majiayu000
- 75k skills
- 0 followers
- 567 repo stars
- 3 weeks ago last updated
- ▌ MCP Security · majiayu000 bundleMulti-agent and MCP pipeline security with 5-layer defense architecture. Use when building MCP servers, multi-agent systems, or any pipeline that handles user input to prevent prompt injection and ensure proper authorization.
- ▌ Npmrc Config · majiayu000 bundleNPM registry configuration template (.npmrc.template) and validation logic for GitHub Packages authentication with pnpm hoisting settings. Includes 4 critical standards (GitHub Package Registry config with token placeholder, pnpm hoisting for monorepo compatibility, exact version management, security documentation). Use when creating or auditing .npmrc.template files to prevent token leakage.
- ▌ Oauth2 Flows · majiayu000 bundleOAuth 2.0認可フローの実装パターンとセキュリティベストプラクティス。 Authorization Code Flow、PKCE、Refresh Token Flowの正確な実装を提供。 Web/SPA/モバイルアプリでの安全な認可フロー実装を支援。 Anchors: • OAuth 2.0 Simplified (Aaron Parecki) / 適用: 認可フロー全般 / 目的: RFC準拠の正確な実装 • Web Application Security (Andrew Hoffman) / 適用: セキュリティ設計 / 目的: 脅威モデリングと対策 • RFC 6749 (OAuth 2.0 Framework) / 適用: プロトコル仕様 / 目的: 標準準拠の担保 Trigger: Use when implementing OAuth 2.0 authentication, configuring authorization flows, integrating with OAuth providers, implementing PKCE for SPAs, or managing token lifecycle. oauth2, authorization code, pkce, access token, refresh token, oauth provider, google auth, github oauth
- ▌ Optimise SEO · majiayu000 bundleUse when asked to make a Next.js App Router app crawlable, indexable, and search-optimized for sitemaps, robots, canonicals, and Core Web Vitals. Not for security headers or remote mutations.
- ▌ Pass Secrets · majiayu000 bundle使用 Pass (Password Store) 统一管理所有 API 密钥和敏感凭证。Pass 基于 GPG 加密,支持 Git 同步,安全可靠。
- ▌ Pivot On Ioc · majiayu000 bundleExplore GTI relationships for an IOC to discover related entities. Use to expand investigation by finding connected domains, IPs, files, or threat actors. Takes an IOC and relationship types to query.
- ▌ Prompt Agent · majiayu000 bundleSecurity audit enforcement for AI agents. Automated security scans and health verification.
- ▌ Script Audit · majiayu000 bundleAudit third-party scripts on the storefront for performance and security impact
- ▌ Secrets Sync · majiayu000 bundleTwo-way secret synchronization between master vault and projects. Detects new secrets, namespaces by project, and handles SOPS re-encryption. Use when user says 'sync secrets', 'pull secrets', 'push secrets', or 'secrets diff'.
- ▌
- ▌ Sops Add Key · majiayu000 bundleAdd a new machine's age public key to .sops.yaml and re-encrypt all files. Use for multi-machine setups. Use when user mentions "add key", "add machine", "sops add key", "new machine", "authorize machine", "share key", "add public key", "multi machine sops".
- ▌ Sops Decrypt · majiayu000 bundleDecrypt SOPS-encrypted YAML files back to .env format. Finds *.enc.yaml files, decrypts, and converts YAML back to dotenv. Use when user mentions "decrypt env", "sops decrypt", "decrypt secrets", "restore env", "decrypt .env", "restore secrets", "decrypt environment files".
- ▌ Sops Encrypt · majiayu000 bundleEncrypt .env files using SOPS + age. Converts dotenv to YAML format (avoids SOPS bug #1435), then encrypts. Auto-detects unencrypted .env files. Use when user mentions "encrypt env", "sops encrypt", "encrypt secrets", "encrypt .env", "encrypt environment", "re-encrypt", "update encrypted".
- ▌ Suede Signup · majiayu000 bundleSuede-owned signup conversion discipline. Use when auditing or redesigning account creation, registration, or trial-start flows, including field friction, progressive profiling, identity options, mobile behavior, abandonment, and measurement. NOT FOR: post-signup activation (use suede-onboarding), lead-capture forms (use suede-site-alchemy), or deploying auth and compliance changes without review.
- ▌ Triage Alert · majiayu000 bundleTriage a security alert or case. Use when given an ALERT_ID or CASE_ID to assess if it's a real threat. Enriches IOCs, searches SIEM for context, and determines if the alert should be closed (false positive) or escalated for investigation.
- ▌ Woo Security · majiayu000 bundleImplement WooCommerce security — nonces, capabilities, input sanitization, output escaping, data validation, PCI compliance considerations, and WordPress security best practices. Use when hardening a WooCommerce store or reviewing security posture.
- ▌ Agentic Export · majiayu000 bundleExport reusable assets from a project into this repository's v0.2 plugin architecture (skills, templates, agents).
- ▌ Agentic Import · majiayu000 bundleImport external reusable assets into this repository's v0.2 plugin architecture (skills, templates, agents).
- ▌ Auto Architect · majiayu000 bundlePurpose: Intelligent meta-skill that monitors project patterns, detects automation opportunities, and auto-generates new skills.
- ▌ Claude Reflect · majiayu000 bundleSelf-learning system that captures corrections during sessions and reminds users to run /reflect to update CLAUDE.md. Use when discussing learnings, corrections, or when the user mentions remembering something for future sessions.
- ▌ Claude Tooling · majiayu000 bundleDiscover and list all Claude Code skills, agents, plugins, MCP servers, and hooks available in this project
- ▌ Command Refine · majiayu000 bundleAnalyze conversation and files to refine commands. Use when user says 'no' or 'wrong', when command behavior needs improvement, or when @/! injection fails. Includes conversation analysis, issue classification, evidence-based findings, and concrete refinements. Not for skills.
- ▌ Janitor Report · majiayu000 bundleFull health check of all your skills in one report. Use when the user wants to check for errors, find duplicates, detect broken skills, or get a complete overview of skill health. Pass --brief for inventory only.
- ▌ Janitor Search · majiayu000 bundleSearch GitHub for new skills to install. Deprecated alias — use /janitor-discover (combines search + pre-install check).
- ▌ Janitor Tokens · majiayu000 bundleShow how many context window tokens each skill consumes. Deprecated alias — use /janitor-value (which combines tokens with usage).
- ▌ Meta Bootstrap · majiayu000 bundleInstall the agentic workflow into a project. Sets up context files, adopts skills, configures the docs repo connection, and adds the heartbeat to CLAUDE.md. Use when the user says "set up the workflow", "bootstrap this project", "install the workflow", or "make this project workflow-aware".
- ▌ Review Agentmd · majiayu000 bundleReview recent conversations to find improvements for AGENTS.md files.
- ▌ Skill Building · majiayu000 bundleCreate effective, reusable skills from real-world experience for promotion to Master Alex
- ▌
- ▌
- ▌ Skill Selector · majiayu000 bundleAnalyze an implementation plan (defaults to .flow/specs/), discover relevant skills from the ecosystem, install them, and rewrite the plan to leverage installed skills. Use when user has a build plan, flow-next epic spec, or feature request and wants to equip the agent with the best available skills before building. Triggers on 'select skills for', 'equip for plan', 'find skills for this plan', 'skill up', or when reviewing a plan file before implementation.
- ▌ Skill Simplify · majiayu000 bundleSKILL.md simplification with functional integrity verification. Analyze redundancy, optimize content, check no functionality lost. Triggers on "simplify skill", "optimize skill", "skill-simplify".
- ▌ Skills Browser · majiayu000 bundleVisual skill discovery with fuzzy search, categorization, and usage stats for 43+ ONE_SHOT skills.
- ▌ Spring Refresh · majiayu000 bundleCheck Spring Boot skill content freshness against latest research and flag skills needing updates. Use when running /spring-refresh, or when user mentions "refresh spring skills", "spring boot update check", "skill freshness", "stale spring content", "update spring boot skills".
- ▌ System Refiner · majiayu000 bundleAutonomously correct project rules when negative feedback occurs. Use PROACTIVELY when user says 'no', 'wrong', 'wait', 'not that', or 'actually'. Identifies the root cause in commands, agents, skills, or documentation and rewrites the offending instruction to prevent recurrence.
- ▌
- ▌ Jtag Swd Debug · majiayu000 bundleDeep integration with JTAG/SWD debug probes for hardware-level debugging and flash programming
- ▌ Machine Health · majiayu000 bundleMonitor and optimize system resources (CPU, RAM, Disk). Includes cleaning routines.
- ▌ Scanner Status · majiayu000 bundleCheck the connectivity and health of a specific scanner node. Shows last activity, handshake history, error rate, and data quality. Use when verifying a scanner is connected or diagnosing scanner issues.
- ▌ Analyzing Tam · majiayu000 bundleCalculates Total Addressable Market (TAM), Serviceable Addressable Market (SAM), and Serviceable Obtainable Market (SOM) using multiple methodologies including top-down, bottom-up, and value theory approaches. Use when the user requests market sizing, TAM/SAM/SOM calculation, addressable market analysis, or wants to quantify market opportunity.
- ▌ Aztec Testing · majiayu000 bundleAssists with testing Aztec smart contracts using the TestEnvironment. Use when writing unit tests, integration tests, or debugging test failures for Aztec contracts.
- ▌ Browser Stack · majiayu000 bundleCross-browser and cross-device testing using BrowserStack or Sauce Labs
- ▌ Ce Test Audit · majiayu000 bundleAudit existing tests for ADR-030 anti-patterns, redundancy risk, and compliance with repository test standards.
- ▌ Channels Reply · majiayu000 bundleReply to a specific message in a channel. Use this to respond to issues, answer questions, or continue threaded conversations.
- ▌ Claude Bowser · majiayu000 bundleObservable browser automation using Chrome MCP tools. Use when you need to browse websites, take screenshots, interact with web pages, or perform browser tasks in your current Chrome. Keywords - browse, screenshot, browser, chrome, bowser, ui testing, observable.
- ▌ Clerk Testing · majiayu000 bundleE2E testing for Clerk apps. Use with Playwright or Cypress for auth flow tests.
- ▌ Code Patterns · majiayu000 bundleEnforce consistent implementation patterns across the codebase. Use when reviewing code, fixing inconsistencies, or implementing new features to ensure they follow established patterns.
- ▌ Complete Test · majiayu000 bundleAchieves 100% test coverage with minimal redundancy through progressive test writing. Writes tests one-at-a-time with immediate coverage verification, removes redundant tests while maintaining coverage, fixes standards violations, restructures fixtures. Use when creating test suites for existing code, or optimizing test efficiency
- ▌ Connect Users · majiayu000 bundleFind community members with relevant expertise using vector search
- ▌ Contract Test · majiayu000 bundlePark Golf Platform 계약 테스트 가이드. Pact를 사용한 Consumer-Driven Contract Testing, OpenAPI 스펙 검증, NATS 메시지 스키마 검증 방법 안내. "계약테스트", "contract", "pact", "스키마 검증" 관련 질문 시 사용합니다.
- ▌ Dev Test Gaps · majiayu000 bundleThis skill should be used when validating test coverage against requirements, after implementation tasks complete (Phase 5.5 of /dev workflow). Invoked automatically by dev-implement before review phase.
- ▌ E2e Execution · majiayu000 bundleClaude Code Web/DesktopでE2Eテストを実行する手順。リモートConvexに接続してPlaywrightテストを実行する方法。
- ▌ E2e Optimizer · majiayu000 bundlePlaywright E2E 敏捷测试优化:时间优先,精确打击。禁止全局运行,只测改动点,强制 Mock 外部依赖。触发词:E2E 测试、Playwright 测试、跑测试、测试优化。
- ▌ Email Testing Patterns · majiayu000 bundleEmail delivery testing including content verification, rendering across clients, spam score checking, link validation, and transactional email workflow testing.
- ▌ Extract Voice · majiayu000 bundleUse when the user wants to analyze writing samples to extract voice patterns, create voice-replicating prompts, or refine content generation prompts to match a specific writing style
- ▌ Finding Files · majiayu000 bundlePerforms fast file discovery with parallel search and smart defaults. Use this skill when searching for files by name, pattern, or type, especially when performance matters or when working with large directories
- ▌
- ▌
- ▌ Junit Testing · majiayu000 bundleJUnit 5 testing patterns including annotations, Mockito mocking, Spring Boot test slices, MockMvc, Testcontainers integration, and parameterized tests. Use when the user is writing Java tests, setting up test infrastructure, mocking dependencies, testing Spring controllers, or running integration tests with real databases. Trigger on any mention of JUnit, Mockito, @SpringBootTest, MockMvc, Testcontainers, or Java testing.
- ▌ Legal Advisor · majiayu000 bundleExpert legal advisor specializing in technology law, compliance, and risk mitigation. Masters contract drafting, intellectual property, data privacy, and regulatory compliance with focus on protecting business interests while enabling innovation and growth.
- ▌ Maestro Usage · majiayu000 bundleReference for writing and debugging Maestro E2E test flows. Covers all YAML commands, selectors, JavaScript integration, CLI usage, and flow structure. Use when writing Maestro tests, looking up command syntax, troubleshooting flow failures, or asking how to do something with Maestro.
- ▌ Mandatory Tdd · majiayu000 bundleEnforces Test-Driven Development (TDD) with BDD-style tests and mandatory test execution. Use when (1) Writing any new code or feature, (2) Fixing bugs, (3) Refactoring existing code, (4) Creating pull requests, (5) Closing issues. CRITICAL RULE - Tests MUST be actually executed with proof of passing status and coverage >= 80% before ANY commit, PR, or issue closure.
- ▌ Nw Pbt Dotnet · majiayu000 bundle.NET property-based testing with FsCheck, CsCheck, and fsharp-hedgehog frameworks
- ▌ Nw Pbt Python · majiayu000 bundlePython property-based testing with Hypothesis framework, strategies, and pytest integration
- ▌ Openwebf Host · majiayu000 bundleDEPRECATED umbrella Skill (backward compatibility). Use only when a Flutter host request spans multiple WebF integration areas (controllers + bundles + embedding + routing + caching/theming + perf). Prefer focused openwebf-host-* Skills.
- ▌ Phpstan Fixer · majiayu000 bundleAnalyze existing PHPStan error logs without running analysis. Use when: - User says "fix the phpstan errors" (after manually running PHPStan) - User says "what phpstan errors do I have?" - User points to specific log file - PHPStan was run outside Claude's context Delegates to fixer agent (sonnet) to find logs, parse errors, and implement fixes. Does NOT execute PHPStan - use phpstan-runner for that.
- ▌ Phpunit Fixer · majiayu000 bundleAnalyze existing PHPUnit test failure logs without running tests. Use when: - User says "fix the test failures" (after manually running tests) - User says "what tests are failing?" - User points to specific log file - Tests were run outside Claude's context Delegates to fixer agent (sonnet) to find logs, parse failures, and implement fixes. Does NOT execute tests - use phpunit-runner for that.
- ▌
- ▌ Py Test Swarm · majiayu000 bundleOrchestrate hierarchical BioETL test swarms (L1/L2/L3) for full_audit, fix_failures, coverage_boost, optimize, and flakiness_scan with workload-based delegation, telemetry aggregation, flaky analysis, and final reporting in reports/test-swarm/task-id/FINAL-REPORT.md. Use when users request broad test campaigns, failure triage at scale, coverage expansion, or stability diagnostics across layers/providers.
- ▌ Querying JSON · majiayu000 bundleExtracts specific fields from JSON files efficiently using jq instead of reading entire files, saving 80-95% context. Use this skill when querying JSON files, filtering/transforming data, or getting specific field(s) from large JSON files
- ▌ Recce MCP E2e · majiayu000 bundleUse when MCP server code is modified and needs full E2E verification against a real dbt project. Triggers after changes to recce/mcp_server.py, MCP tool handlers, single-env logic, or error classification. Also use before merging MCP PRs.
- ▌ Redis Testing Patterns · majiayu000 bundleRedis testing including cache behavior verification, pub/sub testing, transaction testing, cluster failover testing, and data expiration validation.
- ▌ Remix Testing · majiayu000 bundleTesting patterns for Remix applications covering loader testing, action testing, route testing, form submission testing, and nested route integration testing.
- ▌ Repl E2e Test · majiayu000 bundleRun and maintain the REPL PTY-based end-to-end test after code changes. Use when implementation is complete and you need REPL E2E verification beyond unit tests, especially for output stream or prompt behavior.
- ▌ Reproduce Bug · majiayu000 bundleReproduce and investigate a bug using logs, console inspection, and browser screenshots
- ▌ Resources Doc · majiayu000 bundleYou are an expert technical writer specializing in reference documentation for the Medusa ecommerce platform.
- ▌ Running Tests · majiayu000 bundleUse when asked to run tests in the dd-sdk-ios project — whether a full module suite, a specific test class, or a single test method. Use when choosing between make, xcodebuild, or Xcode MCP for running iOS/tvOS/visionOS tests.
- ▌ Screenshot Ab · majiayu000 bundleApp Store スクリーンショット A/B テスト自動クローズドループ。メトリクス確認 → 勝者判定 → ヘッドライン生成(生成→採点→改善ループ)→ l.md Bible(make generate-store-screenshots)でPNG生成 → visual-qa採点 → Slackにダイスへ送る → ASCアップロード → PPO実験作成。Use when running screenshot-ab, App Store screenshot experiment, screenshot loop, スクショA/Bテスト, screenshot closed loop, screenshot automation, A/B test screenshots.
- ▌ Seed Designer · majiayu000 bundleDerive seed data requirements from test cases. Reads specs/testcases/*.md, extracts implicit data preconditions from each test scenario, deduplicates and organizes by entity type, then produces a seed data requirements document and annotated seed script. Use when test cases are created/updated and seed data needs to stay in sync. Triggers: 'design seed data', 'seed data from testcases', 'update seed requirements', 'what data do tests need', or when specs/testcases/ files change.
- ▌ Shell Testing · majiayu000 bundleUse when testing shell scripts with Bats or linting with ShellCheck. Covers mocking strategies, assertion patterns, ShellCheck configuration opinions, and CI integration.
- ▌ Spec Verifier · majiayu000 bundleVerify specification quality and completeness. Use after writing spec.md to ensure it meets standards before task breakdown - checks for clarity, feasibility, testability, and completeness.
- ▌ Tdd Companion · majiayu000 bundleUse during implementation to enforce TDD - reminds test-first, validates Red-Green-Refactor cycle, integrates with superpowers:test-driven-development. Trigger: 'test first', 'write tests', 'Red Green Refactor', 'TDD workflow'. MUST be active during all Phase 3 implementation. NEVER write implementation code before tests.
- ▌ Tdd Implement · majiayu000 bundleImplement a feature or fix a bug using strict TDD. Analyzes the requirement, creates tests first, implements minimal code, then refactors. Use for feature requests, bug fixes, or enhancements that need test coverage.
- ▌ Test Analyzer · majiayu000 bundleExpert in test suite analysis, coverage assessment, and test quality evaluation
- ▌ Test Designer · majiayu000 bundleDesigns the verification suite from requirements only — never from code. Prevents success bias. Use when building test cases in parallel with the Build Agent, after requirements are approved by the Logic Gatekeeper.
- ▌ Test Spec Gen · majiayu000 bundleUniversal test specification generator that explores codebases, researches best practices, and generates comprehensive test specs via multi-agent orchestration. Outputs Hermes-style test specification documents with TC-XXX formatting, area segmentation, and optional Trello card conversion.
- ▌ Test Strategy · majiayu000 bundleProduction-grade test strategy skill with risk-based testing, coverage analysis, quality gates, and resource optimization
- ▌ Testarchitect · majiayu000 bundleTest-first development strategy for PAI projects. USE WHEN user needs test strategy, coverage analysis, ATDD workflows, risk-based testing, or quality gates. Ensures tests are written before code, not after bugs appear.
- ▌ Testing Skill · majiayu000 bundleTDD patterns, test writing strategies, coverage guidance, mocking patterns. Use when: write tests, TDD, test coverage, unit test, integration test, E2E test, mocking, test organization, pytest, vitest, jest.
- ▌ Testing Suite · majiayu000 bundleSetup and configure testing infrastructure with Vitest, Playwright, and testing patterns. Use when users need to add tests, configure test runners, implement TDD workflows, or create E2E test suites. Covers unit, integration, and end-to-end testing strategies.
- ▌ Testing Xunit · majiayu000 bundleUse when writing unit tests, integration tests, or setting up test projects in C#. Covers xUnit patterns, Moq mocking, Bogus test data generation, and Alba integration testing.
- ▌ Tg Migrations · majiayu000 bundleDjango migration best practices for the World of Darkness application. Use when creating data migrations, handling schema changes with existing data, squashing old migrations, testing migrations in CI/CD, or planning multi-step migrations for breaking changes. Triggers on migration work, database schema changes, or data transformation tasks.
- ▌ Typo Injector · majiayu000 bundleIntroduces spelling errors into text at a specified rate. Use when you need to corrupt text with typos for testing or analysis.
- ▌ Vcp Test Plan · majiayu000 bundleGenerate a test plan for specific code based on VCP testing standards. Produces unit tests, integration tests, edge cases, and mock guidance.
- ▌ Visual Verify · majiayu000 bundleVisuelle Verifikation via Puppeteer. Erzwingt echte Sichtprüfung statt theoretischer Code-Analyse. Nimmt Screenshots, analysiert gerenderte Elemente, prüft Kontrast/Layout/Lesbarkeit visuell. Nutze diesen Skill IMMER wenn du behaupten willst dass etwas "funktioniert" oder "gut aussieht". Aufruf mit /visual-verify [view-name oder css-selektor].
- ▌ Web Debug Pro · majiayu000 bundle高级浏览器调试工具,支持网络抓包、性能分析、DOM 检查、反爬虫测试。使用 browser-use CLI 提供专业级浏览器调试能力。
- ▌ Web Mocks Msw · majiayu000 bundleMSW handlers, browser/server workers, test data. Use when setting up API mocking for development or testing, creating mock handlers with variants, or sharing mocks between browser and Node environments.
- ▌ Zinc Unittest · majiayu000 bundleWar3Lib 的 Zinc 单元测试流程规范(.j + .cfg + _Test.j + 可选 w3a/w3u/w3i):使用 TaskCreateUT.lua 生成测试壳、维护 cfg 注入与 chain 依赖、使用 UnitTestFramwork.assert 断言与 Trace 日志输出。用于创建/重构 Jass 模块单测时。
- ▌ Hive Batch Ledger · majiayu000 bundleTrack per-item status when processing collections to prevent skipped or duplicated items.
- ▌ Claude Vigil · majiayu000 bundleFile checkpoint and recovery — auto-quicksaves before destructive commands, manual checkpoints for safe rollback