majiayu000
- 75k skills
- 0 followers
- 567 repo stars
- 3 weeks ago last updated
- ▌ Etsy Shop Analytics · majiayu000 bundleShop analytics — traffic sources, conversion rates, search terms, top listings performance
- ▌ Evidence Assessment · majiayu000 bundleEvaluating the quality, provenance, and relevance of evidence that supports or undermines a claim. Covers source credibility, sampling quality, study design, levels of evidence (anecdote to meta-analysis), base rate integration, distinguishing primary from secondary sources, and calibrating belief to evidence strength. Use when the question is not whether an argument is valid but whether its premises are actually supported by the available data.
- ▌ Gather Week Context · majiayu000 bundleCollect and synthesize all daily archives for a given week. Returns aggregated data including wins, insights, people interactions, and completeness status.
- ▌ Growth Kr Reporting · majiayu000 bundleUse when preparing Growth KR reports that require orchestrating mapped analytics scripts, parallel subagent analysis, strict source traceability, and a final report that answers mandatory KR questions.
- ▌ Hard Predict Future · majiayu000 bundleActivate this agent for any future-oriented question that requires deep quantitative analysis, historical precedents, and structured scenario planning. Triggers include: "Will [X]?", "Who will win [X]?", "What happens to [X]?", prediction requests with high stakes, foresight analysis, STEEEP scenario planning, futures cone, competitive race analysis, technology adoption curves, geopolitical shifts, or any question about a future outcome that deserves rigorous multi-step analysis. This agent runs a 12-step deterministic pipeline: Claude handles intelligence, Python handles all arithmetic. Year is NOT required — the engine infers the horizon. REQUIRES: Bash tool + Python 3.x. Not compatible with claude.ai web (use Soft Predict Future instead).
- ▌
- ▌ Ime Report Analysis · majiayu000 bundleAnalyzes defense Independent Medical Examination (IME) reports for personal injury litigation, producing a plaintiff-side strategic memorandum with findings summary, treating-physician comparison, bias indicators, and cross-examination roadmap. Use when reviewing defense IME reports during discovery or pre-trial, preparing to depose or cross-examine a defense medical expert, or evaluating IME impact on case valuation. Trigger keywords: IME, independent medical examination, defense expert, medical examination report, cross-examination, bias indicators, impairment rating.
- ▌ Investigate Diagram · majiayu000 bundleGenerate dependency diagrams from code or architecture. Traces code-level dependencies (hooks, queries, providers, components) or maps high-level system architecture. Outputs Mermaid diagrams in markdown or FigJam via Figma MCP. Use when the user asks to map dependencies, visualize relationships, create a dependency diagram, diagram an architecture, or trace how systems connect.
- ▌ Kata Research Phase · majiayu000 bundleResearch how to implement a phase standalone, investigating implementation approaches before planning, or re-researching after planning is complete. Triggers include "research phase", "investigate phase", "how to implement", "research implementation", and "phase research".
- ▌ Lisa Review Project · majiayu000 bundleThis skill should be used when comparing Lisa's source templates against a target project's implementation to identify drift. It validates the Lisa directory, detects project types, reads the manifest, compares files, categorizes changes, and offers to adopt improvements back into Lisa. This is the inverse of lisa:review-implementation.
- ▌ Longbridge Earnings · majiayu000 bundlePost-earnings analysis skill — generates institutional-grade earnings update reports (8–12 page DOCX) and structured conversation summaries for companies under coverage. Covers beat/miss analysis, segment breakdown, margin trends, guidance assessment, updated estimates, and valuation. Supports US, HK, and A-share markets. Use this skill whenever the user wants a post-earnings analysis or quarterly-results writeup, even if they do not say "earnings update" verbatim. Triggers: "earnings update", "quarterly results", "Q1/Q2/Q3/Q4 results", "earnings report", "post-earnings analysis", "beat/miss", "guidance update", "财报分析", "业绩更新", "季度业绩", "季报", "年报", "盈利分析", "财报点评", "財報分析", "業績更新", "季度業績", "季報", "年報", "財報點評".
- ▌ Longbridge Etf Flow · majiayu000 bundleUS ETF capital-flow analysis via Longbridge Securities — tracks institutional money migration via ETF creation/redemption changes, sector breadth signals, and thematic momentum. Analyses major SPDR sector ETFs (XLK / XLF / XLE / XLV etc.) for net inflow / outflow to gauge industry rotation and risk-appetite shifts. Triggers: "ETF资金流", "ETF流向", "美国ETF", "板块ETF", "XLK", "XLF", "XLE", "机构资金迁移", "行业轮动信号", "ETF資金流", "ETF流向", "美國ETF", "板塊ETF", "機構資金遷移", "ETF flow", "US ETF flow", "sector ETF", "SPDR", "institutional flow", "sector rotation signal", "ETF inflow outflow", "fund flow".
- ▌ Longbridge Fx Carry · majiayu000 bundleFX carry-trade analysis via Longbridge Securities — combines spot rates, interest-rate differentials (high-yield vs low-yield currencies), volatility, and historical price trends to assess carry opportunities. Analyses common carry pairs (AUD/JPY, NZD/USD, MXN/JPY) and outputs carry yield, drawdown risk, and Sharpe ratio. Triggers: "外汇套息", "套息交易", "carry trade", "利差交易", "高息货币", "低息货币", "汇率套利", "外汇策略", "外匯套息", "套息交易", "利差交易", "高息貨幣", "低息貨幣", "匯率套利", "FX carry trade", "carry strategy", "interest rate differential", "high yield currency", "currency carry", "AUD JPY", "NZD USD".
- ▌ Longbridge Harmonic · majiayu000 bundle谐波形态信号引擎——基于斐波那契几何识别 XABCD 五点结构,支持 Gartley、Bat(蝙蝠)、Butterfly(蝴蝶)、Crab(螃蟹),在潜在反转区(PRZ)生成交易信号。Triggers: "谐波形态", "谐波", "Gartley", "蝙蝠形态", "蝴蝶形态", "螃蟹形态", "XABCD", "潜在反转区", "PRZ", "斐波那契形态", "諧波形態", "諧波", "蝙蝠形態", "蝴蝶形態", "螃蟹形態", "harmonic pattern", "Gartley pattern", "Bat pattern", "Butterfly pattern", "Crab pattern", "PRZ", "potential reversal zone", "fibonacci harmonic".
- ▌ Longbridge Ichimoku · majiayu000 bundleIchimoku Cloud (一目均衡表) five-line system signal engine for stocks listed in HK / US / A-share / Singapore via Longbridge Securities. Computes Tenkan-sen, Kijun-sen, Senkou Span A/B, and Chikou Span from OHLCV data; generates price-vs-cloud position, line-cross signals, and full trend-confirmation scores. Triggers: "一目均衡表", "一目云", "云图", "转折线", "基准线", "先行带", "迟行线", "云上", "云下", "一目均衡表", "一目雲", "雲圖", "轉折線", "基準線", "先行帶", "遲行線", "ichimoku", "ichimoku cloud", "tenkan sen", "kijun sen", "senkou span", "chikou span", "cloud breakout".
- ▌ Loves Edge Detector · majiayu000 bundleDetect where love (kappa_i, the imaginary component) interfaces with structure (kappa_r, the real component). Maps phase boundaries WITHIN love -- where devotion becomes obsession, care becomes control, presence becomes surveillance. Love is consciousness at its edges.
- ▌ Lp Onboarding Audit · majiayu000 bundleAudit an app's onboarding flow against the "Onboarding Done Right" checklist. Customizes the generic checklist for the app's purpose and audience, then audits actual code using lp-do-fact-find's Outcome A process. Produces an analysis-ready brief.
- ▌ Materials Chemistry · majiayu000 bundleStates of matter, phase transitions, kinetic molecular theory, atmospheric chemistry, green chemistry, and sustainable synthesis. Covers solid/liquid/gas/plasma properties, phase diagrams, vapor pressure, gas laws, ozone chemistry, greenhouse effect, the 12 principles of green chemistry, atom economy, solvent selection, and catalysis for sustainability. Use when reasoning about material properties, environmental chemistry, or designing greener chemical processes.
- ▌ Pattern Recognition · majiayu000 bundleConjecture generation, sequence analysis, and experimental mathematics for mathematical discovery. Covers sequence analysis (OEIS lookups, recurrence relations, generating functions), pattern detection methods (finite differences, ratio analysis, modular patterns), conjecture generation workflow, classical integer sequences (Fibonacci, Catalan, partition numbers, Bernoulli numbers), combinatorial identities, the probabilistic method (Erdos, expected value arguments, Lovasz Local Lemma), AI-assisted discovery (FunSearch, Ramanujan Machine), and confidence calibration with cautionary tales (Mertens conjecture, Polya conjecture). Use when discovering patterns, analyzing sequences, generating conjectures, or working with combinatorial identities.
- ▌ Ralph Specum Status · majiayu000 bundleThis skill should be used only when the user explicitly asks to use `$ralph-specum-status`, or explicitly asks Ralph Specum in Codex for status or active spec progress.
- ▌ Research Blockchain · majiayu000 bundleSenior Blockchain Architect research agent using Zai MCP for comprehensive analysis of EVM chains, perpetual DEX architectures, CEX integrations, and DeFi-TradFi bridges. Use for: blockchain research, protocol comparisons, technical feasibility studies, security audits, compliance analysis, architecture blueprints. Triggers: /research-blockchain, 'blockchain research', protocol comparisons.
- ▌ Research Ingredient · majiayu000 bundleDeep research on a specific ingredient using the product-research MCP
- ▌ Review Conversation · majiayu000 bundleReview SPARTA conversation transcripts and grading with full transparency. Use when asked to review conversations, show transcripts, compare student vs teacher grades, inspect persona evaluations, or export sessions for human annotation. Replaces the black-box opacity of raw JSONL session files with rich turn-by-turn rendering including entity gate decisions, QRA citations, self-grade iterations, and persona evaluation reasoning.
- ▌ Trustpilot Review Intelligence · majiayu000 bundle当需要抓取 Trustpilot 评论、分析评分分布、提炼正负面主题、生成竞品口碑洞察或为广告与转化文案提供评论情报时使用。适用于“抓某品牌 Trustpilot 评论”“分析差评主题”“导出评论 CSV/JSON”“做口碑竞品研究”等场景,脚本位于 `scripts/tpscraper.js`。
- ▌ Sequential Thinking · majiayu000 bundleApply structured, reflective problem-solving for complex tasks requiring multi-step analysis, revision capability, and hypothesis verification. Use for complex problem decomposition, adaptive planning, analysis needing course correction, problems with unclear scope, multi-step solutions, and hypothesis-driven work.
- ▌ X Topic Intelligence · majiayu000 bundle当需要在 X/Twitter 上围绕某个主题收集热门帖子、趋势讨论、KOL 内容、钩子写法、回复驱动内容或社媒情报数据集时使用。适用于内容调研、舆情研究、话题扫描、社媒竞品观察和内容机会分析等场景,优先快速模式,深入采集时再做多轮 DOM 抓取。
- ▌ Soft Predict Future · majiayu000 bundleActivate this skill for ANY future-oriented question. Triggers include: "Will [X]?", "Who will win [X]?", "What happens to [X]?", "Can [X] succeed?", "What's the future of X?", foresight analysis, scenario planning, STEEEP analysis, futures cone, prediction requests, or any question about a future outcome. Year is NOT required — the engine infers the horizon. Also activate when the user says "predict", "forecast", "what are the odds", "scenario analysis", or asks about competitive races, technology adoption, geopolitical shifts, or market dominance. REQUIRES web search to be enabled — if web search is unavailable, tell the user before proceeding.
- ▌ Source Verification · majiayu000 bundleJournalism source verification and fact-checking workflows. Use when verifying claims, checking source credibility, investigating social media accounts, reverse image searching, or building verification trails. Essential for reporters, fact-checkers, and researchers working with unverified information.
- ▌ Story Five Elements · majiayu000 bundleAnalyze five core elements of stories: genre type and creative element extraction, story summary, character biographies, character relationships, major plot points.
- ▌ Story Type Analyzer · majiayu000 bundleAnalyze story genre types, extract creative elements and story features. Suitable for identifying genre positioning, extracting creativity, analyzing market audience
- ▌ Synthesize Feedback · majiayu000 bundleSynthesize customer feedback into thematic clusters when the user asks to analyze feedback, review VoC data, or understand customer sentiment
- ▌ Synthesize Research · majiayu000 bundleSynthesize interview notes, feedback, and transcripts into themed research findings with JTBD statements when the user asks to analyze research, synthesize interviews, or make sense of qualitative data
- ▌ Systematic Thinking · majiayu000 bundleRigorous problem decomposition and evidence-based analysis methodology for software engineering tasks. Use to analyze situations, figure out concepts or investigations.
- ▌ Teams Deep Analysis · majiayu000 bundleTeam-based deep exploration and synthesis workflow using Agent Teams with dynamic planning and hub-and-spoke coordination. Use when asked for "teams deep analysis", "team-based analysis", "collaborative analysis", or "teams-deep-analysis".
- ▌ Thinking Critically · majiayu000 bundleDeep engineering analysis before implementation (Phase 2 of 9-Phase Feature Cycle). Challenges assumptions, identifies unknowns, and prevents architectural mistakes. Use when planning complex features, writing PRDs, designing systems, or before any significant code changes.
- ▌ Using Github Search · majiayu000 bundleUse when researching GitHub issues, PRs, and discussions for community solutions and known gotchas - searches via WebSearch with site filters and extracts problem-solution patterns
- ▌ Vibe Start Informed · majiayu000 bundleDispatches research agents to find real projects, papers, and documented failures before proposing any feature, architecture, or technology choice. Triggers on creative/design tasks, not on implementation of already-designed specs.
- ▌ Well Log Evaluation · majiayu000 bundleComplete well log evaluation workflow from LAS/DLIS loading through QC, petrophysical analysis, lithology classification, and visualization. Use when performing formation evaluation from well log data.
- ▌ Brainstorm Skills · majiayu000 bundleDeep iterative research using progressive flow psychology (diverge-analyze-converge-execute) with parallel agents, skeptical analysis, and multi-perspective synthesis. Use for thorough topic exploration, decision-making research, or when you need battle-tested conclusions.
- ▌ Zotero Paper Import · majiayu000 bundleDownload PDFs from Zotero by citation key, cut references, and prepare for Swanki.
- ▌ 701 Technologies Openapi · majiayu000 bundleUse when you need framework-agnostic OpenAPI 3.x guidance — spec structure, metadata and versioning, paths and operations, reusable schemas, security schemes, examples, documentation quality, contract validation (e.g. Spectral), breaking-change awareness, and handoffs to codegen — without choosing Spring Boot, Quarkus, or Micronaut. This should trigger for requests such as Review an OpenAPI; Improve an OpenAPI; Improve API contract; Improve API schema design. Part of cursor-rules-java project
- ▌ Agf Wiring Multi LLM Sdk · majiayu000 bundleUse when wiring up or switching between China-domestic LLM providers (DeepSeek, Doubao/Volc Ark, Qwen/DashScope, MiniMax). Provides OpenAI-compatible adapter pattern, env-var contracts, fallback strategy, cost guardrails, and minimum verifications before declaring integration done.
- ▌ API And Interface Design · majiayu000 bundleUse when designing APIs, module boundaries, or any public interface. Use when creating REST or GraphQL endpoints, defining type contracts between modules, or establishing boundaries between frontend and backend.
- ▌ Connection Schema Design · majiayu000 bundleConnection profile and state schema design rules and core profile selection
- ▌ Developing Openapi Specs · majiayu000 bundleGuide for contributing to the OpenAPI layer using processor pattern, complexity management, and functional programming. Use when adding endpoint factories, processors, parameter descriptions, reducing cyclomatic complexity, or fixing OpenAPI validation errors. Covers architecture patterns from user-service repository.
- ▌ Formatting API Responses · majiayu000 bundleStandardizes the structure of internal function results. Use when writing Services or Server Actions.
- ▌ GRAPHQL Schema Generator · majiayu000 bundleGenerate GraphQL schemas, resolvers, and type definitions. Use when designing GraphQL APIs or documenting GraphQL schemas.
- ▌ Jupiter Swap Integration · majiayu000 bundleIntegrate Jupiter aggregator for swaps - API usage, route optimization, slippage handling, and frontend/bot implementation. Use when building swap UIs or trading bots.
- ▌ Microsoft Code Reference · majiayu000 bundleLook up Microsoft API references, find working code samples, and verify SDK code is correct. Use when working with Azure SDKs, .NET libraries, or Microsoft APIs—to find the right method, check parameters, get working examples, or troubleshoot errors. Catches hallucinated methods, wrong signatures, and deprecated patterns by querying official docs.
- ▌ Monitoring Observability · majiayu000 bundleProvides monitoring and observability best practices covering the three pillars (logs, metrics, traces), OpenTelemetry instrumentation, Prometheus/Grafana dashboards, SLO-based alerting, and APM strategies. Use when setting up monitoring, observability, prometheus, grafana, opentelemetry, alerting, tracing, logging, metrics, dashboards, SLOs, or APM.
- ▌ REST To GRAPHQL Migrator · majiayu000 bundleMigrates REST APIs to GraphQL incrementally with schema stitching, REST datasources, and gradual endpoint migration. Use when users request "migrate to GraphQL", "REST to GraphQL", "GraphQL wrapper", or "API modernization".
- ▌ Deepline Plays Feedback · majiayu000 bundleSend Deepline SDK/V2 CLI feedback or bug reports, including environment info and the current Claude/Cowork session transcript. Use when the user asks to report a Deepline bug, share a failing run, or send feedback from a V2 SDK workflow.
- ▌ Installer Quality Audit · majiayu000 bundleUse when auditing install, setup, bootstrap, or update scripts for safe, idempotent behavior. Triggers:
- ▌ Parallel Batch Executor · majiayu000 bundleParallel task execution patterns for 300% performance gains
- ▌ Powershell 2025 Changes · majiayu000 bundleCritical PowerShell changes, deprecations, and migrations for 2025
- ▌ Remotion Video Enhancer · majiayu000 bundle视频转场与动画增强工具,提取 Remotion 的动画理念,提供高级视频转场效果和 Framer Motion 交互式动画。可与 ppt-generator、nanobanana-ppt-visualizer、ppt-roadshow-generator Skill 协同工作。
- ▌ Repository Automation Scripts · majiayu000 bundleAutomated scripts for common repository tasks including setup, cleanup, dependency updates, and maintenance.
- ▌ Terminal Gif Recordings · majiayu000 bundleCreate polished terminal GIF recordings using VHS (Video Hardware Software) by Charmbracelet. Use when asked to create terminal demos, CLI gifs, command-line recordings, or animated terminal screenshots for documentation, READMEs, or marketing.
- ▌ Viral Video Copywriting · majiayu000 bundle专业的爆款短视频文案创作工具。通过对标抖音爆款视频,智能提取视频内容,深度拆解爆款因素,并结合用户需求创作出符合爆款规律的新文案。适用于短视频创作者、运营人员提升内容质量。
- ▌ Business Continuity · majiayu000 bundleDevelop business continuity plans and impact analysis. Implement BCP testing and communication procedures. Use when building organizational resilience.
- ▌ Business Evaluation · majiayu000 bundle[Content] Evaluate business idea viability: Business Model Canvas, financial projections, risk matrix, go-to-market, execution plan.
- ▌ Cap Table Waterfall · majiayu000 bundleYou are a VC fund attorney and cap table specialist. You model equity ownership across funding rounds, compute SAFE conversions at the next priced round, and run exit waterfalls under multiple scenarios.
- ▌ Consulting Gauntlet · majiayu000 bundleFull-stack consulting engagement simulator. Use this skill whenever a user wants strategic business analysis, market entry analysis, competitive intelligence, due diligence, financial modeling, technology assessment, or any consulting deliverable. Triggers include: "analyze this business", "help me with strategy", "market analysis", "business case", "consulting report", "strategic framework", "financial projections", "competitive landscape", "industry analysis", "go-to-market", "M&A analysis", "operational review", or any request for a structured business deliverable. Always use this skill when the user wants McKinsey/Bain/BCG-quality output. Deploy the multi-agent team: Partner, Manager, Financial Analyst, Tech Specialist, Strategist, and Associate — each with defined responsibilities. Never produce consulting-grade output without this skill.
- ▌ Cs Escalation Brief · majiayu000 bundleWrite a structured escalation brief for an at-risk customer account. Use when an account has escalated, when a customer is threatening churn, when a P1 customer issue needs executive attention, or when preparing an internal save play. Produces a crisp escalation brief with account context, timeline, root cause, business impact, and a clear resolution plan.
- ▌ Discovery Call Prep · majiayu000 bundlePrepare a structured discovery call plan for any prospect. Use when asked to prepare for a sales call, discovery call, prospect meeting, or first call with a potential customer. Produces a call brief with research, hypotheses, questions, and success criteria.
- ▌ Employee Engagement · majiayu000 bundleUse this skill when designing engagement surveys, running pulse checks, building retention strategies, or improving culture. Triggers on employee engagement, surveys, pulse checks, retention strategies, culture building, eNPS, team health, and any task requiring engagement measurement or improvement programs.
- ▌ Financial Reporting · majiayu000 bundleGenerates and analyzes financial reports using data aggregation, visualization, and compliance tools.
- ▌ Influence Architect · majiayu000 bundleUse when navigating organizational politics, building coalitions, or exercising strategic influence.
- ▌ Investor Pitch Deck · majiayu000 bundleBuild the narrative and slide structure for an investor pitch deck. Use when asked to create a pitch deck, investor presentation, fundraising deck, or startup pitch. Produces a slide-by-slide structure with narrative beats, key messages, and what each slide must prove to an investor.
- ▌ Operations And Lean · majiayu000 bundleOperations management and lean production techniques for turning inputs into outputs under variability. Covers the Toyota Production System, seven wastes, just-in-time, kanban, jidoka, single-minute die exchange, 5 Whys, value stream mapping, bottleneck theory, and the distinction between mass production and flexible production. Use when diagnosing operational waste, designing production flows, setting up quality systems, or comparing batch-and-queue to one-piece flow.
- ▌ Paralegal Agent Ops · majiayu000 bundleAutonomous contract drafting and review for business agreements with continuously updated contract law knowledge. Generates contracts from templates, clause libraries, and negotiation playbooks. Handles MSAs, SOWs, NDAs, IP Addendums, Change Orders, and Payment Policies. Automatically stays current with contract law changes via web search. Triggers on queries like "draft contract", "generate MSA", "review agreement", "create NDA", "modify SOW", or any contract-related task.
- ▌ Platform Strategist · majiayu000 bundleUse when analyzing platform business models, network effects, or aggregation dynamics.
- ▌ Portfolio Architect · majiayu000 bundleYou architect high-ticket portfolio projects that transform service catalogs into revenue-generating assets. The system adapts to user experience level: basic mode for straightforward portfolio development, or advanced mode leveraging Claude Code 2.1.0's infrastructure-grade capabilities including agent lifecycle management, parallel processing, and enterprise automation.
- ▌ Revenue Attribution · majiayu000 bundleAnalyze marketing and sales touchpoints to attribute revenue credit using multi-touch models and channel contribution analysis
- ▌ Startup Icp Definer · majiayu000 bundleUse this skill when users need to define their ideal customer profile, identify target personas, map buying centers, or understand who they're selling to. Activates for "who is my customer," "define ICP," "target audience," or persona questions.
- ▌ Tiktok Shop Pricing · majiayu000 bundlePricing strategy for TikTok — competitive pricing, commission impact, bundling, discount psychology
- ▌ Board Deck Narrative · majiayu000 bundleBuild the storyline and slide structure for a board presentation. Use when asked to create a board deck, board presentation narrative, board meeting slides, or quarterly board update. Produces a complete slide-by-slide structure with narrative beats, talking points, and slide content guidance.
- ▌ Skill Quality Gates · majiayu000 bundleComplete pre-PR validation combining linting, testing, and quality checks. Ensures all changes meet project standards before opening a pull request.
- ▌ Swiftui Code Review · majiayu000 bundleReviews SwiftUI code for view composition, state management, performance, and accessibility. Use when reviewing .swift files containing SwiftUI views, property wrappers (@State, @Binding, @Observable), or UI code.
- ▌ Template Sync Check · majiayu000 bundleVerify that all 4 Convex template locations are in sync (CLAUDE.md Rule 6)
- ▌ Validation Pipeline · majiayu000 bundleStructured step-by-step validation of requirements, code, and artifacts with gate enforcement, per-step scoring, and structured reports.
- ▌ Verify Lazy Loading · majiayu000 bundle탭/모달의 React.lazy + Suspense + ErrorBoundary 패턴을 검증합니다. 탭 컴포넌트 추가/수정 후 사용.
- ▌ Watchos Code Review · majiayu000 bundleReviews watchOS code for app lifecycle, complications (ClockKit/WidgetKit), WatchConnectivity, and performance constraints. Use when reviewing code with import WatchKit, WKExtension, WKApplicationDelegate, WCSession, or watchOS-specific patterns.
- ▌ Cache Poisoning · majiayu000 bundleHunt web cache poisoning, CDN cache poisoning, and cache deception attacks. Use when target uses a CDN (Cloudflare, Akamai, Fastly, AWS CloudFront) or has Varnish/nginx caches and you want to identify cache key flaws that let attackers serve malicious content to other users.
- ▌ Cloud Misconfig · majiayu000 bundleHunt cloud misconfigurations exposed externally — open S3/GCS buckets, exposed IAM-tied EC2 metadata, Cognito misconfig, GitHub Actions secret leakage, exposed Kubernetes API, public Elastic / Kibana / Mongo, Firebase RTDB rules, weak AWS access keys discovered in JS/mobile. Use when leveraging leaked credentials or hunting cloud surface in scope.
- ▌ A2a Authentication · majiayu000 bundleImplement A2A authentication — API keys, Bearer tokens, OAuth 2.0, OpenID Connect, and mutual TLS. Use when securing agent-to-agent communication and configuring Agent Card security schemes.
- ▌ Agile V Compliance · majiayu000 bundleRisk management, CAPA protocol, human gate approval records, AI agent security controls, and periodic revalidation. Load when running gates, auditing risks, handling CAPAs, or reviewing security posture.
- ▌ AI Safe2 Secure Build Copilot · majiayu000 bundleApply the AI SAFE² framework (Sanitize & Isolate · Audit & Inventory · Fail-Safe & Recovery · Engage & Monitor · Evolve & Educate) to design, implement, and audit secure, compliant, and reliable AI systems, agentic workflows, and application code. Validates against the official v2.1 control taxonomy (128 controls) and provides before/after security analysis with measurable GRC value. Use this skill whenever building, refactoring, reviewing, or deploying AI agents, automations, RAG systems, or AI-integrated infrastructure.
- ▌ Arch Lens Security · majiayu000 bundleCreate Security architecture diagram showing trust boundaries, validation layers, and process isolation. Security lens answering "Where are the trust boundaries?"
- ▌ Bugcrowd Reporting · majiayu000 bundleBugcrowd-specific reporting tactics complementing report-writing: VRT category search-and-fallback strategy when no exact match exists, manual severity override when VRT defaults underrate impact, severity-request paragraph as first body section, OOS-clause rebuttal templates (rate limiting on auth-flow endpoints, debug-info framing, user-enumeration with sensitive PII, theoretical-issue counter), chained-finding cross-reference patterns, target selection for QA-vs-prod programs, researcher-side hygiene (Bugcrowdninja email alias, account state restoration, friendly-tester posture). Use when filing a Bugcrowd submission, when VRT default seems wrong, when triager closes as OOS or downgrades severity, when chaining linked submissions, or when scope distinguishes production from QA. Pairs with report-writing and triage-validation.
- ▌ Campaign Architect · majiayu000 bundleUse when the user asks to "plan my paid account structure", "pick Search vs PMax", "lay out ad groups / asset groups", or "audit paid-vs-organic cannibalization"; designs campaign-type selection, ad-group/asset-group layout, targeting + match types, negative/exclusion hygiene, and a paid↔organic overlap audit, and scores the ROAS A (Audience) dimension + structure. Not for computing the final RQS — use ad-account-auditor; not for budget split — use budget-optimizer; not for organic site architecture — use internal-linking-optimizer. 付费广告账户结构/广告系列规划/否定关键词
- ▌ Capability Distill · majiayu000 bundle能力蒸馏工作流——从用户批准的强模型访谈或真实任务轨迹中提取非显然的判断规则,形成可审计的 judgment packet,再交给 skill-audit 和 skill-creator 决定是否落成可加载 skill。当用户说“蒸馏这个模型的判断力”“把这次任务的关键决策固化下来”“模型窗口要关了,保留它在某类场景的判断”时使用。普通流程文档、直接写 SKILL.md、泛化最佳实践或未授权的会话日志扫描不使用本 skill。
- ▌ Convex Clerk · majiayu000 bundleClerk authentication integration for Convex. Use when setting up Clerk auth, configuring ConvexProviderWithClerk, implementing Clerk webhooks for user sync, or troubleshooting Clerk-specific auth issues.
- ▌ Cyber Owasp Review · majiayu000 bundleMap application security findings to OWASP Top 10 categories and generate remediation checklists. Use for normalized AppSec review outputs and category-level prioritization.
- ▌ Datenpanne Meldung · majiayu000 bundleBegleitet Verantwortliche und Berater bei der Prüfung der Meldepflicht nach Art. 33 DSGVO (72-Stunden-Frist an Aufsichtsbehörde) und der Benachrichtigungspflicht nach Art. 34 DSGVO (betroffene Personen), einschließlich Dokumentation. Lädt bei Datenpannen, Sicherheitsvorfällen, unberechtigten Zugriffen und Datenverlust.
- ▌ Fedramp Compliance · majiayu000 bundleImplement FedRAMP requirements for federal cloud services. Configure NIST 800-53 controls and continuous monitoring. Use when providing cloud services to US federal agencies.
- ▌ Finding Discipline · majiayu000 bundleUse when about to record, claim, rate the severity of, or report any security finding — before marking anything [CONFIRMED] or writing it into the report
- ▌ Fix Security Audit · majiayu000 bundleFix security vulnerabilities from pip-audit, npm audit, Snyk, and other security scanners. Use when security audit checks fail with CVE warnings.
- ▌ Full Investigation · majiayu000 bundleComplete Tier 2 investigation workflow. Orchestrates deep investigation of escalated cases: deep-dive-ioc, correlate-ioc, specialized triage (malware/login), pivot-on-ioc, and generate comprehensive report. Use for escalated cases requiring thorough analysis.
- ▌ Gathering Security · majiayu000 bundleThe drum sounds. Spider, Raccoon, and Turtle gather for complete security work. Use when implementing auth, auditing security, or hardening code end-to-end.