Skill rating

Identifies dependencies at heightened risk of exploitation or takeover. Use when assessing supply chain attack surface, evaluating dependency health, or scoping security engagements.

Guide for VS Code extension development from scaffolding to Marketplace publication

Use BuyWhere's MCP and API surfaces to add product search, price comparison, and deal discovery to AI shopping agents.

Apply STRIDE methodology to systematically identify threats. Use when analyzing system security, conducting threat modeling sessions, or creating security documentation.

Track code changes with structured JSON records, state machine enforcement, and AI session handoff for bot continuity

Master C#/.NET patterns for building production-grade APIs, MCP servers, and enterprise backends with modern best practices (2024/2025).

Implement bounded, idempotency-aware API throttling, backoff, and retry handling for 429 and transient 5xx responses.

Plan, orchestrate, and adversarially verify parallel AI coding agents with a dynamic multi-agent workflow engine.

Seek and analyze video content using Memories.ai Large Visual Memory Model for persistent video intelligence

Schedule AI agent runs with cron, loops, or external clocks while avoiding unsafe tight autonomous timers.

A portable, framework-agnostic architecture style for any React or React Native frontend. Organizes apps into feature modules with page/screen directories, a strict server-state vs UI-state split, bar

Professional PESTEL/SWOT analysis agent based on Kotler's methodology for strategic market audits.

Real vs lottery call separation for options P/C ratio analysis — prevents signal inversion from deep OTM noise

Generate complete Python scripts that build polished PowerPoint decks with python-pptx and real slide content.

Manage authorized VPS hosts and server-side agents through cautious SSH and operations workflows.

⚠️ AUTHORIZED USE ONLY > This skill is for educational purposes or authorized security assessments only. > You must have explicit, written permission from the system owner before using this tool. > Mi

Commit and push skill changes to the configured skills repository after review and validation.

Creates custom Semgrep rules for detecting security vulnerabilities, bug patterns, and code patterns. Use when writing Semgrep rules or building custom static analysis detections.

Reference for writing and editing skills well — the vocabulary and principles that make a skill predictable.

Sub-skill filosófica e pedagógica de Yann LeCun.

Configure and optimize .geminiignore files for AI context window efficiency and token cost reduction (FinOps).

Build Gradio web UIs and demos in Python. Use when creating or editing Gradio apps, components, event listeners, layouts, or chatbots.

Multi-cluster Kubernetes dashboard with AI-powered operations via MCP server and 10+ built-in agent skills

Open Markdown reliably in cmux panes and recover from blank rendered surfaces.

PowerShell Windows patterns. Critical pitfalls, operator syntax, error handling.

Extract transcripts from YouTube videos and generate comprehensive, detailed summaries using intelligent analysis frameworks

Transform audio recordings into professional Markdown documentation with intelligent summaries using LLM integration

To provide a comprehensive reference for configuring and using Claude Code (the agentic coding tool) to its full potential. This skill synthesizes best practices, configuration templates, and advanced

Use when explicit CrossFrame output needs review for reasoning fidelity, evidence boundaries, source anchors, concept drift, article collapse, or repair steps.

Rewrite allowed prompts to reduce false-positive safety triggers without bypassing policy or changing intent.

Generate production-ready mise.toml setups for local development, CI/CD pipelines, and toolchain standardization.

Provide a comprehensive checklist for planning, executing, and following up on penetration tests. Ensure thorough preparation, proper scoping, and effective remediation of discovered vulnerabilities.

Safe production cleanup and hardening for vibe-coded fullstack apps (Next.js, React, Node.js, etc.). Removes dead imports, unused files, and broken references without breaking routes or APIs.

Review product risk before coding by checking demand, alternatives, channels, switching costs, and failure signals.

Provide a comprehensive command reference for penetration testing tools including network scanning, exploitation, password cracking, and web application testing. Enable quick command lookup during sec

A relentless interview to sharpen a plan or design, which also creates docs (ADR's and glossary) as we go.

Generate and edit images using Gemini's Nano Banana Pro model (gemini-3-pro-image-preview). Use this skill when the user asks you to generate images, create visuals, edit photos, create logos, generat

Register custom Pi Agent model slugs so saved OpenRouter variants resolve correctly.

Give an AI agent a permanent network address, encrypted P2P messaging, and an installable app store via Pilot Protocol

Comprehensive security auditing workflow covering web application testing, API security, penetration testing, vulnerability scanning, and security hardening.

旅行/行程规划需求时使用:规划去某地旅行、X天X城、带老人孩子、自驾、假期安排等。产出逐日行程表、预算估算(经济/舒适/奢华三档)、交通住宿建议、景点美食清单。必须先问预算,预算未确认只输出问题清单;事实数据带来源和查询日期。

Upload, stream, search, edit, transcribe, and generate AI video and audio using the VideoDB SDK.

Interview the user to turn project vision and decisions into README and ADR documentation.

Generate a concise and structured PR description from commit history with minimal token usage

Give Pi Agents a safe web-search and fetch workflow using the installed pi-web-access package.

Provides expertise for analyzing DWARF debug files and understanding the DWARF debug format/standard (v3-v5). Triggers when understanding DWARF information, interacting with DWARF files, answering DWA

Master comprehensive testing strategies for smart contracts using Hardhat, Foundry, and advanced testing patterns.

Evaluate, adapt, and safely install Context Kit personal context artifacts for Claude Code or adjacent agent workflows.

Run read-only exposure checks for security advisories and write a structured local audit report.

Map, explain, and lint repository-scoped coding-agent instructions before changing code.