majiayu000
- 75k skills
- 0 followers
- 567 repo stars
- 3 weeks ago last updated
- ▌ Project Health · majiayu000 bundleAI-agent readiness auditing for project documentation and workflows. Evaluates whether future Claude Code sessions can understand docs, execute workflows literally, and resume work effectively. Use when onboarding AI agents to a project or ensuring context continuity. Includes three specialized agents: context-auditor (AI-readability), workflow-validator (process executability), handoff-checker (session continuity). Use PROACTIVELY before handing off projects to other AI sessions or team members.
- ▌ Project Review · majiayu000 bundleComplete project health check: verify tests, documentation, database snapshots, migration progress, and suggest next steps. Run after completing any task or iteration.
- ▌ Quality Update · majiayu000 bundleIncrementally implement code quality improvements from docs/quality_review.md with tests and atomic commits. Run after /review-for-quality to apply fixes.
- ▌ Remote Offload · majiayu000 bundleUse when local resource pressure would shrink or coordinator-direct a wave, a wave plan carries heavy build/test/audit roles (test, ui, perf), or the operator says offload, remote host, or auslagern — reference for routing that wave role to a declared SSH-reachable host instead of reducing agent count
- ▌ Review Process · majiayu000 bundleAudit a Zeebe BPMN process and its glue-code (workers, process adapter, tests) for consistency and coverage, producing a structured report written to `.claude/temp/`. Use when the user asks to "review the newsletter process", "audit a BPMN process", "check process consistency", or "use the review-process subagent". Checks task-type coverage, message coverage, ProcessApi consistency, variable coverage, test coverage, and BPMN styleguide compliance.
- ▌ Review Quality · majiayu000 bundleAnalyze code for cross-file quality issues: duplicated logic, architectural inconsistencies, and abstraction opportunities. Returns structured findings without applying fixes. Use when the user asks to "review quality", "check for duplication across files", "find architectural inconsistencies", "cross-file quality review", or "review code quality".
- ▌ Review Release · majiayu000 bundlePre-release readiness review. Scans for debug artifacts, version mismatches, changelog gaps, git hygiene issues, breaking changes, and license compliance. Runs tests and build verification. Presents consolidated findings for human review before release.
- ▌ Review Reviews · majiayu000 bundleMeta-audit all review skills for stale references, drifted architecture claims, and cross-skill inconsistencies
- ▌
- ▌ Reviewing Code · majiayu000 bundleUse this skill when reviewing pull requests, branch changes, or code diffs. Triggers on "review this PR", "review my changes", "code review", "review branch", or when user shares a GitHub PR URL.
- ▌ Safari Explore · majiayu000 bundleGet in the jeep and drive across the savanna, stopping at each item in a collection to observe, document, and design improvements. The immersive, adventure-driven way to systematically review and polish a set of related things. Use when auditing, reviewing, or planning polish for a group of pages, components, curios, endpoints, or anything with N items to visit.
- ▌ Sonarcloud API · majiayu000 bundleExpert guidance for using the SonarCloud API to interact with code quality analysis, projects, issues, quality gates, and metrics. Use this skill when making API calls to SonarCloud, automating code quality workflows, retrieving analysis results, managing projects programmatically, or integrating SonarCloud with CI/CD pipelines. Trigger keywords include "SonarCloud", "SonarCloud API", "code quality API", "SonarQube Cloud", "quality gate", "code analysis API", "SonarCloud measures", "SonarCloud issues".
- ▌ System Cleaner · majiayu000 bundlePAL system housekeeping audits. USE WHEN audit system, check references, validate naming, find orphans, health report, system health, clean system. AgentSearch('system-cleaner') for docs.
- ▌ Task Completer · majiayu000 bundleUse when finishing a task - moves task to completed/, updates project_state.md, suggests next task. Trigger: 'finish task', 'done with task', 'move to completed'. MUST run ALL 5 quality gates. BLOCK completion if gates fail. Never skip gates.
- ▌ Team Tech Debt · majiayu000 bundleSystematic tech debt governance with CSV wave pipeline. Scans codebase for tech debt across 5 dimensions, assesses severity with priority matrix, plans phased remediation, executes fixes in worktree, validates with 4-layer checks. Supports scan/remediate/targeted pipeline modes with fix-verify GC loop.
- ▌ Tools Bug Scan · majiayu000 bundleRun the repository-native bug scanner (`pnpm bug-scan` / `pnpm bug-scan:changed`), summarize findings by severity and rule, and propose concrete next fixes or targeted rescans.
- ▌ Urdf Validator Fixer · majiayu000 bundlePre-import validation and auto-fix for URDF files targeting Isaac Sim / USD
- ▌ Vaf Redline QA · majiayu000 bundlePrüft Redline- und Track-Changes-Fassungen auf Vollständigkeit, Lesbarkeit, versteckte Änderungen, Formatbrüche und ungeklärte Klauselentscheidungen.
- ▌ Validate Chalk · majiayu000 bundleValidate chalk.json schema and docs completeness — check that project context is sufficient for skills to operate
- ▌ Validate Chunk · majiayu000 bundleEnforcement layer for chunk and story validation. Invokes the chunk-validator agent (haiku), enforces the verdict, routes failures to refine-chunk or test-fix, captures CLI learnings. The orchestrator invokes this skill — never the agent directly.
- ▌ Verify Sources · majiayu000 bundleCaptures human source verification for tracks, timestamps it, and updates track files. Use when sources need human review before generation.
- ▌ Ato Chains · majiayu000 bundleHunt full Account Takeover (ATO) by chaining lower-severity findings — IDOR-to-email-disclosure, password-reset-token-theft, OAuth-redirect-uri abuse, response-manipulation, cookie scope, CRLF in Set-Cookie, race-condition on signup. Use when the user wants to escalate small findings to ATO or thinks an ATO path exists.
- ▌ OAUTH Oidc · majiayu000 bundleHunt OAuth 2.0 and OIDC flaws — redirect_uri abuse, state CSRF, PKCE bypass, scope manipulation, implicit-flow token theft, postMessage origin tricks, ID token sub claim swap, JWKS confusion, response_type confusion, and OAuth-CSRF. Use when an app has Google/GitHub/Facebook/Apple/custom OAuth or OpenID Connect.
- ▌ Access Review · majiayu000 bundleConduct periodic access reviews and certifications. Implement access governance and recertification workflows. Use when managing access compliance.
- ▌ Annualreports · majiayu000 bundleAnnual security report aggregation and analysis. USE WHEN annual reports, security reports, threat reports, industry reports, update reports, analyze reports, vendor reports, threat landscape.
- ▌ Audit Logging · majiayu000 bundleImplement comprehensive audit logging for all admin actions, capturing user ID, action type, entity changes, IP address, and user agent. Use when tracking system activities or adding audit trails.
- ▌ Auth Scaffold · majiayu000 bundle> Generate Complete Auth System: Login, register, forgot password, and session management.
- ▌ Authjs Skills · majiayu000 bundleAuth.js v5 setup for Next.js authentication including Google OAuth, credentials provider, environment configuration, and core API integration
- ▌ Azure Bastion · majiayu000 bundleExpert knowledge for Azure Bastion development including troubleshooting, best practices, decision making, architecture & design patterns, security, configuration, and integrations & coding patterns. Use when using Bastion with AKS private clusters, VM scale sets, IP-based access, Kerberos, or hub/spoke VNets, and other Azure Bastion related development tasks. Not for Azure Virtual Network (use azure-virtual-network), Azure Virtual Machines (use azure-virtual-machines), Azure VPN Gateway (use azure-vpn-gateway), Azure Firewall (use azure-firewall).
- ▌
- ▌ Ca Checkpoint · majiayu000 bundlePeriodic multi-reviewer sweep of the whole codebase — surfaces a triaged checkpoint report.
- ▌ Cmmc Assessor · majiayu000 bundleAssess CMMC Level 2/3 compliance by mapping NIST SP 800-171 controls to Embry OS features and detected configurations. Generates gap analysis reports.
- ▌ Command Guard · majiayu000 bundleClaude Code runs shell commands, edits files, and manages infrastructure with real consequences. Without guardrails, a misunderstood instruction or a hallucinated flag can delete data, corrupt history, or expose credentials. This skill installs a PreToolUse hook that blocks the most dangerous operations before they run.
- ▌ Correlate Ioc · majiayu000 bundleCheck for existing SIEM alerts and case management entries related to IOCs. Use to understand if an indicator has triggered previous alerts or is part of ongoing investigations. Takes IOC list and returns related alerts and cases.
- ▌ Cybersecurity · majiayu000 bundleOSS-only security for OWASP Top 10, pentest, vuln testing (XSS, SSRF, CSRF, business-logic, Host header), threat modeling (STRIDE, ATT&CK), Sigma rules, SAST, code audit, AI/LLM red-team, or replacing paid tools (Burp, Nessus, Splunk) with OSS.
- ▌ Dast Scanning · majiayu000 bundlePerform dynamic application security testing with OWASP ZAP, Burp Suite, and Nikto. Test running applications for security vulnerabilities through automated and manual testing. Use when testing web applications, APIs, or performing penetration testing.
- ▌ Debian Ubuntu · majiayu000 bundle· Administer Debian/Ubuntu/Mint/Pop: apt, dpkg, PPAs, snaps, systemd, GRUB, HWE, desktop. Triggers: 'debian', 'ubuntu', 'mint', 'popos', 'apt', 'dpkg', 'ppa'. Not for Arch/Fedora/NixOS.
- ▌ Deep Dive Ioc · majiayu000 bundlePerform exhaustive analysis of a critical IOC. Use when an IOC needs Tier 2+ investigation beyond basic enrichment - includes GTI pivoting, deep SIEM searches, correlation with related entities, and threat attribution. For escalated IOCs requiring comprehensive investigation.
- ▌ Frontend Auth · majiayu000 bundlePurpose: Guidance for implementing authentication flows using Better Auth and JWT token management.
- ▌ Github Secure · majiayu000 bundleConfigure GitHub repository security with branch protection, Dependabot, security scanning, and CI workflows. Integrates with mern-scaffold, nean-scaffold, and iOS projects.
- ▌ Llvm Security · majiayu000 bundleExpertise in LLVM security features including sanitizers, hardening techniques, exploit mitigations, and secure compilation. Use this skill when implementing security-focused compiler features, analyzing vulnerabilities, or hardening applications.
- ▌ Mail Security · majiayu000 bundleFind security-related emails — login alerts, 2FA changes, password resets, new device notifications, suspicious activity, and account security events across all accounts. Use when user asks about security alerts in their email, account access notifications, or wants to review security events. Arguments: optional time range or account/service filter.
- ▌ Malware Check · majiayu000 bundleAnalyze code, binaries (.exe, .app, .dll, .apk, .ipa), and projects for malicious patterns, backdoors, reverse shells, crypto miners, ransomware, supply chain attacks, and privacy violations. Use this skill whenever the user asks to check if code is malicious, scan a binary for malware, verify an app is safe, audit code security, detect obfuscated payloads, analyze a suspicious file, or review a project for backdoors. Also use when the user mentions "is this safe", "check for malware", "scan this binary", "is this app malicious", "security scan", or "malware analysis".
- ▌ MCP Installer · majiayu000 bundleFind, install, and configure Model Context Protocol (MCP) servers for OpenCode. Use when user asks about finding MCP servers, installing them, configuring OAuth, or troubleshooting MCP issues.
- ▌ Moai Security · majiayu000 bundleAuth0 security specialist covering attack protection, multi-factor authentication, token security, sender constraining, and compliance. Use when implementing Auth0 security features, configuring attack defenses, setting up MFA, or meeting regulatory requirements.
- ▌ Rust Security · majiayu000 bundleRust security best practices and vulnerability prevention. Use when handling user input, authentication, cryptography, secrets management, network security, or conducting security reviews.
- ▌ Semantic Grep · majiayu000 bundleRun a Semgrep scan with automatic language detection, parallel execution, and structured triage. Uses Semgrep Pro for cross-file taint analysis when available.
- ▌ Shellcode Dev · majiayu000 bundleShellcode development — PIC techniques, PEB walking, API hashing, null-byte avoidance, encoders, loaders, PE-to-shellcode conversion, cross-platform shellcode
- ▌ Tool Security · majiayu000 bundleMCPツールとAPI統合のセキュリティ設計を体系化するスキル。 脅威整理、制御設計、設定検証を通じて安全なツール運用を支援する。 Anchors: • Web Application Security / 適用: 脅威モデリング / 目的: 攻撃面の整理 • OWASP ASVS / 適用: セキュリティ要件 / 目的: 制御の網羅性 Trigger: Use when designing tool security controls, validating security configs, or reviewing secrets handling. tool security, threat modeling, config validation
- ▌ Unsafe Review · majiayu000 bundleComprehensive review of unsafe code — audits safety invariants, demands benchmark+ASM proof of performance benefit, and verifies Miri/Kani/fuzz/property test coverage for every unsafe block
- ▌ Vercel Harden · majiayu000 bundleHarden a Vercel deployment with security headers, CSP, bot protection, and deployment configuration
- ▌ Web3 Security · majiayu000 bundleGuide for Web3 and blockchain security research including smart contract auditing, DeFi vulnerabilities, and blockchain gaming security. Use this skill when working with Solidity, smart contract analysis, or blockchain-based game security.
- ▌ Zero Sentinel · majiayu000 bundleRevisor de Código Proativo e Guardião de Segurança. Analisa mudanças para detectar bugs, falhas de segurança e violações arquiteturais.
- ▌ Assemble Skills · majiayu000 bundleQuery the skills.sh registry for skills matching identified capability gaps. Presents top 3 HIGHLY RELEVANT matches only, waits for user approval before installation. Be conservative - only suggest skills that are clearly needed.
- ▌ Cartridge Forge · majiayu000 bundleUse when the user asks to forge, scaffold, or author a new cartridge — content cartridge, department cartridge, or chipset bundle. Drives the cartridge-forge loop (scaffold → fill → gate checks → commit) via the skill-creator cartridge CLI.
- ▌
- ▌ Command Creator · majiayu000 bundleCreate Claude Code custom slash commands with proper structure, frontmatter, and best practices. Use this skill whenever the user wants to create a new command, add a slash command, build a custom command, or mentions "create-command", "new command", "add command", or "make a command" for Claude Code. Also trigger when the user wants to turn a workflow into a reusable command.
- ▌ Configure Forge · majiayu000 bundleGenerate workspace-level forge binding prompts and agents from workspace.config.yaml topology.
- ▌ Discover Skills · majiayu000 bundleDiscover available Agent skills. Use when users ask "what skills are available", "list skills", "show me skills", or want to browse installed skill capabilities.
- ▌ Explore Plugins · majiayu000 bundleDiscover and install useful Claude Code plugins for your project. Recommends based on your tech stack.
- ▌
- ▌ Meta Brainstorm · majiayu000 bundle在任何创作工作之前,你必须使用此流程 - 包括创建功能、构建组件、添加功能或修改行为。该流程在实现之前探索用户意图、需求和设计。
- ▌ New Valor Skill · majiayu000 bundleBuild a new Valor-specific tool following established patterns. Use when creating tools that integrate with Valor's Telegram bridge, use SOUL.md persona, or should be documented in CLAUDE.md. Guides through planning, implementation, testing, and documentation phases.
- ▌ Oc Create Skill · majiayu000 bundleGuides through creating a new OpenCode-compatible skill with interactive interview, best-practice enforcement, and validation. Use when user says "create opencode skill", "new opencode skill", "build skill for opencode", or wants to create an OpenCode SKILL.md file.
- ▌ Oc Update Skill · majiayu000 bundleUpdates an existing OpenCode skill to match current platform best practices, fixes deprecated patterns, and validates the result. Use when user says "update opencode skill", "fix opencode skill", "migrate skill to opencode", or wants to modernize an existing OpenCode SKILL.md file.
- ▌ Optimize Skills · majiayu000 bundleUse when creating or refining SKILL.md-based skills, or diagnosing weak triggering (under/over-triggering, vague descriptions, bloated context, or missing workflow guidance).
- ▌ Plugin Maintain · majiayu000 bundleComprehensive maintenance skill for marketplace components - update components, manage knowledge, maintain READMEs, restructure, and apply orchestration compliance
- ▌ Skill Analytics · majiayu000 bundleTrack skill usage patterns, most-used skills, token savings, and skill health metrics.
- ▌ Skill Bootstrap · majiayu000 bundleBootstrap new skills quickly from natural language descriptions. Use when you need to create a new skill fast, generate utility capabilities, or scaffold documentation. For critical discipline-enforcing skills, follow up with skill-hardening. Triggers on "create skill", "bootstrap skill", "new skill", "generate skill".
- ▌ Skill Conductor · majiayu000 bundleCreate, edit, evaluate, and package agent skills. Use when building a new skill from scratch, improving an existing skill, running evals to test a skill, benchmarking skill performance, optimizing a skill's description for better triggering, reviewing third-party skills for quality, or packaging skills for distribution. Not for using skills or general coding tasks.
- ▌ Skill Evolution · majiayu000 bundleAnalyze, evolve, and rollback skills based on usage patterns. Use when evolving skills, improving skill definitions, updating skill content.
- ▌ Skill Hardening · majiayu000 bundleBulletproof skills using Test-Driven Development. Use when creating discipline-enforcing skills, testing existing skills under pressure, or verifying skills work before deployment. Requires skill-bootstrap for initial creation. Triggers on "test skill", "harden skill", "bulletproof skill", "verify skill", "TDD for skills".
- ▌ Skill Iter Tune · majiayu000 bundleIterative skill tuning via execute-evaluate-improve feedback loop. Uses ccw cli Claude to execute skill, Gemini to evaluate quality, and Agent to apply improvements. Iterates until quality threshold or max iterations. Triggers on "skill iter tune", "iterative skill tuning", "tune skill".
- ▌ Skills Validate · majiayu000 bundleValidate skill files meet the standard format and naming conventions
- ▌ Skillsmp Search · majiayu000 bundleSearch SkillsMP marketplace for skills to fill gaps in local inventory. Use when user says 'search skillsmp', 'find skill on skillsmp', or when skill discovery identifies gaps.
- ▌ Using Superspec · majiayu000 bundleUse at the start of any conversation - establishes how to find and use SuperSpec skills. Combines development discipline with spec-driven documentation.
- ▌
- ▌
- ▌ Analyzing Logs · majiayu000 bundleAnalyzes Robot Framework test logs to identify failures, group them by type, and suggest fixes. Use when a QA engineer wants to analyze logs, check test logs, understand why tests failed, or investigate Robot Framework output files.
- ▌ Aspire Testing · majiayu000 bundle協助使用 .NET Aspire Testing 框架建立分散式應用的整合測試。當使用者要求建立 Aspire 測試、從 Testcontainers 遷移到 Aspire Testing、或需要測試雲原生 .NET 應用時使用此技能。
- ▌ Attack Mutator · majiayu000 bundleTest case mutation and variation generator for adversarial testing
- ▌ Build And Test · majiayu000 bundleBuild, test, and serve the documentation site using Zensical (recommended) or MkDocs.
- ▌ Ce Test Author · majiayu000 bundleWrite individual CE test cases for specified modules or behaviors using AAA structure, public-API focus, and coverage-gate discipline. Does NOT identify coverage gaps; use ce-test-creator for gap-driven test design.
- ▌
- ▌ Cookie Scanner · majiayu000 bundleAnalyze website cookie consent compliance by testing consent banner behavior. Use when asked to audit cookies, check GDPR/CCPA compliance, analyze tracking, or assess consent mechanisms on websites.
- ▌ Crucible Tests · majiayu000 bundleWrite unit tests using the Crucible test framework for Lean 4 projects. Use when creating tests, adding test files, or when the user mentions Crucible, unit tests, or testing Lean code.
- ▌ Ctx Performance · majiayu000 bundleAnalyze and optimize parallel workflow performance. Use when users report slow parallel execution, want to improve speed, or need performance analysis. Activate for questions about bottlenecks, time savings, optimization opportunities, or benchmarking parallel workflows.
- ▌ Data Scientist · majiayu000 bundleExpert data scientist specializing in statistical analysis, machine learning, and business insights. Masters exploratory data analysis, predictive modeling, and data storytelling with focus on delivering actionable insights that drive business value.
- ▌ E2e UI Execute · majiayu000 bundleImplement UI E2E tests sequentially using Playwright MCP, stop on bug discovery. Use after e2e-ui-research to implement the planned test scenarios.
- ▌ Elixir Testing · majiayu000 bundleGuide for writing comprehensive tests in Elixir using ExUnit, property-based testing, mocks, and test organization best practices
- ▌ Eval Framework · majiayu000 bundleFramework for capturing, storing, and comparing AI evaluations to measure consistency and completeness. Use when: comparing reviews, measuring evaluation quality, running reproducibility tests, auditing AI outputs, validating findings across runs. Triggers: "compare evaluations", "measure consistency", "evaluation framework", "reproducible review", "compare reviews", "validate findings", "audit evaluation".
- ▌ Exp Crap Score · majiayu000 bundleCalculates CRAP (Change Risk Anti-Patterns) score for .NET methods, classes, or files. Use when the user asks to assess test quality, identify risky untested code, compute CRAP scores, or evaluate whether complex methods have sufficient test coverage. Requires code coverage data (Cobertura XML) and cyclomatic complexity analysis. DO NOT USE FOR: writing tests, general test execution unrelated to coverage/CRAP analysis, or general code coverage reporting without CRAP context.
- ▌ Finwiz Testing · majiayu000 bundleFinWiz testing standards using pytest-mock. Use when writing tests, mocking dependencies, or fixing test failures. Includes unittest.mock ban enforcement and CrewAI testing patterns.
- ▌ Followup Tests · majiayu000 bundleEvaluate whether changes suggest new tests, modified tests, or new static analysis checks
- ▌ Furps Analysis · majiayu000 bundleFURPS+ model for categorizing and specifying non-functional requirements
- ▌ Implement Test · majiayu000 bundleImplement tests with production-quality coverage. Use when implementing test suites, adding test coverage, or building testing infrastructure.
- ▌ Isaac Patterns · majiayu000 bundleNVIDIA Isaac Sim and Isaac ROS integration patterns for Physical AI applications.
- ▌ Literate Tests · majiayu000 bundleThis skill should be used when the user asks to "create literate tests", "generate markdown tests", "specification-as-tests", "TDD with markdown", "agent-driven testing", or mentions test suites where markdown IS the test format. NOT for pytest/jest/unittest. Creates .md test files with inline assertions and uses a bundled custom test runner.
- ▌ Mern Unit Test · majiayu000 bundleRun MERN unit tests, report results, and optionally fix failures.
- ▌ Mtp Hot Reload · majiayu000 bundleSuggests using Microsoft Testing Platform (MTP) hot reload to iterate fixes on failing tests without rebuilding. Use when user says "hot reload tests", "iterate on test fix", "run tests without rebuilding", "speed up test loop", "fix test faster", or needs to set up MTP hot reload to rapidly iterate on test failures. Covers setup (NuGet package, environment variable, launchSettings.json) and the iterative workflow for fixing tests. DO NOT USE FOR: writing test code, diagnosing test failures, CI/CD pipeline configuration, or Visual Studio Test Explorer hot reload (which is a different feature).