yanacuti1121
- 1.8k skills
- 0 followers
- 2 repo stars
- 2 weeks ago last updated
- ▌ Analyzing Linux Elf Malware · yanacuti1121 bundleAnalyzes malicious Linux ELF (Executable and Linkable Format) binaries including botnets, cryptominers, ransomware, and rootkits targeting Linux servers, containers, and cloud infrastructure. Covers static analysis, dynamic tracing, and reverse engineering of x86_64 and ARM ELF samples. Activates for requests involving Linux malware analysis, ELF binary investigation, Linux server compromise assessment, or container malware analysis.
- ▌ Detecting OAUTH Token Theft · yanacuti1121 bundleDetects and responds to OAuth token theft and replay attacks in cloud environments, focusing on Microsoft Entra ID (Azure AD) token protection, conditional access policies, and sign-in anomaly detection. Covers access token theft, refresh token replay, Primary Refresh Token (PRT) abuse, and pass-the-cookie attacks. Activates for requests involving OAuth token theft detection, token replay prevention, Azure AD conditional access token protection, or cloud identity attack investigation.
- ▌ Executing Red Team Exercise · yanacuti1121 bundleExecutes comprehensive red team exercises that simulate real-world adversary operations against an organization's people, processes, and technology. The red team operates with stealth as a primary objective, employing the full attack lifecycle from initial reconnaissance through objective completion while testing the organization's detection and response capabilities. This differs from penetration testing by focusing on adversary emulation rather than vulnerability identification. Activates for requests involving red team exercise, adversary simulation, adversary emulation, or full-scope offensive security assessment.
- ▌ Finding Duplicate Functions · yanacuti1121Use when auditing a codebase for semantic code duplication — functions that serve the same purpose but were implemented independently. Triggers on: 'find duplicate functions', 'semantic duplicates', 'duplicate code audit', 'same intent different implementation', 'consolidate functions', 'codebase duplication', 'redundant functions', 'llm-generated duplicates', 'function deduplication', 'duplicate detection'.
- ▌ Backend Architecture · yanacuti1121Design backends that survive redeploys, server reboots, and modest scaling. Covers stateless application servers, state placement (object storage, managed databases, Redis), immutable deploy artifacts, health checks, graceful shutdown, database migrations that don't lock the world, and the twelve-factor baseline. Invoke when designing a new backend, when uploads disappear after a redeploy, or when productionizing a vibe-coded prototype.
- ▌ Cloudflare Hardening · yanacuti1121Harden a site behind Cloudflare end-to-end, from account to zone to origin. Covers DNS hygiene, origin-IP protection via Authenticated Origin Pulls and IP allowlisting, WAF managed rules, Bot Fight Mode, rate limiting, Transform Rules for security headers, Zero Trust Access for admin paths, and R2 / Pages security. Invoke when onboarding a domain, when the origin IP may be exposed, or after an attack.
- ▌ File Upload Security · yanacuti1121Accept user file uploads without introducing remote code execution, stored XSS, or polyglot attacks. Covers magic-byte validation, strict type allowlists, image re-encoding to defang embedded payloads, EXIF stripping, virus scanning, path-safe storage keys, and serving via a separate origin with Content-Disposition. Invoke when adding upload to a new endpoint or migrating from local-disk storage to object storage.
- ▌ Message Bus Security · yanacuti1121Secure NATS, RabbitMQ, Kafka, and similar message buses against misconfiguration and cross-tenant leakage. Covers account or vhost isolation, deny-default subject and topic permissions, producer and consumer authentication, replay protection, consumer-side idempotency, and encryption in transit and at rest. Invoke when introducing a bus, adding multi-tenancy, or after a cross-tenant message-leakage incident.
- ▌ Payload Cms Security · yanacuti1121Harden Payload CMS deployments against access-control and upload-related issues. Covers collection and field-level access functions, hook safety, file upload validation, GraphQL and REST surface, admin UI exposure, and multi-tenant isolation strategies. Invoke before shipping a Payload app to production, opening admin to non-developers, or after a Payload version upgrade.
- ▌ Honeypot Deception Patterns · yanacuti1121Build active deception infrastructure for agent swarms. Honey-vault canary tokens, ghost file-system with inotify monitoring, decoy agent prompts on the Swarm Bus, and dynamic quarantine on trip detection.
- ▌ Codebase Design · yanacuti1121 bundleShared vocabulary for designing deep modules. Use when the user wants to design or improve a module's interface, find deepening opportunities, decide where a seam goes, make code more testable or AI-navigable, or when another skill needs the deep-module vocabulary.
- ▌ Diagnosing Bugs · yanacuti1121 bundleDiagnosis loop for hard bugs and performance regressions. Use when the user says "diagnose"/"debug this", or reports something broken/throwing/failing/slow.
- ▌ Domain Modeling · yanacuti1121 bundleBuild and sharpen a project's domain model. Use when the user wants to pin down domain terminology or a ubiquitous language, record an architectural decision, or when another skill needs to maintain the domain model.
- ▌ Overlayfs Runtime Isolation · yanacuti1121Isolate agent file-system writes using OverlayFS and bubblewrap (bwrap). Core directories mounted read-only; all agent writes go to RAM-backed tmpfs. Zero persistence on session end. Anti-graffiti immutable surface pattern.
- ▌ Processing Stix Taxii Feeds · yanacuti1121 bundleProcesses STIX 2.1 threat intelligence bundles delivered via TAXII 2.1 servers, normalizing objects into platform-native schemas and routing them to appropriate consuming systems. Use when onboarding new TAXII collection endpoints, automating bi-directional intelligence sharing with ISACs, or building pipeline validation for malformed STIX bundles. Activates for requests involving OASIS STIX, TAXII server configuration, MISP TAXII, or Cortex XSOAR feed integrations.
- ▌ Feedback Synthesis · yanacuti1121When the user needs to analyze, categorize, or extract actionable insights from customer feedback across multiple sources, especially feature requests.
- ▌ Create Agent Skills · yanacuti1121Expert guidance for creating, writing, building, and refining Claude Code Skills. Use when working with SKILL.md files, authoring new skills, improving existing skills, or understanding skill structure and best practices.
- ▌ Create Meta Prompts · yanacuti1121Create optimized prompts for Claude-to-Claude pipelines with research, planning, and execution stages. Use when building prompts that produce outputs for other prompts to consume, or when running multi-stage workflows (research -> plan -> implement).
- ▌ Venice Venice API Overview · yanacuti1121High-level map of the Venice.ai API - base URL, authentication modes, endpoint categories, response headers, pricing model, error shape, and versioning. Load this first when starting any Venice integration.
- ▌ Venice Venice Audio Speech · yanacuti1121Generate speech from text via POST /audio/speech. Covers TTS models (Kokoro, Qwen 3, xAI, Inworld, Chatterbox, Orpheus, ElevenLabs Turbo, MiniMax, Gemini Flash), voices per family, output formats (mp3/opus/aac/flac/wav/pcm), streaming, prompt/emotion styling, temperature/top_p, and language hints.
- ▌ Hook Factory · yanacuti1121Generate production-ready Claude Code hooks with interactive Q&A, automated installation, and enhanced validation. Supports 10 templates across 7 event types for comprehensive workflow automation.
- ▌ Auditing GCP Iam Permissions · yanacuti1121 bundleAuditing Google Cloud Platform IAM permissions to identify overly permissive bindings, primitive role usage, service account key proliferation, and cross-project access risks using gcloud CLI, Policy Analyzer, and IAM Recommender.
- ▌ Book Refactoring Guru Full · yanacuti1121Refactoring Guru (Refactoring.Guru) — Full rules — comprehensive mandatory coding standards. Use when asked to apply Refactoring Guru principles or review code against Refactoring Guru standards.
- ▌ Book Refactoring Guru Mini · yanacuti1121Refactoring Guru (Refactoring.Guru) — Condensed rules — key principles distilled. Use when asked to apply Refactoring Guru principles or review code against Refactoring Guru standards.
- ▌ Book Refactoring Guru Nano · yanacuti1121Refactoring Guru (Refactoring.Guru) — Minimal rules — essential one-liners only. Use when asked to apply Refactoring Guru principles or review code against Refactoring Guru standards.
- ▌ Competitive Report Structure · yanacuti1121Use after benchmark-methodology has produced scored competitor profile cards. Assembles findings into a decision-grade report: landscape map, competitor profiles, benchmarking matrix, white-space analysis, strategic recommendations, and team alignment trigger questions. Final step in the three-skill competitive pipeline.
- ▌ Correlating Threat Campaigns · yanacuti1121 bundleCorrelates disparate security incidents, IOCs, and adversary behaviors across time and organizations to identify unified threat campaigns, attribute them to common threat actors, and extract shared indicators for improved detection. Use when multiple incidents exhibit overlapping indicators, when sector-wide attack campaigns require cross-organizational analysis, or when building campaign-level intelligence products. Activates for requests involving campaign analysis, incident clustering, cross-organizational IOC correlation, or MISP correlation engine.
- ▌ Financial Velocity Budgeting · yanacuti1121Implement token cost estimation, sliding-window velocity caps, and hierarchical credit allocation for multi-agent LLM systems. Prevent runaway API spend with pre-request budget gates and dead-man switches.
- ▌ Agent Client Security · yanacuti1121Harden native agents running on machines you do not fully control. Covers installer integrity and code signing per platform, OTA update channels with rollback and kill-switch, mTLS with per-agent identity and rotation, local secret storage (Keychain, DPAPI, libsecret), anti-tampering signals, and telemetry hygiene. Invoke when shipping a monitoring agent, RMM tool, CI runner, or IoT controller.
- ▌ Implementing Cloud Waf Rules · yanacuti1121 bundleThis skill covers deploying and tuning Web Application Firewall rules on AWS WAF, Azure WAF, and Cloudflare to protect cloud-hosted applications against OWASP Top 10 attacks. It details configuring managed rule sets, creating custom rules for business logic protection, implementing rate limiting, deploying bot management, and reducing false positives through rule tuning and logging analysis.
- ▌ Instructor Structured Output · yanacuti1121Use when extracting structured data (JSON, typed objects) from LLM responses with validation and retries. Triggers on: 'instructor', 'structured output', 'extract JSON from LLM', 'pydantic llm', 'LLM return JSON', 'trích xuất dữ liệu từ LLM', 'LLM trả về JSON', 'parse LLM output', 'validated LLM output', 'schema extraction'.
- ▌ Setup Pre Commit · yanacuti1121Set up Husky pre-commit hooks with lint-staged (Prettier), type checking, and tests in the current repo. Use when user wants to add pre-commit hooks, set up Husky, configure lint-staged, or add commit-time formatting/typechecking/testing.
- ▌ Openai Cloudflare Web Perf · yanacuti1121Analyzes web performance using Chrome DevTools MCP. Measures Core Web Vitals (FCP, LCP, TBT, CLS, Speed Index), identifies render-blocking resources, network dependency chains, layout shifts, caching issues, and accessibility gaps. Use when asked to audit, profile, debug, or optimize page load performance, Lighthouse scores, or site speed. Biases towards retrieval from current documentation over pre-trained knowledge.
- ▌ Openai Cloudflare Wrangler · yanacuti1121 bundleCloudflare Workers CLI for deploying, developing, and managing Workers, KV, R2, D1, Vectorize, Hyperdrive, Workers AI, Containers, Queues, Workflows, Pipelines, and Secrets Store. Load before running wrangler commands to ensure correct syntax and best practices. Biases towards retrieval from Cloudflare docs over pre-trained knowledge.
- ▌ Securing AWS Iam Permissions · yanacuti1121 bundleThis skill guides practitioners through hardening AWS Identity and Access Management configurations to enforce least privilege access across cloud accounts. It covers IAM policy scoping, permission boundaries, Access Analyzer integration, and credential rotation strategies to reduce the blast radius of compromised identities.
- ▌ Securing Kubernetes On Cloud · yanacuti1121 bundleThis skill covers hardening managed Kubernetes clusters on EKS, AKS, and GKE by implementing Pod Security Standards, network policies, workload identity, RBAC scoping, image admission controls, and runtime security monitoring. It addresses cloud-specific security features including IRSA for EKS, Workload Identity for GKE, and Managed Identities for AKS.
- ▌ Architecture Design · yanacuti1121When the user needs to design or evaluate system architecture — service boundaries, data models, API contracts, infrastructure topology, database selection, or dependency analysis. Also activate for "design the system", "how should I architect this", "monolith vs microservices", or architecture decision records.
- ▌ Community Discovery · yanacuti1121When the user wants to find Slack groups, Discord servers, Reddit communities, forums, or online communities where their target audience hangs out. Also use when the user mentions "where to promote", "find communities", "community marketing", or "distribution channels".
- ▌ Proposal Generation · yanacuti1121When a founder needs to create a sales proposal, statement of work, contract, NDA, or master service agreement. Activate when the user mentions proposal, SOW, quote, contract, NDA, MSA, or needs to formalize a deal.
- ▌ File Watcher · yanacuti1121Chokidar-based file watcher that triggers `claude -p` on changes. Useful for automated AI reactions to file changes — design sync, code validation, config regeneration, etc.
- ▌ Gitnexus CLI · yanacuti1121Use when the user needs to run GitNexus CLI commands like analyze/index a repo, check status, clean the index, generate a wiki, or list indexed repos. Examples: "Index this repo", "Reanalyze the codebase", "Generate a wiki"
- ▌ Hermes Webui · yanacuti1121Web UI 3-panel cho AI agent — sessions, chat, file browser. Python + vanilla JS, không framework. Reference architecture cho YAMTAM IO web mode.
- ▌ IOS Icon Gen · yanacuti1121Generate iOS app icons as PNG imagesets for Xcode asset catalogs from SF Symbols (5000+ Apple-native) or Iconify API (275k+ open source icons from 200+ collections). Use when generating icons, creating icon assets, adding icons to asset catalog, or searching for icons for iOS projects.
- ▌ Llamafactory · yanacuti1121Use when fine-tuning, training, or doing LoRA/QLoRA on LLMs. Triggers on: 'fine-tune LLM', 'LoRA', 'QLoRA', 'llamafactory', 'llama factory', 'train model', 'SFT', 'RLHF', 'DPO', 'fine tuning', 'custom model', 'instruction tuning', 'finetuning'.
- ▌ Load Testing · yanacuti1121Design and run load tests — tool selection (k6/Locust), test type strategy (smoke/load/stress/spike/soak), ramp-up curves, p50/p95/p99 targets, and threshold policy. Use when asked to "write a load test", "k6 script", "performance test", "check how many concurrent users", "find breaking point", "set SLO thresholds", or "load test this API". Do NOT use for: frontend Core Web Vitals (see web-performance skill). Do NOT use for: unit/integration test suites. Do NOT use for: security fuzzing.
- ▌ Product Lens · yanacuti1121Use this skill to validate the "why" before building, run product diagnostics, and pressure-test product direction before the request becomes an implementation contract.
- ▌ React Doctor · yanacuti1121Diagnose and fix React component health issues — unnecessary re-renders, missing keys, stale closures, useEffect misuse, memory leaks, bundle size regressions, and dangerouslySetInnerHTML XSS risks. Use when asked to "React performance audit", "why does this re-render", "React health check", "stale closure", "missing dependency array", "React memory leak", "React XSS", "fix useEffect", "component re-renders too often", "React bundle bloat", or "React anti-patterns". Do NOT use for: full E2E testing — see e2e-testing. Do NOT use for: API design — see api-design.
- ▌ Tdd Evidence · yanacuti1121Use when you need to prove test results with a signed receipt from yana-rt evidence run — not just text. Required for all Rust guard/evidence modules in Yana AI, and any claim "tests passed" that must be verifiable. Triggers on: yana-rt evidence run, signed receipt, viết test trước, evidence run, proof of test.
- ▌ Video Linggo · yanacuti1121Video translation, dubbing and subtitle generation pipeline — WhisperX speech recognition, LLM translation (Claude/GPT/DeepSeek), multi-voice TTS, Netflix-standard single-line subtitles. Triggers on: 'video translation', 'dịch video', 'thuyết minh video', 'video dubbing', 'tạo phụ đề', 'subtitle generation', 'videolinggo', 'video linggo', 'dịch phụ đề youtube', 'whisperx subtitle', 'tts dubbing video', 'lồng tiếng video AI', 'translate youtube video'.
- ▌ Agency Agents · yanacuti1121Library of 232 AI agent personalities across 16 business divisions — Engineering, Design, Sales, Marketing, Security, Finance, Game Dev, GIS, Academic and more. Platform-agnostic (Claude Code, Cursor, Copilot, Windsurf, Aider, Gemini CLI). Triggers on: 'agency agents', 'agent library', 'agent personalities', '232 agents', 'agent divisions', 'specialized AI agents', 'frontend developer agent', 'security architect agent', 'paid media agent', 'AI team structure', 'company as agents', 'multi-division agents', 'agent role catalog', 'msitarzewski agency', 'install agent roles', 'agent markdown files', 'cross-platform agent'.
- ▌ Auth Patterns · yanacuti1121Design authentication and authorization systems — JWT lifecycle, OAuth 2.0 / OIDC flows, token storage, refresh strategy, RBAC and ABAC permission models. Use when asked about "login flow", "JWT", "OAuth", "refresh token", "access control", "permissions", "RBAC", "who can see what", or "auth is broken". Do NOT use for: session-based auth vs token trade-off analysis (that's an architecture decision) or security penetration testing (use `red-team-check`).
- ▌ Blue Team Fix · yanacuti1121Defensive response to red team security findings — analyze each vulnerability, propose a targeted fix, and add a test that covers the fix. Use when the user has a security finding list (from red-team-check or a manual audit) and wants to fix the vulnerabilities. Produces: root cause analysis, code fix, and test. Does not auto-apply fixes — proposes and waits for user approval per fix.
- ▌ Branch Finish · yanacuti1121Use when a development task is complete and ready to merge or close — before running git merge, git push, or closing a branch. Triggers on: 'I'm done', 'ready to merge', 'merge this', 'finish the branch', 'close the task'.
- ▌ Cicd Patterns · yanacuti1121Design CI/CD pipelines and container builds — Dockerfile best practices, GitHub Actions pipeline structure, pipeline stages, secrets management in CI, deployment strategies, and pipeline failure triage. Use when asked to "set up CI", "write a Dockerfile", "GitHub Actions pipeline", "deployment strategy", "blue-green deploy", "canary release", or "why is CI slow/failing". Do NOT use for: deploy gate authorization — that is YAMTAM's `deploy-gate.sh`.
- ▌ Claudekit CLI · yanacuti1121Use when asked to manage ClaudeKit projects via CLI, install/migrate skills to other coding agents (Cursor, Codex), run Claude hook diagnostics, set up a ClaudeKit web dashboard, or automate skill distribution across AI editors. Triggers on: 'claudekit', 'claudekit-cli', 'ck cli', 'install claudekit skills', 'migrate claudekit', 'claude hook diagnostics', 'skill manager cli', 'quản lý skill claude code', 'ck config', 'claudekit dashboard'.
- ▌ Django Celery · yanacuti1121Django + Celery async task patterns — configuration, task design, beat scheduling, retries, canvas workflows, monitoring, and testing. Use when adding background jobs, scheduled tasks, or async processing to a Django app.
- ▌ Feature Flags · yanacuti1121Design and implement feature flags — flag types (release/experiment/ops/permission), lifecycle (create→target→rollout→cleanup), gradual rollout strategy, kill switch pattern, and flag hygiene. Use when asked to "add a feature flag", "gradual rollout", "kill switch", "LaunchDarkly", "Unleash", "GrowthBook", "dark launch", "flag cleanup", "percentage rollout", or "canary release via flags". Do NOT use for: deployment canaries managed at infra level (Kubernetes, load balancer weights). Do NOT use for: A/B test statistical analysis — flags gate traffic, stats belong in analytics.
- ▌ Frontend A11Y · yanacuti1121Accessibility patterns for React/Next.js — semantic HTML, ARIA, form labeling, keyboard navigation, focus management, screen reader support. WCAG 2.2 AA compliance.
- ▌ Hugoblox Kit · yanacuti1121AI-generated sites dưới dạng Markdown — describe site, AI builds it, anh own Markdown files. Landing pages, blogs, portfolios, docs với Tailwind blocks.
- ▌ I18N Patterns · yanacuti1121Design and implement internationalization (i18n) — RTL layout, text expansion budgeting, locale-aware APIs, cultural color semantics, pseudo-localization testing, and Vietnamese-specific considerations. Use when asked about "RTL", "right-to-left", "internationalization", "localization", "i18n", "l10n", "translate the app", "text expansion", "Arabic/Hebrew layout", or "support multiple languages". Do NOT use for: translation content itself — that is a human/MT workflow. Do NOT use for: font loading — use `typography-system`.
- ▌ Image To Code · yanacuti1121Convert a UI screenshot, mockup, or design image into production-quality frontend code. Analyzes layout, spacing, component hierarchy, and visual states from the image, then outputs clean, semantic code. Use when the user provides an image/screenshot and asks to "code this", "build this UI", "implement this design", or "turn this into a component". Do NOT use for generating new designs — only for converting existing visuals to code.
- ▌ Khoj AI Khoj · yanacuti1121Khoj — open-source self-hostable AI second brain: chat với docs + web, semantic search, custom agents, image gen, TTS. Multi-LLM (Claude/GPT/Gemini/Ollama). Browser/Obsidian/Phone.
- ▌ Memory Review · yanacuti1121Review all memory layers, detect stale/duplicate/conflicting entries, and propose promotions between layers. Use when the user says "clean up memory", "review what I've saved", "memory is getting messy", "what's in my memory", "organize my notes", "promote this to CLAUDE.md", "memory audit", or after a long session with many /remember calls. Do NOT modify any files without explicit user approval.
- ▌ Minimalist UI · yanacuti1121Simplify an overloaded UI by removing visual noise, establishing whitespace discipline, and reducing to essential elements. Use when the user says "too busy", "simplify this", "less is more", "cleaner look", "feels overwhelming", or "too many things on screen". Do NOT use when the user wants to add features or content — this skill removes and simplifies only.
- ▌ Motion Design · yanacuti1121Design motion and animation for UI — duration timing, easing curves, micro-interaction patterns (button, form, toast, modal), and reduced-motion accessibility. Use when asked to "add animation", "make it feel alive", "micro-interactions", "transition", or "something feels janky/mechanical". Do NOT use for 3D or canvas animation — this covers UI-layer motion only.
- ▌ Open Notebook · yanacuti1121Use when asked to set up a self-hosted NotebookLM, build a private knowledge base from PDFs/videos/web, generate AI podcasts from documents, or run a local research assistant with multiple AI providers. Triggers on: 'open-notebook', 'self-hosted notebooklm', 'private notebooklm', 'local knowledge base', 'research notebook AI', 'AI podcast generator', 'document Q&A self-hosted', 'notebooklm alternative', 'open source notebooklm', 'knowledge base từ PDF', 'tóm tắt tài liệu riêng tư'.
- ▌ Pixelle Video · yanacuti1121Use when asked to create or generate a video automatically from a topic, text, or idea. Triggers on: 'tạo video', 'generate video', 'make a video about', 'video từ chủ đề', 'short video', 'create reel', 'pixelle', 'video tự động', 'video AI'. Requires Pixelle-Video server running locally (docker-compose or pip install).
- ▌ RAG Architect · yanacuti1121Design and audit Retrieval-Augmented Generation (RAG) pipelines — chunking strategy, embedding choice, hybrid search, retrieval evaluation, and failure diagnosis. Use when asked to "build a RAG system", "fix retrieval quality", "improve RAG accuracy", "chunk documents", "add semantic search", or when an LLM keeps hallucinating despite having access to docs. Do NOT use for: fine-tuning decisions — that is a separate trade-off.
- ▌ React Testing · yanacuti1121React component testing with React Testing Library + Vitest/Jest + MSW network mocking + axe accessibility assertions. Covers unit, integration, and component vs E2E decision boundary.
- ▌ Research Team · yanacuti1121Autonomous multi-source research agent group. Given an unknown bug or technology topic, research-team spawns parallel sub-agents to search StackOverflow, GitHub Issues, official docs, and changelogs. Synthesizes findings into a ranked solution report. Inspired by assafelovic/gpt-researcher closed-loop research architecture.
- ▌ UX Heuristics · yanacuti1121Evaluate a UI against Nielsen's 10 Usability Heuristics — score each heuristic, flag violations with severity ratings, and produce a prioritized fix list. Use when the user asks for a "UX review", "usability audit", "heuristic evaluation", or "why is this UI confusing to users". Do NOT use for code quality or accessibility — use output-enforcement or accessibility-audit for those.
- ▌ Vercel AI Sdk · yanacuti1121Use when building AI-powered web apps with Next.js, React, or Node.js — streaming chat, tool calling, structured output, multi-modal. Triggers on: 'vercel ai', 'ai sdk', 'streaming chat', 'useChat', 'generateText', 'streamText', 'ai chatbot nextjs', 'LLM in React', 'ai sdk tool use', 'provider agnostic LLM'.
- ▌ Vite Patterns · yanacuti1121Vite build tool patterns including config, plugins, HMR, env variables, proxy setup, SSR, library mode, dependency pre-bundling, and build optimization. Activate when working with vite.config.ts, Vite plugins, or Vite-based projects.
- ▌ Yana Classify · yanacuti1121Yana's task router — classify a task description into simple/complex/external and decide next action. Use before handling any non-trivial request. Triggers on: 'classify task', 'route task', 'yana classify', 'what kind of task', 'should I handle this myself', 'dispatch or handle', 'yana router', 'task type', 'route request', 'auto or agent'.
- ▌ Arxiv Research · yanacuti1121Use when asked to search for academic papers, find related work, look up research on a topic, or retrieve papers from arXiv. Triggers on: 'search papers', 'find papers about', 'arxiv search', 'academic search', 'find related work', 'research papers on', 'literature search', 'find studies on', 'tìm bài báo', 'tìm nghiên cứu', 'tìm paper về', 'tìm tài liệu học thuật'.
- ▌ Codehealth MCP · yanacuti1121Code health assessment qua CodeScene MCP — đánh giá structural maintainability, detect regression trước commit/PR. Score 1-10, tích hợp Claude Code.
- ▌ Debug Protocol · yanacuti1121Use when encountering any bug, error, test failure, or unexpected behavior — before proposing any fix. Triggers on: seeing an error message, a failing test, 'it's broken', 'not working', 'weird behavior'. Works alongside the /debug command.
- ▌ Error Handling · yanacuti1121Design structured application error handling — error type hierarchy, error codes, propagation strategy (throw vs return), user-facing vs internal messages, HTTP error response format, async error safety, and React error boundaries. Use when asked to "improve error handling", "structured errors", "error codes", "error types", "don't swallow errors", "unhandled promise rejection", "error boundary", "error response format", "what to show users when something fails", or before shipping any feature that calls external services or parses user input. Do NOT use for: logging infrastructure — see observability-instrumentation. Do NOT use for: resilience retry/circuit-breaker — see resilience-patterns.
- ▌ Extract Errors · yanacuti1121Use when extracting, auditing, or standardizing error codes and messages across a codebase. Triggers on "error codes", "error messages", "unknown error", "extract errors", "error registry".
- ▌ Interface Feel · yanacuti1121Make interfaces feel responsive and alive — micro-interactions, spring physics, press states, optimistic updates, skeleton loaders, cursor feedback, sound design hints, and delight moments. Use when asked to "make this feel better", "interface feels unresponsive", "add micro-interactions", "the UI feels dead", "springy animations", "delight", "optimistic UI", "skeleton screen", "cursor feedback", "feel more like a native app", "haptic feedback patterns", or "interface lacks personality". Do NOT use for: animation performance — see fixing-motion-performance. Do NOT use for: full animation system design — see motion-design.
- ▌ Lsp Navigation · yanacuti1121Use when searching for where a function/class/variable is defined or referenced, before using grep on the codebase. Triggers on: 'where is X defined', 'find all uses of Y', 'what calls Z', 'go to definition', 'find references', searching for a symbol name across files.
- ▌ Microsoft Mxc · yanacuti1121Microsoft eXecution Container — sandboxed execution cho untrusted code (model output, plugins, tools). Policy-driven, cross-platform (Win/Linux/macOS), TypeScript SDK, Rust binary.
- ▌ N8n Automation · yanacuti1121Use when setting up workflow automation, connecting APIs, building AI pipelines, or automating repetitive tasks with 400+ integrations. Triggers on: 'n8n', 'workflow automation', 'tự động hóa', 'kết nối API', 'no-code automation', 'zapier alternative', 'trigger webhook', 'schedule job', 'ai pipeline automation', 'integrate services'.
- ▌ Nvidia Cosmos · yanacuti1121NVIDIA Cosmos — open platform world models cho Physical AI: robotics, autonomous vehicles. Cosmos3-Nano (16B) + Super (64B). Text/video/action I/O. Diffusers/vLLM/NIM. OpenMDW-1.1.
- ▌ React Patterns · yanacuti1121React 18/19 hooks discipline, server/client component boundaries, Suspense + error boundaries, form actions, state management, and accessibility-first composition. Use when building or reviewing React/Next.js components.
- ▌ Red Team Check · yanacuti1121Offensive security review of the current local codebase — scan for OWASP Top 10 vulnerabilities, hardcoded secrets, misconfigurations, and broken access control. Use when the user asks to find security issues, audit the codebase for vulnerabilities, run a red team check, or scan for security bugs. Requires ownership confirmation via security-scope-gate before starting. Only runs against repos the user owns.
- ▌ Writing Skills · yanacuti1121Use when creating a new YAMTAM skill. Triggers on: 'add a skill', 'create a skill', 'write a skill', 'new skill for X', 'make a skill that'. Enforces frontmatter shape, trigger-phrase quality, and lockfile registration.
- ▌ 9router Gateway · yanacuti1121Set up 9Router as a local AI gateway so coding agents never stop when a provider quota runs out — one OpenAI-compatible endpoint (localhost:20128) fanning out to 40+ providers with automatic fallback. Use when asked to 'set up 9router', 'cài 9router', 'hết quota Claude thì làm sao', 'fallback provider tự động', 'never hit rate limits', 'free AI router', or 'nối Claude Code vào nhiều provider'. Do NOT use for: cloud gateway architecture comparisons (LiteLLM/Portkey/Kong) — see ai-gateway-patterns. Do NOT use for: YAMTAM's internal task routing — see yana-router docs.
- ▌ Brand Discovery · yanacuti1121 bundleUse when a brand needs to discover or articulate its identity through structured multi-session interviews. Covers purpose, positioning, audience, personality, voice, narrative, and founder-brand tension across 8 modules using laddering, 5 Whys, and projective techniques. Produces a resumable session with disk-persisted state and a master brandbook (90_SYNTHESIS.md).
- ▌ Docker Patterns · yanacuti1121Build production-grade Docker images — multi-stage builds, layer caching, non-root user, minimal base images, .dockerignore, health checks, docker-compose for local dev, BuildKit secrets, and image size audit. Use when asked about "Docker", "Dockerfile", "multi-stage build", "Docker image too large", "non-root Docker", "Docker layer cache", "docker-compose", "Docker health check", "BuildKit", ".dockerignore", "Docker security", "distroless", or "container image best practices". Do NOT use for: Kubernetes deployment of that image — see kubernetes-patterns. Do NOT use for: container registry setup — see cicd-patterns.
- ▌ Ecc Agentshield · yanacuti1121Security scanner cho Claude Code config — quét CLAUDE.md, settings.json, hooks, MCP servers, agents tìm lỗ hổng bảo mật. 1282 tests, 102 static analysis rules.
- ▌ Executing Plans · yanacuti1121Use when the user has approved a plan and says 'go', 'execute', 'proceed', 'do it', or 'run the plan'. Enforces step-by-step execution with no scope expansion. Companion to plan-first skill.
- ▌ LLM UI Patterns · yanacuti1121Design UI for LLM-powered features — streaming response display, hallucination states, RAG source attribution, generative UI patterns, and AI trust calibration. Use when asked to "show streaming output", "display AI response", "cite sources", "handle AI errors", "show confidence", "build a chatbot UI", or "design for generative AI". Do NOT use for: backend LLM API integration or RAG pipeline design — those are separate concerns.
- ▌ Nextjs Patterns · yanacuti1121Build production Next.js apps — App Router conventions, React Server Components, server actions, data fetching strategies, caching layers, route handlers, middleware, metadata API, and parallel/intercepting routes. Use when asked about "Next.js App Router", "React Server Components", "RSC", "server actions", "use server", "use client", "Next.js caching", "fetch cache", "revalidatePath", "route handler", "Next.js middleware", "streaming UI", "Suspense boundary", "parallel routes", "Next.js metadata", or "Next.js data fetching". Do NOT use for: React patterns generally — see frontend-patterns. Do NOT use for: deployment infra — see cicd-patterns.
- ▌ Ollama Patterns · yanacuti1121Ollama local LLM — pull models, generate, chat, embeddings, REST API, Python client, structured output
- ▌ Openbmb Voxcpm · yanacuti1121Tokenizer-Free TTS multilingual — speech generation, creative voice design, true-to-life voice cloning. 25K stars.
- ▌ Session Context · yanacuti1121Load development context at session start: git branch, uncommitted changes, CONTEXT.md / TODO.md / open issues. Use when: starting a new coding session, resuming interrupted work, or when the agent needs to orient itself quickly before acting. Inspired by: disler/claude-code-hooks-mastery session_start pattern.
- ▌ Shadcn Patterns · yanacuti1121Build and customize UI components with shadcn/ui — component installation, CSS variable theming, Radix UI primitive composition, variant patterns with cva(), dark mode wiring, and extending components without forking. Use when asked about "shadcn", "shadcn/ui", "shadcn component", "radix primitive", "cva variants", "shadcn theme", "extend shadcn", "shadcn dark mode", "shadcn form", "shadcn dialog", "shadcn button variants", or "how to customize shadcn components". Do NOT use for: full design system token architecture — see design-system-gen. Do NOT use for: animation patterns — see motion-design.
- ▌ Swarm Consensus · yanacuti1121When 2+ independent perspectives must agree before a risky Yana AI action — dispatching review subagents synchronously via the Task tool, resolving their findings by priority (Safety > Correctness > Performance > Style), and blocking on any Safety-severity finding. Replaces an earlier async message-bus/vote design that was never actually wired into the running system.
- ▌ Swarm Honeynets · yanacuti1121Deploy full honeynet infrastructure within a multi-agent swarm. Decoy agent prompts, honey-vault canary tokens, ghost file-system monitoring, runtime mutation of compromised agents, and immune system rule generation from blocked attacks.