Skill rating

Execute Azure deployments for ALREADY-PREPARED applications that have existing .azure/deployment-plan.md and infrastructure files. DO NOT use this skill when the user asks to CREATE a new application

Create, edit, evaluate, and optimize skills, including benchmarking and description tuning for better triggering.

Ships pull requests to open-source projects you don't maintain — CONTRIBUTING compliance, PR-size/scope checks, minimal-diff implementation, AI-disclosure PR descriptions, and rebase or bot-review rep

基于5位公众号股票投资大V（猫笔刀、格兰投研、投资明见、财躺平、终身黑白）200+篇文章蒸馏形成的风格画像，通过 AI Agent 实现风格化投资分析，支持单大V复盘、多V并行对比、板块漏斗筛选、短线选股、组合复盘、财报点评、观点跟踪等多模式。当用户请求股票复盘、大V风格分析、多V对比、板块分析、短线选股、组合复盘、财报点评时使用。触发词：股票复盘、大V分析、模拟大V、风格化复盘、多V对比、每日复

Migrates a non-SPA (classic) Power Pages site from Bootstrap 3 to Bootstrap 5. Downloads the site, runs the pac pages bootstrap-migrate engine, reviews the change report, applies AI-assisted fixes for

Designing and auditing repository structure for humans and LLM agents: layouts, monorepos, docs/tests/scripts, progressive disclosure, prompt-cache topology, and safe migrations.

Analyzing session replays, extracting persona-based behavioral patterns, and storytelling UX issues. Reads the 'why' from real user operation logs. Works with Field/Echo for persona validation.

Diagnose and fix broken MCP servers in mcptoon — doctor, health, per-server probes, and the common failure playbook.

Periodic multi-reviewer sweep of the whole codebase — surfaces a triaged checkpoint report.

Verify the active host install, package, command ownership, enforcement, and harmless live-fire probe. Read-only.

Inspect architectural variances with SMARTS; record only explicit user choices. Report-only requests make no changes.

Verify authorized feature, fix, and refactor work with scoped obligations, regression-first fixes, behavioral checks, characterization baselines, coverage, and lint.

Audit CVE/vulnerability source coverage for a technology stack. Maps each component (container, library, base image, runtime) to authoritative CVE feeds, flags gaps, and produces audit-ready reports.

Autonomous Principal Design Technologist. Cures vibe-coded software from AI frontend slop using curated token archetypes and 7-axis quality gating.

Generate a professional PDF report from a GEO audit using pandoc + Chrome headless.

Run an independent peer review via Codex. Use when the user asks to "peer review", "peer review my code", "peer review my plan", "get a second opinion", or "independent review".

Review an Agent Skill for valid structure, clear triggers, usable instructions, current evidence, and risky or unclear actions.

Harmonize a repository's skill portfolio across catalog and user-installed skills.

Audit two or more interdependent repositories for drift, duplication, and practices one repository uses well and another lacks. Verify every finding mechanically, decide with the user, then apply surg

Audit an entire repository with fresh eyes for correctness errors, bugs, omissions, duplication, inconsistencies, stale, duplicate, or tautological tests, stale comments, and other mistakes supported

Diagnose and design product adoption for onboarding, activation, behavior change, feature discovery, rollout, and sustained use after launch. Covers consumer, B2B, internal-tool, and public-service co

Декомпиляция управляемой формы 1С (Form.xml) в JSON-черновик формата /form-compile. Используй когда нужно декомпилировать форму, преобразовать Form.xml в JSON, получить DSL из существующей формы для а

Compatibility router for skill goal recovery and authority assessment. Delegate to Skill Lapidary's establish-validatable-goals capability rather than maintaining a second goal-contract system in Plug

This skill should be used when the user asks about "mystery", "fair play", "clue", "red herring", "romance beats", "HEA", "thriller", "ticking clock", "horror", "dread", "MG", "YA", "middle grade", "y

This skill should be used when the user asks to "research", "fact-check", "check the history", "is this accurate", "research notes", "sources", "historical accuracy", "technical accuracy", "how would

Research, verify, and maintain an attributed directory of TypeSafe Jev demos, repositories, agent skills, reusable snippets, integrations, and independent reproductions.

Provides a pre-submission manuscript audit covering argument, numerical consistency, references and DOIs, writing, figures, CONSORT flow, pre-registration, and the replication archive. Use before pape

Reviews tool configurations for correctness.

Ревью изменений с фокусом на безопасность по стандартам команды. Используй перед мерджем или по просьбе проверить безопасность.

Review code changes, auto-fix safe issues, and report bugs

Interactive skill assessment with personalized learning path generation

Structured plan review across 4 axes before writing any code (inspired by Garry Tan's workflow)

Audit Claude Code and Codex hooks for validity, safety, and correctness across settings.json, hooks.json, config.toml, plugin, and skill or agent frontmatter hooks. Resolves each command, checks event

Analyze changes, detect scope issues, and create a well-structured PR

Prepare, validate, and publish a Pake release. Not for version bumps without release intent.

Комплексне код-рев'ю з аналізом безпеки, продуктивності та якості. Використовуйте, коли користувачі просять переглянути код, проаналізувати якість коду, оцінити pull request, або згадують код-рев'ю, а

提供全面的代码审查能力，覆盖安全、性能和代码质量分析。适用于用户请求代码审查、代码质量评估、Pull Request 审查，或提到安全分析和性能优化时。

First-run setup for ruvector@0.3.3 — installs ONNX/Brain/SONA add-ons, registers the MCP server, and verifies the install via `doctor`

Diagnose Ruflo health, then report system, MCP server, and active-agent status without changing the installation

Subdomain takeover via dangling DNS/CNAME — GitHub Pages, Heroku, Azure, Fastly, Shopify, Netlify, Surge, Tumblr, Beanstalk, Zendesk, etc.

AATMF T6 — Training & Feedback Poisoning. Data poisoning, RLHF reward hacks, fine-tune-time exfil, embedding poisoning.

Kill chain analysis and attack path decision-making — findings analysis, attack vector selection, target prioritization, causal prerequisites and evidence confidence.

Build and validate SSRF pivot chains toward metadata/infra control and final code execution impact.

YARA rule writing from behavioral observations and TI report analysis — sample-to-rule conversion, condition optimization, performance tuning, and retrohunting on VirusTotal and ANY.RUN. Covers YARA/Y

Touchlink commissioning abuse on Zigbee Light Link (ZLL) devices using the well-known ZLL transport key, ZCL command injection (toggle/move/step), network key extraction, and factory reset via touchli

Analyze authorized AD collection data in BloodHound CE with the active runtime's supported tools and mirrored GUI.

CTF challenge triage and solve methodology — category detection, tool selection, and multi-step solve chains across pwn/rev/crypto/forensics/web/misc.

iOS IPA static analysis — class-dump-z / class-dump-ng, Hopper / IDA / Ghidra for Mach-O ARM64, Objective-C runtime introspection, Swift demangling, App Transport Security check, plist analysis, embed

iOS dynamic instrumentation on jailbroken device — Frida/Objection setup, SSL Kill Switch pinning bypass, jailbreak-detection bypass, keychain dump, biometric/LAContext bypass, and ObjC runtime method

Active target probing — port scanning, service detection, vulnerability scanning, banner grabbing, web directory fuzzing, SSL/TLS analysis.