Skill rating

Next.js 16 Cache Components guidance — PPR, use cache directive, cacheLife, cacheTag, updateTag, and migration from unstable_cache. Use when implementing partial prerendering, caching strategies, or m

Manage NuGet packages using Central Package Management (CPM) and dotnet CLI commands. Never edit XML directly - use dotnet add/remove/list commands. Use shared version variables for related packages.

Scans Cairo/StarkNet smart contracts for 6 critical vulnerabilities including felt252 arithmetic overflow, L1-L2 messaging issues, address conversion problems, and signature replay. Use when auditing

Comprehensive security engineering skill for application security, penetration testing, security architecture, and compliance auditing. Includes security assessment tools, threat modeling, crypto impl

Use this skill for general PostgreSQL table design. **Trigger when user asks to:** - Design PostgreSQL tables, schemas, or data models when creating new tables and when modifying existing ones. - Cho

Searches and explores Burp Suite project files (.burp) from the command line. Use when searching response headers or bodies with regex patterns, extracting security audit findings, dumping proxy histo

Security vulnerability expert covering OWASP Top 10 and common security issues. Use when conducting security audits or reviewing code for vulnerabilities.

Verifies code implements exactly what documentation specifies for blockchain audits. Use when comparing code against whitepapers, finding gaps between specs and implementation, or performing complianc

Apply STRIDE methodology to systematically identify threats. Use when analyzing system security, conducting threat modeling sessions, or creating security documentation.

GDPR and German DSGVO compliance. Use for GDPR compliance assessments, privacy audits, scanning codebases for privacy risks, DPIA generation, data protection planning, and data subject rights manageme

Find bugs, security vulnerabilities, and code quality issues in local branch changes. Use when asked to review changes, find bugs, security review, or audit code on the current branch.

Fortify integration. Manage data, records, and automate workflows. Use when the user wants to interact with Fortify data.

Use when working with HealthKit, WorkoutKit, health data, workouts, or fitness features on iOS or watchOS. Covers permissions, queries, background delivery, custom workouts, multidevice coordination.

Use this skill for security scanning: check transaction safety, is this transaction safe, pre-execution check, security scan, token risk scanning, honeypot detection, DApp/URL phishing detection, mess

Use when building ANY macOS app — windows, menus, sandboxing, distribution, AppKit bridging or modernization (control events, state restoration, concentric corners), or macOS-specific SwiftUI patterns

Use when working with ANY data persistence, database, storage, CloudKit, migration, or serialization. Covers SwiftData, Core Data, GRDB, SQLite, CloudKit sync, file storage, Codable, migrations.

Adapts experiences across cultures and languages — not just translation, but cultural reconception. Part of the Intent design strategy system. When a product enters a new market, everything is in play

Health monitoring and cost optimization tool for OpenClaw skill ecosystems and power users managing multiple skills. Track all installed skills with real-time health scoring, detect stale skills (unus

SEO compliance checker with real-time API backend for Chinese content — 违禁词扫描+SEO合规检测+安全替换建议 (Advertising law compliance + SEO optimizer with API-powered banned word detection). Scan content for 广告法违禁

Comprehensive code security audit with AI-powered vulnerability detection. Covers OWASP Top 10, dependency scanning, secret detection, SAST, and provides actionable fix recommendations. Use when secur

Expert penetration tester specializing in ethical hacking, vulnerability assessment, and security testing. Masters offensive security techniques, exploit development, and comprehensive security assess

Plan and orchestrate authorized Nmap host discovery, port and service enumeration, NSE profiling, and reporting artifacts for in-scope targets.

破幻·关系控制系统透视镜 + 10个角色模型。用第一性原理拆解任何一段让你困惑的关系——三层控制模型+控制惯性层、退出不等式、照妖镜/X光/清醒剂三种输出模式。包含10个配套模型：自欺型操控者、循环源代码、被征用的美德、系统协作者、控制介质、控制惯性、自断后路、误判系统、弱点雷达、内核闪光。 Dispel — Relationship Control System Lens + 10 charac

当功能测试做完之后需要做进一步的质量验证时使用此技能。覆盖性能测试（负载/压力/稳定性）、安全测试（OWASP Top 10 TOP 漏洞）、兼容性测试（多浏览器/多设备）的测试方法。不要在功能测试还没做完时就做专项——先保证功能正确，再评估性能和安全。专项测试的产出是一组可复用的测试方案（性能指标基线、安全渗透用例、兼容性矩阵）。 本技能属于 QA Test Skills 技能集（49 个技能之

A secure data analysis workflow suite based on MGC Blackbox, providing credential protection, zero-exposure script application, script sealing collaboration, and knowledge management. Also includes a

An MCP server that interfaces with VMware Aria Operations to run regulatory compliance checks (ISO 27001, PCI DSS, CIS, etc.) against the VCF environment.

社区团购风险与合规全链路技能包。涵盖食品安全合规、法律风险防控、危机公关预案、竞争合规及配套工具。适用于平台运营负责人、法务/合规负责人。

CDN配置工具包免费版,为个人开发者包含CDN部署与调优核心能力. 适用于需要cdn toolkit相关能力的开发场景,包含结构化的工作流程和可复用的模板,帮助用户快速完成任务并保持代码质量. 适用于需要cdn toolkit相关能力的开发场景,包含结构化的工作流程和配置指引. 该工具经过深度差异化处置,针对用户反馈和使用痛点进行了调优改进,提升了实用性和可操作性.

AI Word form filling — auto-fill any .docx form, questionnaire, survey, or template using reference documents, a knowledge base, or web search. Complete DDQs, due diligence questionnaires, compliance

核心能力:，可自发提升工作效率. 适用于需要security toolkit相关能力的开发场景,包含结构化的工作流程和可复用的模板,帮助用户快速完成任务并保持代码质量. 适用于需要security toolkit相关能力的开发场景,包含结构化的工作流程和配置指引. 该工具经过深度差异化处置,针对用户反馈和使用痛点进行了调优改进,提升了实用性和可操作性.

网络连通性诊断工具免费版，面向个人开发者的轻量级网络排障工具。核心能力: 网络连通性检测(ping/traceroute)、端口开放性扫描、DNS解析诊断、路由追踪分析。适用场景: 开发者排查API连接超时、DNS解析异常、端口不通等网络问题。差异化: 免费版聚焦核心诊断功能，去除所有外部平台引用，强化中文本地化，适合个人用户零成本上手

核心能力:，可自发提升工作效率. 适用于需要skill vetter tool相关能力的开发场景,包含结构化的工作流程和可复用的模板,帮助用户快速完成任务并保持代码质量. 适用于需要skill vetter tool相关能力的开发场景,包含结构化的工作流程和配置指引. 该工具经过深度差异化处置,针对用户反馈和使用痛点进行了调优改进,提升了实用性和可操作性.

Comprehensive HIPAA compliance posture assessment for agent and API contexts. Runs a structured intake covering all Seven Elements of an effective compliance program, chains hipaa-gap-analysis, baa-re

macOS截图工具免费版,为个人用户包含屏幕截图与基础录屏能力. 适用于需要mac node snapshot tool相关能力的开发场景,包含结构化的工作流程和可复用的模板,帮助用户快速完成任务并保持代码质量. 适用于需要mac node snapshot tool相关能力的开发场景,包含结构化的工作流程和配置指引.

基于人民卫生出版社《精神病学》第9版的47项精神科核心临床技能，涵盖临床评估、诊断分类、药物治疗、心理治疗、急诊干预、司法鉴定、社区康复等全领域。本技能集为精神科医生、心理治疗师及相关医疗专业人员提供结构化、循证的临床决策支持。

AI/ML 医疗器械全球注册合规实操手册——覆盖美国FDA（510(k)/De Novo/PMA、PCCP预设变更控制、QMSR、网络安全SBOM）、欧盟（MDR Rule 11分类、AI Act高风险2028-08-02、CER/PMCF临床评价）、中国NMPA（分类界定、2026更新指南、变更注册、1000例数据本地化、创新通道）三地完整注册路径，含临床证据要求对比、变更管理与全生命周期（GM

有记忆的抖音脚本优化专家。当用户需要生成、优化、改写抖音短视频脚本，或进行品牌信息记忆、用户偏好设置，或上传品牌 BREF 表格图片提取信息时，应使用此 skill。覆盖所有消费品/食品/饮料/美妆/护肤/服饰/3C 等品类的抖音种草脚本创作场景。

法眼 ⚖️ v4.0 — 全能法律专家顾问。v4.0升级合同审查引擎（7步流水线+单边利益导向+Playbook五步审查法+7模块参考手册）。

Secure client database for Greek accounting firms. Manages profiles, AFM numbers, compliance history with encryption and GDPR compliance.

Retrieve a full personal profile — full name, email address, LinkedIn URL, title, and employer — for a single person using their Apollo person ID. Powered by OpenMerch (paid API). Returns sensitive pe

医疗器械企业数据出境与出海合规实操手册——覆盖中国数据出境"3+2+4"监管体系与三条合规路径（数据出境安全评估、个人信息出境标准合同、2026-01-01 施行的个人信息出境认证）、10万/100万人数阈值与累计计算规则、医疗健康数据特殊要求（首部医疗数据强制性国标、医疗数据安全审查、大湾区标准合同）、主要目标市场数据法（欧盟 GDPR/EHDS、美国 HIPAA、新加坡 PDPA、日韩），含出

区块链安全扫描免费版,为个人用户包含地址信誉查询、代币安全查验等核心能力. 适用于需要aegis security tool相关能力的开发场景,包含结构化的工作流程和可复用的模板,帮助用户快速完成任务并保持代码质量. 主要功能包括区块链安全扫描免费版、免费版与专业版对比. 适用于需要aegis security tool相关能力的开发场景,包含结构化的工作流程和可复用的模板,帮助用户快速完成任务并

Помощь с Optimacros: синтаксис формул, проектирование модели, выбор между справочниками/свойствами/кубами, работа с версиями и временем, DCA, UAM/МДП, Workflow, доступы, скрипты и практические паттерн

Zero-knowledge secrets infrastructure — AI agents manage the complete credential lifecycle without ever seeing values

Coordinate with other AI agents on behalf of your human

多搜索引擎免费版,为个人用户提供多搜索引擎聚合查询能力. 核心能力:中文搜索引擎集成、国际搜索引擎查询、结果聚合展示. 适用场景:技术资料检索、多源信息对比、快速知识查询. 差异化:免费版聚焦核心搜索功能,支持8个主流搜索引擎,适合个人快速检索. 适用关键词: 搜索引擎, 多源搜索, 信息检索, 聚合查询, search engine, multi-search, web search

Enterprise-grade security framework for LobsterAI with audit logging, RBAC, input validation, output sanitization, code scanning, and dependency vulnerability detection.

Orchestrator for the full OpenClaw Greek Accounting system. Routes commands across 18 specialist skills. Primary entry point for accounting firms.

Управление расширениями конфигурации в информационной базе 1С. Используй когда нужно узнать какие расширения подключены к базе, выполнить проверку применимости или синтаксическую проверку, изменить бе

Cybercentry Quantum Cryptography Verification on ACP - Quantum-resistant AES-256-GCM encryption for sensitive data with verifiable protection. Secure storage, confidential sharing, and privacy-preserv