majiayu000
- 75k skills
- 0 followers
- 567 repo stars
- 3 weeks ago last updated
- ▌ Pick My Brain · majiayu000 bundleUse when starting a new task, feature, or project where the user has domain knowledge the agent lacks, before planning sessions, or when requirements feel ambiguous and the agent would otherwise guess or make assumptions
- ▌ Plot Analysis · majiayu000 bundleComprehensive Polish plot evaluation with full due diligence (~20-30 min). Use when user wants deep analysis of a property listing after initial triage, or needs complete risk assessment for a finalist plot.
- ▌ Plot Workflow · majiayu000 bundleOrchestrate and coordinate one-click generation workflow for major plot points and detailed plot points. Suitable for structured analysis of long stories, complex tasks requiring modular agent collaboration
- ▌ Pov Expansion · majiayu000 bundleUse when seeking analogous solutions from other domains, when stuck on a problem and need fresh perspectives, or when evaluating whether approaches from field X might apply to field Y. Requires structured problem statement.
- ▌ Proof Checker · majiayu000 bundleRigorous mathematical proof verification and fixing workflow. Reads a LaTeX proof, identifies gaps via cross-model review (external reviewer backend, xhigh reasoning), fixes each gap with full derivations, re-reviews, and generates an audit report. Use when user says "检查证明", "verify proof", "proof check", "审证明", "check this proof", or wants rigorous mathematical verification of a theory paper.
- ▌ Retrospective · majiayu000 bundleStructured retrospective after completing a delivery increment or diamond. Captures learning for continuous improvement.
- ▌ Reverse Trace · majiayu000 bundleIdentify the source of an image or video frame — TV show episode, movie scene, geographic location, or original publication. This skill should be used when the user asks to identify where an image is from, trace a screenshot back to its source, geolocate a photo, find what show or movie a frame is from, or do a reverse image search. Chains Google Vision, Picarta geolocation, and Gemini in parallel with graceful degradation. Triggers on: reverse image search, identify source, what show is this, where was this taken, trace image, identify video, what movie, which episode, geolocate photo, image source.
- ▌ Review Health · majiayu000 bundleFirst-pass strategic-orientation review of a repository. Produces an evidence-cited map (not a grade) calibrated to a reference class, helping the user decide where to engage, where to tread carefully, and where to leave alone. Advisory only — no changes made.
- ▌ Accelerator Research Agent · majiayu000 bundleResearch accelerator portfolio companies using Firecrawl and Tavily MCPs. Generates structured CSV and markdown reports with systematic impact scoring. Optimized for token efficiency.
- ▌ Site Analyzer · majiayu000 bundle大型商业网站深度分析工具。基于 neo 项目理念,通过被动捕获 + 主动探索 + 视觉理解,完整解析网站操作逻辑。支持 API 逆向、模式提取、知识库生成。
- ▌ Source Verify · majiayu000 bundleThis skill should be used when the user asks to 'verify sources', 'check citations', 'fact-check footnotes', 'verify quotes', 'source check', 'are my cites real', 'check for hallucinated citations', or needs to verify that citations in a legal/academic manuscript actually exist and are accurate. Also use when the user wants to check that quoted text actually appears in the cited source.
- ▌ String Weaver · majiayu000 bundleUnification reasoning tool. Given multiple competing approaches, dualities, or chiral splits, find the higher-dimensional view that reconciles them. Derived from the pattern that five string theories unify via LRC bracket in M-theory's 11D. Not about actual strings - about the PATTERN of unification.
- ▌ Swing Options · majiayu000 bundleGenerate probability-weighted alternative options that challenge default thinking. Forces unconventional alternatives and exposes hidden assumptions behind the "obvious" choice. For decision-point analysis, NOT full design exploration. Triggers on "대안", "alternatives", "옵션 뽑아", "options", "어떤 방법이", "아이디어", "다른 방법", "선택지".
- ▌ Text Analyzer · majiayu000 bundleComprehensive text analysis coordinator. Execute Python script for multi-aspect text analysis. Use when you need grammar, sentiment, readability, and SEO analysis combined.
- ▌ Think Reflect · majiayu000 bundleRetrospective learning from a completed experience. Takes a project, incident, decision that played out, or time period; gathers ground truth (observations) separately from recollections; spawns reflectors applying different lenses (what-worked-vs-got-lucky, what-didn't, what-surprised, system-rewards-vs-intent, decisions-that-aged, what-to-tell-past-self, patterns-that-recur) in isolation; synthesizes into updated mental models as first-class output. Produces feedback only — no code, no tickets, no artifacts.
- ▌ Think Reframe · majiayu000 bundleProblem redefinition before problem solving. Takes a stated problem, extracts its premises, then spawns reframers applying different lenses (problem-vs-symptom, scope-shift, stakeholder-shift, level-of-abstraction, time-horizon, inversion, category-shift, constraints-shift) in isolation, and synthesizes the alternatives into a report with an orchestrator recommendation. Produces feedback only — no code, no tickets, no artifacts.
- ▌ Ticket Triage · majiayu000 bundlePull open [Gorgias](https://composio.dev/toolkits/gorgias) support tickets and triage them by urgency, category, and sentiment
- ▌ Bio Differential Expression Timeseries De · majiayu000 bundleAnalyze time-series RNA-seq data using limma voom with splines, maSigPro, and ImpulseDE2. Identify genes with dynamic expression patterns.
- ▌ Asset Discovery · majiayu000 bundleProbe subdomain list with httpx/dnsx/naabu to identify live hosts, open ports, status codes, titles, and basic fingerprints. Use after subdomain-enum produces a sub list. Output feeds into fingerprinting and content discovery.
- ▌ AWS Sdk Java V2 S3 · majiayu000 bundleAmazon S3 patterns and examples using AWS SDK for Java 2.x. Use when working with S3 buckets, uploading/downloading objects, multipart uploads, presigned URLs, S3 Transfer Manager, object operations, or S3-specific configurations.
- ▌ Ensembl Annotation · majiayu000 bundleQuery the Ensembl REST API for regulatory feature annotations, variant effect prediction (VEP), coordinate liftover, gene lookups, and cross-references. Use when the user needs to annotate variants with VEP (consequence, CADD, REVEL, SpliceAI), check Ensembl Regulatory Build overlap for ENCODE regions, convert coordinates between GRCh37 and GRCh38, resolve gene IDs (Ensembl ↔ symbol ↔ RefSeq), look up gene phenotype associations, or cross-reference ENCODE targets with Ensembl annotations. Also use when the user mentions Ensembl, VEP, variant effect predictor, liftover, assembly conversion, regulatory build, gene lookup, or cross-references between databases.
- ▌ Exception Taxonomy · majiayu000 bundleHierarchical exception system with HTTP status codes, machine-readable error codes, and structured responses for consistent API error handling across all endpoints.
- ▌ Fhir Hl7 Validator · majiayu000 bundleThis skill should be used when the user asks to "validate FHIR resources", "check HL7 messages", "validate healthcare data format", "parse FHIR", "HL7 v2 messages", "FHIR R5 validation", "CDA documents", "healthcare data interchange", "FHIR resource schema", "HL7 specifications", or mentions FHIR validation, HL7 message parsing, CDA validation, healthcare data format compliance, or Fast Healthcare Interoperability Resources standards.
- ▌
- ▌ Foundry Sdk Python · majiayu000 bundleBuild AI applications using the Azure AI Projects Python SDK (azure-ai-projects). Use when working with Foundry project clients, creating versioned agents with PromptAgentDefinition, running evaluations, managing connections/deployments/datasets/indexes, or using OpenAI-compatible clients. This is the high-level Foundry SDK - for low-level agent operations, use azure-ai-agents-python skill.
- ▌ Get AI Suggestions · majiayu000 bundleUse when SDK method names are ugly, wanting to improve operation IDs, or asking "how can I improve my spec"
- ▌ GRAPHQL API Design · majiayu000 bundleAuto-activates when user mentions GraphQL, schema design, resolvers, queries, mutations, or Apollo. Expert in designing scalable GraphQL APIs with best practices.
- ▌ GRAPHQL Federation · majiayu000 bundleGraphQL Federation skill for creating correct federation subgraphs. Use when: (1) Creating new federation subgraphs, (2) Adding entities with @key directives, (3) Extending types across subgraphs, (4) Using federation directives (@shareable, @external, @override, @provides, @requires, @inaccessible, @interfaceObject, @authenticated, @requiresScopes), (5) Debugging composition errors, (6) Understanding federation rules and patterns. MANDATORY TRIGGERS: federation, subgraph, @key, entity, federated graph, supergraph, GraphQL composition, router schema
- ▌ Kirby Headless API · majiayu000 bundleExposes Kirby content to headless clients using the API, KQL, and JSON representations. Use when building API endpoints, KQL queries, or headless frontends.
- ▌ Open Meteo Weather · majiayu000 bundleGet current weather using the Open-Meteo API. Use for requests like “current weather in Boston,” “get weather for Medford, MA,” or any task that needs a quick current_weather lookup via Open-Meteo (by location name or lat/lon). Use when the user wants a direct API call or a tiny CLI flow to fetch current conditions.
- ▌ Openapi Operations · majiayu000 bundleOpenAPI operation rules 11-13 for naming, pagination, and responses
- ▌ Openapi Schema Validation · majiayu000 bundleOpenAPI/Swagger specification validation and testing to ensure API implementations match their documented contracts with automated drift detection.
- ▌ Phone Verification · majiayu000 bundleVerify phone numbers using SMS one-time codes via the Didit API. Use when you need to confirm a user owns a phone number, implement SMS-based 2FA, or validate phone during signup/onboarding flows.
- ▌ API Integration Helper · majiayu000 bundleGenerate boilerplate code for REST API integrations with authentication, error handling, and retry logic
- ▌ Request Validation · majiayu000 bundleValidate API requests with schemas, sanitization, and helpful error messages. Covers Zod, Joi, and Pydantic patterns.
- ▌ Scrapecreators API · majiayu000 bundleProvider reference for collecting public profiles, posts, comments, transcripts, trends, and ad-library data from major social platforms through ScrapeCreators. Use as a dependency of research workflows, not as the final user-facing deliverable.
- ▌ Blog Feed Monitor · majiayu000 bundleScrape blog posts via RSS feeds (free, no API key) with Apify fallback for JS-heavy sites. Use when you need to monitor competitor blogs, track industry content, or aggregate blog posts by keyword.
- ▌ Caro Shell Helper · majiayu000 bundleUse when users need help generating safe, tested POSIX shell commands from natural language descriptions. Guides users through command generation, safety validation, and execution workflows using Caro best practices
- ▌ Fable Ruki Agenty · majiayu000 bundleФейбл руки-агенты — ручной режим оркестрации, где Fable не пишет код, а пишет спеки в тела GH issues и раздаёт готовые задачи рукам: кодинг, код-ревью, gh-операции, CLI-механика, DoD-верификация и укладка файлов — Codex; разведка, чтение и скауты — Grok-воркеры через Orca. Вызывается пользователем явно, не моделью.
- ▌ Fec Drawio Studio · majiayu000 bundle用于创建带 draw.io / diagrams.net 源文件的可编辑技术图,包括架构图、ERD、UML、序列图、流程图、ML 模型图、官方形状检索、品牌符号、Graphviz 自动布局、代码结构图、.drawio 校验或 draw.io CLI 导出兜底。不要用于普通位图生成、手绘草图、交互式 Canvas/Three.js 场景或装饰性 SVG 动画;中文触发词包括 draw.io、diagrams.net、可编辑架构图、.drawio、ER 图、UML、序列图、自动布局、形状检索、代码结构图。
- ▌ Forge App Builder · majiayu000 bundleGuides building, deploying, troubleshooting, and installing Atlassian Forge apps — custom extensions built with the Forge CLI (forge create, forge deploy, forge install). Use when the user wants to create a Forge app (issue panels, dashboard gadgets, Confluence macros, global pages), is encountering Forge CLI errors or deployment issues (e.g. forge install failures, environment errors), or needs help with Forge-specific concepts like resolvers, UI Kit, manifest scopes, or developer spaces. Do not use for general Jira configuration, automation rules, JQL queries, or Atlassian REST API usage outside of a Forge app context.
- ▌ Google Ad Scraper · majiayu000 bundleScrape competitor ads from Google Ads by domain. Returns ad creatives, formats, and campaign details. Use for competitive ad research and messaging analysis.
- ▌ Migrate Bootstrap · majiayu000 bundleMigrates a traditional Power Pages site from Bootstrap 3 to Bootstrap 5. Downloads the site, runs the pac pages bootstrap-migrate engine, reviews the change report, applies AI-assisted fixes for the residual hierarchy/CSS changes the engine only flags, uploads the migrated site (which auto-enables the Bootstrap 5 runtime flag), verifies the flag, and validates. Use when the user wants to upgrade an older Bootstrap-3 portal to Bootstrap 5. NOT for code sites (React/Vue/Angular/Astro) — those are never Bootstrap-3.
- ▌ Opencode Delegate · majiayu000 bundleDelegate a coding task to the OpenCode CLI as a background implementer, then review its diff and land it yourself. Use this whenever the user wants to hand implementation work to OpenCode — phrasings like "have OpenCode do X", "delegate this to OpenCode", "run it through OpenCode", or "use OpenCode to implement/fix/refactor" — or wants to run a queue of coding tasks through OpenCode while staying the reviewer. Prefer it when the user will review the diff and commit it themselves. DO NOT USE for tasks small enough to do inline, or when the user wants the code written directly without delegating.
- ▌ PDF Editor Compdf · majiayu000 bundlePDF Editor edits and organizes PDF pages with merge, insert, reorder, exchange, and crop operations, built on ComPDF page management capabilities for fast PDF cleanup and document restructuring. It is a strong fit for requests such as “edit pdf,” “organize pdf pages,” “merge pdf,” “insert pages,” “reorder pdf pages,” “crop pdf pages,” and “rearrange pdf.” Example queries include “Merge these three PDFs into one file,” “Insert this appendix after page 8,” and “Reorder the pages and crop the white margins.”
- ▌ Powershell Master · majiayu000 bundleComplete PowerShell expertise system across ALL platforms (Windows/Linux/macOS). PROACTIVELY activate for: (1) ANY PowerShell task (scripts/modules/cmdlets), (2) CI/CD automation (GitHub Actions/Azure DevOps/Bitbucket), (3) Cross-platform scripting, (4) Module discovery and management (PSGallery), (5) Azure/AWS/Microsoft 365 automation, (6) Script debugging and optimization, (7) Best practices and security. Provides: PowerShell 7+ features, popular module expertise (Az, Microsoft.Graph, PnP, AWS Tools), PSGallery integration, platform-specific guidance, CI/CD pipeline patterns, cmdlet syntax mastery, and production-ready scripting patterns. Ensures professional-grade, cross-platform PowerShell automation following industry standards.
- ▌ Review Ugc Render · majiayu000 bundleMandatory pre-publish review gate for a UGC video render. Transcribes the finished render's AUDIO with Whisper and word-diffs it against the approved spoken script, then gates set_final_render — blocking a render whose generated audio mis-voices a word (e.g. the approved "human-vetted" spoken as "human witted"), drops an approved phrase, or comes back silent. Runnable, gating counterpart to content-goose's review-transcript-integrity atom. Every ugc-video-formats recipe runs this after render and BEFORE set_final_render.
- ▌ Skill Usage Stats · majiayu000 bundle扫描本机 Claude Code 和 Codex 的会话日志,统计哪些 skill 有本地调用证据、哪些在本机无证据(已安装但日志无痕迹,不等于从未使用)、调用排行、月度趋势、项目分布,输出终端表格和 Markdown 报告,可导出 CSV/JSON。Use when the user asks to 统计 skill 使用, 看 skill usage, find zombie skills, 僵尸 skill, which skills are installed but never used, skill 调用排行, skill usage report, skill 使用健康度, audit personal skill arsenal, or manage which skills to keep or remove.
- ▌ Stata Replication · majiayu000 bundleEnd-to-end Stata replication pipeline — scaffolds numbered `.do` files in `scripts/stata/`, executes them via the `stata-mcp` MCP server, captures logs and outputs to `scripts/stata/_outputs/`, and produces publication-ready tables (esttab) and figures (graph export). Mirrors `/data-analysis` for R-first projects. Use when user says "stata replication", "set up Stata pipeline", "scaffold the .do files", "run Stata analysis", "AEA replication package in Stata", or when a project's analysis language is Stata not R.
- ▌ Aarrr Metrics · majiayu000 bundleMeasure and optimize growth using the AARRR (Pirate Metrics) framework with stage-specific KPIs and funnel analysis
- ▌ Closing Costs · majiayu000 bundleCalculates itemized state-specific closing costs for mortgage refinance transactions across 10 licensed states, with product-specific fees for Conventional, FHA, FHA Streamline, VA IRRRL, and VA Cash-Out.
- ▌ Dbr Scheduler · majiayu000 bundleDrum-Buffer-Rope scheduling skill for constraint-based production pacing with buffer management
- ▌ Franchise Nda · majiayu000 bundleDrafts a U.S. franchise-focused confidentiality and non-disclosure agreement protecting franchisor trade secrets, operational manuals, financial data, marketing strategies, and supplier terms during pre-franchise evaluation. Use when preparing an NDA for prospective franchisees, pre-FDD disclosures, franchise due diligence, or confidentiality agreements covering franchise system information.
- ▌ Geo Blog Post · majiayu000 bundleUse when writing or editing a blog post optimized for AI citations — covers post structure, frontmatter patterns, content rules, schema requirements, and a pre-publish GEO checklist based on Princeton research.
- ▌ Grow Business · majiayu000 bundleGuided journey from a business with lucky months to a repeatable growth engine that produces a forecast. Orchestrates nine skills phase by phase - one-page-marketing, hundred-million-offers, predictable-revenue, contagious, influence-psychology, crossing-the-chasm, cold-start-problem, lean-analytics, negotiation - asking the user questions at every decision point and recording results in the project docs/ folder (MARKETING.md, OFFER.md, METRICS.md, GROW-BUSINESS-PLAN.md) so the journey resumes across sessions. Use when the user wants to build a marketing and sales system, manufacture predictable pipeline, engineer word-of-mouth and referrals, or says 'revenue is real but lumpy and I need growth that repeats'. If the offer, retention, or operations underneath are broken, run improve-business first; with no paying customers yet, start with create-business; when the product itself must carry the growth loops, use grow-app. For one framework in isolation, invoke that skill directly.
- ▌ Hiring Talent · majiayu000 bundleUse when designing hiring processes, evaluating candidates, or building talent strategy.
- ▌ Lp Do Idea Generate · majiayu000 bundleRadical business growth process auditor. Cabinet Secretary orchestrates multi-lens composite idea generation with attribution, confidence gating, and priority ranking.
- ▌ Nda Generator · majiayu000 bundleCreate appropriate non-disclosure agreements for different business contexts with balanced terms and proper scope definitions
- ▌ Polar Billing · majiayu000 bundleThis skill should be used when working on Polar billing system, Stripe integration, subscription lifecycle, checkout flows, or benefit provisioning.
- ▌ Yc Pitch Deck · majiayu000 bundleCreate a compelling startup pitch deck that follows the structure proven to raise billions from top investors. Master the YC and Sequoia formats that get founders funded. Use when: **Fundraising** to create investor pitch decks; **YC application** to structure your narrative; **Demo Day prep** to craft your 2-minute pitch; **Angel investors** to communicate your opportunity; **Partnership pitches** to structure compelling asks
- ▌ Quality Hooks · majiayu000 bundleLanguage-specific auto-lint/format/typecheck pipeline. Supports Python (ruff+pyright), TypeScript (prettier+eslint+tsc), Go (gofmt+golangci-lint). Auto-fix and convergence loops.
- ▌ Quality Stack · majiayu000 bundleScan a project to detect configured quality and testing tools across JVM (Gradle/Maven), Android (AGP/Compose/KMP), Node.js/TypeScript, and Python ecosystems. Cross-reference against research-backed recommendations and assist with setup. Auto-detects project type(s) including monorepos with mixed ecosystems. Use when user asks to "audit tooling", "recommend tools", "quality stack", "what tools am I missing", "setup eslint", "setup detekt", "add coverage", "add ruff", "configure CI quality pipeline", "scan project tools", "tooling audit", "android tooling", "android quality", "compose testing", "kmp testing", or "screenshot testing".
- ▌ Reactor Audit · majiayu000 bundleUse when proposing or implementing any UI, rendering, shader, UX, motion, or DSP change in TRENCH — forces doctrine audit before code, kills generic output, requires structured review with dominant-read analysis and acceptance test
- ▌ Refactor Deep · majiayu000 bundleComprehensive refactoring workflow that pairs tactical refactoring with architectural review. Runs /refactor (tactical cleanup), then /review-arch (advisory architectural analysis, with the option to cut tickets for the recommended work). All user input gathered upfront, except for ticket review at the end of Phase 2.
- ▌ Refactor Plan · majiayu000 bundleCreate structured refactoring plans. Use when user wants to plan a refactor, needs a refactoring strategy, or mentions breaking down large changes into small commits.
- ▌ Review Branch · majiayu000 bundleA skill for reviewing git branches. It helps analyze changes, commit history, and provide feedback to ensure code quality and adherence to project conventions before merging.
- ▌ Review Commit · majiayu000 bundleQuick quality review of staged changes for pre-commit validation. Checks Ruby best practices and flags critical issues.
- ▌ Review Elixir · majiayu000 bundleComprehensive Elixir/Phoenix code review with optional parallel agents
- ▌ Review Memory · majiayu000 bundleAudit CLAUDE.md and .claude/rules/ for stale references, outdated architecture claims, and rules now redundant with static analysis checks
- ▌ Review Python · majiayu000 bundleUse this skill when you need to review Python code changes with an extremely high quality bar. This agent should be invoked after implementing features, modifying existing code, or creating new Python modules. The agent applies strict Python conventions and taste preferences to ensure code meets exceptional standards.
- ▌ Review Source · majiayu000 bundleSource code health assessment. Dispatches language-specific SMEs to evaluate idiomatic usage, consistency, and quality across all project languages. Advisory only — no changes made.
- ▌
- ▌ Role Validate · majiayu000 bundleВалидация роли 1С. Используй после создания или модификации роли для проверки корректности
- ▌ Simplify Code · majiayu000 bundleRun a multi-agent review of changed files for reuse, quality, efficiency, clarity, and altitude issues followed by automated fixes. Use when the user asks to "simplify code", "review changed code", "check for code reuse", "review code quality", "review efficiency", "simplify changes", "clean up code", "refactor changes", or "run simplify".
- ▌ Simplify Docs · majiayu000 bundleRun a multi-agent review of code comments and markdown documentation for unnecessary content, then fix the issues. Covers what-restating comments, name-mirroring doc comments, status-update prose, and other documentation noise. Use when the user asks to "simplify docs", "simplify documentation", "clean up comments", "clean up docs", "review documentation", "strip unnecessary comments", "reduce doc noise", or "run simplify-docs".
- ▌ Skill Auditor · majiayu000 bundleAudit SKILL.md files against the AgentOps template and readiness checks. Use for quality reviews or template compliance.
- ▌ Skill Refiner · majiayu000 bundle· Improve skill collections or a named skill with iterative scoring, lint checks, behavioral tests, peer review. Triggers: 'skill refiner', 'improve skills', 'quality sweep', 'batch improve', 'skill loop', 'target 99%'.
- ▌ Sonarqube MCP · majiayu000 bundleProvides SonarQube and SonarCloud integration patterns via the Model Context Protocol (MCP) server. Enables quality gate monitoring, issue discovery and triaging, pre-push code analysis, and rule education directly in the agent workflow. Use when the user wants to check quality gates, search for Sonar issues, analyze code snippets before committing, or understand SonarQube rules. Triggers on "sonarqube", "sonarcloud", "quality gate", "sonar issues", "analyze with sonar", "check sonar", "sonar rule", "pre-push analysis".
- ▌ Project Orchestrator Spec Reviewer · majiayu000 bundleReviews whether an implementation matches its task specification. Reads actual code, not reports. Checks for missing requirements, extras, and misunderstandings.
- ▌ Unikit Review · majiayu000 bundleReviews {{engine_name}} {{engine_code_language}} code against project coding rules, design principles, and framework-specific conventions. Supports four modes — staged changes, PR, commit history, and individual files. Use when reviewing {{engine_name}} code, checking code quality, reviewing staged changes, PRs, commit ranges, or when the user asks to review scripts or check for coding violations. Also triggers on "review code", "check code", "code review", "review PR", "review staged", "review commits", or any review request for {{engine_name}} {{engine_code_language}} scripts.
- ▌ Verify Claims · majiayu000 bundleRun Chain-of-Verification (CoVe) on a draft or a block of text with factual claims. Spawns the `claim-verifier` agent in a forked (fresh) context so it never sees the draft — then reports which claims are supported, contradicted, or unverifiable. Use when user says "verify these citations", "check the claims in X", "did I hallucinate anything", "fact-check this draft", "run CoVe on this", or after any text generation that asserts facts about papers, datasets, or numerical results. NOT for style/grammar review (use `/proofread`) or substance review (use `/review-paper`).
- ▌
- ▌ API Security · majiayu000 bundleAPI security best practices and common vulnerability prevention. Enforces security checks for authentication, input validation, SQL injection, XSS, and OWASP Top 10 vulnerabilities. Use when building or modifying APIs.
- ▌ Appsec Owasp · majiayu000 bundleUse this skill when securing web applications, preventing OWASP Top 10 vulnerabilities, implementing input validation, or designing authentication. Triggers on XSS, SQL injection, CSRF, SSRF, broken authentication, security headers, input validation, output encoding, OWASP, and any task requiring application security hardening.
- ▌ Audit Source · majiayu000 bundleWhite-box security audit. Blue-teamer evaluates defensive posture, then red-teamers attack informed by defensive gaps. Iterates when exploit chains are discovered. Heavy and thorough by design.
- ▌ Auth Builder · majiayu000 bundleBuild and maintain Stripe → Clerk authentication flows for pricing CTA buttons. Use when implementing new subscription tiers, fixing auto-enrollment issues, or adding payment-to-access flows.
- ▌
- ▌ Azure Policy · majiayu000 bundleExpert knowledge for Azure Policy development including troubleshooting, best practices, decision making, security, configuration, integrations & coding patterns, and deployment. Use when authoring Machine Configuration packages, deploying via ARM/Bicep/Terraform, mapping to CIS/NIST/ISO, migrating from DSC/Automanage, or querying compliance with Resource Graph, and other Azure Policy related development tasks. Not for Azure Blueprints (use azure-blueprints), Azure Role-based access control (use azure-rbac), Azure Resource Manager (use azure-resource-manager), Azure Security (use azure-security).
- ▌
- ▌ Clawsec Feed · majiayu000 bundleSecurity advisory feed with automated NVD CVE polling for OpenClaw-related vulnerabilities. Updated daily.
- ▌ Clawtributor · majiayu000 bundleCommunity incident reporting for AI agents. Contribute to collective security by reporting threats.
- ▌ Convex Audit · majiayu000 bundleAudit a Convex-backed codebase for schema quality, security, runtime boundaries, migrations, and function-surface risks. Use when the user asks for a Convex review, backend audit, contract analysis, or remediation plan. Do not use for green-field feature-spec generation; use convex-feature-spec for that.
- ▌ Dev Security · majiayu000 bundleSecurity review aligned with OWASP Top 10:2025. Auto-detects backend (.NET) and frontend (Angular/TypeScript) from project files. Runs both in mixed projects. Reports findings with severity and offers to fix inline. Filter with "dotnet" or "angular" to target one stack. Use when the user says "security review", "check security", "audit security", or invokes /dev-security.
- ▌ Domain Skill · majiayu000 bundleUse this template for domain-specific security testing (cryptographic testing, web security methodologies, etc.).
- ▌ Export Oscal · majiayu000 bundleExport NIST OSCAL (Open Security Controls Assessment Language) JSON from compliance
- ▌ Guard · majiayu000 bundleFull safety mode: destructive command warnings + directory-scoped edits. Combines /careful (warns before rm -rf, DROP TABLE, force-push, etc.) with /freeze (blocks edits outside a specified directory). Use for maximum safety when touching prod or debugging live systems. Use when asked to "guard mode", "full safety", "lock it down", or "maximum safety".
- ▌ Hunt Session · majiayu000 bundleHunt Session Management vulnerabilities — session fixation, session prediction (low entropy), insufficient invalidation on logout/password change, concurrent session abuse, JWT as session without expiry or revocation, cookie attribute issues (Secure/HttpOnly/SameSite missing). Medium to High impact.
- ▌ Ioc Analysis · majiayu000 bundleAnalyzes indicators of compromise (IOCs) to detect and respond to cybersecurity threats.
- ▌ IOS Add Auth · majiayu000 bundleAdd authentication to an iOS app with Sign in with Apple, biometrics, and Keychain storage.
- ▌ Laravel Auth · majiayu000 bundleUse when implementing user authentication, API tokens, social login, or authorization. Covers Sanctum, Passport, Socialite, Fortify, policies, and gates for Laravel 12.