4,624 skills sorted by stars.
Use this when adding a new entry to pyproject.toml dependencies, bumping a major version of an existing dep, reviewing T...
Audit Python RAG (Retrieval-Augmented Generation) pipelines for security, data leakage, prompt injection risks, and prod...
Python Security Auditor
create an initial PyTM-based threat model of your system when asked to perform a threat model
Live QA testing skill that finds bugs, fixes them with atomic commits, and re-verifies. Use when the user wants to test...
Create well-formed quality attribute scenarios with measurable response criteria
Security auditing, vulnerability scanning, and compliance validation for OWASP, SOC2, GDPR, and other standards.
Pre-release adversarial QA pass by a brutal critic, two modes. AUDIT mode (default): ranked findings report split into m...
Quality assessment framework using 11 parallel explore subagents across code, testing, security, architecture, documenta...
Diff-bounded single-pass quality evaluation for PR review. Classifies every changed path by ARTIFACT TYPE first (runtime...
Audit a completed implementation against its PRD or IRD. Use after security review for evidence-backed QA findings. Read...
Quantize model weights to GGUF, AWQ, and GPTQ formats for accelerated GPU/CPU inference without quality loss.
Use AgentPMT external API to run the Quantum Cryptographic Seed Generator tool with wallet signatures, credits purchase,...
Use AgentPMT external API to run the Quantum Secure Token Generator tool with wallet signatures, credits purchase, or cr...
Quarkus 安全最佳实践——认证、授权、JWT/OIDC、RBAC、输入验证、CORS 加固及 OWASP 缓解
Query token security audit to detect scams, honeypots, and malicious contracts before trading. Returns comprehensive sec...
Harmonia express lane - implementer plus lead-solo review for trivial fixes. Use ONLY when explicitly invoked as /harmon...
Smart contract security audit skill for the BD pipeline. Analyzes Solana token contracts for red flags: honeypots, rug p...
Interactive quiz from flashcards or topic area with scoring and review
Receive and verify Quoter webhooks. Use when setting up Quoter webhook handlers, debugging the MD5 hash verification, or...
面向新手的全谱系逆向工程路由器，覆盖 Web/JavaScript、Android/iOS、Frida、脱壳、反分析、原生二进制、协议、固件、恶意软件、游戏、云 API、CTF、可复现一致性测试。用于逆向、起步、脱壳、反编译、hook、Fr...
12 regulatory & QM agent skills and plugins for Claude Code, Codex, Gemini CLI, Cursor, OpenClaw. ISO 13485 QMS, MDR 201...
Ultimate RabbitMQ expertise skill for production-grade message broker architecture, implementation, and operations. Top...
REQUIRED before declaring a task done when the diff touches user input, SQL, shell, auth, credentials, file paths, seria...
Architect production RAG systems with document chunking, semantic retrieval, context stuffing, and citation attribution.
Assesses document authorization, tenant isolation, raw-chunk fields, citations, caches, exports, and sensitive-source le...
Security controls for RAG. Indirect prompt-injection via retrieved documents, PII detection/redaction (Microsoft Presidi...
Use when designing or reviewing deep Active Record association contracts including cardinality, ownership, inverse relat...
Complete authentication setup for Ruby on Rails applications using Devise. Use when: (1) Setting up user authentication...
Design and review authorization as an explicit Rails policy, resource-scope, tenant, and execution-boundary contract.
Authorization and permissions management for Ruby on Rails applications using CanCanCan. Use when: (1) Implementing role...
Design and review authorization as a composed security boundary across controllers, services, jobs, APIs, Action Cable,...
Design and review Rails credentials, secret storage, key management, application-level encryption, rotation, migration,...
Use when implementing, reviewing, testing, or debugging security-sensitive Ruby/Rails code involving authentication, aut...
Build secure DB-backed token session auth in Rails — one mechanism for web, Action Cable, and Hotwire Native, with Curre...
Railwayプラットフォーム上でのシークレット管理を専門とするスキル。環境変数設定、シークレットローテーション、アクセス制御を体系的に支援し、セキュアで運用しやすいデプロイメント環境を実現します。 Anchors: • Web Appl...
Use AgentPMT external API to run the Random Password Generator Quantum tool with wallet signatures, credits purchase, or...
Cross-codebase security detective that fans out parallel sub-agents to rapidly audit ANY codebase's security posture. Th...
Provisions, connects, migrates, and operates Amazon RDS for Db2. Applies when provisioning with IBM customer and site ID...
Comprehensive Amazon RDS and Aurora operational review aligned with the AWS Well-Architected Framework and RDS/Aurora be...
Provides connectivity, authentication, and troubleshooting guidance for Amazon RDS for SQL Server. Applicable when users...
漏洞挖掘网关。编排：目标与输入面识别 → 覆盖率引导 fuzzing → 崩溃分析 → 逆向定位 → 报告。 子技能：[[re-fuzzing]] [[re-crash-triage]] [[re-exploit]]。 触发词：漏洞挖掘、挖...
Use when the user requests React Doctor or a React code-health audit, or when a concrete React diagnostic question would...
Implement privacy and security patterns for React Native apps handling sensitive data (health, recovery, PII). Use when...
Review React components, hooks, state, rendering, accessibility, Server Components, testing, and performance.
Describe what this skill helps an agent do.
Review React 18/19 security, including Next.js clients. Covers XSS, secrets and client trust. Delegate Next.js server su...
Audit a sealed runx receipt for governance, comparing exercised authority and any declared approval requirement with sig...