← all publishers

majiayu000

@majiayu000 source repo

Report this profile Claim this profile

• 75k skills
• 0 followers
• 567 repo stars
• 3 weeks ago last updated

1. ▌
   Bmad Bmm Validate Prd · majiayu000 bundle

   Validate a PRD against standards. Use when the user says "validate this PRD" or "run PRD validation"
   567 repo stars
2. ▌
   Brand Name Comparison · majiayu000 bundle

   Use this skill when the user wants to compare multiple brand name fates side-by-side to divine which is destined for success.
   567 repo stars
3. ▌
   Brand Name Divination · majiayu000 bundle

   Use this skill when the user wants to divine or generate brand name ideas for a company, product, or project.
   567 repo stars
4. ▌
   Brand Scout Validated · majiayu000 bundle

   Self-validating Brand Scout with Ralph Loop - iterates until 5-point shipping checklist complete. Triggers: 'validated brand scout', 'complete brand scout', 'full brand scout'
   567 repo stars
5. ▌
   Claude Md Drift Check · majiayu000 bundle

   Use when detecting drift between CLAUDE.md (or AGENTS.md, the Codex CLI alias) / _meta narrative and live repository state. Ten checks: absolute-path resolution, 01-projects/ count claims, issue-reference freshness, session-file existence, command-count sync, session-config-parity (mandatory template keys = error, opt-in gaps = warning), vault-dir-parity (CLAUDE.md vs AGENTS.md), generated-rule-staleness (WARN-only), rule-scoping (paths:/globs: frontmatter defects, dangling rule citations, zero-match globs), and docs-parity (docs/components.md count-claims vs on-disk counts, template-vs-reference config-key parity, stale .claude/metrics/ paths). Full per-check spec in the body table. Invoked as an opt-in session-end phase; mirrors vault-sync's lean JSON+exit-code contract.
   567 repo stars
6. ▌
   Create Shape Up Pitch · majiayu000 bundle

   Write a Shape Up pitch with problem, appetite, solution sketch, rabbit holes, and no-gos when the user asks to pitch a feature, shape work, or write a Shape Up proposal
   567 repo stars
7. ▌
   Eol Readiness Advisor · majiayu000 bundle

   Run a go/no-go assessment for retiring a product or feature, then right-size the effort. Use when someone says "we should probably kill this" and nobody has made the call.
   567 repo stars
8. ▌
   Grey Haven Evaluation · majiayu000 bundle

   Evaluate LLM outputs with multi-dimensional rubrics, handle non-determinism, and implement LLM-as-judge patterns. Essential for production LLM systems. Use when testing prompts, validating outputs, comparing models, or when user mentions 'evaluation', 'testing LLM', 'rubric', 'LLM-as-judge', 'output quality', 'prompt testing', or 'model comparison'.
   567 repo stars
9. ▌
   Cobuilder Ideation To Execution · majiayu000 bundle

   This skill should be used when the user asks to "brainstorm a feature", "create a PRD", "write a solution design", "plan a new initiative", "start a new project", "ideate on a feature", "brainstorm and build", "go from idea to implementation", or when System 3 needs to drive the complete ideation → PRD → SD → worktree → autonomous TDD pipeline.
   567 repo stars
10. ▌
    Julien MCP Notion Pro · majiayu000 bundle

    Install Notion Pro MCP for secondary workspace. Use when user has multiple Notion workspaces.
    567 repo stars
11. ▌
    Maintaining Changelog · majiayu000 bundle

    Updates or creates CHANGELOG.md files for pull request changes. Use when users request changelog updates, or when adding entries for new features, fixes, or breaking changes.
    567 repo stars
12. ▌
    Nw User Story Mapping · majiayu000 bundle

    User story mapping for backlog management and outcome-based prioritization. Load during Phase 2.5 (User Story Mapping) to produce story-map.md and prioritization.md.
    567 repo stars
13. ▌
    Nxs Sq Name Generator · majiayu000 bundle

    Generate the next sequential file or folder name for directories with numbered prefixes (e.g., 01-setup.md, 02-init.md). Use when creating a new file or folder that should follow an existing numbering sequence, when adding to a sequentially-named series, or when the user asks for the "next" numbered item in a directory.
    567 repo stars
14. ▌
    Ralph Specum Feedback · majiayu000 bundle

    This skill should be used only when the user explicitly asks to use `$ralph-specum-feedback`, or explicitly asks Ralph Specum in Codex to draft or submit feedback.
    567 repo stars
15. ▌
    Requirement Architect · majiayu000 bundle

    Converts high-level product intent into traceable PRDs and User Stories. Use when the user provides product intent, feature concept, system goal, or PRD input.
    567 repo stars
16. ▌
    Requirements Feedback · majiayu000 bundle

    This skill should be used when the user asks about "feedback loops", "iterate on requirements", "continuous documentation", "refine requirements", "update requirements", "requirements changed", "stakeholder review", "validate requirements", "incorporate feedback", "gather feedback", "requirements review meeting", "backlog refinement feedback", "user research findings", "sprint retrospective feedback", "help me gather feedback", "run a feedback session", "get input on my vision", "get input on my epics", "get input on my stories", "collect user feedback", "document feedback from meeting", "review requirements with stakeholders", or when they need guidance on collecting and incorporating feedback throughout the requirements lifecycle.
    567 repo stars
17. ▌
    Requirements Gatherer · majiayu000 bundle

    Requirements Gatherer
    567 repo stars
18. ▌
    Af Starting Work · majiayu000 bundle

    Start work on a Linear issue by creating current-task.md and setting up the work context. Use when beginning a new task, switching to a different issue, or setting up the task tracking file.
    567 repo stars
19. ▌
    Agents Subagents · majiayu000 bundle

    Create AI coding agent subagents with YAML frontmatter and least-privilege tools. Use when designing delegation, tool selection, or safety rules.
    567 repo stars
20. ▌
    AI Session Tools · majiayu000 bundle

    Search, recover, and analyze AI session histories across Claude Code, AI Studio, and Gemini CLI. Use when user asks to "find that file from last week", "search sessions", "recover context after compaction", "what did the AI do", "export session to markdown", "find corrections", "analyze session quality", "improve CLAUDE.md from past mistakes", or "turn AI mistakes into rules". Contains session search, file recovery, correction detection, self-improvement workflow.
    567 repo stars
21. ▌
    Vibe Async Task Queue · majiayu000 bundle

    Provides a persistent cross-session task queue for work that should be done but isn't blocking current tasks. Enables background and future-session work tracking.
    567 repo stars
22. ▌
    Ctx Plan Writing · majiayu000 bundle

    Structured plan-writing skill adapted from obra/superpowers. Produces actionable plans that map directly to claude-ctx workflows and tasks.
    567 repo stars
23. ▌
    Extract To Areas · majiayu000 bundle

    Extract synthesized content to semantic Area notes (People, Projects, Insights). Prepares structured updates for review rituals to apply via update-semantic.
    567 repo stars
24. ▌
    Github Assistant · majiayu000 bundle

    GitHub workflow automation using `gh` CLI. Use when creating PRs, reviewing code, managing issues, auto-replying to fixed issues, adding comments, assigning users, managing labels, merging PRs, or checking CI status. Includes auto-reply script and Vietnamese templates.
    567 repo stars
25. ▌
    Vikunja · majiayu000 bundle

    Manage tasks and projects on a self-hosted Vikunja instance (PERSONAL/WORK). Use when the user wants to create, view, complete, or manage tasks, check what's due or overdue, list projects, or get notifications. Always register user-requested tasks in Vikunja for tracking and follow-up.
    567 repo stars
26. ▌
    Kai Sdr Operator · majiayu000 bundle

    Build a plug-in-ready SDR operator package for sales development and outbound pipeline work: ICP definition, compliant lead-source plan, enrichment/research workflow, account scoring, outbound assets, CRM handoff, reply triage, meeting prep, approval gates, and loop memory. Use when "SDR", "sales development", "outbound SDR", "operator room", "lead gen pipeline", "prospecting pipeline", "ICP targeting", "Apify", "RapidAPI", "Clay", "Apollo", "agentic SDR workflow", "sales operating loop", "sales dashboard handoff", or any request to package outbound sales workflows that can later connect to data tools, CRMs, or operator surfaces.
    567 repo stars
27. ▌
    Mail Needs Reply · majiayu000 bundle

    Find emails that are waiting for a reply — unread messages from real people that haven't been responded to. Use when user asks what they haven't replied to, what's waiting for their response, or wants to find unanswered emails. Arguments: optional time window (default: last 7 days) or account filter.
    567 repo stars
28. ▌
    Meeting Followup · majiayu000 bundle

    Automate post-meeting follow-up: search Fireflies for a meeting transcript, generate a structured summary with key decisions, discussion points, action items, and next steps, then draft a professional follow-up email to all attendees via Gmail. Use this skill whenever the user mentions processing a meeting, creating meeting notes, sending a meeting recap, drafting a follow-up email after a call, summarizing a meeting, or anything related to post-meeting workflows — even if they don't use the word "meeting" explicitly (e.g., "recap my call with Acme", "send notes from the standup", "what happened in my sync with the design team and send it out").
    567 repo stars
29. ▌
    Merge Agent Work · majiayu000 bundle

    Merge agent work from agent branch to task branch with validation
    567 repo stars
30. ▌
    Note Improvement · majiayu000 bundle

    Capture an out-of-scope improvement opportunity so it doesn't get lost. Use when the user asks to "note improvement", "save improvement", "track this for later", "remember this improvement", "note this idea", "log improvement", "backlog this", or "park this idea". Also invoke proactively when noticing something improvable during work that falls outside the current task's scope — briefly mention it to the user and offer to note it.
    567 repo stars
31. ▌
    Office Onboarding · majiayu000 bundle

    Set up your personal productivity style and preferences. Use when you first install office or want to customize your workflow patterns.
    567 repo stars
32. ▌
    Opus Orchestrate · majiayu000 bundle

    Run a multi-model orchestration workflow with Claude Opus 4.8 as the lead, driven by ultracode (xhigh reasoning + dynamic Workflow fan-out). The lead is itself the deep reasoner, so it reasons directly on compact hard problems and delegates only to fan out or stay context-lean. Route mechanical work (boilerplate, tests, formatting, bulk edits) to a fast-worker subagent (Sonnet), parallel or context-heavy reasoning to deep-reasoner subagents (Opus), and fresh-perspective or high-stakes problems to Codex, a different-vendor GPT-5.5 peer. Use to orchestrate, delegate, fan out, run a Workflow, get a second opinion from Codex, run Opus and Codex in parallel and synthesize, or act as tech lead on Opus.
    567 repo stars
33. ▌
    Permission Tuner · majiayu000 bundle

    Analyze permission denial patterns and generate optimized alwaysAllow and alwaysDeny rules. Use when permission prompts are slowing you down or after sessions with many denials.
    567 repo stars
34. ▌
    Record Knowledge · majiayu000 bundle

    Record tacit knowledge — quirks, pitfalls, dependencies, decisions, root causes — as tagged Markdown entries in `.claude/knowledge/entries/`. Use this skill whenever discoveries are made during work, when the user shares undocumented system behavior, or at plan completion to capture lessons learned. Also use when Claude Code makes a mistake pointed out by the user — record what happened, why it was wrong, and what to do next time.
    567 repo stars
35. ▌
    Release Guardian · majiayu000 bundle

    Manages VoiceLite releases by ensuring version consistency across all files, coordinating the release workflow, and monitoring deployment. Activates when version numbers are mentioned or release work begins.
    567 repo stars
36. ▌
    Shipflow Backlog · majiayu000 bundle

    Manage backlog items - capture ideas, defer non-urgent tasks, and keep active work focused
    567 repo stars
37. ▌
    Taskmaster Skill · majiayu000 bundle

    > Agent-optimized task management system for AgentFabric.
    567 repo stars
38. ▌
    Update Dashboard · majiayu000 bundle

    Update the vault Dashboard.md with current system status, recent activity, and statistics. Use when the dashboard needs refreshing after processing items or on a scheduled basis.
    567 repo stars
39. ▌
    Using Univer CLI · majiayu000 bundle

    Use when any task involves spreadsheets, workbook files, Excel-compatible files, .xlsx/.csv/.univer packages, sheets, cells, ranges, formulas, charts, formatting, workbook previews, or SaC workbook behavior.
    567 repo stars
40. ▌
    Web Media Getter · majiayu000 bundle

    Search FREE image / video / GIF APIs (stock + historical/archival + GIF engines) and download results with attribution. Use when a task needs a REAL or ARCHIVAL photo/clip (hero, texture, reference, historical footage) or a reaction/animated GIF, rather than a generated one. The retrieval peer to muser (local) and fal (generate).
    567 repo stars
41. ▌
    Workflows Driven · majiayu000 bundle

    Drive decomposable work as a deterministic multi-subagent workflow: phased fan-out under per-task contracts with adversarial verification. Use for audits, migrations, broad research or review sweeps, work needing independent cross-checks before committing, or scale one context cannot hold.
    567 repo stars
42. ▌
    360 Feedback Template · majiayu000 bundle

    Design a 360-degree feedback survey or write a structured 360 feedback report. Use when asked to build a 360 feedback process, write 360 feedback for a colleague, design a feedback survey, or produce a feedback report. Produces either a complete survey instrument with rating scales and open-ended questions, or a structured narrative feedback report with themes, strengths, and development areas.
    567 repo stars
43. ▌
    Additive Bias Defense · majiayu000 bundle

    Inverts burden of proof for code additions. Use when reviewing PRs, planning refactors, or running unbloat to challenge every addition's necessity.
    567 repo stars
44. ▌
    Aget Provide Feedback · majiayu000 bundle

    Provide structured feedback with severity classification
    567 repo stars
45. ▌
    Agf Writing QA Report · majiayu000 bundle

    Use when qa-engineer (or miniapp-qa-engineer) is about to publish an E2E or UAT report. Provides the report skeleton, evidence-quality bar, verdict criteria, and hand-off rules. SIT is now dev-owned and lives in progress/<role>.md (see agf-running-sit-tests skill) — this skill does NOT cover SIT reports.
    567 repo stars
46. ▌
    Archetype Review Base · majiayu000 bundle

    Shared review framework that every domain reviewer (pci, oracle, gov, edtech, healthcare, mlops, etc.) MUST follow. Defines mandatory sections, severity scale, verdict format, and the "domain heuristic vs generic check" boundary. Eliminates duplication across 18 reviewer prompts.
    567 repo stars
47. ▌
    Atlan Review Doc Sync · majiayu000 bundle

    Run findings-first review for Atlan app changes and synchronize app documentation with implemented behavior. Use when completing a change set, preparing handoff, or auditing regressions.
    567 repo stars
48. ▌
    Governance Validation · majiayu000 bundle

    Validate governance constraints, CALM compliance, and architecture boundaries.
    567 repo stars
49. ▌
    Kp Content Validation · majiayu000 bundle

    Validates knowledge pack content against runtime schemas: .skillmeta against KnowledgePackSchema, modules against ModulesFileSchema, activities against PackActivitySchema. Checks cross-pack references, learning outcome uniqueness, and file completeness. Use when validating pack content after generation.
    567 repo stars
50. ▌
    Langgraph Code Review · majiayu000 bundle

    Reviews LangGraph code for bugs, anti-patterns, and improvements. Use when reviewing code that uses StateGraph, nodes, edges, checkpointing, or other LangGraph features. Catches common mistakes in state management, graph structure, and async patterns.
    567 repo stars
51. ▌
    Ln 162 Skill Reviewer · majiayu000 bundle

    Reviews skills (D1-D11 + M1-M6 criteria) or .claude/commands for quality. Use when validating skill correctness before release.
    567 repo stars
52. ▌
    Ln 512 Agent Reviewer · majiayu000 bundle

    Worker that runs parallel external agent reviews (Codex + Gemini) on code changes. Background tasks, process-as-arrive, critical verification with debate. Returns filtered suggestions with confidence scoring.
    567 repo stars
53. ▌
    Ln 513 Agent Reviewer · majiayu000 bundle

    Worker that runs parallel external agent reviews (Codex + Gemini) on code changes. Background tasks, process-as-arrive, critical verification with debate. Returns filtered suggestions with confidence scoring.
    567 repo stars
54. ▌
    Multi AI Verification · majiayu000 bundle

    Multi-layer quality assurance with 5-layer verification pyramid (Rules → Functional → Visual → Integration → Quality Scoring). Independent verification with LLM-as-judge and Agent-as-a-Judge patterns. Score 0-100 with ≥90 threshold. Use when verifying code quality, security scanning, preventing test gaming, comprehensive QA, or ensuring production readiness through multi-layer validation.
    567 repo stars
55. ▌
    Nw Br Review Criteria · majiayu000 bundle

    Review criteria, ethical boundaries, compliance checklists, and numerical benchmarks for business artifact review
    567 repo stars
56. ▌
    Nw Dr Review Criteria · majiayu000 bundle

    Critique dimensions, severity framework, verdict decision matrix, and review output format for documentation assessment reviews
    567 repo stars
57. ▌
    Nw Tr Review Criteria · majiayu000 bundle

    Review dimensions and scoring for root cause analysis quality assessment
    567 repo stars
58. ▌
    Plan Fix Linter Error · majiayu000 bundle

    This skill should be used when fixing all violations of one or more ESLint rules across the codebase. It runs the linter, groups violations by rule and file, generates a brief with fix strategies, and creates a plan with tasks to implement the fixes.
    567 repo stars
59. ▌
    Plankton Code Quality · majiayu000 bundle

    Write-time code quality enforcement using Plankton — auto-formatting, linting, and Claude-powered fixes on every file edit via hooks.
    567 repo stars
60. ▌
    Pre Commit Validation · majiayu000 bundle

    Ensures all quality checks pass locally before committing changes. Use this skill to validate code quality, tests, and type checking before creating commits to catch issues early and avoid CI failures.
    567 repo stars
61. ▌
    Remix V2 Forms Review · majiayu000 bundle

    Reviews Remix v2 form code for manual fetch() mutations, native <form> misuse, wrong useNavigation/useFetcher choice, missing pending state, unbounded uploads, and intent-pattern violations. Use when reviewing form/mutation code in a Remix v2 codebase.
    567 repo stars
62. ▌
    Reproducibility Audit · majiayu000 bundle

    Reproducibility Audit
    567 repo stars
63. ▌
    Review Resource Leaks · majiayu000 bundle

    Audit for memory leaks, handle leaks, GDI leaks, and CPU churn
    567 repo stars
64. ▌
    Review Skill Parallel · majiayu000 bundle

    Review a skill document with n parallel reviewers. Synthesizes findings, addresses issues, verifies changes, gets human approvals (plan and confirmation).
    567 repo stars
65. ▌
    Review Static History · majiayu000 bundle

    Mine git history for bug patterns that static analysis could have caught
    567 repo stars
66. ▌
    Reviewing Design Docs · majiayu000 bundle

    Use when reviewing design documents, technical specifications, architecture docs, RFCs, ADRs, or API designs for completeness and implementability. Triggers: 'review this design', 'is this spec complete', 'can someone implement from this', 'what's missing from this design', 'review this RFC', 'is this ready for implementation', 'audit this spec'. Core question: could an implementer code against this without guessing?
    567 repo stars
67. ▌
    Routing Table Updater · majiayu000 bundle

    Maintain /do routing tables when skills or agents change.
    567 repo stars
68. ▌
    Shared Meta Reviewing · majiayu000 bundle

    Code review patterns, feedback principles. Use when reviewing PRs, implementations, or making approval/rejection decisions. Covers self-correction, progress tracking, feedback principles, severity levels.
    567 repo stars
69. ▌
    Suede Rights Passport · majiayu000 bundle

    Package creative projects into an evidence-scoped rights handoff with normalized works, recordings, releases, parties, identifiers, claims, licenses, consent, provenance, privacy, and validation.
    567 repo stars
70. ▌
    Buff Validate · majiayu000 bundle

    This skill should be used when the user asks to "validate the code", "check code quality", "run /buff:validate", "review for issues", "find bugs", "check for security issues", "lint the code", "check complexity", "validate the project", "run project-wide validation", "quick validate", "validate session changes", "check cross-file coherence", "show quality trend", or any request for high-sensitivity code quality analysis. Supports project-wide scanning, --quick (graph-guided), --session (session-modified files only), and cross-file coherence analysis with quality trending. Also auto-invoked by /buff:execute as part of the dev loop.
    567 repo stars
71. ▌
    Validate Openapi Spec · majiayu000 bundle

    Use when checking if an OpenAPI spec is valid, looking for errors, or running `speakeasy lint`
    567 repo stars
72. ▌
    Vcp Pre Commit Review · majiayu000 bundle

    Review staged/changed files against all applicable VCP standards before committing. Produces a PASS/BLOCK verdict. Run this before every commit.
    567 repo stars
73. ▌
    Verify Implementation · majiayu000 bundle

    프로젝트의 모든 verify 스킬을 순차 실행하여 통합 검증 보고서를 생성합니다. 기능 구현 후, PR 전, 코드 리뷰 시 사용.
    567 repo stars
74. ▌
    Verify Marketing Tabs · majiayu000 bundle

    마케팅 그룹(마케팅/셔틀관리) 탭의 핵심 기능을 검증합니다. 마케팅 관련 컴포넌트 수정 후 사용.
    567 repo stars
75. ▌
    Verify Query Patterns · majiayu000 bundle

    React Query 캐시키/enabled/staleTime 일관성과 쿼리 패턴을 검증합니다. React Query 훅 수정 후 사용.
    567 repo stars
76. ▌
    Web Design Guidelines · majiayu000 bundle

    Review UI code for Web Interface Guidelines compliance. Use when asked to "review my UI", "check accessibility", "audit design", "review UX", or "check my site against best practices".
    567 repo stars
77. ▌
    Program Selection · majiayu000 bundle

    Evaluate HackerOne / Bugcrowd / Intigriti programs before committing time. Decide signal-to-noise, payout history, response time, scope size, and competition level. Use when the user is considering a new bug bounty target or asking "should I hunt this".
    567 repo stars
78. ▌
    802 Regulations Dora · majiayu000 bundle

    Use when reviewing, designing, or modifying Java enterprise systems that may support financial entities, critical ICT services, third-party ICT provider integrations, or operational resilience obligations under DORA. This should trigger for requests such as Review a Java platform for DORA ICT risk controls; Design operational resilience evidence for a financial service; Add incident, continuity, backup, recovery, or third-party ICT controls; Assess resilience testing and monitoring before production release. Part of cursor-rules-java project
    567 repo stars
79. ▌
    Af Cognito Expertise · majiayu000 bundle

    Set up Cognito User Pools with custom attributes, auth triggers, and CDK escape hatches for GainInsight Standard projects. Use when configuring authentication, adding custom user attributes, or debugging auth flow issues.
    567 repo stars
80. ▌
    Ap2 Challenge Stepup · majiayu000 bundle

    Implement AP2 challenge and step-up flows — 3DS2, OTP verification, redirect challenges, and trusted surface interactions. Use when building additional authentication steps during agentic payment processing.
    567 repo stars
81. ▌
    API Connector Design · majiayu000 bundle

    外部APIとの統合設計パターンに関する専門知識。RESTful API、GraphQL、WebSocket等の統合設計と実装指針を提供します。 Anchors: • 『RESTful Web APIs』（Leonard Richardson）/ 適用: RESTful API設計、HTTPセマンティクス / 目的: リソース中心の設計パターン理解 • 『Building Microservices』（Sam Newman）/ 適用: APIコントラクト設計、マイクロサービス間通信 / 目的: サービス境界の明確化 Trigger: Use when designing authentication flows (OAuth 2.0, API Key, JWT), implementing rate limiting and retry strategies, or reviewing API integration architecture.
    567 repo stars
82. ▌
    Apk Redteam Pipeline · majiayu000 bundle

    End-to-end Android APK red-team pipeline — automated APK acquisition (Play Store + apkpure + apkmirror fallback), jadx decompilation, secret/URL/JWT/Firebase grep, pinned-cert extraction, exported-component enumeration, Frida runtime instrumentation templates, intent-injection probes. Built from an authorized external red-team engagement where 7 APKs were pulled manually, 4 download attempts truncated, and a hardcoded JWT + 30 internal API endpoints were recovered from one of the apps. Use when target has a mobile app catalogue (Play Store developer page), when you find an APK URL hosted on a web server, or when post-recon mentions "mobile app" in scope.
    567 repo stars
83. ▌
    Auth · majiayu000 bundle

    Authentication and authorization patterns for Kagenti services
    567 repo stars
84. ▌
    Authentication Flows · majiayu000 bundle

    API Key、JWT、OAuth 2.0、mTLS などの認証方式を比較し、適切なフロー設計と実装方針を整理するスキル。 方式選定、トークン管理、署名戦略、セキュリティ対策を一貫して設計します。 Anchors: • Web Application Security / 適用: 脅威整理 / 目的: 認証フローのリスク把握 • OWASP Authentication Cheat Sheet / 適用: 実装ベストプラクティス / 目的: 安全な実装指針 • RFC 6749 & RFC 7519 / 適用: OAuth/JWT仕様 / 目的: 標準準拠の設計 Trigger: Use when selecting authentication flows (API Key/JWT/OAuth/mTLS), designing token strategy, or validating auth configuration.
    567 repo stars
85. ▌
    Azure Content Safety · majiayu000 bundle

    Expert knowledge for Azure AI Content Safety development including troubleshooting, best practices, decision making, architecture & design patterns, limits & quotas, security, configuration, and deployment. Use when using Content Safety APIs, Docker containers, blocklists, custom safety categories, or prompt shield, and other Azure AI Content Safety related development tasks. Not for Azure Security (use azure-security), Azure Defender For Cloud (use azure-defender-for-cloud), Azure Sentinel (use azure-sentinel), Azure Web Application Firewall (use azure-web-application-firewall).
    567 repo stars
86. ▌
    Bandit Security Scan · majiayu000 bundle

    Run Bandit security analysis to find common security issues and vulnerabilities in Python code. Use when the user mentions Bandit, security analysis, vulnerability scanning, security audit, software composition analysis (SCA), or wants to check for security issues in Python code.
    567 repo stars
87. ▌
    Cc Security Patterns · majiayu000 bundle

    AI Agent 安全設計模式 — 基於 Claude Code 七層縱深防禦架構的逆向分析。Use when: 設計工具安全機制、實作命令過濾、建構權限模型、設計 sandbox。
    567 repo stars
88. ▌
    Compliance Checklist · majiayu000 bundle

    Generate a prioritised compliance checklist for GDPR, SOC 2, ISO 27001, FCA, HIPAA, or other frameworks with a gap analysis. Use when asked for a compliance checklist, gap analysis, readiness assessment, or audit preparation for any regulatory framework. Produces a structured checklist with prioritised gaps, quick wins, and evidence requirements. Optimised for Opus 4.7 and newer models. Not a substitute for legal or compliance professional advice.
    567 repo stars
89. ▌
    Cracking Ntlm Hashes · majiayu000 bundle

    <!-- Copyright (c) 2026 defconxt. All rights reserved. -->
    567 repo stars
90. ▌
    Dev Security Backend · majiayu000 bundle

    Security checklist for C#/.NET backend (ASP.NET Core, EF Core, Event Sourcing). Covers secrets management, input validation, SQL injection, authentication, authorization, rate limiting, security headers, sensitive data handling, Problem Details (RFC 7807), and event sourcing security. Invoked via /dev-security (unified entry point) — not directly.
    567 repo stars
91. ▌
    Device Authorization · majiayu000 bundle

    This skill should be used when the user asks to "implement device auth", "add device authorization", "authenticate desktop app", "authenticate CLI tool", "device code flow", "RFC 8628", "poll for token", "get user info after device auth", or mentions authenticating apps that can't handle browser redirects. Provides step-by-step guidance for device authorization with Sigma Identity.
    567 repo stars
92. ▌
    Email Deliverability · majiayu000 bundle

    Make sure email actually reaches inboxes. Use this skill when setting up email authentication (SPF, DKIM, DMARC), diagnosing emails landing in spam, planning a domain reputation strategy, monitoring sender reputation, or hardening against email spoofing. Triggers on email deliverability, SPF, DKIM, DMARC, spam folder, sender reputation, mailbox provider, soft bounces, bounce rate, BIMI, MTA-STS, deliverability audit. Also triggers when a marketing or transactional email isn't reaching users.
    567 repo stars
93. ▌
    Entry Point Analyzer · majiayu000 bundle

    Analyzes smart contract codebases to identify state-changing entry points for security auditing. Detects externally callable functions that modify state, categorizes them by access level (public, admin, role-restricted, contract-only), and generates structured audit reports. Excludes view/pure/read-only functions. Use when auditing smart contracts (Solidity, Vyper, Solana/Rust, Move, TON, CosmWasm) or when asked to find entry points, audit flows, external functions, access control patterns, or privileged operations.
    567 repo stars
94. ▌
    Forge Cost Optimizer · majiayu000 bundle

    Optimizes Atlassian Forge apps to reduce platform consumption and avoid unnecessary costs using Atlassian's "Optimise Forge platform costs" guidance. Use when the user asks to optimize Forge app costs, reduce Forge invocations, lower GB-seconds, reduce storage or log usage, tune memory, replace polling, improve scheduled triggers, reduce KVS writes, move work to the frontend, use bridge APIs, batch API calls, add caching, or evaluate Forge Remote trade-offs. By default, perform an audit first and offer to make the recommended changes after presenting the audit. Only modify files immediately when the user explicitly asks the agent to implement or apply optimizations.
    567 repo stars
95. ▌
    Hunt Fintech GRAPHQL · majiayu000 bundle

    Hunt fintech-specific GraphQL vulnerabilities: money-movement mutations (transfers, redemptions, withdrawals, card top-ups), ledger/balance/portfolio query IDOR, decimal-precision and rounding abuse, idempotency-key bypass enabling double-spend, KYC/PII field-level authorization gaps, and admin-override mutations reachable via mass assignment. Distinct from hunt-graphql, which owns generic GraphQL discovery and IDOR/mutation methodology — this skill owns the delta introduced when a GraphQL layer sits in front of a ledger, wallet, payments, banking, brokerage, or lending backend, where a resolver bug moves real money instead of just leaking data. Use when hunting a fintech, banking, payments, wallet, neobank, brokerage, or lending target that exposes a GraphQL API, or when a schema/response includes balance, transfer, ledger, redeem, quote, KYC, or account-linking fields.
    567 repo stars
96. ▌
    Infra As Code Review · majiayu000 bundle

    Write an infrastructure-as-code review checklist and conduct a structured review of Terraform, CloudFormation, Pulumi, or Ansible code. Use when asked to review IaC code, audit infrastructure configurations, check cloud security posture, or produce a reusable IaC review checklist. Produces a structured review report with severity-categorized findings, remediation guidance, and a reusable checklist.
    567 repo stars
97. ▌
    Infra Security Audit · majiayu000 bundle

    Audit cloud and infrastructure configurations for open security groups, missing encryption, excessive permissions, and missing WAF or rate limiting.
    567 repo stars
98. ▌
    Kubernetes Hardening · majiayu000 bundle

    Implement Kubernetes security contexts, Pod Security Standards, and network policies. Secure cluster components and workloads. Use when hardening Kubernetes deployments or meeting security compliance.
    567 repo stars
99. ▌
    Nw Production Safety · majiayu000 bundle

    Agent safety boundaries - input validation, output filtering, scope constraints, and document creation policy
    567 repo stars
100. ▌
     Opencrow Pwn Toolbox · majiayu000 bundle

     Use the Anaconda `ctf` environment and installed exploit tooling for binary exploitation and runtime-debugging tasks. Use when Codex needs `pwntools`, `pwndbg`, `gdb`, `checksec`, `patchelf`, `qemu-user`, `pwninit`, or other pwn-focused helpers.
     567 repo stars