4,624 skills sorted by stars.
Audits one repository read-only through bounded lanes and returns one evidence-ranked report with verified defects, dire...
Audits one repository read-only for security defects with bounded threat analysis, secret-safe evidence, and adversarial...
Diagnoses one proven defect, reported friction, or failed guarantee read-only, derives the bounded causal class, and ret...
Applies one explicitly approved set of measured code removals within a bound diff while preserving every observable beha...
Audits one pull request, branch, or diff read-only for measured code removals whose observable behavior can be preserved...
Tailscale for SvelteKit/Vercel/Neon - tailnets, MagicDNS, ACLs/tags, SSH, subnet routers, exit nodes, private database a...
Target discovery methodology for finding high-quality npm/PyPI/GitHub packages to audit for vulnerabilities, with evalua...
Add a one-shot task to the Custodian task queue
List pending and completed tasks in the Custodian queue
Analyzes task lists (.taskmaster/tasks.json or any task/subtask structure) and, for each task and subtask, identifies wh...
Manage Google Tasks with full CRUD operations via Ruby scripts. This skill should be used when working with Google Tasks...
Use when asking "overkill?", "elegant?", "audit", or "taste-test this", or setting a taste register. Not for tasks that...
Structured review of agent-generated code: a fixed pass order (behavior → structure → taste → security → performance → a...
Use when reviewing Tauri 2 code, auditing permissions, or validating a Tauri project before deployment. Prevents shippin...
Guidance for Tauri v2 localhost plugin with local service access and minimal exposure.
Guidance for Tauri v2 persisted-scope plugin with expiration and revocation flows.
Guidance for Tauri v2 plugin permission authoring, capability generation, and platform differences.
Guidance for Tauri v2 security model, baseline hardening, and runtime authority controls.
Use when hardening Tauri 2 app security, configuring CSP, reviewing permissions, or implementing isolation patterns. Pre...
Guidance for Tauri v2 capabilities, scope configuration, and ACL-based permission control.
TCAML-S007 defines how an AML agent should assist with periodic review, re-screening and change detection for existing r...
Improve code quality, apply security best practices, and enhance design whilst maintaining green tests and GitHub issue...
Red-Green-Refactor TDD loop with mandatory false-positive check. Use when: test, TDD, red-green, failing test, write tes...
Analyze embedded UDP/TCP control planes such as TDDP by reconstructing framing, crypto, integrity, dispatch, authorizati...
多人协作文档同步，确保团队成员间的信息传递。
Use when running an adversarial security review of a code change — a GitHub PR, a local working-tree diff, or an explici...
Audit a whole repository or subsystem for technical debt with at most four non-overlapping read-only subagents, lead ver...
Run Telegram as a scoped auto-reply assistant grounded in the owner's vault and written in their voice: whitelisted low-...
Temper's code-review engine — a brutally strict structural+correctness review (thermo-nuclear, full superset rubric) ove...
User input reaching a template compiler rather than its context: the source-versus-values distinction, double-render pip...
Generate refactoring checklists — performance optimization, security audit, and database migration guides. Actionable st...
Use this template for domain-specific security testing (cryptographic testing, web security methodologies, etc.).
Data encryption and key management patterns for tenant isolation. Covers encryption at rest, tenant-specific keys, and s...
Draft Terms of Service documents for web applications, SaaS platforms, and digital marketplaces. Use when the user reque...
OAuth 2.0 integration and configuration for TES (Takeback Event System). Use this skill when: (1) Configuring OAuth 2.0...
Writing/changing/reviewing/sweeping tests: reject duplicate or implementation-coupled proof; remove test-only production...
Invoke whenever writing, changing, reviewing, or sweeping tests in Anabasis. A write-time gate for every new or changed...
Design or write reproducible tests matched to behavioral risk before implementation. Use for product behavior; for tooli...
Map a requirement, root cause, existing tests, or Git diff to evidence-backed test coverage and prioritized gaps across...
This skill covers patterns for testing security using crafted content. Trigger: Load this skill when working with test_s...
For testing with Light Protocol programs and clients on localnet, devnet, and mainnet validation.
专注于全面 API 验证、性能测试和质量保证的 API 测试专家，覆盖所有系统和第三方集成
Applies OWASP-informed security testing within a tester scope: an authorization gate before any probing, authorization m...
<!-- Copyright (c) 2026 defconxt. All rights reserved. -->
Identifying and exploiting Cross-Origin Resource Sharing misconfigurations that allow unauthorized cross-domain data acc...
Systematically testing web applications for broken access control vulnerabilities including privilege escalation, missin...