majiayu000
- 75k skills
- 0 followers
- 567 repo stars
- 3 weeks ago last updated
- ▌ AI Red Teaming · majiayu000 bundleRun structured AI red team exercises for jailbreak resistance, data exfiltration risk, harmful output controls, and agent tool abuse resilience.
- ▌ Aminet Scanner · majiayu000 bundleMulti-layer virus scanning for Aminet packages. Signature-based detection, heuristic hunk analysis, boot block scanning, quarantine management, and scan orchestration. Use when scanning packages, checking virus status, or managing quarantine.
- ▌ API Auth Clerk · majiayu000 bundleClerk managed authentication - ClerkProvider, middleware, pre-built components, hooks, server-side auth, organizations, webhooks
- ▌ Authentication · majiayu000 bundleAuthentication and authorization including JWT, OAuth2, sessions, and RBAC. Activate for login, auth flows, security, access control, and identity management.
- ▌ AWS Cloudtrail · majiayu000 bundleConfigure AWS CloudTrail for audit logging. Set up organization trails and event analysis. Use when auditing AWS activity.
- ▌ Azure Keyvault · majiayu000 bundleManage secrets and certificates in Azure Key Vault. Configure access policies, integrate with Azure services, and implement secure secret management. Use when managing secrets in Azure environments.
- ▌ Azure Security · majiayu000 bundleExpert knowledge for Azure Security development including troubleshooting, best practices, decision making, security, configuration, integrations & coding patterns, and deployment. Use when securing AKS images, SBOM/Notation workflows, antimalware/firewalls, Customer Lockbox, or CMK/Key Vault, and other Azure Security related development tasks. Not for Azure Defender For Cloud (use azure-defender-for-cloud), Azure Firewall (use azure-firewall), Azure DDos Protection (use azure-ddos-protection), Azure Web Application Firewall (use azure-web-application-firewall).
- ▌ Azure Sentinel · majiayu000 bundleExpert knowledge for Azure Sentinel development including troubleshooting, best practices, decision making, architecture & design patterns, limits & quotas, security, configuration, integrations & coding patterns, and deployment. Use when configuring Sentinel data ingestion, analytics rules, UEBA, SOAR automation, SAP/AWS/GCP connectors, or ASIM, and other Azure Sentinel related development tasks. Not for Azure Defender For Cloud (use azure-defender-for-cloud), Azure Security (use azure-security), Azure Monitor (use azure-monitor), Azure Network Watcher (use azure-network-watcher).
- ▌ Bb Methodology · majiayu000 bundleUse at the START of any bug bounty hunting session, when switching targets, or when feeling lost about what to do next. Master orchestrator that combines the 5-phase non-linear hunting workflow with the critical thinking framework (developer psychology, anomaly detection, What-If experiments). Routes to all other skills based on current hunting phase. Also use when asking "what should I do next" or "where am I in the process."
- ▌ Better T Stack · majiayu000 bundlePatterns and best practices for Better-T-Stack projects (TanStack Router, Hono, Drizzle, tRPC, Better Auth)
- ▌
- ▌ Cis Benchmarks · majiayu000 bundleAudit and remediate CIS benchmark violations. Use automated tools to assess compliance and implement hardening recommendations. Use when meeting compliance requirements or implementing security baselines.
- ▌ Coding Mastery · majiayu000 bundleAdvanced software engineering — systems programming, exploit development tooling, automation scripting, network programming, cryptography implementation
- ▌ Cyber Security · majiayu000 bundleVulnerability assessment, defensive programming, and attack prevention
- ▌ Data Poisoning · majiayu000 bundleTest AI training pipelines for data poisoning vulnerabilities and backdoor injection
- ▌ Diagnose Leaks · majiayu000 bundleDebug and verify the three-layer defense against internal content leaking into user-visible messages.
- ▌
- ▌
- ▌ Entra Agent Id · majiayu000 bundleMicrosoft Entra Agent ID (preview) for creating OAuth2-capable AI agent identities via Microsoft Graph beta API. Covers Agent Identity Blueprints, BlueprintPrincipals, Agent Identities, required permissions, sponsors, and Workload Identity Federation. Triggers: "agent identity", "agent id", "Agen...
- ▌ File Organizer · majiayu000 bundleComprehensive file organization workflow for SORT/ directory. Validates filenames, renames to CLAUDE.md standards, relocates to correct directories, runs OPSEC agents, and generates detailed reports. Main orchestrator for automated file organization pipeline.
- ▌ GCP Audit Logs · majiayu000 bundleConfigure GCP Cloud Audit Logs for compliance. Set up log routing and BigQuery analysis. Use when auditing GCP activity.
- ▌ Hunt Ntlm Info · majiayu000 bundleHunt NTLM/Negotiate information disclosure on internet-reachable IIS/SharePoint/Exchange. Anonymous NTLM Type-2 challenge capture leaks NetBIOS domain, internal DNS forest, computer name, AD timestamp via AV_PAIRS structure. Default Windows-installer hostnames (WIN-XXXXXXXXXXX pattern) signal lazy provisioning. Use when target advertises `WWW-Authenticate: NTLM` or `Negotiate` headers anonymously.
- ▌ Hunt Websocket · majiayu000 bundleHunt WebSocket vulnerabilities — Cross-Site WebSocket Hijacking (CSWSH), missing authentication on WS handshake, message tampering, event authorization bypass, WS→HTTP request smuggling. Use when target has WebSocket endpoints (ws:// or wss://), real-time features, chat, live dashboard, or trading platforms.
- ▌ Initial Access · majiayu000 bundleModern initial access techniques — phishing, payload delivery, HTML smuggling, ISO/IMG bypass, supply chain attacks, credential stuffing, exposed service exploitation
- ▌ JWT Middleware · majiayu000 bundlePurpose: Generate JWT verification middleware for FastAPI that validates Better Auth tokens.
- ▌ Keycloak Expert · majiayu000 bundleExpert guidance on Keycloak identity and access management, including ABAC (Attribute-Based Access Control), OIDC/OAuth2 flows, realm/client configuration, identity provider integration (Azure AD), custom SPI providers, and Configuration as Code. Use this skill when working with: Keycloak realm setup, client configuration, role management, authorization services, ABAC policies/resources/scopes/permissions, UMA protocol, RPT tokens, policy evaluation, Azure AD federation, group-to-role mapping, custom protocol mappers, username mappers, fluent builder APIs for Keycloak configuration, OpenShift/Kubernetes operator deployment, Spring Security + Keycloak integration, NextAuth.js + Keycloak, or any Keycloak administration and development tasks.
- ▌
- ▌ Manage Headers · majiayu000 bundleInspects and configures the security headers a Power Pages site sends to browsers — Content Security Policy, frame and clickjacking protection, cross-origin sharing, cookie behavior, and related site settings. Identifies gaps and walks the user through fixes. Use when the user wants to review headers, fix CSP errors, allow embedding in another site, control cross-origin access, harden cookie settings, or asks "are my browser settings safe?", "fix my CSP", "set up CORS" — even if they only mention a specific header name without saying "security headers".
- ▌ Manage Secrets · majiayu000 bundleAudit, sync, verify, and push secrets for Fenrir Ledger. Use this skill whenever dealing with secrets — API keys, tokens, K8s secrets, GitHub secrets, .env files. NEVER manage secrets manually.
- ▌ Mobile Pentest · majiayu000 bundleMobile application penetration testing — Android/iOS static/dynamic analysis, Frida instrumentation, SSL pinning bypass, root/jailbreak detection bypass, deep-link abuse, exported components, insecure storage, biometric bypass
- ▌ Network Attack · majiayu000 bundleNetwork penetration testing — lateral movement, pivoting, protocol attacks, traffic interception, Active Directory exploitation, wireless attacks
- ▌ Network Policy · majiayu000 bundleManage Cilium network policies: profile selection, access labels, Hubble debugging, platform namespace CNPs, and emergency escape hatch procedures. Use when: (1) Deploying a new application and setting network profile, (2) Debugging blocked traffic with Hubble, (3) Adding shared resource access, (4) Creating platform namespace CNPs, (5) Using the escape hatch for emergencies, (6) Verifying network policy enforcement. Triggers: "network policy", "hubble", "dropped traffic", "cilium", "blocked traffic", "network profile", "access label", "escape hatch", "cnp", "ccnp"
- ▌ OAUTH Patterns · majiayu000 bundleOIDC flows, PKCE implementation, token refresh strategies, social login integration, and secure session management.
- ▌ Prompt Hacking · majiayu000 bundleAdvanced prompt manipulation including direct attacks, indirect injection, and multi-turn exploitation
- ▌ Sdd Guardrails · majiayu000 bundleAIエージェント向けガードレール定義(guardrails.md)を生成。権限境界・承認ゲート・監査証跡・エラー処理ポリシーを含む。
- ▌ Sec Compliance · majiayu000 bundleSEC 2025 compliance validation for investment recommendations. Use when generating, reviewing, or auditing stock recommendations to ensure proper disclosures, audit trails, and regulatory requirements are met. Trigger on any recommendation generation or compliance review task.
- ▌ Security Agent · majiayu000 bundleDeep security analysis with high reasoning effort for threat detection
- ▌ Security Audit · majiayu000 bundleAgent Skill: Security audit patterns for PHP/OWASP. Use when conducting security assessments, identifying vulnerabilities (XXE, SQL injection, XSS), or CVSS scoring. By Netresearch.
- ▌ Security Setup · majiayu000 bundleConfigure and manage Claude Code security protections for sensitive files, credentials, and data. Use when the user invokes /security-setup to set up or modify protections against unauthorized file access, credential exposure, or sensitive data leaks.
- ▌ Security Skill · majiayu000 bundleApplication security patterns - authentication, secrets management, input validation, OWASP Top 10. Use when: auth, JWT, secrets, API keys, SQL injection, XSS, CSRF, RLS, security audit, pen testing basics.
- ▌ Sf Permissions · majiayu000 bundleManage and audit Salesforce permissions: Permission Sets, Profiles, Permission Set Groups, object/field-level security (CRUD/FLS), custom permissions, and access troubleshooting. Use when asked about "who has access", permission set creation, FLS auditing, access errors, permission comparison, or muting permission sets. Activate on mentions of "permission set", "profile permissions", "field-level security", "FLS", "CRUD access", "permission set group", "INSUFFICIENT_ACCESS", or "custom permission".
- ▌ Triage Malware · majiayu000 bundleTriage a suspected malicious file hash. Use when investigating malware alerts or suspicious files. Analyzes GTI file report, behavioral indicators, identifies affected hosts, enriches network IOCs, and recommends containment actions.
- ▌ Unsafe Checker · majiayu000 bundleUse when reviewing unsafe code or writing FFI. Keywords: unsafe, raw pointer, FFI, extern, transmute, *mut, *const, union, #[repr(C)], libc, std::ffi, MaybeUninit, NonNull, PhantomData, Send, Sync, SAFETY comment, soundness, undefined behavior, UB, how to call C functions, safe wrapper for unsafe code, when is unsafe necessary, memory layout, bindgen, cbindgen, CString, CStr, invariant, 安全抽象, 裸指针, 外部函数接口, 内存布局, 不安全代码, FFI 绑定, 未定义行为
- ▌ Midnight Core Concepts Zero Knowledge · majiayu000 bundleUse when asking about zero-knowledge proofs, ZK SNARKs, circuit compilation, witness data, prover/verifier roles, constraints, or how Midnight uses ZK for privacy.
- ▌ Capture Skill · majiayu000 bundleCapture learnings, patterns, or workflows from the current conversation into a new or existing skill. Use when the user wants to save what was learned, discovered, or built during a conversation as a reusable skill for future sessions.
- ▌ AI Skill Manager · majiayu000 bundleManage AI agent skills throughout their lifecycle - creating, structuring, optimizing, maintaining, versioning, and deprecating skills. Use when creating new skills, updating existing skills, optimizing token usage, managing skill quality, testing skill discovery, or following skill best practices.
- ▌ Authoring Skills · majiayu000 bundleUse when creating new skills, improving existing skills, or when the user requests help with skill authoring. Creates optimized Claude Code skills (SKILL.md files) following official best practices for descriptions, structure, content patterns, and validation.
- ▌ Ce Skill Creator · majiayu000 bundleCreate or refactor skills with precise triggers, reusable assets and references, and synchronized registry updates.
- ▌ Claude Md Doctor · majiayu000 bundleAudit and improve CLAUDE.md files. Use when rules aren't working, context is bloated, or after learning a lesson that should become a rule.
- ▌ Contribute Turbo · majiayu000 bundleSubmit turbo skill improvements back to the upstream repo. Adapts to repo mode: fork mode creates a PR, source mode pushes directly. Use when the user asks to "contribute to turbo", "submit turbo changes", "PR my skill changes", "contribute back", or "upstream my changes".
- ▌ Hook Scope Guide · majiayu000 bundleSelect hook scope (plugin, project, global) by audience. Use when authoring a hook.
- ▌ Janitor Discover · majiayu000 bundleFind new skills on GitHub or check a specific skill before installing. Use when the user wants to search for skills, evaluate a skill URL, check overlap with existing skills before installing, or compare a local skill against alternatives.
- ▌ Janitor Precheck · majiayu000 bundleCheck if a new skill overlaps with existing ones before installing. Deprecated alias — use /janitor-discover with a URL or path.
- ▌ Malo Find Skills · majiayu000 bundleHelps users discover and install agent skills when they ask questions like "how do I do X", "find a skill for X", "is there a skill that can...", or express interest in extending capabilities. This skill should be used when the user is looking for functionality that might exist as an installable skill.
- ▌ Marketplace Sync · majiayu000 bundleSynchronize marketplace permissions - generate wildcards, manage executor permissions, and migrate to executor pattern.
- ▌ MCP Doc Add Tool · majiayu000 bundleCreate a custom MCP tool for the documentation manifest. Guides the user through defining the tool's purpose, generating an action script with embedded data, computing the hash, and adding it to the manifest.
- ▌ Meta Adopt Skill · majiayu000 bundleReview and adopt an external skill into this workflow. Evaluates a skill from a URL, marketplace, or local path for compatibility, overlap, quality, and fit within the existing skill catalog. Use when the user wants to add a new skill, says "adopt skill", "install skill", "add this skill", "evaluate this skill", or invokes /meta-adopt-skill. Does NOT trigger automatically.
- ▌
- ▌ Opencode Command · majiayu000 bundleUse this skill when creating, modifying, or understanding OpenCode commands stored in `~/.config/opencode/command/`.
- ▌ Pm Skill Creator · majiayu000 bundleDesign a new PM skill through guided conversation. Use when you have raw content or an idea and want to shape it into a compliant skill.
- ▌ Registry Manager · majiayu000 bundleMaintain the skills registry by scanning installed skills and updating skills.json. Use when adding, removing, or auditing skills.
- ▌ Skill Activation · majiayu000 bundleInternal metacognitive skill for automatic capability discovery — self-triggers when uncertain about available skills
- ▌ Skill Creator Jp · majiayu000 bundleCreate new Claude Code Agent Skills in Japanese with proper SKILL.md format, trigger design, and evaluation methods. Triggers on requests for スキル作成, 新しいスキルを作る, SKILL.md作成, Agent Skill テンプレート, スキルの書き方.
- ▌ Skill Forge Plan · majiayu000 bundleArchitecture and design planning for new Claude Code skills. Guides through use case definition, complexity tier selection, sub-skill decomposition, and file structure planning. Use when user says "plan skill", "design skill", "skill architecture", or "skill planning".
- ▌ Skills Discovery · majiayu000 bundleSearch for and install Agent Skills that give you specialized capabilities. Before starting work, ask might a skill exist that handles this better than my base knowledge? If the task involves specific technologies, frameworks, file formats, or expert domains. Search proactively, even if the user doesn't mention skills. Skills encode best practices, tools, and techniques you wouldn't otherwise have. Also use when users explicitly ask to find, install, or manage skills.
- ▌ Skillsmp Browser · majiayu000 bundleBrowse and compare skills from SkillsMP and Anthropic's official repo. Use when user says 'browse skills', 'skillsmp', 'find skills', or 'skill marketplace'.
- ▌ Tool Find Skills · majiayu000 bundleHelps users discover and install agent skills when they ask questions like "how do I do X", "find a skill for X", "is there a skill that can...", or express interest in extending capabilities. This skill should be used when the user is looking for functionality that might exist as an installable skill.
- ▌ Update Framework · majiayu000 bundleSync entire framework (Pillars, Rules, Workflow, Skills) in one command - meta-skill orchestrating all update-* skills. TRIGGER when: user wants complete framework sync ("update framework from X", "sync entire framework", "pull all from framework", "upgrade framework"). DO NOT TRIGGER when: user wants specific components only (use /update-pillars, /update-rules, /update-workflow, /update-skills), or just wants to read framework docs.
- ▌ Validate And Fix · majiayu000 bundleRun validation, parse errors, and auto-fix common skill issues like description format, orphan files, and naming mismatches
- ▌ Writing Commands · majiayu000 bundleUse when creating new commands, editing existing commands, or reviewing command quality. Triggers on "write command", "new command", "review command", "fix command"
- ▌ Computer Control · majiayu000 bundleAutomates desktop GUI workflows via computer use API with screenshot capture. Use when scripting GUI interactions or recording browser sessions for tutorials.
- ▌ Linux Networking · majiayu000 bundlenetplan/ip, ufw/nftables firewall, DNS, VPN Wireguard/Tailscale, inter-instance routing System76
- ▌ Macos Networking · majiayu000 bundleWiFi/Ethernet, DNS, proxy, VPN Tailscale, airport CLI, pfctl firewall
- ▌ Managing Chezmoi · majiayu000 bundleManage dotfiles with chezmoi. Use when adding files to chezmoi, running chezmoi add/apply/diff/status, debugging why changes aren't appearing, working with chezmoi templates or .chezmoiignore, understanding source vs target files, resolving merge conflicts, or asking "how do I manage this file with chezmoi". For chezmoi command uncertainties, use Context7 to fetch latest docs.
- ▌ Optimize Network · majiayu000 bundleSafely diagnose and improve local network speed, latency, jitter, DNS, Wi-Fi, Ethernet, macOS network services, and bufferbloat. Use this skill whenever the user asks to optimize internet/network speed, make the network faster, diagnose slow Wi-Fi, latency, packet loss, DNS delay, unstable Codex/AI tool connectivity, or asks about the viral Codex network optimization workflow. Always protect VPN/proxy tools such as Clash Verge, Mihomo, Shadowrocket, Tailscale, V2Ray, Surge, and corporate VPNs; do not modify or disable them unless the user explicitly asks for that specific change.
- ▌ Ac Verification · majiayu000 bundleVerify that implemented code meets acceptance criteria from user stories. Use when validating story completion - performs code inspection, test execution, and manual checks against each AC criterion.
- ▌ Vibe Acceptance Gate · majiayu000 bundleValidates completed work against defined acceptance criteria. Use after completing a task that has specific success criteria defined in issues, specs, or task descriptions.
- ▌ Acp Conformance · majiayu000 bundleValidate an ACP implementation against the protocol specification — schema validation, flow testing, error handling, idempotency, security checks, and production readiness. Use when preparing for launch or certifying compliance.
- ▌ Add Data Testid · majiayu000 bundleSystematically add data-testid attributes to Vue components for UI test automation
- ▌ Af Tdd Workflow · majiayu000 bundleFollow the TDD Red-Green-Refactor cycle during feature implementation. Use when implementing features test-first, converting BDD scenarios to failing tests, or following the delivery phase implementation pattern.
- ▌ AI Agent Skills · majiayu000 bundleHere’s a complete breakdown of how to configure and set up the Scoring Skill in raiaAI’s Launch Pad. This skill allows your AI agent to evaluate the quality of its conversations and assign a Conversation Score ranging from 0 to 10—helping you measure effectiveness, identify issues, and improve agent performance.
- ▌ AI Talking Head · majiayu000 bundleSpecialized skill for AI talking head and lip-sync video generation. Use when you need presenter videos, UGC-style content, or lip-synced avatars. Triggers on: talking head, presenter video, lip sync, UGC video. Outputs professional talking head videos.
- ▌ Angular Testing · majiayu000 bundleUse when writing unit tests for Angular components, services, pipes, or directives. Triggers on requests to "write tests", "add tests", "create spec", "test this component", or when test files need to be created/modified.
- ▌ API Integration · majiayu000 bundleConnect to REST APIs, handle authentication, and process JSON responses
- ▌ Wikilink Apply · majiayu000 bundleApply wikilink suggestions to current or specified note. Triggers on "apply wikilinks", "add wikilinks", "wikilink this note".
- ▌ Authoring Tests · majiayu000 bundleUse when writing, reviewing, or modifying any test files, or when asked to add test coverage.
- ▌ Auto Test Skill · majiayu000 bundle当用户明确要求"测试技能"、"运行 auto-test"或"进行批判性测试"时使用。通过多轮 A 轮批判性测试 + B 轮质量原则检查，系统化发现、记录、修复问题，并沉淀可追溯的 `plans/` 与 `tests/` 文档。⚠️ 不适用：用户只是想优化功能（应直接修改）、只是询问技能问题（应直接回答）、没有明确"测试"意图。
- ▌ Biostatistician · majiayu000 bundleStatistical review agent that ensures accuracy of statistical methods and results reporting. Validates test selection, assumption checking, and proper interpretation. Invoked during Methods and Results drafting. Use when statistical rigor is critical.
- ▌ Bogus Fake Data · majiayu000 bundle協助使用 Bogus 假資料產生函式庫在 .NET 測試中產生真實感的測試資料。當使用者需要產生擬真的姓名、地址、電話、公司資訊等測試資料，或需要多語言支援的測試資料時，請使用此技能。
- ▌ Btc Trading Bot · majiayu000 bundleBitcoin trading simulation with technical analysis (EMA/RSI/Bollinger), Monte Carlo projections, and Telegram alerts. Cambodian market focus (USD/KHR 4050). TRIGGERS: BTC backtesting, indicator calculations, Fear & Greed integration, crypto strategy development, CoinGecko/Alternative.me APIs, portfolio simulation, trailing stop optimization, Sharpe/drawdown metrics. ENTRY POINTS: btc_trader.py (365d backtest), btc_simulation.py (60d Monte Carlo), backtest_runner.py (advanced metrics).
- ▌ Capi Test Fixer · majiayu000 bundleThis skill should be used when the user asks to "C API test failures", "C API unit test issues", "modifier tests failing", "undefined symbol in C API tests", "ARKUI_CAPI_UNITTEST compilation errors", "Converter API issues in tests", "test build configuration problems", "fix C API interface test failures", "capi test fix", "modifier test fix", or mentions fixing C API unit test failures in OpenHarmony ACE Engine. Automatically diagnoses and fixes common C API unit test failures including missing static modifiers, incorrect Converter API usage, and test build configuration issues.
- ▌ Ce Test Creator · majiayu000 bundleDesign tests to close documented coverage gaps identified by gap analysis, without padding. Adapts recommendations for Option A/B/C in the Test Quality Method. Use ce-test-author to write tests for already-known targets.
- ▌
- ▌ Coverage Report · majiayu000 bundleGenerate code coverage reports. Supports Vitest (--unit-only), Playwright E2E (--e2e-only), and combined (default) modes. Outputs HTML + text-summary + LCOV reports. Includes automatic overlap analysis and coverage gap detection.
- ▌ Crypto Research · majiayu000 bundleComprehensive cryptocurrency market research and analysis using specialized AI agents. Analyzes market data, price trends, news sentiment, technical indicators, macro correlations, and investment opportunities. Use when researching cryptocurrencies, analyzing crypto markets, evaluating digital assets, or investigating blockchain projects like Bitcoin, Ethereum, Solana, etc.
- ▌ Cypress Testing · majiayu000 bundleUse this skill when writing Cypress e2e or component tests, creating custom commands, intercepting network requests, or integrating Cypress in CI. Triggers on Cypress, cy.get, cy.intercept, cypress component testing, custom commands, fixtures, cypress-cucumber, and any task requiring Cypress test automation.
- ▌ Database Design · majiayu000 bundleGuidelines for designing, implementing, and maintaining high-quality data models, ensuring data integrity, performance, and scalability.
- ▌ Designing Cases · majiayu000 bundleWrites detailed test cases from a test plan, reviews quality, and publishes a test case page to Confluence. Use when a QA engineer wants to design cases, create test cases, write test cases, or expand test scenarios into detailed steps.
- ▌ Dev Tdd Backend · majiayu000 bundleTest-driven development workflow for C#/.NET using xUnit, NSubstitute, and event sourcing (EventSourcing). Covers aggregate testing, specification testing, projection testing, and proper test isolation. Invoked via /dev-tdd (unified entry point) — not directly.
- ▌ E2e UI Research · majiayu000 bundleResearch UI E2E test targets and generate test scenario documentation. Use to analyze a frontend app and create comprehensive E2E test plans.