majiayu000
- 75k skills
- 0 followers
- 567 repo stars
- 3 weeks ago last updated
- ▌ Convex React · majiayu000 bundleConvex React client - hooks, real-time updates, optimistic updates, pagination, and UI patterns. Use when working with useQuery, useMutation, useAction, usePaginatedQuery, convex/react, ConvexProvider, ConvexReactClient, optimistic updates, skip, real-time, or loading states in React.
- ▌
- ▌ Copilot Sync · majiayu000 bundleSynchronize GitHub Copilot configuration files (agents, prompts, skills, instructions) from github-copilot-base template to existing codebases. Creates backups before overwriting. Use when updating Copilot configuration, syncing Copilot files, or bringing a project up to date. Triggers on sync copilot, update copilot, copilot sync, sync configuration.
- ▌ Copy Editing · majiayu000 bundle编辑、审查或改进现有营销文案时使用。触发词:edit this copy、review my copy、copy feedback、proofread、polish this、make this better、copy sweep。提供通过多次聚焦扫描系统化编辑营销文案的方法。
- ▌ Dev Finish · majiayu000 bundleClose a dev-cycle session, capture learnings, and optionally commit. Use when development work is complete and ready to wrap up.
- ▌ Dpa Review · majiayu000 bundleRead a Data Processing Agreement before you sign it — sub-processors, transfer mechanism, breach-notice window, deletion, audit rights — in plain language with 🔴🟡🟢 risk. Use when asked to review a DPA, check a data processing agreement, is this DPA safe to sign, or what am I agreeing to on data. Produces the plain-English summary, the risk-ranked findings, the missing-clause checklist, and the questions to send back before signature.
- ▌ Fair Check · majiayu000 bundleAudit manuscript and replication package against FAIR open-science principles.
- ▌ Find Skill · majiayu000 bundleFind and install skills from the Orthogonal skill library. Use when you need capabilities you don't have, want to discover available skills, or need to add new tools to your agent.
- ▌ Five Minds · majiayu000 bundleAnswer a question five completely different ways — as five independent minds with clashing worldviews — then converge on what survives. Use when asked for multiple perspectives, look at this from every angle, what would different people think, or give me a range of views not one answer. Produces five genuinely distinct takes (each committed to one worldview, not hedged), the tensions between them made explicit, and a final synthesis that keeps what's strongest — deliberately widening the range before narrowing it.
- ▌ Game Build · majiayu000 bundle游戏构建执行。把批准后的 GAME_DESIGN 与 ART_DIRECTION 压缩成最小 BUILD_BRIEF,交给当前编码智能体、Kimi K3、Claude Fable 5 或其他强模型实现可完整游玩的网页游戏原型,并通过真实运行和截图迭代。用于把批准的游戏方案实现成可运行游戏。
- ▌ Goldfinger · majiayu000 bundle中文网文金手指(外挂/系统)设计。当用户要设计系统流、签到流、空间流、模拟器、重生先知、扮猪吃老虎等核心设定,或要给主角一个变强机制时使用。产出有门槛、有成长曲线、有代价、与主线绑定的金手指方案。
- ▌ Guillotine · majiayu000 bundleUse when dead, duplicate, superseded, or generated residue must leave more than one artifact class of a repo or subsystem, preserving behavior. Not for one enumerated record set: use clean-clean-cut.
- ▌ Hook Setup · majiayu000 bundleInspect and install CCAM monitoring hooks for Claude Code and Codex. Use when onboarding a provider, repairing missing hooks, checking which provider is active, or validating that installation preserved unrelated user hooks.
- ▌ Idea Storm · majiayu000 bundleGenerate a big, wide spread of ideas for anything by running the prompt through many different lenses at once, then clustering and picking. Use when asked to brainstorm ideas for, give me lots of options, help me come up with, or I need ideas for. Produces a high-volume, deliberately varied idea list generated across multiple angles (safe, wild, cheap, ambitious, weird, opposite), grouped into themes, and a shortlist of the most promising — maximizing range so you're not choosing from three obvious options.
- ▌ Jd Decoder · majiayu000 bundleDecode a job description to find what they actually want beneath the buzzwords. Use when asked to analyse a job description, decode a JD, assess fit for a role, or figure out what a posting really means before applying. Produces a decode — the real must-haves vs. nice-to-haves, hidden priorities & culture signals, red flags, an honest fit assessment, and the exact phrases to mirror in your application.
- ▌ Kai Budget · majiayu000 bundleMarketing budget planning and forecasting — channel allocation, CAC targets, ROI projections, and spend optimization. Use when "marketing budget", "budget planning", "channel allocation", "marketing spend", "CAC forecast", "budget forecast", "how much should I spend", "allocate budget", or any request to plan, forecast, or optimize marketing spend.
- ▌ Lcx Doctor · majiayu000 bundleDiagnose LazyCodex and Codex CLI installation health against the latest sources. Use whenever the user asks for a doctor or health check, says LazyCodex, lazycodex-ai, omo-codex, or Codex behaves oddly after an install, update, or config change, suspects a stale, drifted, or broken setup, or wants the local install audited and compared with the latest LazyCodex and Codex code.
- ▌ Lv Assigns · majiayu000 bundleInspect LiveView socket assigns for memory bloat — missing temporary_assigns, unused assigns, unbounded lists needing streams, memory estimates. Use when LiveView memory grows or you need to add temporary_assigns.
- ▌ Make Trace · majiayu000 bundleTurn any source that describes how a kind of task gets done (a SKILL.md, a chat log, a runbook, plain prose) into a runnable Morph trace. Lift it into a DAG, write a contract per step, place inputs, and drive the full run lifecycle to verify it. Use whenever someone wants to make a trace from a source.
- ▌ Map Corpus · majiayu000 bundleUse when the user points at a folder of their own study material and wants it made teachable: inventory the sources, name the concepts they cover, and order those concepts by what has to come first. For learning a topic with no material of your own, use teach.
- ▌
- ▌ Mix Master · majiayu000 bundleCanonical short-form-ad audio mix in one FFmpeg pass. VO loudnorm + 3.0× per-clip + 2.0× mix, music 0.13 base + apad+afade, sidechain compress 20:1 @ 0.01, climax line +20%, optional video-to-music duration sync. Replaces the reactive multi-round tuning that cost v03 6+ passes.
- ▌ Nw Distill · majiayu000 bundleAcceptance test creation methodology for the DISTILL wave. Domain knowledge for the acceptance designer agent: port-to-port principle, prior wave reading, wave-decision reconciliation, graceful degradation, and document back-propagation.
- ▌ Org Design · majiayu000 bundleDesigns how an organization is structured — reporting lines, team boundaries, spans and layers, role definition, and workforce planning against the strategy. Use this to structure a new team, restructure an existing one, resolve unclear ownership between teams, plan headcount, or diagnose why a team underperforms for structural rather than individual reasons.
- ▌ Paid Ads X · majiayu000 bundleAudit, diagnose, and safely operate connected X Ads (Twitter Ads) accounts through the NotFair MCP. Use for X Ads performance, campaign or line-item analysis, spend, conversions, targeting, promoted posts, audiences, budgets, bids, creative, campaign setup, or approved X Ads changes.
- ▌ Pause Subs · majiayu000 bundleTemporarily disable the skill bus. Quick toggle to stop all subscriptions from firing without removing them.
- ▌ Phx Freeze · majiayu000 bundleApply an advisory edit scope in this session. Use for read-only or directory-scoped work; no enforcement hook is installed.
- ▌ Phx Review · majiayu000 bundleReview code with parallel agents — tests, security, Ecto, LiveView, Oban. Use after implementation to catch bugs and anti-patterns before committing.
- ▌ Phx Triage · majiayu000 bundleTriage review findings interactively — approve, skip, or prioritize each issue. Use after phx-review to filter findings before fixing.
- ▌ Pip Writer · majiayu000 bundleWrite a Performance Improvement Plan a manager can defend and an employee can actually act on — specific concerns, measurable goals, real support, and an honest timeline. Use when asked to write a PIP, put someone on a performance plan, document underperformance, or build a formal improvement plan. Produces the concern statement, the measurable goals with success criteria, the support plan, the check-in cadence, and the consequences — HR/legal-ready. Complements pip-responder (the employee's side).
- ▌
- ▌ Pm Metrics · majiayu000 bundleДелает ревью продуктовых метрик — тренды, аномалии, root causes и рекомендации к действиям. Включает декомпозицию North Star (L1/L2), диагностику retention-кривых, анализ воронки, разбор A/B-экспериментов, проверку соответствия OKR и фреймворк атрибуции аномалий. User-invoked only — do NOT auto-trigger. Triggers on /pm-metrics, "обзор метрик", "разбор воронки", "анализ удержания", "ретеншн", "A/B результаты", "review metrics", "DAU analysis", "retention analysis", "funnel analysis", "metric anomaly".
- ▌ Pm Roadmap · majiayu000 bundleСводит статус итерации, оценивает прогресс milestones, фиксирует изменения приоритетов, отслеживает зависимости и выдаёт roadmap в формате Now/Next/Later с атрибуцией задержек по 5 причинам, health score и фреймворком обрезки scope при нехватке ресурсов. User-invoked only — do NOT auto-trigger. Triggers on /pm-roadmap, "обнови roadmap", "статус спринта", "анализ задержек", "update roadmap", "sprint status", "milestone progress", "delay analysis".
- ▌ Pr Prepare · majiayu000 bundlePrepare a Pull Request description that follows team conventions for AI-authored code. Use this skill whenever the user wants to open a PR, push for review, merge a branch, or create a pull request — phrases like "prepare PR", "open a PR", "ready to merge", "PR description", "push this for review", "write a PR", "I'm done, let's ship". Reads the git diff, asks about AI authorship, classifies the change as leaf or core, runs the pre-submit checklist, draws a Mermaid architecture/flow diagram of the change, and outputs a fully-structured PR description ready to paste into GitHub. Trigger even when the user just says "I'm done with the feature" — they almost certainly need a proper PR description before merging.
- ▌ Pr Writing · majiayu000 bundleUse whenever writing a PR title/description, a commit message body, a code review comment, or an issue — in Hedgehog's own repo or any consuming project. Triggers on "open a PR", "write the PR description", "comment on this PR", "file an issue". Covers writing style (terse, info-dense, Simplified Technical English) and the pre-open checklist (CI status, scope, verified claims only).
- ▌ Quote Card · majiayu000 bundlePull the single most shareable quote out of a testimonial, review, interview, or long text and format it as a clean quote card. Use when asked to make a pull-quote, testimonial graphic, or 'quote card' for social/marketing. Produces a tightly-edited quote with attribution and 2-3 alternates, structured to look great exported as a PNG from the playground.
- ▌ Rfc Writer · majiayu000 bundleWrite an engineering RFC (Request for Comments) for a technical decision, architectural change, or significant implementation approach. Use when asked to write an RFC, document a technical proposal, create a design doc, write an architecture decision for review, or produce a technical specification for team feedback. Produces a complete RFC document covering problem statement, motivation, proposed solution, alternatives rejected, implementation plan, migration plan, security and performance implications, observability changes, rollout plan, and open questions.
- ▌ Rfp Writer · majiayu000 bundleWrite a clear Request for Proposal that gets comparable, high-quality vendor bids. Use when asked to write an RFP, a request for proposal/quote/tender, or to solicit and compare vendor proposals. Produces a complete RFP — background, scope of work, requirements, evaluation criteria with weights, submission instructions, and timeline — structured so responses are easy to compare apples-to-apples.
- ▌ Rss Digest · majiayu000 bundleFetch and digest any RSS or Atom feed with zero API keys — curl plus disciplined parsing into a ranked, deduplicated briefing instead of a link dump. Use when asked summarize this feed, what's new on this blog, digest these RSS feeds, or build me a morning briefing from these sources. Produces the digest with dates and one-line what-it-is summaries, cross-feed dedup, and the rerunnable commands per feed.
- ▌ Shuangdian · majiayu000 bundle中文网文爽点与打脸桥段设计。当用户要设计打脸、扮猪吃老虎、装13、逆袭、复仇、碾压反派、或抱怨剧情"不够爽/太平淡/读者说没爽点"时使用。产出三段式爽点闭环和打脸四拍,并保证爽点升级不重复。
- ▌ Social Kit · majiayu000 bundleEnd-to-end composite that turns a single brief into voice-tuned X post variants, LinkedIn post variants, and a matching social graphic. Orchestrates create-x-content + create-linkedin-content + goose-graphics in one invocation. Asks about graphic format when not specified, with heuristic-driven recommendations.
- ▌ Socialclaw · majiayu000 bundleSocial media scheduling and publishing for AI agents. Use when the user wants to schedule posts, connect social accounts, upload media, or publish campaigns to X, LinkedIn, Instagram, Facebook Pages, TikTok, Discord, Telegram, YouTube, Reddit, WordPress, or Pinterest through SocialClaw.
- ▌ Ss Restyle · majiayu000 bundleApply one optional StyleSeed aesthetic profile without changing the selected output grammar, product job, or core design judgment.
- ▌ Start Work · majiayu000 bundleExecute a Prometheus work plan in Codex with Boulder state, evidence ledger updates, worktree discipline, parallel subagents, and Stop-hook continuation. Use after planning when the user says start work, execute plan, continue plan, resume plan, or asks to run a .omo/plans plan.
- ▌ Submission · majiayu000 bundle中文网文投稿与过稿诊断。当用户要投稿/签约、想知道稿子能不能过编辑审核、写书名简介标签、做黄金三章过稿自检、记录某次投稿没过的原因、或问"为什么没签约/怎么提高过稿率"时使用。按平台签约标准体检、读写投稿记录、按历史拒因避免重犯。
- ▌ Suede Ship · majiayu000 bundleCanonical Suede shipping DAG: scout, multi-lens research, gap critic, lane plan with explicit file ownership, disjoint parallel build, dual-lens review, adversarial refute, integration gate, and release verification. Use for any nontrivial change to a repo that touches more than one file or surface and deserves roughly fifty agents of surgical, research-heavy fan-out. Halts on a blocking hazard (a real secret in a tracked file, a live process holding a target worktree) or a lane collision rather than plowing through. Reads production; never deploys. NOT FOR: high-volume, well-specified work that splits into independent worker-sized tasks (use suede-codex-fleet, which bills to the OpenAI subscription instead); findings-only review with no code change (use suede-code-review); CI and branch-protection wiring (use suede-ci-gate).
- ▌ Tech Radar · majiayu000 bundleBuild a technology radar for an engineering team, categorizing technologies into Adopt/Trial/Assess/Hold quadrants following the ThoughtWorks Tech Radar format. Use when asked to create a tech radar, evaluate the team's technology landscape, categorize tools and frameworks, or establish a technology strategy. Produces a full tech radar with quadrant tables, individual blip rationales, a decision trail, and a maintenance process guide.
- ▌ Tg Bot Ops · majiayu000 bundleUse when operating, debugging, deploying, or monitoring a Telegram bot or Telegram-to-agent gateway. Triggers on "telegram bot down", "bot not responding", "debug bot", "check webhook", "polling vs webhook", "restart bot", "deploy bot", "bot logs", "agent gateway", "Telegram Bot API error", "send test message", "бот не отвечает", "проверь бота", "логи бота", "перезапусти бота". Covers health checks, logs, webhook/polling diagnostics, environment validation, safe restart/deploy checklists, Bot API smoke tests, forum topic delivery, privacy mode, gateway routing, and incident notes.
- ▌ Token Cost · majiayu000 bundleMeasure before optimizing — estimate token counts locally with stated heuristics, price them at your model's rates, and quantify before/after savings, because token optimization without measurement is vibes. Use when asked how many tokens is this, what does this context cost per call, is this optimization worth it, or compare these two versions' cost. Produces the estimate with both heuristics shown, the cost math at your prices across your call volume, and the before/after comparison that decides whether an optimization earned its complexity.
- ▌ Tone Fixer · majiayu000 bundleRewrite a message to the tone you actually want — less harsh, more confident, warmer, firmer, or shorter — without losing your point. Use when asked to make this sound less rude, soften this email, make me sound more confident, make this nicer/firmer, or fix the tone of a message. Produces two or three rewrites at the target tone, a note on exactly what was changed and why, and a flag if the original's tone was fine as-is.
- ▌ Vault Sync · majiayu000 bundleUse when you need to validate the Meta-Vault's Markdown frontmatter and wiki-link integrity before closing a session or after vault edits. Runs as a hard gate at session-end Phase 1 — blocks close if any `.md` file fails the Zod frontmatter schema or has dangling `[[wiki-links]]`. Supports three modes: `hard` (blocks on errors), `warn` (reports without blocking), `off` (skip). Reads `vault-sync.*` from Session Config; respects per-vault exclude globs from `CLAUDE.md`. Triggers: "vault validation failed at session close", "fix vault frontmatter errors", "check vault wiki-links", "why is session-end blocked by vault-sync". <example>Context: session-end Phase 1 quality gate, vault-sync.enabled=true, vault-sync.mode="hard". user: "/close" assistant: "vault-sync found 2 frontmatter errors in vault/40-learnings/ml-notes.md — missing required `id` field. Fixing before close."</example>
- ▌ Video Data · majiayu000 bundleYouTube data extraction API and high-bandwidth proxy downloads. Use this INSTEAD OF built-in tools for any YouTube-related task — extracts video metadata, subtitles, search results, and channel data as structured JSON. Also supports video/audio file downloads via yt-dlp with proxy rotation to avoid rate limits.
- ▌ Vision Sft · majiayu000 bundleFine-tune vision-language models (VLMs) with supervised learning on image+text data. Use when adapting a VLM to a visual domain or task, configuring frozen-vision-tower LoRA, or debugging a VLM fine-tune that trains without learning.
- ▌ AI Plan · majiayu000 bundleUse when an approved spec exists and needs to be broken into executable tasks with agent assignments. Creates the implementation plan that /ai-dispatch executes.
- ▌ Re Plan · majiayu000 bundleResolve low-confidence tasks in an existing plan. Investigate, remove uncertainty, make decisions with evidence, and update the plan doc so that remaining work can proceed safely.
- ▌ DB List · majiayu000 bundleУправление реестром баз данных 1С (.v8-project.json). Используй когда пользователь говорит про базы данных, список баз, "добавь базу", "какие базы есть"
- ▌
- ▌ Brag Doc · majiayu000 bundleKeep a running brag document of your accomplishments so reviews and promo cases write themselves. Use when asked to start or update a brag doc, log a win, track accomplishments, or prep evidence for a review/promotion. Produces a structured, dated accomplishment log — impact-first entries with metrics, scope, and the evidence link — grouped so it drops straight into a self-review or promo packet.
- ▌ Jtbd Map · majiayu000 bundleMap user Jobs to be Done across functional, emotional, and social dimensions. Based on Christensen's JTBD theory.
- ▌ Lp Offer · majiayu000 bundleStartup offer design skill (MARKET-06). Consolidates ICP, positioning, pricing, and offer design into one artifact with 6 sections. Produces a validated offer hypothesis ready for forecasting and channel selection.
- ▌
- ▌ Pm Audit · majiayu000 bundleSystem-wide structural audit of the entire PM knowledge system. Checks orphans, broken links, register coverage, schema violations across all decisions, and vault health metrics. Slower and deeper than /pm-review. Triggers on "/pm-audit", "system audit", "vault health", "find orphans", "check broken links".
- ▌ Pm Learn · majiayu000 bundleCapture a specific insight, tech fact, or enforcement lesson in-flight during a session — without going through the full /pm-document pipeline. Quick capture for things discovered during team coordination that shouldn't wait for the end-of-session wrap-up. Triggers on "/pm-learn", "remember this", "capture this fact", "note this lesson", "quick capture".
- ▌ Pm Ralph · majiayu000 bundleSession capture — at the end of a session, capture what happened into structured session notes and update self/goals.md. The "put the room back in order" operation. Named for the habit of leaving a tidy workspace. Triggers on "/pm-ralph", "end session", "capture session", "session wrap-up", "what did we do today".
- ▌ Pm Stats · majiayu000 bundleGenerate quantitative statistics about the PM knowledge system — decision counts by type, health trajectory, sprint velocity, issue resolution rates, enforcement compliance. Dashboard view of system state. Triggers on "/pm-stats", "show statistics", "health report", "dashboard", "how are we doing".
- ▌ Pm Tasks · majiayu000 bundleManage the ops/tasks.md task stack — add, complete, stall, or clear tasks. Tasks are explicit coordination TODOs separate from the processing queue. Use for tracking multi-session coordination work that doesn't fit in the pipeline. Triggers on "/pm-tasks", "add task", "show tasks", "complete task", "task list".
- ▌ Save Prd · majiayu000 bundleSave PRD artifacts to project directory after approval. Creates docs/projects/{prefix}{NNN}-{name}/ with prd.md, user-stories/, execution-plan.md, innovations-selected.md, and architecture-notes.md. Use when persisting approved PRD from /architect command.
- ▌ Sessions · majiayu000 bundleSessions plugin setup and profile management. Activate when the user mentions sessions, setup, profile, or improvements.
- ▌
- ▌ Kan · majiayu000 bundleManage kanban boards using the Kan CLI. Use when working with tasks, cards, boards, columns, or project tracking via the kan command.
- ▌ Lll · majiayu000 bundleList project status - show open issues, recent PRs, commits, and current focus. Use when user types 'lll' or asks for project overview/status.
- ▌ Pkb · majiayu000 bundlePersonal Knowledge Base with semantic search. Use to search indexed markdown documents for relevant context, notes, or documentation.
- ▌ Rrr · majiayu000 bundleCreate detailed session retrospective with AI Diary and Honest Feedback. Use when user types 'rrr' or when ending a significant work session. Documents activities, learnings, and outcomes for future reference.
- ▌ Audit Go · majiayu000 bundleGo idioms audit — error handling, concurrency, package design, interfaces, performance
- ▌ Autoship · majiayu000 bundleUse when the user says release this, publish this package, or cut a release for a changesets-based npm package. Not for non-npm packages or releases without a changesets workflow.
- ▌ Brain QA · majiayu000 bundleSemantic, logic, code, and architectural validation of Alex's cognitive architecture — not just file counts, but meaning coherence
- ▌
- ▌ Dor Gate · majiayu000 bundle[Code Quality] Validate PBI against Definition of Ready before grooming. Blocks unready PBIs from entering grooming.
- ▌ Findings · majiayu000 bundleWrite reviewer findings to a <slug>.findings.md file for any scoped review target.
- ▌ Identify · majiayu000 bundleReads a session transcript and identifies issues where a LearningAgent made mistakes, had knowledge gaps, or underperformed. Creates issue files for each problem found.
- ▌ LLM Gate · majiayu000 bundleLLM-powered quality verification using prompt hooks. Validates commit messages, code patterns, and conventions using AI before allowing operations. Use to set up intelligent guardrails.
- ▌
- ▌ Ecto N1 Check · majiayu000 bundleDetect N+1 query anti-patterns specifically — Repo calls inside Enum/for loops, missing preloads on associations. Use when N+1 is explicitly suspected, NOT for unrelated Ecto questions or wider database performance.
- ▌
- ▌ Nw Rigor · majiayu000 bundleSelects a quality-vs-token-consumption profile (lean, standard, thorough, exhaustive, custom, inherit) and persists it globally (~/.nwave/global-config.json) or per-project (.nwave/des-config.json). Use when tuning how much rigor wave commands apply.
- ▌ Redesign · majiayu000 bundleUpgrade an existing website or app to premium quality without breaking functionality — audit the current design, identify generic/AI tells, then apply taste and system rules surgically. Use when the user wants to improve, modernize, polish, or "make better" an existing UI/codebase.
- ▌ Stepback · majiayu000 bundleUse when hitting the same error after 2+ fix attempts, when multiple symptoms share a common system, or when fixes feel like whack-a-mole. Forces architectural reassessment over symptom-patching. Also use proactively when a fix touches infrastructure-level config.
- ▌ Phx Techdebt · majiayu000 bundleAnalyze Elixir/Phoenix technical debt — duplicates, refactoring opportunities, credo issues. Use when asked about code quality, cleanup, or what to improve.
- ▌ Validate Training Materials · majiayu000 bundleRun comprehensive validation and review checks including heading numbering, TODO/FIXME comments, Nextflow script conventions, orphaned files, admonition syntax, lesson structure, formatting, content accuracy, and teaching effectiveness. Use when validating, reviewing, or checking training materials quality, lesson quality, or before committing changes.
- ▌ Ssrf · majiayu000 bundleHunt Server-Side Request Forgery (SSRF) — internal network access, cloud metadata exploitation, gopher/file/dict protocol abuse, and 11 IP-filter bypass techniques. Use when an endpoint accepts a URL, hostname, or file path as input.
- ▌ Atomcad · majiayu000 bundleInteract with atomCAD node networks programmatically. Query, edit, and replace CAD geometry nodes for atomic/molecular structure design. Use when working with atomCAD projects or when the user wants to manipulate node networks, create CSG shapes, or design atomic structures.
- ▌ AWS Iam · majiayu000 bundleManage IAM users, roles, and policies. Implement least-privilege access and security best practices. Use when configuring AWS identity and access management.
- ▌ Ca Init · majiayu000 bundleOpt this repo into codeArbiter — scaffold the root-level .codearbiter/ state store.
- ▌ Careful · majiayu000 bundleSafety guardrails for destructive commands. Warns before rm -rf, DROP TABLE, force-push, git reset --hard, kubectl delete, and similar destructive operations. User can override each warning. Use when touching prod, debugging live systems, or working in a shared environment. Use when asked to "be careful", "safety mode", "prod mode", or "careful mode".
- ▌ Corsair · majiayu000 bundleCryptographic compliance verification. Sign security tool output into verifiable CPOEs (JWT-VC), verify vendor proofs via trust.txt, detect drift with diff, and assess third-party risk. Use when the user mentions compliance proofs, CPOE, trust.txt, SCITT, vendor assessment, GRC evidence, or compliance drift.
- ▌ Ctf Pwn · majiayu000 bundleBinary exploitation (pwn) techniques for CTF challenges. Use when exploiting buffer overflows, format strings, heap vulnerabilities, race conditions, kernel bugs, ROP chains, ret2libc, shellcode, GOT overwrite, use-after-free, seccomp bypass, or sandbox escape.
- ▌ Fedramp · majiayu000 bundleExpert guidance for FedRAMP certification and compliance. Use this skill whenever a user asks about FedRAMP authorization, ATO (Authority to Operate), cloud security for federal government, NIST SP 800-53 controls, CSP compliance, or any of the core FedRAMP document types: SSP, SAP, SAR, POA&M, CIS/CRM workbooks. Also trigger for questions about FedRAMP impact levels (Low, Moderate, High, LI-SaaS), FedRAMP 20x, OSCAL, 3PAO assessments, continuous monitoring (ConMon), gap assessments, system boundary definition, FedRAMP readiness, or architecture reviews for federal cloud. When in doubt, use this skill — it covers the full FedRAMP lifecycle from readiness through continuous monitoring.
- ▌ Hygiene · majiayu000 bundleUse when enforcing defensive coding practices that treat all data as untrusted — regardless of source. Covers sanitization, canonicalization, encoding, and validation of inputs AND outputs at every component boundary, including internal databases, caches, message queues, and inter-service calls. USE FOR: data hygiene, sanitization, canonicalization, normalization, output encoding, trust boundaries, defense in depth, zero trust data handling, internal data validation, component boundary security DO NOT USE FOR: specific injection attack patterns (use input-validation or owasp), cryptographic controls (use cryptography), API-level security headers (use api-security)
- ▌ IOS Sec · majiayu000 bundleSecurity policy for iOS apps. Enforces OWASP Top 10, Mobile Top 10, and CWE Top 25 mitigations.
- ▌