP 8 compliance, and type-hinting best practices automatically. This skill should be used when writing, reviewing, or refactoring Python code to ensure consistency with PEP 8, proper type hints, Google-style docstrings, and modern Python idioms.
- ▌ Pipe · aibot88 bundleDeep GitHub Actions workflow expert. Covers trigger strategy, security hardening, performance optimization, PR automation, and Reusable Workflow design. Use when new GHA workflow design or advanced optimization is needed.
- ▌ Pixa · aibot88 bundlePixa.com (eski Pixelcut) — Claude'a MCP-native baglanan yaratici AI araclari. Arka plan kaldir, gorsel olustur, kalite iyilestir, video olustur, nesne sil. API anahtari gerekmez.
- ▌ Plea · aibot88 bundleSynthetic user advocate that role-plays as end users to generate authentic feature requests, surface unmet needs, and challenge team assumptions. Don't use for real feedback analysis (Voice) or UI evaluation (Echo).
- ▌ Port · aibot88 bundleWeb-to-native porting design specialist (2026 spec — Liquid Glass / Material 3 Expressive / Swift 6.2 / Compose 1.7+ / Xcode 26 / targetSdk 36 / 16KB page / Passkey / Privacy Manifest / DMA / EAA / 5.1.2(i) AI disclosure aware). Designs complete porting blueprints from Web apps (React/Vue/Svelte/Angular SPA, RSC/SSR included) to iOS Swift/SwiftUI and Android Kotlin/Jetpack Compose pure-native apps. Optionally proposes a hybrid path (Pure-Native UI + Kotlin Multiplatform shared logic) when the survey justifies it. Produces feature parity matrices, native architecture maps, platform-UX adaptation plans, data/auth/CRDT porting strategies, BFF redesigns, regulatory-compliance plans, and Strangler-Fig phased roadmaps. Don't use for cross-platform UI implementation (Native — RN/Flutter), generic framework migration in the same language (Shift), dependency upgrades (Horizon), legacy code archaeology only (Fossil), or full mobile feature implementation (Native/Builder).
- ▌ Pytm · aibot88 bundlePython-based threat modeling using pytm library for programmatic STRIDE analysis, data flow diagram generation, and automated security threat identification. Use when: (1) Creating threat models programmatically using Python code, (2) Generating data flow diagrams (DFDs) with automatic STRIDE threat identification, (3) Integrating threat modeling into CI/CD pipelines and shift-left security practices, (4) Analyzing system architecture for security threats across trust boundaries, (5) Producing threat reports with STRIDE categories and mitigation recommendations, (6) Maintaining threat models as code for version control and automation.
- ▌ Ros2 Development · aibot88 bundleComprehensive best practices, design patterns, and common pitfalls for ROS2 (Robot Operating System 2) development. Use this skill when building ROS2 nodes, packages, launch files, components, or debugging ROS2 systems. Trigger whenever the user mentions ROS2, colcon, rclpy, rclcpp, DDS, QoS, lifecycle nodes, managed nodes, ROS2 launch, ROS2 parameters, ROS2 actions, nav2, MoveIt2, micro-ROS, or any ROS2-era robotics middleware. Also trigger for ROS2 workspace setup, DDS tuning, intra-process communication, ROS2 security, or deploying ROS2 in production. Also trigger for colcon build issues, ament_cmake, ament_python, CMakeLists.txt for ROS2, package.xml dependencies, rosdep, workspace overlays, custom message generation, or ROS2 build troubleshooting. Covers Humble, Iron, Jazzy, and Rolling distributions.
- ▌ Saas · aibot88 bundleSaaS product wizard — captures preferences (auth, billing, multi-tenancy, free tier), generates phase plan, pipes design decisions into UI/UX Pro Max, hands the rest to GSD for execution
- ▌ Sast · aibot88 bundleSource code vulnerability hunting (SAST). Decomposes analysis into specialized passes: map entry points, map dangerous ops, trace flows, find gaps, adversarial validation, exploit. Usage: /sast <repo_path> [--lang c|cpp|rust|java|python|go|php] [--min-score 4] [--max-files 30] [--skip-static] [--best-of N]
- ▌ Sbom · aibot88 bundleGenerate a Software Bill of Materials (SBOM) from your AWS environment and scan for vulnerable/compromised packages.
- ▌ Spot · aibot88 bundleBinance Spot request using the Binance API. Authentication requires API key and secret key. Supports testnet, mainnet, and demo.
- ▌ Tilt · aibot88 bundleManages Tilt development environments via CLI and Tiltfile authoring. Must use when working with Tilt or Tiltfiles.
- ▌ Uiux · aibot88 bundleUse when: auditing UI/UX quality, checking WCAG accessibility, reviewing spacing/layout/grid, mobile responsiveness issues, dark mode review, component pattern audit, pre-ship UI checklist, contrast ratios, touch targets, animation review. Triggers: 'check accessibility', 'audit my UI', 'is this accessible', 'fix spacing issues', 'WCAG compliance', 'mobile UI broken', 'pre-ship checklist', 'UI audit'.
- ▌
- ▌ Wave · aibot88 bundleExpert Wave multi-agent pipeline orchestrator development including manifest configuration, pipeline authoring, persona management, and CLI operations
- ▌
- ▌ Zine · aibot88 bundleTech blog/article series authoring for note/Zenn/Qiita/dev.to. Not for specs (Scribe) or microcopy (Prose).
- ▌ Skill Writer · aibot88 bundleGuide users through creating Agent Skills for Claude Code. Use when the user wants to create, write, author, or design a new Skill, or needs help with SKILL.md files, frontmatter, or skill structure.
- ▌ Alice · aibot88 bundleEmbrapa I/O compliance specialist. Use when user mentions 'verificar conformidade', 'Embrapa I/O compliance', 'docker compose compliance', 'conformidade', or 'alice'.
- ▌ Alpha · aibot88 bundleBinance Alpha request using the Binance API. Authentication requires API key and secret key.
- ▌ Anime · aibot88 bundleCLI for AI agents to search and lookup anime info for their humans. Uses Jikan (unofficial MyAnimeList API). No auth required.
- ▌ Atlas · aibot88 bundleAnalyze dependencies, circular references, and God Classes; author ADRs/RFCs. Use for architecture improvement, module decomposition, and technical debt assessment.
- ▌ Auth0 · aibot88 bundleImplements Auth0 authentication with Next.js SDK, React hooks, role-based access, and API protection. Use when integrating Auth0, implementing enterprise SSO, or needing managed authentication with MFA.