majiayu000
- 75k skills
- 0 followers
- 567 repo stars
- 3 weeks ago last updated
- ▌ Opencrow Web Toolbox · majiayu000 bundleUse the installed web CTF tooling for endpoint discovery, fuzzing, and automated SQL injection workflows. Use when Codex needs `sqlmap`, `gobuster`, `ffuf`, `dirb`, or `wfuzz`, and when full installs may also include manual Burp or ZAP steps.
- ▌ Orchardcore Security · majiayu000 bundleSkill for configuring security and authorization in Orchard Core. Covers permission definitions, authorization services, CORS, security headers, content security policies, and OpenID Connect.
- ▌
- ▌ Pentest API Attacker · majiayu000 bundleTest APIs against OWASP API Security Top 10 including discovery, auth abuse, and protocol-specific checks.
- ▌ Plugin Sandbox Setup · majiayu000 bundleConfigure plugin sandboxing with vm2 or isolated-vm for secure plugin execution.
- ▌ React Native Privacy · majiayu000 bundleImplement privacy and security patterns for React Native apps handling sensitive data (health, recovery, PII). Use when adding biometric authentication, securing sensitive data, implementing app locks, handling HIPAA considerations, or adding privacy controls like data export/deletion.
- ▌ Safety Filter Bypass · majiayu000 bundleTechniques to test and bypass AI safety filters, content moderation systems, and guardrails for security assessment
- ▌ Secure Code Guardian · majiayu000 bundleUse when implementing authentication/authorization, securing user input, or preventing OWASP Top 10 vulnerabilities. Invoke for authentication, authorization, input validation, encryption, OWASP Top 1
- ▌ Use Goodreads Export · majiayu000 bundleSearch and query Goodreads library from CSV export. Use when the user asks about books, TBR (to-be-read), reading lists, book searches, or mentions Goodreads. Also use for queries about book ratings, authors, reading status, or library statistics.
- ▌ Vcp Dependency Check · majiayu000 bundleVerify project dependencies against VCP dependency management standards. Checks lockfile hygiene, version ranges, package existence, and suspicious packages.
- ▌ Web Security Auditor · majiayu000 bundleAggregate SAST, SCA, DAST, secrets, API, frontend, and backend security checks into one report.
- ▌ Advanced Skill Builder · majiayu000 bundleGuides users through creating production-ready Claude skills via interactive dialogue. Use when user wants to build a new skill, needs help structuring a skill, or asks "how do I create a skill?" Covers requirements gathering, planning, YAML frontmatter generation, instruction writing, testing, and iterative refinement. Works with or without MCP integration.
- ▌ Agent Ops Create Skill · majiayu000 bundleCreate new AgentOps skills via interactive interview. Supports from-scratch and clone modes with tiered complexity.
- ▌ Ce Skill Registry Sync · majiayu000 bundleSynchronize all skill registries with filesystem inventory after any skill add, remove, rename, or move.
- ▌ Dingtalk Skill Creator · majiayu000 bundle创建新的钉钉技能(dingtalk skill)。当用户提到"创建新技能"、"新建技能"、"开发钉钉技能"、"新增钉钉功能"、"添加钉钉接口支持"、"我需要一个钉钉 xxx 技能"、"钉钉待办"、"钉钉签到"、"钉钉考勤"、"钉钉审批"、"钉钉日程"等希望将某个钉钉 API 领域封装成可复用 skill 时,必须使用此技能。此技能包含完整的技能创建流程:SDK 探索 → SDK Python 测试 → 纯 HTTP Python 测试(两步全通过)→ SKILL.md 编写。测试未全部通过不得创建 skill。
- ▌ Followup Documentation · majiayu000 bundleEvaluate whether changes need CLAUDE.md, rules, or skill updates
- ▌ Typeui CLI · majiayu000 bundleGuide for agentic tools to use the typeui.sh CLI for generating, updating, listing, and pulling design system skill files.
- ▌ Trace Skill Provenance · majiayu000 bundleInvestigate where a Hermes skill came from, when it was created, and whether it was builtin, promoted/imported, or locally created via skill_manage.
- ▌ Update Target Projects · majiayu000 bundleDiscover and sync all toolkit-using projects with the latest skills. Use when skills are modified, after the post-commit hook reminds you, or to batch-sync multiple projects.
- ▌ Vibe Using Vibe Engineering · majiayu000 bundleBootstraps the agent to check for applicable vibe-engineering skills before every action. Loads at conversation start for skill discovery.
- ▌ Localsetup System Info · majiayu000 bundleQuick system diagnostics: CPU, memory, disk, uptime. Use when capturing server baseline or recording host layout and specs for further operations.
- ▌ 60 Validate Tests 150 · majiayu000 bundle[60] VALIDATE. Ensure new (staged and unstaged) changes are covered by tests at >70% and the full test suite is green. Use when asked to validate coverage for recent changes, add tests for modified code, or verify nothing else broke.
- ▌ Add Integration Tests · majiayu000 bundleScaffold and write Aspire integration tests for NovaTune API endpoints
- ▌ Ado Review Resolution · majiayu000 bundleReview a resolved ADO work item to verify the fix is complete and correct
- ▌ Agent Test Delegation · majiayu000 bundleTest agent delegation patterns to verify hierarchy and escalation paths. Use after modifying agent structure.
- ▌ Agf Running Apple Sit · majiayu000 bundleUse when apple-dev has finished feature code + Unit tests (Swift Testing) and is about to enter code-review. Provides the Apple SIT scope (xcodebuild test + simulator per declared target), the AC-driven integration walk, APIProtocol-mock discipline, and evidence sink (progress/apple-dev.md). SIT is dev-owned; apple-code-reviewer audits the evidence.
- ▌ Agf Running Sit Tests · majiayu000 bundleUse when an execution-layer dev (frontend-dev / backend-dev / ai-agent-dev / ml-engineer / miniapp-dev) has finished feature code + Unit tests and is about to enter code-review. Provides the SIT scope, environment, AC-driven integration walk, and evidence sink (progress/<role>.md). SIT is now a dev-owned step, not a separate QA stage.
- ▌ Akka Net Testing Patterns · majiayu000 bundleWrite unit and integration tests for Akka.NET actors using modern Akka.Hosting.TestKit patterns. Covers dependency injection, TestProbes, persistence testing, and actor interaction verification. Includes guidance on when to use traditional TestKit.
- ▌ Auditing Green Mirage · majiayu000 bundleUse when auditing whether tests genuinely catch failures, or when user expresses doubt about test quality. Triggers: 'are these tests real', 'do tests catch bugs', 'tests pass but I don't trust them', 'test quality audit', 'green mirage', 'shallow tests', 'tests always pass suspiciously', 'would this test fail if code was broken'. Forensic analysis of assertions, mock usage, and code path coverage.
- ▌ Auditing Test Quality · majiayu000 bundleAutomates test quality assessment, identifies vanity tests, and guides systematic improvement of test suites. Use when reviewing test suites, identifying shallow tests, enforcing behavioral test standards, or when the user mentions test quality, vanity tests, or test effectiveness.
- ▌ Authorization Testing · majiayu000 bundleValidate authorization failures including IDOR, privilege escalation, and missing access controls. Test by attempting unauthorized access with lower-privileged credentials. Use when testing CWE-639 (IDOR), CWE-269 (Privilege Escalation), CWE-862 (Missing Authorization), CWE-863 (Incorrect Authorization), CWE-284 (Access Control), CWE-285 (Improper Authorization), or CWE-425 (Direct Request/Forced Browsing) findings.
- ▌ Bmad Tea Testarch Nfr · majiayu000 bundleAssess NFRs like performance security and reliability. Use when the user says "lets assess NFRs" or "I want to evaluate non-functional requirements"
- ▌ Configuration Testing · majiayu000 bundleTesting application configurations including environment variable validation, feature flag combinations, config file parsing, and default value verification.
- ▌ Constitution Enforcer · majiayu000 bundleValidates compliance with 9 Constitutional Articles and Phase -1 Gates before implementation.Trigger terms: constitution, governance, compliance, validation, constitutional compliance,Phase -1 Gates,
- ▌ Contract Testing With Pact · majiayu000 bundleConsumer-driven contract testing skill using Pact, covering consumer tests, provider verification, Pact Broker integration, and CI/CD workflows.
- ▌ Dspy Evaluation Suite · majiayu000 bundleComprehensive evaluation metrics and testing framework for DSPy programs
- ▌ E2e Testing Standards · majiayu000 bundleImplement robust E2E tests with Playwright or Cypress using Page Object Model, proper waits, and CI/CD integration. Covers selector strategies, flaky test prevention, and cross-browser testing patterns.
- ▌ Find Latest Portfolio · majiayu000 bundleFind the most recently downloaded Fidelity and Tastytrade portfolio CSV files from Downloads directory. Use when you need to locate the latest portfolio data files before analysis or processing.
- ▌ Form Edge Case Tester · majiayu000 bundleTests form validation and edge cases across creation flows. Submits empty forms, boundary values, invalid inputs, and tests field interdependencies to verify error handling and recovery. Use to validate form robustness beyond happy-path testing.
- ▌ Funding Ask Optimizer · majiayu000 bundleCraft compelling funding asks with multi-perspective justifications, historical comparables, risk mitigation, and milestone-based roadmaps.
- ▌ Getting Started Guide · majiayu000 bundle当用户开始新小说项目时激活 - 通过温和的提示和解释引导他们完成七步方法论(constitution → specify → clarify → plan → tasks → write → analyze)
- ▌
- ▌ Julien MCP Playwright · majiayu000 bundleInstall Playwright MCP for browser automation. Use when user needs web testing/scraping capabilities.
- ▌ Lisa Integration Test · majiayu000 bundleThis skill should be used when integration testing Lisa against a downstream project. It applies Lisa templates, verifies the project still builds, and if anything breaks, fixes the templates upstream in Lisa and retries until the project passes all checks.
- ▌ Load Testing And Perf · majiayu000 bundleRun load tests and profile applications with Locust, py-spy, and database query analysis
- ▌ Load Testing Patterns · majiayu000 bundlek6 script templates, load profiles, response time thresholds, SLO validation, and performance testing strategies.
- ▌ Local · majiayu000 bundleLocal development and testing workflows for Kagenti. Full test suites for Kind and HyperShift.
- ▌ Lunar Missions Expert · majiayu000 bundleSpecialized skill for tracking lunar mission timelines, manifests, and mission status within the LORS framework.
- ▌ Migrate Vstest To Mtp · majiayu000 bundleMigrates .NET test projects from VSTest to Microsoft.Testing.Platform (MTP). Use when user asks to "migrate to MTP", "switch from VSTest", "enable Microsoft.Testing.Platform", "use MTP runner", or mentions EnableMSTestRunner, EnableNUnitRunner, UseMicrosoftTestingPlatformRunner, or dotnet test exit code 8. Supports MSTest, NUnit, xUnit.net v2 (via YTest.MTP.XUnit2), and xUnit.net v3 (native MTP). Also covers translating xUnit.net v3 MTP filter syntax (--filter-class, --filter-trait, --filter-query). Covers runner enablement, CLI argument translation, Directory.Build.props and global.json configuration, CI/CD pipeline updates, and MTP extension packages. DO NOT USE FOR: migrating between test frameworks (MSTest/xUnit/NUnit), xUnit.net v2 to v3 API migration, MSTest version upgrades (use migrate-mstest-* skills), TFM upgrades, or UWP/WinUI test projects.
- ▌ Mobile Gesture Tester · majiayu000 bundleTest touch gestures including swipe, pinch-to-zoom, long press, and drag-and-drop on mobile viewports and touch-enabled devices.
- ▌ Moodle AI Integration · majiayu000 bundleIntegrate with Moodle AI Subsystem (4.5+). Create custom Actions, Providers, and Placements for AI-powered features.
- ▌ Nw Tdd Cross Language · majiayu000 bundlePort the state-delta + property-based testing paradigm to languages other than Python. DIY recipes per language; canonical Python ref shipped in nwave_ai.state_delta.
- ▌ Playwright Blazor E2e · majiayu000 bundleEnd-to-end testing for Blazor applications using Playwright for .NET. Use when writing E2E tests, creating test infrastructure, testing MudBlazor components, handling Blazor WebAssembly loading, debugging test failures, or setting up CI/CD test pipelines.
- ▌ Playwright Demo Debug · majiayu000 bundleDebug failing Playwright demo steps - selectors, auth, timing, and alignment issues
- ▌ Playwright Mobile Web Testing · majiayu000 bundleMobile web testing skill using Playwright device emulation covering responsive testing, touch interactions, viewport management, network throttling, geolocation testing, and mobile-specific UI patterns.
- ▌
- ▌ Qcsd Production Swarm · majiayu000 bundleQCSD Production Telemetry phase swarm for post-release production health assessment using DORA metrics, root cause analysis, defect prediction, and cross-phase feedback loops. Consumes CI/CD outputs (RELEASE/REMEDIATE/BLOCK decisions, release readiness metrics) and produces feedback signals to Ideation and Refinement.
- ▌ Qcsd Refinement Swarm · majiayu000 bundleQCSD Refinement phase swarm for Sprint Refinement sessions using SFDIPOT product factors, BDD scenario generation, and requirements validation.
- ▌ React Testing Library · majiayu000 bundleWrite production-grade React tests with Testing Library, MSW, and comprehensive coverage patterns
- ▌ Reasoningbank Agentdb · majiayu000 bundleReasoningBank integrations that rely on AgentDB for memory and retrieval.
- ▌ Rspec Request Testing · majiayu000 bundleWrite RSpec request specs for testing API endpoints, HTTP responses, authentication, and request/response handling. Use when testing controllers, API endpoints, or HTTP interactions following TDD.
- ▌ Rspec Service Testing · majiayu000 bundleWrite RSpec tests for service objects testing business logic, transaction handling, and complex workflows. Use when testing service objects, form objects, or multi-step business processes following TDD.
- ▌ Setup TS Deep Modules · majiayu000 bundleWire dependency-cruiser into a TypeScript repo so each package is a deep module: implementation hidden in subfolders, reachable only through its entry-point files. Use when the user asks to enforce package boundaries, set up deep modules, stop deep imports, or wants code outside a package to import only its entry points.
- ▌
- ▌ Space Entities Expert · majiayu000 bundleSpecialized skill for profiling commercial companies and private research institutions involved in lunar exploration.
- ▌ Symfony Symfony Voters · majiayu000 bundleImplement granular authorization with Symfony Voters; decouple permission logic from controllers; test authorization separately from business logic
- ▌ Test Cases Generation · majiayu000 bundleGenerates structured test case sets with multi-dimensional coverage from project code analysis or specification documents. This skill activates when the user asks to write test cases, generate tests, supplement tests, create test coverage, or improve test completeness. It auto-scans the project to extract testable units (APIs, functions, components, CLI commands, tool definitions), identifies coverage gaps, designs test cases across multiple dimensions (coverage depth, input types, interaction patterns), and produces a structured test case document with coverage matrix. Includes test strategy and methodology by default. Use --formal flag to add management sections (environment, roles, schedule, defect management).
- ▌ Test Driven Execution · majiayu000 bundleBefore writing any implementation code, define the acceptance criteria and test cases that the code must satisfy. Agents then write code to pass these tests — not to match a vague description. Eliminates "it works on my machine" and "I think this is what you wanted" outcomes.
- ▌ Testing In Production Patterns · majiayu000 bundleSafe testing-in-production strategies including feature flags, shadow traffic, canary releases, dark launches, and observability-driven development.
- ▌ Update Neovim Plugins · majiayu000 bundleUpdate LazyVim and all neovim plugins to their latest versions
- ▌ Vanilla Rails Testing · majiayu000 bundleUse when writing Rails tests - enforces fixtures-only, integration-style controller tests, Current context setup, simple naming, and Minitest syntax
- ▌ Verification Enforcer · majiayu000 bundleEnforce comprehensive verification and testing before declaring completion. Use when implementing features, making changes, or completing tasks. Prevents insufficient verification (FP-10).
- ▌ 50 Execute Gated 150 · majiayu000 bundle[50] EXECUTE. Execute plans step-by-step with confirmation gates. Each step requires user approval before proceeding. Includes change management lifecycle (Pre-Change → During → Post-Change → Rollback). Use when implementing approved plans, deploying changes, or any multi-step execution requiring control and reversibility.
- ▌ Airflow Dag Patterns · majiayu000 bundleBuild production Apache Airflow DAGs with best practices for operators, sensors, testing, and deployment. Use when creating data pipelines, orchestrating workflows, or scheduling batch jobs.
- ▌
- ▌ Chrome Auth Recorder · majiayu000 bundleRecords workflows in authenticated browser sessions and generates annotated GIF tutorials without handling credentials. Use when you need to document authenticated processes, create tutorials from existing sessions, or capture workflows that require login. Triggers on "record my workflow", "document authenticated process", "create tutorial from session", "capture this workflow as GIF", or "show me how to do this". Works with Chrome browser via MCP integration and authenticated sessions.
- ▌ Buff Execute · majiayu000 bundleThis skill should be used when the user asks to "execute the plan", "start building", "implement the plan", "run /buff:execute", "begin development", "start coding from the plan", or wants to begin implementing a previously created buff plan. Reads .buff/plan.md and drives the full buff development loop.
- ▌ Frappe Core Workflow · majiayu000 bundleUse when creating or modifying Frappe Workflows, defining states and transitions, adding action conditions, or troubleshooting workflow permission errors. Prevents stuck documents from misconfigured transitions, missing state permissions, and circular workflow paths. Covers Workflow DocType, workflow states, transitions, actions, conditions (Python expressions), workflow permissions, workflow_state field, Workflow Action DocType. Keywords: workflow, states, transitions, actions, conditions, workflow_state, Workflow Action, approval, document workflow.
- ▌ Frappe Impl Workflow · majiayu000 bundleUse when implementing document Workflows, approval chains, or state-based transitions in Frappe. Prevents stuck documents from missing transitions, broken approval chains, and permission errors on workflow actions. Covers Workflow DocType, Workflow State, Workflow Action, transition rules, allowed roles, conditions, workflow_state field, apply_workflow. Keywords: workflow, approval, transition, Workflow State, Workflow Action, state machine, approval chain, workflow_state.
- ▌ Heir Sync Management · majiayu000 bundleMaster-Heir synchronization, contamination prevention, and promotion workflows
- ▌ Marketplace Workflow · majiayu000 bundleUse when user explicitly says "marketplace", "move to marketplace", "publish to marketplace", or "add to my marketplace". Never use for creating skills/rules in dotfiles or project-level locations.
- ▌ Morning Intelligence · majiayu000 bundleRun a 15-question interview to capture your role, topics, sources, exclusions, and format preferences — then write a master prompt you can drop into a scheduled task or Claude Code Routine to get a personalised news brief every morning. Use when asked to set up a morning intelligence brief, build a morning news prompt, or create a personalised news briefing.
- ▌ N8n Errors Execution · majiayu000 bundleUse when debugging workflow execution failures or implementing error recovery in n8n. Prevents silent failures by enforcing the 4 error handling patterns. Covers node failures, timeout handling, continueOnFail pattern, Error Trigger node, error workflows, retry on fail configuration, Stop And Error node, and execution data inspection. Keywords: n8n, error, execution, retry, timeout, failure, recovery.
- ▌ Pmtl Workflow Router · majiayu000 bundlePMTL_VN workflow routing layer. Use when a task needs the right combination of repo-local PMTL skills, Superpowers workflow skills, and generic tool skills without making the user remember the skill names.
- ▌ Production Scheduler · majiayu000 bundleProduction scheduling skill with sequencing rules, resource allocation, and schedule optimization.
- ▌ Refreshing Artifacts · majiayu000 bundleRe-validate an artifact and update its confidence inputs. Routes to appropriate re-validation skill based on artifact type.
- ▌ Resume Session · majiayu000 bundleResume a previous session by reading pipeline state and presenting current status
- ▌ Spec Driven Feedback · majiayu000 bundleRetrospective feedback system with Execute-Verify-Gate structural anti-skip enforcement for DevForgeAI operations. Captures feedback after /dev, /qa, /release, sprint planning, or manual triggers. Handles 6 feedback types: conversation, summary, metrics, checklist, ai_analysis, and triage. Prevents token optimization bias through lean orchestration, per-phase reference loading, checkpoint persistence, and binary CLI gate enforcement. Use when feedback needs to be captured, when the user mentions retrospectives, lessons learned, workflow improvements, process feedback, or wants to review what went well or poorly. Also handles AI architectural analysis, recommendation triage, feedback search, export/import, and configuration management.
- ▌ Task Folder Migrator · majiayu000 bundleUse when migrating existing single-file tasks to folder-based structure - preserves content, creates organized folders, backs up originals
- ▌ Workflow Skill Name · majiayu000 bundleDescription of the workflow this skill guides through. Use when executing this specific workflow or process.
- ▌ Workflow Coordinator · majiayu000 bundleUse when coordinating handoffs between workflows (e.g., skill-editor to programming-pm). Provides universal handoff schema v3.0, validation rules, distributed tracing conventions, and workflow discovery via frontmatter metadata.
- ▌ Workflow Create Plan · majiayu000 bundleThis skill should be used when generating a detailed implementation plan from an existing PRD and codebase research. It synthesizes requirements with codebase context into actionable, bite-sized TDD tasks suitable for junior developers.
- ▌ Workflow Hello World · majiayu000 bundleCreate a cloud Deepline workflow that runs on a recurring cron schedule or via webhook, inspect it, and validate trigger behavior end to end.
- ▌ Accessibility Writing · majiayu000 bundleGuide creating accessible documentation and content for everyone
- ▌ Bmad Cis Storytelling · majiayu000 bundleCraft compelling narratives using story frameworks. Use when the user says "help me with storytelling" or "I want to create a narrative through storytelling"
- ▌ Last 30 Days Research · majiayu000 bundleSearches Reddit, X/Twitter, and the broader web for recent opinions, sentiment, and signal on any topic. Use when you need to know what real people are saying about a tool, product, trend, or event in the past 30 days — cutting through SEO content to surface genuine community reaction. Produces a structured report with consensus findings, pain points, positive signals, contrarian takes, source links, and a signal confidence rating.
- ▌ Newsletter Repurposer · majiayu000 bundleTake 1 existing newsletter and produce 5 new angles — different framing, different audience entry point, different hook. Each angle gets a title, hook, and 3 key talking points. Use when user wants to "repurpose a newsletter", "get more mileage from content", or turn one newsletter into multiple future issues.
- ▌ Non Fiction Precision · majiayu000 bundleUse when a document's argument buries its conclusion or has logical gaps—applies Minto's Pyramid (Answer First, MECE grouping) and Orwell's concision rules to rebuild structure.
- ▌ Paper Polish Workflow · majiayu000 bundleSystematic top-down workflow for polishing academic papers. Structure to logic to expression with user confirmation at each step.
- ▌ Patient Communication · majiayu000 bundleWrite clear, plain English patient communications for any healthcare context. Use when asked to write a patient letter, patient information leaflet, appointment letter, test results letter, discharge summary for patients, or health education content. Targets accessible reading level with clear next steps.