all publishers

onfire7777

@onfire7777 source repo

968 published skills · page 4 of 10

  1. ▌
    Algorand Vulnerability Scanner · onfire7777 bundle
    Scans Algorand smart contracts for 11 common vulnerabilities including rekeying attacks, unchecked transaction fees, missing field validations, and access control issues. Use when auditing Algorand projects (TEAL/PyTeal).
    7 installs
  2. ▌
    Bayesian Reasoning Calibration · onfire7777 bundle
    Use when making predictions or judgments under uncertainty and need to explicitly update beliefs with new evidence. Invoke when forecasting outcomes, evaluating probabilities, testing hypotheses, calibrating confidence, assessing risks with uncertain data, or avoiding overconfidence bias. Use when user mentions priors, likelihoods, Bayes theorem, probability updates, forecasting, calibration, or belief revision.
    2 installs
  3. ▌
    CLI Windows Powershell Mastery · onfire7777
    Comprehensive command-line expertise across Bash, PowerShell, Windows CMD, and cross-platform terminal operations for maximum productivity and system control.
    8 installs
  4. ▌
    Data Schema Knowledge Modeling · onfire7777 bundle
    Use when designing database schemas, need to model domain entities and relationships clearly, building knowledge graphs or ontologies, creating API data models, defining system boundaries and invariants, migrating between data models, establishing taxonomies or hierarchies, user mentions "schema", "data model", "entities", "relationships", "ontology", "knowledge graph", or when scattered/inconsistent data structures need formalization.
    6 installs
  5. ▌
    Decomposition Planning Roadmap · onfire7777 bundle
    Creates step-by-step decomposition plans and migration roadmaps for breaking apart monolithic applications. Use when asking "what order should I extract services?", "plan my migration", "create a decomposition roadmap", "prioritize what to split", "monolith to microservices strategy", or tracking decomposition progress. Do NOT use for domain analysis (use domain-analysis) or component sizing (use component-identification-sizing).
    7 installs
  6. ▌
    Finishing A Development Branch · onfire7777
    Use when implementation is complete, all tests pass, and you need to decide how to integrate the work - guides completion of development work by presenting structured options for merge, PR, or cleanup
    8 installs
  7. ▌
    HTML Ppt Hermes Cyber Terminal · onfire7777 bundle
    Create dark cyber-terminal review decks with command-line framing, alert tiers, trace views, and benchmark-friendly layouts.
    3 installs
  8. ▌
    HTML Ppt Presenter Mode Reveal · onfire7777 bundle
    Create presenter-mode HTML decks with speaker notes, timer, next-slide preview, theme switching, and keyboard controls.
    3 installs
  9. ▌
    Retrieval Search Orchestration · onfire7777 bundle
    Use when designing retrieval strategies for querying knowledge graphs in RAG systems. Invoke when user mentions retrieval strategy, search orchestration, global-first retrieval, local-first retrieval, U-shaped retrieval, query decomposition, multi-hop reasoning, provenance tracking, or citation in GraphRAG. Provides retrieval pattern selection, query rewriting, and provenance design.
    5 installs
  10. ▌
    Thinking Theory Of Constraints · onfire7777
    Identify and manage the bottleneck; improvements elsewhere don't matter until the constraint is addressed. Use for performance optimization, process improvement, and resource allocation.
    5 installs
  11. ▌
    Verification Before Completion · onfire7777
    Use when about to claim work is complete, fixed, or passing, before committing or creating PRs - requires running verification commands and confirming output before making any success claims; evidence before assertions always
    4 installs
  12. ▌
    Visualization Choice Reporting · onfire7777 bundle
    Use when you need to choose the right visualization for your data and question, then create a narrated report that highlights insights and recommends actions. Invoke when analyzing data for patterns (trends, comparisons, distributions, relationships, compositions), building dashboards or reports, presenting metrics to stakeholders, monitoring KPIs, exploring datasets for insights, communicating findings from analysis, or when user mentions "visualize this", "what chart should I use", "create a dashboard", "analyze this data", "show trends", "compare these metrics", "report on", "what does this data tell us", or needs to turn data into actionable insights. Apply to business analytics (revenue, growth, churn, funnel, cohort, segmentation), product metrics (usage, adoption, retention, feature performance, A/B tests), marketing analytics (campaign ROI, attribution, funnel, customer acquisition), financial reporting (P&L, budget, forecast, variance), operational metrics (uptime, performance, capacity, SLA), sales
    4 installs
  13. ▌
    Chain Roleplay Debate Synthesis · onfire7777 bundle
    Use when facing decisions with multiple legitimate perspectives and inherent tensions. Invoke when stakeholders have competing priorities (growth vs. sustainability, speed vs. quality, innovation vs. risk), need to pressure-test ideas from different angles before committing, exploring tradeoffs between incompatible values, synthesizing conflicting expert opinions into coherent strategy, or surfacing assumptions that single-viewpoint analysis would miss.
    7 installs
  14. ▌
    Component Identification Sizing · onfire7777 bundle
    Maps architectural components in a codebase and measures their size to identify what should be extracted first. Use when asking "how big is each module?", "what components do I have?", "which service is too large?", "analyze codebase structure", "size my monolith", or planning where to start decomposing. Do NOT use for runtime performance sizing or infrastructure capacity planning.
    5 installs
  15. ▌
    Deliberation Debate Red Teaming · onfire7777 bundle
    Use when testing plans or decisions for blind spots, need adversarial review before launch, validating strategy against worst-case scenarios, building consensus through structured debate, identifying attack vectors or vulnerabilities, user mentions "play devil's advocate", "what could go wrong", "challenge our assumptions", "stress test this", "red team", or when groupthink or confirmation bias may be hiding risks.
    7 installs
  16. ▌
    Design Resources For Developers · onfire7777 bundle
    Use when selecting design and UI resources for frontend work, including UI graphics, fonts, color tools, icons, logos, favicons, stock photos, videos, sound effects, vectors, mockups, HTML/CSS templates, CSS frameworks, animation/chart libraries, UI kits, React/Vue/Angular/Svelte/React Native UI libraries, design systems, design tools, inspiration, compression tools, browser extensions, and AI graphic design tools. This is a locally integrated mirror of bradtraversy/design-resources-for-developers.
    5 installs
  17. ▌
    Internet Search Parsing Mastery · onfire7777
    Advanced internet search techniques, web content extraction, OSINT methodology, fact-checking, and information synthesis for finding and parsing the best information from the web.
    4 installs
  18. ▌
    Mapping Visualization Scaffolds · onfire7777 bundle
    Use when complex systems need visual documentation, mapping component relationships and dependencies, creating hierarchies or taxonomies, documenting process flows or decision trees, understanding system architectures, visualizing data lineage or knowledge structures, planning information architecture, or when user mentions concept maps, system diagrams, dependency mapping, relationship visualization, or architecture blueprints.
    3 installs
  19. ▌
    Python Performance Optimization · onfire7777
    Profile and optimize Python code using cProfile, memory profilers, and performance best practices. Use when debugging slow Python code, optimizing bottlenecks, or improving application performance.
    7 installs
  20. ▌
    Substrate Vulnerability Scanner · onfire7777 bundle
    Scans Substrate/Polkadot pallets for 7 critical vulnerabilities including arithmetic overflow, panic DoS, incorrect weights, and bad origin checks. Use when auditing Substrate runtimes or FRAME pallets.
    3 installs
  21. ▌
    Dialectical Mapping Steelmanning · onfire7777 bundle
    Use when debates are trapped in false dichotomies, polarized positions need charitable interpretation, tradeoffs are obscured by binary framing, synthesis beyond 'pick one side' is needed, or when users mention steelman arguments, thesis-antithesis-synthesis, Hegelian dialectic, third way solutions, or resolving seemingly opposed principles.
    6 installs
  22. ▌
    Environmental Scanning Foresight · onfire7777 bundle
    Use when scanning external trends for strategic planning, monitoring PESTLE forces (Political, Economic, Social, Technological, Legal, Environmental), detecting weak signals (early indicators of change), planning scenarios for multiple futures, setting signposts and indicators for early warning, or when user mentions environmental scanning, horizon scanning, trend analysis, scenario planning, strategic foresight, futures thinking, or emerging issues monitoring.
    5 installs
  23. ▌
    Long Term Consequential Thinking · onfire7777
    Deep temporal reasoning skill for tracing the long-term consequences of decisions, identifying slow-moving forces that will reshape the landscape, and making choices that optimize for enduring value rather than immediate gratification. Use when making decisions with consequences beyond the current quarter, when evaluating technology bets, when designing systems that need to last, when the user asks about long-term implications, or when you sense that short-term thinking is driving a bad decision. Combines futures thinking, consequence mapping, temporal discounting correction, and legacy-aware decision-making.
    4 installs
  24. ▌
    Supabase Postgres Best Practices · onfire7777 bundle
    Postgres performance optimization and best practices from Supabase. Use this skill when writing, reviewing, or optimizing Postgres queries, schema designs, or database configurations.
    4 installs
  25. ▌
    Building Cloud Siem With Sentinel · onfire7777 bundle
    This skill covers deploying Microsoft Sentinel as a cloud-native SIEM and SOAR platform for centralized security operations. It details configuring data connectors for multi-cloud log ingestion, writing KQL detection queries, building automated response playbooks with Logic Apps, and leveraging the Sentinel data lake for petabyte-scale threat hunting across AWS, Azure, and GCP security telemetry.
    7 installs
  26. ▌
    Customer Journey Mapping Workshop · onfire7777
    Run a customer journey mapping workshop with adaptive questions and outputs. Use when you need to map stages, actions, emotions, pain points, and opportunities for a persona and scenario.
    5 installs
  27. ▌
    HTML Ppt Knowledge Arch Blueprint · onfire7777 bundle
    Create cream-and-blueprint architecture decks with structured pipeline diagrams, callouts, and print-friendly technical layouts.
    3 installs
  28. ▌
    HTML Ppt Obsidian Claude Gradient · onfire7777 bundle
    Create GitHub-dark gradient decks for developer workflows, agents, MCP systems, and technical tutorials.
    3 installs
  29. ▌
    It Infrastructure Sysadmin Engine · onfire7777
    Comprehensive IT infrastructure, system administration, networking, troubleshooting, Active Directory, DNS, DHCP, virtualization, cloud infrastructure, and IT automation expertise.
    7 installs
  30. ▌
    Saas Economics Efficiency Metrics · onfire7777 bundle
    Evaluate SaaS unit economics and capital efficiency. Use when deciding whether the business can scale efficiently or needs correction.
    3 installs
  31. ▌
    Conducting Cloud Incident Response · onfire7777 bundle
    Responds to security incidents in cloud environments (AWS, Azure, GCP) by performing identity-based containment, cloud-native log analysis, resource isolation, and forensic evidence acquisition adapted for ephemeral cloud infrastructure. Activates for requests involving cloud incident response, AWS security incident, Azure compromise, GCP breach, cloud forensics, or cloud identity compromise.
    3 installs
  32. ▌
    Wireshark Network Traffic Analysis · onfire7777
    This skill should be used when the user asks to "analyze network traffic with Wireshark", "capture packets for troubleshooting", "filter PCAP files", "follow TCP/UDP streams", "detect network anomalies", "investigate suspicious traffic", or "perform protocol analysis". It provides comprehensive techniques for network packet capture, filtering, and analysis using Wireshark.
    6 installs
  33. ▌
    Building Incident Response Playbook · onfire7777 bundle
    Designs and documents structured incident response playbooks that define step-by-step procedures for specific incident types aligned with NIST SP 800-61r3 and SANS PICERL frameworks. Covers playbook structure, decision trees, escalation criteria, RACI matrices, and integration with SOAR platforms. Activates for requests involving IR playbook creation, incident response procedure documentation, response runbook development, or SOAR playbook design.
    5 installs
  34. ▌
    Analyzing Network Packets With Scapy · onfire7777 bundle
    Craft, send, sniff, and dissect network packets using Scapy for protocol analysis, network reconnaissance, and traffic anomaly detection in authorized security testing
    5 installs
  35. ▌
    Conducting Malware Incident Response · onfire7777 bundle
    Responds to malware infections across enterprise endpoints by identifying the malware family, determining infection vectors, assessing spread, and executing eradication procedures. Covers the full lifecycle from detection through containment, analysis, removal, and recovery. Activates for requests involving malware response, malware eradication, trojan removal, worm containment, malware triage, or infected endpoint remediation.
    6 installs
  36. ▌
    Detecting SQL Injection Via Waf Logs · onfire7777 bundle
    Analyze WAF (ModSecurity/AWS WAF/Cloudflare) logs to detect SQL injection attack campaigns. Parses ModSecurity audit logs and JSON WAF event logs to identify SQLi patterns (UNION SELECT, OR 1=1, SLEEP(), BENCHMARK()), tracks attack sources, correlates multi-stage injection attempts, and generates incident reports with OWASP classification.
    7 installs
  37. ▌
    Introspection Self Reflection Engine · onfire7777
    Deep self-reflection, continuous self-improvement, and introspective analysis for identifying weaknesses, learning from mistakes, and evolving capabilities over time.
    5 installs
  38. ▌
    Translation Reframing Audience Shift · onfire7777 bundle
    Use when content must be translated between audiences with different expertise, context, or goals while preserving accuracy but adapting presentation. Invoke when technical content needs business framing (engineering decisions → executive summary), strategic vision needs tactical translation (board presentation → team OKRs), expert knowledge needs simplification (academic paper → blog post, medical diagnosis → patient explanation), formal content needs casual tone (annual report → social media post), long-form needs summarization (50-page doc → 1-page brief), internal content needs external framing (roadmap → public updates, bug tracking → known issues), cross-cultural adaptation (US idioms → international clarity, Gen Z → Boomer messaging), medium shifts (written report → presentation script, detailed spec → action checklist), or when user mentions "explain to", "reframe for", "translate this for [audience]", "make this more [accessible/formal/technical]", "adapt for [executives/engineers/customers]", "simpl
    4 installs
  39. ▌
    Conducting Phishing Incident Response · onfire7777 bundle
    Responds to phishing incidents by analyzing reported emails, extracting indicators, assessing credential compromise, quarantining malicious messages across the organization, and remediating affected accounts. Covers email header analysis, URL/attachment sandboxing, and mailbox-wide purge operations. Activates for requests involving phishing response, email incident, credential phishing, spear phishing investigation, or phishing remediation.
    6 installs
  40. ▌
    Hardening Docker Daemon Configuration · onfire7777 bundle
    Harden the Docker daemon by configuring daemon.json with user namespace remapping, TLS authentication, rootless mode, and CIS benchmark controls.
    7 installs
  41. ▌
    Implementing Ebpf Security Monitoring · onfire7777 bundle
    Implements eBPF-based security monitoring using Cilium Tetragon for real-time process execution tracking, network connection observability, file access auditing, and runtime enforcement. Covers TracingPolicy CRD authoring with kprobe/tracepoint hooks, in-kernel filtering via matchArgs/matchBinaries selectors, JSON event export, and integration with SIEM pipelines. Use when building kernel-level runtime security observability for Linux hosts or Kubernetes clusters.
    3 installs
  42. ▌
    Information Security Manager Iso27001 · onfire7777 bundle
    ISO 27001 ISMS implementation and cybersecurity governance for HealthTech and MedTech companies. Use for ISMS design, security risk assessment, control implementation, ISO 27001 certification, security audits, incident response, and compliance verification. Covers ISO 27001, ISO 27002, healthcare security, and medical device cybersecurity.
    4 installs
  43. ▌
    Top 100 Web Vulnerabilities Reference · onfire7777
    This skill should be used when the user asks to "identify web application vulnerabilities", "explain common security flaws", "understand vulnerability categories", "learn about injection attacks", "review access control weaknesses", "analyze API security issues", "assess security misconfigurations", "understand client-side vulnerabilities", "examine mobile and IoT security flaws", or "reference the OWASP-aligned vulnerability taxonomy". Use this skill to provide comprehensive vulnerability definitions, root causes, impacts, and mitigation strategies across all major web security categories.
    7 installs
  44. ▌
    Chain Estimation Decision Storytelling · onfire7777 bundle
    Use when making high-stakes decisions under uncertainty that require stakeholder buy-in. Invoke when evaluating strategic options (build vs buy, market entry, resource allocation), quantifying tradeoffs with uncertain outcomes, justifying investments with expected value analysis, pitching recommendations to decision-makers, or creating business cases with cost-benefit estimates. Use when user mentions "should we", "ROI analysis", "make a case for", "evaluate options", "expected value", "justify decision", or needs to combine estimation, decision analysis, and persuasive communication.
    4 installs
  45. ▌
    Implementing Attack Surface Management · onfire7777 bundle
    Implements external attack surface management (EASM) using Shodan, Censys, and ProjectDiscovery tools (subfinder, httpx, nuclei) for asset discovery, subdomain enumeration, service fingerprinting, and exposure scoring. Includes a weighted risk scoring algorithm based on OWASP attack surface analysis methodology and the Relative Attack Surface Quotient (RSQ). Use when building continuous ASM programs or performing external reconnaissance for security assessments.
    4 installs
  46. ▌
    Implementing Cloud Workload Protection · onfire7777 bundle
    Implements cloud workload protection using boto3 and google-cloud APIs for runtime security monitoring, process anomaly detection, and file integrity checking on EC2/GCE instances. Scans for cryptomining, reverse shells, and unauthorized binaries. Use when building runtime security controls for cloud compute workloads.
    5 installs
  47. ▌
    Deep Research Scholarly Analysis Engine · onfire7777
    Comprehensive research methodology combining scholarly research, scientific data analysis, evidence synthesis, source evaluation, and systematic review practices for producing research-grade outputs.
    2 installs
  48. ▌
    Implementing Code Signing For Artifacts · onfire7777 bundle
    This skill covers implementing code signing for build artifacts to ensure integrity and authenticity throughout the software supply chain. It addresses signing binaries, packages, and containers using GPG, Sigstore, and platform-specific signing tools, establishing trust chains, and verifying signatures in deployment pipelines.
    1 install
  49. ▌
    Implementing AWS Security Hub Compliance · onfire7777 bundle
    Implementing AWS Security Hub to aggregate security findings across AWS accounts, enable compliance standards like CIS AWS Foundations and PCI DSS, configure automated remediation with EventBridge and Lambda, and create custom security insights for organizational risk management.
    4 installs
  50. ▌
    Implementing Devsecops Security Scanning · onfire7777 bundle
    Integrates Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), and Software Composition Analysis (SCA) into CI/CD pipelines using open-source tools. Covers Semgrep for SAST, Trivy for SCA and container scanning, OWASP ZAP for DAST, and Gitleaks for secrets detection. Activates for requests involving DevSecOps pipeline setup, automated security scanning in CI/CD, SAST/DAST/SCA integration, or shift-left security implementation.
    4 installs
  51. ▌
    Implementing Mtls For Zero Trust Services · onfire7777 bundle
    Configures mutual TLS (mTLS) authentication between microservices using Python cryptography library for certificate generation and ssl module for TLS verification. Validates certificate chains, checks expiration, and audits mTLS deployment status. Use when implementing zero-trust service-to-service authentication.
    4 installs
  52. ▌
    Analyzing Ransomware Encryption Mechanisms · onfire7777 bundle
    Analyzes encryption algorithms, key management, and file encryption routines used by ransomware families to assess decryption feasibility, identify implementation weaknesses, and support recovery efforts. Covers AES, RSA, ChaCha20, and hybrid encryption schemes. Activates for requests involving ransomware cryptanalysis, encryption analysis, key recovery assessment, or ransomware decryption feasibility.
    4 installs
  53. ▌
    Implementing AWS Iam Permission Boundaries · onfire7777 bundle
    Configure IAM permission boundaries in AWS to delegate role creation to developers while enforcing maximum privilege limits set by the security team.
    4 installs
  54. ▌
    Implementing Cloud Dlp For Data Protection · onfire7777 bundle
    Implementing Cloud Data Loss Prevention (DLP) using Amazon Macie, Azure Information Protection, and Google Cloud DLP API to discover, classify, and protect sensitive data across cloud storage, databases, and data pipelines.
    5 installs
  55. ▌
    Implementing Delinea Secret Server For Pam · onfire7777 bundle
    Implements Delinea Secret Server for privileged access management (PAM) including secret vault configuration, role-based access policies, automated password rotation, session recording, and integration with Active Directory and cloud platforms. Activates for requests involving PAM deployment, privileged credential vaulting, secret server administration, or password rotation automation.
    7 installs
  56. ▌
    Conducting Memory Forensics With Volatility · onfire7777 bundle
    Performs memory forensics analysis using Volatility 3 to extract evidence of malware execution, process injection, network connections, and credential theft from RAM dumps captured during incident response. Covers memory acquisition, process analysis, DLL inspection, and malware detection. Activates for requests involving memory forensics, RAM analysis, Volatility framework, memory dump investigation, volatile evidence analysis, or live memory acquisition.
    4 installs
  57. ▌
    Detecting Insider Data Exfiltration Via Dlp · onfire7777 bundle
    Detects insider data exfiltration by analyzing DLP policy violations, file access patterns, upload volume anomalies, and off-hours activity in endpoint and cloud logs. Uses pandas for behavioral analytics and statistical baselines. Use when investigating insider threats or building user behavior analytics for data loss prevention.
    2 installs
  58. ▌
    Implementing Data Minimization Architecture · onfire7777 bundle
    Architecture patterns for GDPR Article 5(1)(c) data minimization and Article 25(1) data protection by design. Covers field-level encryption, data masking, aggregation, pseudonymization per Article 4(5), and anonymization per Recital 26. Includes ENISA pseudonymization techniques and a data minimization assessment matrix.
    5 installs
  59. ▌
    Conducting Internal Network Penetration Test · onfire7777 bundle
    Execute an internal network penetration test simulating an insider threat or post-breach attacker to identify lateral movement paths, privilege escalation vectors, and sensitive data exposure within the corporate network.
    3 installs
  60. ▌
    Configuring Microsegmentation For Zero Trust · onfire7777 bundle
    Configure microsegmentation policies to enforce least-privilege workload-to-workload access using tools like VMware NSX, Illumio, and Calico, preventing lateral movement in zero trust architectures.
    3 installs
  61. ▌
    Implementing API Security Posture Management · onfire7777 bundle
    Implement API Security Posture Management to continuously discover, classify, and score APIs based on risk while enforcing security policies across the API lifecycle.
    3 installs
  62. ▌
    Implementing Ddos Mitigation With Cloudflare · onfire7777 bundle
    Configure Cloudflare DDoS protection with managed rulesets, rate limiting, WAF rules, Bot Management, and origin protection to mitigate volumetric, protocol, and application-layer attacks.
    3 installs
  63. ▌
    Conducting Social Engineering Penetration Test · onfire7777 bundle
    Design and execute a social engineering penetration test including phishing, vishing, smishing, and physical pretexting campaigns to measure human security resilience and identify training gaps.
    3 installs
  64. ▌
    Implementing Cloud Security Posture Management · onfire7777 bundle
    Implementing Cloud Security Posture Management (CSPM) to continuously monitor multi-cloud environments for misconfigurations, compliance violations, and security risks using Prowler, ScoutSuite, AWS Security Hub, Azure Defender, and GCP Security Command Center.
    9 installs
  65. ▌
    Implementing Beyondcorp Zero Trust Access Model · onfire7777 bundle
    Implementing Google's BeyondCorp zero trust access model to eliminate implicit trust from the network perimeter, enforce identity-aware access controls using IAP, Access Context Manager, and Chrome Enterprise Premium for VPN-less secure application access.
    3 installs
  66. ▌
    Building Ransomware Playbook With Cisa Framework · onfire7777 bundle
    Builds a structured ransomware incident response playbook aligned with the CISA StopRansomware Guide and NIST Cybersecurity Framework. Covers preparation, detection, containment, eradication, recovery, and post-incident phases with actionable checklists. Activates for requests involving ransomware response planning, CISA compliance, incident response playbook creation, or ransomware preparedness assessment.
    6 installs
  67. ▌
    Implementing File Integrity Monitoring With Aide · onfire7777 bundle
    Configure AIDE (Advanced Intrusion Detection Environment) for file integrity monitoring including baseline creation, scheduled integrity checks, change detection, and alerting
    5 installs
  68. ▌
    Implementing Identity Verification For Zero Trust · onfire7777 bundle
    Implement continuous identity verification for zero trust using phishing-resistant MFA (FIDO2/WebAuthn), risk-based conditional access, and identity governance aligned with the CISA Zero Trust Maturity Model.
    5 installs
  69. ▌
    Implementing Azure Ad Privileged Identity Management · onfire7777 bundle
    Configure Microsoft Entra Privileged Identity Management to enforce just-in-time role activation, approval workflows, and access reviews for Azure AD privileged roles.
    6 installs
  70. ▌
    Implementing Deception Based Detection With Canarytoken · onfire7777 bundle
    Deploy and monitor Canary Tokens via the Thinkst Canary API for deception-based breach detection using web bug tokens, DNS tokens, document tokens, and AWS key tokens.
    5 installs
  71. ▌
    MCP Builder · onfire7777 bundle
    Guide for creating high-quality MCP (Model Context Protocol) servers that enable LLMs to interact with external services through well-designed tools. Use when building MCP servers to integrate external APIs or services, whether in Python (FastMCP) or Node/TypeScript (MCP SDK).
    4 installs
  72. ▌
    Negotiation · onfire7777 bundle
    Prepare and execute negotiations using tactical empathy, calibrated questions, and the Ackerman method. Use when the user mentions "salary negotiation", "contract terms", "handling objections", "mirroring and labeling", or "difficult conversation". Covers accusation audits, Black Swan discovery, and the "That's Right" technique. For persuasion in product/marketing, see influence-psychology.
    5 installs
  73. ▌
    Network 101 · onfire7777
    This skill should be used when the user asks to "set up a web server", "configure HTTP or HTTPS", "perform SNMP enumeration", "configure SMB shares", "test network services", or needs guidance on configuring and testing network services for penetration testing labs.
    7 installs
  74. ▌
    Performance · onfire7777
    Optimize web performance for faster loading and better user experience. Use when asked to "speed up my site", "optimize performance", "reduce load time", "fix slow loading", "improve page speed", or "performance audit".
    4 installs
  75. ▌
    Role Switch · onfire7777 bundle
    Use when stakeholders have conflicting priorities and need alignment, suspect decision blind spots from single perspective, need to pressure-test proposals before presenting, want empathy for different viewpoints (eng vs PM vs legal vs user), building consensus across functions, evaluating tradeoffs with multi-dimensional impact, or when user mentions "what would X think", "stakeholder alignment", "see from their perspective", "blind spots", or "conflicting interests".
    6 installs
  76. ▌
    Segment Cdp · onfire7777
    Expert patterns for Segment Customer Data Platform including Analytics.js, server-side tracking, tracking plans with Protocols, identity resolution, destinations configuration, and data governance best practices. Use when: segment, analytics.js, customer data platform, cdp, tracking plan.
    6 installs
  77. ▌
    Sharp Edges · onfire7777 bundle
    Identifies error-prone APIs, dangerous configurations, and footgun designs that enable security mistakes. Use when reviewing API designs, configuration schemas, cryptographic library ergonomics, or evaluating whether code follows 'secure by default' and 'pit of success' principles. Triggers: footgun, misuse-resistant, secure defaults, API usability, dangerous configuration.
    4 installs
  78. ▌
    Skill Judge · onfire7777 bundle
    Evaluate Agent Skills against official specifications and patterns derived from 17+ official examples. Use when reviewing, auditing, or improving SKILL.md files and skill packages. Provides multi-dimensional scoring and actionable improvement suggestions.
    4 installs
  79. ▌
    Spreadsheet · onfire7777 bundle
    Use when tasks involve creating, editing, analyzing, or formatting spreadsheets (`.xlsx`, `.csv`, `.tsv`) using Python (`openpyxl`, `pandas`), especially when formulas, references, and formatting need to be preserved and verified.
    5 installs
  80. ▌
    Statsmodels · onfire7777 bundle
    Statistical modeling toolkit. OLS, GLM, logistic, ARIMA, time series, hypothesis tests, diagnostics, AIC/BIC, for rigorous statistical inference and econometric analysis.
    6 installs
  81. ▌
    Taste Skill · onfire7777
    Senior UI/UX Engineer. Architect digital interfaces overriding default LLM biases. Enforces metric-based rules, strict component architecture, CSS hardware acceleration, and balanced design engineering.
    7 installs
  82. ▌
    Trigger Dev · onfire7777
    Trigger.dev expert for background jobs, AI workflows, and reliable async execution with excellent developer experience and TypeScript-first design. Use when: trigger.dev, trigger dev, background task, ai background job, long running task.
    6 installs
  83. ▌
    Ciso Advisor · onfire7777 bundle
    Security leadership for growth-stage companies. Risk quantification in dollars, compliance roadmap (SOC 2/ISO 27001/HIPAA/GDPR), security architecture strategy, incident response leadership, and board-level security reporting. Use when building security programs, justifying security budget, selecting compliance frameworks, managing incidents, assessing vendor risk, or when user mentions CISO, security strategy, compliance roadmap, zero trust, or board security reporting.
    7 installs
  84. ▌
    Collab Modes · onfire7777
    Set the collaboration style for a session — step-by-step (guided), deep-think (research-first recommendations), or pair (equal partners switching roles). Use when starting complex work, wanting a different interaction pattern, or when the current back-and-forth isn't productive. Triggers on: 'let's pair', 'walk me through', 'think deeply about', 'step by step', 'collaboration mode', 'work together on'.
    7 installs
  85. ▌
    Ddia Systems · onfire7777 bundle
    Design data systems by understanding storage engines, replication, partitioning, transactions, and consistency models. Use when the user mentions "database choice", "replication lag", "partitioning strategy", "consistency vs availability", or "stream processing". Covers data models, batch/stream processing, and distributed consensus. For system design, see system-design. For resilience, see release-it.
    5 installs
  86. ▌
    Design Audit · onfire7777
    Perform comprehensive audit of interface quality across accessibility, performance, theming, and responsive design. Generates detailed report of issues with severity ratings and recommendations.
    5 installs
  87. ▌
    Dwarf Expert · onfire7777 bundle
    Provides expertise for analyzing DWARF debug files and understanding the DWARF debug format/standard (v3-v5). Triggers when understanding DWARF information, interacting with DWARF files, answering DWARF-related questions, or working with code that parses DWARF data.
    7 installs
  88. ▌
    Gsap Plugins · onfire7777
    Official GSAP skill for GSAP plugins — registration, ScrollToPlugin, ScrollSmoother, Flip, Draggable, Inertia, Observer, SplitText, ScrambleText, SVG and physics plugins, CustomEase, EasePack, CustomWiggle, CustomBounce, GSDevTools. Use when the user asks about a GSAP plugin, scroll-to, flip animations, draggable, SVG drawing, or plugin registration.
    8 installs
  89. ▌
    Kami Landing · onfire7777 bundle
    Create print-grade single-page landing or brief documents in a warm paper design system with restrained ink accents. Produce a print-grade single-page kami (紙 / 纸) document — warm parchment canvas, ink-blue accent, serif at one weight, no italic, no cool grays. The output reads like a professional white paper or studio one-pager, not an app UI. Multilingual by design (EN · zh-CN · ja). One self-contained HTML file, zero dependencies.
    7 installs
  90. ▌
    Kanban Board · onfire7777 bundle
    Create Kanban board layouts with work columns, cards, priorities, owners, and status cues. Kanban / task board with columns (To do / In progress / In review / Done), draggable-looking cards, assignee avatars, swimlanes, and a top filter bar. Use when the brief mentions "kanban", "task board", "sprint board", "trello", "看板".
    4 installs
  91. ▌
    Landing Page · onfire7777
    Generate a complete, deployable landing page from a brief. Produces a single self-contained HTML file with Tailwind CSS (via CDN), responsive design, dark mode, semantic HTML, and OG meta tags. Sections: hero with CTA, features, social proof, pricing (optional), FAQ, footer. Use when building a marketing page, product launch page, coming soon page, or any standalone landing page. Triggers: 'landing page', 'create a page', 'marketing page', 'launch page', 'coming soon page', 'one-page site'.
    4 installs
  92. ▌
    Lean Startup · onfire7777 bundle
    Design MVPs, validated learning experiments, and pivot-or-persevere decisions using Build-Measure-Learn. Use when the user mentions "MVP scope", "validated learning", "pivot or persevere", "vanity metrics", or "test assumptions". Covers innovation accounting and actionable metrics. For 5-day prototype testing, see design-sprint. For customer motivation analysis, see jobs-to-be-done.
    5 installs
  93. ▌
    LLM Security · onfire7777 bundle
    Security guidelines for LLM applications based on OWASP Top 10 for LLM 2025. Use when building LLM apps, reviewing AI security, implementing RAG systems, or asking about LLM vulnerabilities like 'prompt injection' or 'check LLM security'. IMPORTANT: Always consult this skill when building chatbots, AI agents, RAG pipelines, tool-using LLMs, agentic systems, or any application that calls an LLM API (OpenAI, Anthropic, Gemini, etc.) — even if the user doesn't explicitly mention security. Also use when users import 'openai', 'anthropic', 'langchain', 'llamaindex', or similar LLM libraries.
    6 installs
  94. ▌
    Metrics Tree · onfire7777 bundle
    Use when setting product North Star metrics, decomposing high-level business metrics into actionable sub-metrics and leading indicators, mapping strategy to measurable outcomes, identifying which metrics to move through experimentation, understanding causal relationships between metrics (leading vs lagging), prioritizing metric improvement opportunities, or when user mentions metric tree, metric decomposition, North Star metric, leading indicators, KPI breakdown, metric drivers, or how metrics connect.
    7 installs
  95. ▌
    Next Upgrade · onfire7777
    Upgrade Next.js to the latest version following official migration guides and codemods
    6 installs
  96. ▌
    Provider API · onfire7777
    Universal hosted-provider API adapter guide. Use the skill-router provider-api CLI for compatible project/task/file/webhook/agent APIs, with explicit endpoint and key configuration instead of provider-specific defaults.
    3 installs
  97. ▌
    Saas Landing · onfire7777 bundle
    Single-page SaaS landing with hero, features, social proof, pricing, and CTA. Respects the active DESIGN.md color/typography/layout tokens. Trigger keywords: "saas landing", "marketing page", "product landing".
    6 installs
  98. ▌
    Skill Finder · onfire7777 bundle
    Search the installed skill library to find and fully activate the most relevant skills for any user task. Use when the user asks to find a skill, search for skills, says "find the best skill for this", "which skill should I use", "search skills", or when the assistant needs to identify which installed skills are most applicable to a complex or unfamiliar task before execution. Also use proactively when facing a task outside core capabilities to discover specialized workflows, scripts, and domain expertise from the skill library.
    5 installs
  99. ▌
    Stitch Skill · onfire7777 bundle
    Semantic Design System Skill for Google Stitch. Generates agent-friendly DESIGN.md files that enforce premium, anti-generic UI standards — strict typography, calibrated color, asymmetric layouts, perpetual micro-motion, and hardware-accelerated performance.
    5 installs
  100. ▌
    Traction Eos · onfire7777 bundle
    Implement the Entrepreneurial Operating System (EOS) to align vision and execution across a company. Use when the user mentions "EOS", "V/TO", "quarterly rocks", "Level 10 meetings", "accountability chart", or "IDS process". Covers the six EOS components: Vision, People, Data, Issues, Process, Traction. For team motivation design, see drive-motivation. For lean experimentation, see lean-startup.
    6 installs