Practice019

@practice019 source repo

128 skills
0 followers
1 day ago last updated

▌
Reverse Skill Router · practice019 bundle
逆向工程与安全工作流的路由器：把逆向、漏洞利用、渗透测试、恶意样本、移动端、固件、浏览器自动化、文档与安全类任务分派到对应的专项技能。当任务跨模块、或不确定该走哪个逆向入口时使用。 Routes reverse engineering, exploitation, penetration testing, malware, mobile, firmware, browser automation, documentation, and security tasks to the appropriate specialist skill. Use when a task spans modules or the correct reverse-skill entrypoint is unclear.

0
installs
▌
Dsh Plugin Development · practice019
在 DeepSeek Harness (DSH) 上创建、修改、调试动态 Cordis 插件的完整指南。涵盖插件的协议与生命周期（Plugin/Package/Run、Host 半与 Client 半、apply(ctx)/inject、服务与事件、Slot UI、主题、Client→Host 私有 RPC、动态 Tool、版本与审批）。当用户想给 DSH 写一个插件、扩展运行时能力、注册 UI 或动态工具、或修复/升级已有插件时，使用本技能。 Build, modify, debug, and extend dynamic Cordis plugins on DeepSeek Harness (DSH): plugin protocol and lifecycle (Plugin/Package/Run, Host and Client halves, apply(ctx)/inject, services and events, Slot UI, theme, Client-to-Host private RPC, dynamic Tools, versions and approval). Use when the user wants to write a DSH plugin, extend runtime capabilities, register UI or dynamic tools, or repair/upgrade an existing plugin.

0
installs
▌
Model Training Mindset · practice019
用模型训练思维攻坚多步骤任务:先把大问题分解为带完成标准的小子问题并向用户确认,再对每个子问题跑 epoch 训练循环(基线 commit → 每轮一个原子改进 → 真实验证 → 通过则 commit 固化 / 失败则 reset 回退换思路),子问题之间逐级固化衔接,直到大任务完成。当用户点名模型训练思维、训练循环、epoch 循环,或需要带 checkpoint 与回退的逐步攻坚任务时使用。 Attack multi-step tasks with a model-training mindset: decompose the big problem into sub-problems with explicit completion criteria, confirm with the user, then run an epoch training loop on each (baseline commit -> one atomic improvement per round -> real verification -> commit on pass / reset and change approach on fail), freezing each sub-problem before moving on. Use when the user names the training loop or epoch loop, or when a long task needs git checkpoints, rollback, and independently verifiable steps.

0
installs
▌
Research Paper Writing · practice019 bundle
撰写、改写、润色学术论文（ML/CV/NLP 风格）：Abstract/Introduction/Related Work/Method/Experiments/Conclusion，中译英、逐段打磨。当用户写论文、改论文、问「这段通顺吗」、把中文草稿变英文时使用。 Write, rewrite, and polish academic papers (ML/CV/NLP style). Use when the user drafts or revises Abstract, Introduction, Related Work, Method, Experiments, or Conclusion; asks "does this flow / 这段通顺吗 / polish this paragraph"; turns bullet points or a Chinese draft into publication-quality English; runs a pre-submission self-review or reviewer-style critique; fixes paper figures/tables/LaTeX formatting; or compiles/converts the paper to PDF (LaTeX build, 编译PDF, 转成PDF). Trigger on mentions of paper, draft, camera-ready, rebuttal-facing revision, CVPR/ICCV/NeurIPS/ICLR/ACL-style venues, or .tex files being edited for a paper.

0
installs
▌
Design Blueprint · practice019 bundle
在动手做视觉产物之前产出结构化设计规格：DESIGN.md + 结构布局 + Decision Trace，避免 AI 生成的设计千篇一律。当用户要设计、规划、做原型、重构任何视觉产物时使用。 Produces a structured design specification (DESIGN.md + structural layout + Decision Trace) before any visual artifact is built — the "blueprint" phase that keeps AI-generated design from feeling templated. Use this skill whenever the user asks to design, plan, mock up, or restructure any visual output — PPT / slides / decks, landing pages, dashboards, posters, charts, infographics, marketing pages, UI components, prototypes, illustrations — even when they only say "make a slide about X" or "help me put together a page for Y". Also trigger on requests to critique or improve an existing design when the user wants a principled, spec-driven pass rather than just cosmetic tweaks. Do NOT trigger when the user has already handed you a completed DESIGN.md and only wants code implementation (defer to frontend-design or implement directly).

0
installs
▌
Modern Python Toolchain · practice019
用 uv + ruff + pyright 搭建现代 Python 项目：初始化、依赖管理、环境配置、lint 与格式化。当用户要新建 Python 项目、配置 uv、设置 lint/format 时使用。 Modern Python project setup with uv, ruff, and pyright. Use when initializing a new Python project, configuring the Python environment, setting up linting/formatting, or when a project needs uv (the fast Python package manager). Trigger on: 'set up Python', 'new Python project', 'configure uv', 'install uv', 'ruff', 'pyright', 'Python linting', 'Python formatting', or when a task requires Python and no pyproject.toml exists yet.

0
installs
▌
Agent Team Orchestration · practice019 bundle
多智能体团队编排：角色定义、任务流转、交接协议与质量门禁 Orchestrate multi-agent teams with defined roles, task lifecycles, handoff protocols, and review workflows. Use when: (1) Setting up a team of 2+ agents with different specializations, (2) Defining task routing and lifecycle (inbox → spec → build → review → done), (3) Creating handoff protocols between agents, (4) Establishing review and quality gates, (5) Managing async communication and artifact sharing between agents.

0
installs
▌
PDF Official · practice019 bundle
生成、读取、转换、填写 PDF：提取文本与表格、合并/裁剪/旋转/加水印、合成新 PDF、填 AcroForm 表单、OCR。当产物或输入是 PDF 时使用。 "Use this skill whenever a PDF file is being produced, opened, transformed, filled, or read. That includes: extracting text or tables from an existing PDF; combining, carving, rotating, cropping, or watermarking pages; composing a fresh PDF (report, invoice, certificate); filling AcroForm fields or overlaying text onto a non-fillable scanned form; encrypting or unlocking a PDF; running OCR over a scanned document; rendering pages to PNG/JPEG for visual analysis. Trigger on mentions of 'PDF', a filename ending in .pdf, requests like 'turn this into a PDF report', or references to AcroForm / form fields." license: Apache-2.0 — see LICENSE for terms and third-party attributions

0
installs
▌
DOCX Official · practice019 bundle
生成、读取、转换 Word (.docx) 文档：撰写报告/合同/技术文档、提取文本与结构、填充模板。当产物或输入是 Word 文件时使用。 "Use this skill whenever a Microsoft Word (.docx) file is being produced, opened, transformed, or read. That includes: drafting reports, letters, contracts, RFPs, technical documents, or any long-form written deliverable; extracting text or structure from an existing Word file; filling a Word template with values; converting Word to PDF or plain text; splitting or merging documents; inspecting styles, headings, sections, tables, images, comments, or tracked changes. Trigger on mentions of 'Word doc', 'DOCX', 'Office document', a filename ending in .docx, or requests like 'turn this into a Word report'." license: Apache-2.0 — see LICENSE for terms and third-party attributions

0
installs
▌
PPTX Official · practice019 bundle
生成、读取、转换 PowerPoint (.pptx) 演示文稿：写幻灯片/路演稿/汇报材料、提取文本与结构、填充模板。当产物或输入是 PPT 时使用。 "Use this skill whenever a Microsoft PowerPoint (.pptx) file is being produced, opened, transformed, or read. That includes: authoring slide decks, pitch decks, executive readouts, training material, or any presentation deliverable; extracting text or structure from an existing .pptx; filling a .pptx template with values; converting a deck to PDF or images; splitting or merging decks; inspecting slides, layouts, masters, tables, images, charts, speaker notes, or comments. Trigger on words like 'deck', 'slides', 'presentation', 'pitch deck', 'keynote' (when a .pptx is expected as output), or any filename ending in .pptx. Do NOT trigger when the primary deliverable is a Word document, spreadsheet, PDF report, HTML site, or Google Slides API call, even if presentation-shaped content appears along the way." license: Apache-2.0 — see LICENSE for terms and third-party attributions

0
installs
▌
XLSX Official · practice019 bundle
生成、读取、清洗 Excel/CSV 工作簿：建模、更新表格、加列、计算、做图表。当产物或输入是 .xlsx/.xlsm/.csv/.tsv 时使用。 "Spreadsheet toolkit. Reach for it whenever the artifact on either side of the conversation is a workbook file — .xlsx, .xlsm, .xltx, .csv, .tsv — and the user wants that artifact produced, changed, cleaned, or read. Typical triggers: 'build me a model', 'update this sheet', 'add a column', 'compute the totals as formulas', 'sanity-check this xlsx', 'export sheet 2 to CSV', 'render the workbook as PDF', 'the spreadsheet in ~/Downloads is a mess, fix it'. Applies equally to financial models, ops reports, data cleanups, and template fills. Skip it when the workbook is only source material and the real output is a Word doc, an HTML page, a Python script that runs standalone, a Google Sheets integration, or an ingestion pipeline into a database — in those cases the spreadsheet is a means, not the deliverable." license: Apache-2.0 — see LICENSE for terms and third-party attributions

0
installs
▌
Video Post Production · practice019 bundle
短视频后期流水线（ffmpeg + Pillow，确定性、无 LLM）：编号分段 MP4 拼接与 xfade 转场、SRT 字幕烧录（libass + CJK 字体）、单图转 Ken-Burns 短片、脚本转 SRT、片头/片尾卡 PNG。当用户要把多个片段拼成一条片子、给视频烧字幕、把静图做成动态短片、做片头卡，或 AI 视频被拒需要兜底片段时使用。 Deterministic short-video post-production with ffmpeg and Pillow: concatenate numbered MP4 segments with optional fade transitions, burn an SRT into a video via libass (CJK-safe), turn a single still into a Ken-Burns clip, build cumulative-timestamp SRT cues from a shot script, and render title/ending cards. Trigger when a workflow has produced several short clips that need stitching, needs burned-in subtitles, needs a fallback clip when a moderated video model refuses, or needs cover/ending cards. Merged from the OpenSquilla video-merger / subtitle-burner / video-still-animator / srt-from-script / title-card-image skills.

0
installs
▌
HTML To Video Pipeline · practice019 bundle
把 HTML/CSS/JS 页面可靠地渲染成 MP4：无头浏览器录制 + ffmpeg，含排序、坑位与验证步骤。当用户要做 HTML→视频管线、网页录屏、逐帧捕获、多场景拼接时使用。 Reliable HTML-to-MP4 rendering via headless browser recording (Playwright/Puppeteer) + ffmpeg — the ordering, gotchas, and verification steps you MUST get right or the output silently rots. Trigger whenever the user is building or debugging any pipeline that turns an HTML/CSS/JS page (single-file, multi-composition, GSAP-driven, or `@keyframes`-driven) into a video file, including headless recording, screen capture of a web page, deterministic frame-by-frame capture, multi-scene concatenation, or engine-mixed video output. Also trigger when the symptom sounds like: font swap flashing in the opening frames (FOUT), the first few seconds of the video are frozen/dead, animations play during page load and get truncated, concatenated segments produce a video whose duration is wildly wrong (e.g., 8s becomes 35s), `file://` loaded HTML fails to fetch its sub-scenes, the exported video is soft/blurry compared to the browser, or

0
installs
▌
Task Alignment · practice019
把用户的粗略想法对齐成可执行的事：共同判断是「当前会话顺手做掉」还是「固化成正式 Task（在 .task/ 下产出四份文档后独立派发）」。当用户描述一个想先对齐再动手的任务或意图时使用：帮我规划一下、先理一理、我想探索 X、我有个想法、/task-alignment；用户没定义范围或验收标准就直接跳进复杂任务时，也应主动暂停并对齐。 Alignment conversation starting from a user's rough idea. Co-decides with the user whether the idea should be acted on directly in the current session, or fixed into a formal Task by producing four documents in `.task/` for independent dispatch. Handles lightweight 'do it now while we talk', heavyweight 'define precisely, run later', and 'just help me think about this' — all on the same skill. Use when the user describes a task or intent they want to align on. Trigger phrases include 'help me plan this', 'let's think this through', 'I want to explore X', 'I have an idea', '/task-alignment'. Also use proactively when a user jumps into a complex task without defining scope or success criteria — pause, align, and help them pick the right vessel (this session vs. a task).

0
installs
▌
Task Implement · practice019
作为用户代理自主执行已对齐的任务：读取任务文档定目标、拆解工作、按需委派子智能体、由独立主体校验后交付。当工作空间已有 .task 任务目录且用户要开始执行时使用；触发指令 /task-implement、/task-implement <slug>、start the task、go ahead and implement、execute the plan，或用户确认对齐文档后说「没问题，开始执行」。Autonomously run a planned task as the user's proxy: read the task brief, decompose the work, delegate to subagents, verify independently, and deliver. Use for /task-implement, start the task, go ahead and implement, or execute the plan.

0
installs
▌
Ultra Research · practice019 bundle
多 AI 并行深度研究：对某个主题做全面调研、深度研究、多方对比，覆盖多个维度和来源，输出带引用的综合报告。适合复杂主题（技术选型、竞品分析、行业趋势、争议性话题），不适合简单事实查询。多-AI parallel deep research producing a cross-validated, cited report; use for complex topics such as technology selection, competitive analysis, industry trends, or contested claims, not simple fact lookups.

0
installs
▌
Cloud K8S · practice019 bundle
Use for authorized cloud, container, and Kubernetes security assessment including metadata SSRF, IAM misconfig, container escape paths, and cluster RBAC review.

0
installs
▌
Apk Reverse · practice019 bundle
在 CLI 环境下做 Android APK 逆向时使用。适用于 APK 解包、Java 反编译、smali 修改、重打包、Frida 动态 Hook，以及按需切换到 so/native 分析。优先使用本机已安装的 jadx、apktool、frida、adb、ida-reverse、radare2。

0
installs
▌
Ctf Sandbox · practice019
Thin PRIMARY for CTF / AWD / 靶场 multi-type orchestration. Hands off to the sidecar CTF-Sandbox-Orchestrator. Use when the user says CTF, AWD, 靶场, or 比赛题 and no more specific pwn/APK/IDA route already won.

0
installs
▌
Ida Reverse · practice019 bundle
IDA Pro 逆向分析辅助技能。当用户提到逆向、反编译、分析二进制/PE/ELF/APK/DLL/SO、破解、找密码、漏洞分析、病毒分析、firmware 固件分析，或需要分析 exe/dll/so/elf/macho/sys 等文件时，务必使用此技能。 Ensure to use this skill when the user wants to analyze any binary file, regardless of whether they explicitly mention "IDA" or "reverse engineering". This includes requests like "看看这个exe", "分析这个dll", "帮我破解", "找一下密码", "这个软件怎么注册", etc. Use the bundled scripts (scripts/start.ps1, scripts/open.ps1) for deterministic server management and file opening — do NOT write ad-hoc PowerShell commands for these operations.

0
installs
▌
Download Anything · practice019 bundle
从互联网找到并下载几乎任何数字资源：电子书、论文、影视、音乐、软件、图片、字体、课程等，中英文生态都覆盖（yt-dlp / aria2 / gallery-dl / spotdl 工具链、资源站目录、网盘搜索、Google dorks）。 Find and download virtually any digital resource from the internet — ebooks, academic papers, movies, TV shows, music, software, images, fonts, courses, and more. Covers both English and Chinese internet ecosystems. Includes CLI tool workflows (yt-dlp, aria2, gallery-dl, spotdl), resource site directories, cloud drive search engines, and search techniques (Google dorks). Use when the user wants to: (1) download a video, audio, or media from a URL, (2) find and download an ebook or academic paper, (3) find and download software, (4) search for any digital resource, (5) batch download images or media from a gallery or site, (6) download torrents or magnet links, (7) find free stock assets (images, video, audio, fonts), (8) search Chinese cloud drives for resources, or (9) any task involving finding or downloading digital content from the internet.

0
installs
▌
Mobile Reverse · practice019 bundle
Use for authorized Android or iOS application reverse engineering and security testing, including APK or IPA analysis, runtime instrumentation, SSL pinning, and platform protection checks.

0
installs
▌
Autox Scripting · practice019
编写、调试 AutoX.js（Auto.js 分支）自动化脚本：截图、找图找色、坐标点击、Shizuku 权限、多线程、文件操作等 API 用法与常见坑。当用户需要在 AutoX/Auto.js 里写自动化脚本、找图点击、或遇到无障碍/截图/Shizuku/找图不中问题时使用。 Write and debug AutoX.js (an Auto.js fork) automation scripts: screenshots, image/color finding, coordinate taps, Shizuku permissions, threading, file I/O, plus the common API traps. Use when the user needs AutoX/Auto.js automation scripts, image-based tapping, or hits accessibility, screenshot, Shizuku, or findImage problems.

0
installs
▌
Browser Harness · practice019 bundle
用 browser-harness（CDP 直连 Chrome）控制浏览器完成网页自动化任务的完整手册。当用户要求打开网页、抓取网站内容、登录网站、分析页面、浏览器自动化、复刻网页、爬数据时使用。 The complete manual for driving a real browser with browser-harness (CDP straight to Chrome) to finish web automation tasks. Use when the user asks to open pages, scrape site content, log in to a site, analyze a page, automate the browser, clone a web page, or crawl data.

0
installs
▌
Firmware Pentest · practice019 bundle
固件 / IoT 渗透链。从拿到一坨 .bin / .img 开始，闭环走完逆向 → 提取 → 模拟 → 利用。方法论遵循 OWASP FSTM 九阶段；工具链以 binwalk v3、unblob、EMBA、Firmadyne、AFL++ 为主。适用场景：路由器/摄像头/智能家居固件审计、固件升级包逆向、IoT CVE 复现、嵌入式 0day 挖掘。触发关键词：固件、firmware、IoT、binwalk、unblob、UART、JTAG、squashfs、UBI、JFFS2、Firmadyne、QEMU 全系统仿真、EMBA、固件渗透、路由器固件、嵌入式漏洞利用、bootloader、NVRAM、FAT、firmware analysis toolkit。

0
installs
▌
Create Data Context · practice019 bundle
Create, update, inspect, or repair Data Analytics semantic layers. Use when the user asks to save data context or create a semantic layer that future Data Analytics work can inspect and cite.

0
installs
▌
Android Reverse Engineering · practice019 bundle
Decompile Android APK, XAPK, JAR, and AAR files using jadx or Fernflower/Vineflower. Reverse engineer Android apps, extract HTTP API endpoints (Retrofit, OkHttp, Volley), and trace call flows from UI to network layer. Use when the user wants to decompile, analyze, or reverse engineer Android packages, find API endpoints, or follow call flows. 中文触发词：反编译APK、安卓逆向、提取API、分析安卓应用、反编译安卓、逆向工程、追踪调用链、提取接口

0
installs
▌
Competition Zip Archive · practice019 bundle
Internal downstream skill for ctf-sandbox-orchestrator. CTF-sandbox workflow for ZIP and PKZIP archive challenges, legacy ZipCrypto identification, known-plaintext recovery with bkcrack, key-based decryption, and reproducible extraction. Use when the user asks to solve an encrypted ZIP challenge, inspect ZipCrypto metadata, recover keys from a known file prefix, or unlock an archive without starting with password brute force. Use only after `$ctf-sandbox-orchestrator` has already established sandbox assumptions and routed here.

0
installs

128 published skills · page 2 of 2