Skill reviews

Derive security requirements from threat models and business context. Use when translating threats into actionable requirements, creating security user stories, or building securit

• Safety rules and hard prohibitions inside a skill: they belong in the system prompt, here they protect nothing
• Linear process with no failure handling
• Says nothing while it works

Static Application Security Testing (SAST) for code vulnerability analysis across multiple languages and frameworks

• Safety rules and hard prohibitions inside a skill: they belong in the system prompt, here they protect nothing
• Linear process with no failure handling
• 1 mutating operations with no state check

Diff a live page's accessibility violations against a baseline — by default compares uncommitted changes (stash-based), or pass --branch [<name>] to diff against a branch. Reports

• Safety rules and hard prohibitions inside a skill: they belong in the system prompt, here they protect nothing
• The response is described with custom markup (6 tags): a typed call is more reliable
• No condition that starts the skill

Automate Google Sheets operations (read, write, format, filter, manage spreadsheets) via Rube MCP (Composio). Read/write data, manage tabs, apply formatting, and search rows progra

• Safety rules and hard prohibitions inside a skill: they belong in the system prompt, here they protect nothing
• Linear process with no failure handling
• Says nothing while it works

You are an expert error analysis specialist with deep expertise in debugging distributed systems, analyzing production incidents, and implementing comprehensive observability solut

• Safety rules and hard prohibitions inside a skill: they belong in the system prompt, here they protect nothing
• 10 top-level sections: this looks like several domains in one skill
• 2 mutating operations with no state check

Codified expertise for handling freight exceptions, shipment delays, damages, losses, and carrier disputes. Informed by logistics professionals with 15+ years operational experienc

• Safety rules and hard prohibitions inside a skill: they belong in the system prompt, here they protect nothing
• 10 top-level sections: this looks like several domains in one skill
• No condition that starts the skill

Analyze data coverage, create monitors for warehouse tables and AI agents. Covers coverage gaps, use-case analysis, data monitor creation, and agent observability.

• References files that are not bundled: references/data-monitor-creation.md, references/agent-monitor-creation.md, references/data-*.md
• Safety rules and hard prohibitions inside a skill: they belong in the system prompt, here they protect nothing
• 14 top-level sections: this looks like several domains in one skill

7-stage super workflow for GitHub repo audit, cleanup, PR review, and competitor analysis

• Safety rules and hard prohibitions inside a skill: they belong in the system prompt, here they protect nothing
• Linear process with no failure handling
• 7 mutating operations with no state check

Create viral Xiaohongshu (小红书) content with platform-native strategy, save-rate optimization, trending formats, and search SEO for China's #1 lifestyle platform.

• Safety rules and hard prohibitions inside a skill: they belong in the system prompt, here they protect nothing
• Does not say what the result is
• Does not say what the process needs to start

Builds production-ready REST API endpoints with validation, error handling, authentication, and documentation. Follows best practices for security and scalability.

• Safety rules and hard prohibitions inside a skill: they belong in the system prompt, here they protect nothing
• 10 top-level sections: this looks like several domains in one skill
• No condition that starts the skill

Expert performance engineer specializing in modern observability,

• Safety rules and hard prohibitions inside a skill: they belong in the system prompt, here they protect nothing
• 11 top-level sections: this looks like several domains in one skill
• 2 mutating operations with no state check

Use when an agent workflow needs deterministic recovery evidence for sandbox, MCP/tool, worker, checkpoint, memory, or orchestration failures.

• Safety rules and hard prohibitions inside a skill: they belong in the system prompt, here they protect nothing
• 15 top-level sections: this looks like several domains in one skill
• Does not say what the result is

Extract structured domain knowledge from AI models in-session or from local open-source models via Ollama. No API key needed.

• Safety rules and hard prohibitions inside a skill: they belong in the system prompt, here they protect nothing
• No condition that starts the skill
• Linear process with no failure handling

Test browser apps with Chrome DevTools MCP by inspecting live DOM, console logs, network traffic, screenshots, accessibility, and performance traces.

• Safety rules and hard prohibitions inside a skill: they belong in the system prompt, here they protect nothing
• 13 top-level sections: this looks like several domains in one skill
• Does not say what the result is

Templates and patterns for creating legally sound employment documentation including contracts, offer letters, and HR policies.

• Safety rules and hard prohibitions inside a skill: they belong in the system prompt, here they protect nothing
• Linear process with no failure handling
• Says nothing while it works

A portable, framework-agnostic discipline for the write path of any React or React Native app using a query/cache layer.

• Safety rules and hard prohibitions inside a skill: they belong in the system prompt, here they protect nothing
• 13 top-level sections: this looks like several domains in one skill
• Does not say what the result is

Automate AWS secrets rotation for RDS, API keys, and credentials

• Safety rules and hard prohibitions inside a skill: they belong in the system prompt, here they protect nothing
• 13 top-level sections: this looks like several domains in one skill
• No condition that starts the skill

Assess WordPress installations for common vulnerabilities and WordPress 7.0 attack surfaces.

• Safety rules and hard prohibitions inside a skill: they belong in the system prompt, here they protect nothing
• Does not say what the result is
• No condition that starts the skill

Comprehensive checklist for conducting thorough code reviews covering functionality, security, performance, and maintainability

• Safety rules and hard prohibitions inside a skill: they belong in the system prompt, here they protect nothing
• 11 top-level sections: this looks like several domains in one skill
• No condition that starts the skill

Expert in event sourcing, CQRS, and event-driven architecture patterns. Masters event store design, projection building, saga orchestration, and eventual consistency patterns. Use

• Safety rules and hard prohibitions inside a skill: they belong in the system prompt, here they protect nothing
• Linear process with no failure handling
• Says nothing while it works

Harden Docker/container images and runtime deployments with secure base images, non-root users, CVE scanning, SBOM/signing, seccomp/AppArmor, and Kubernetes pod security controls.

• Safety rules and hard prohibitions inside a skill: they belong in the system prompt, here they protect nothing
• No condition that starts the skill
• Linear process with no failure handling

Use when diagnosing Android overheating, idle heat, thermal throttling, charging or radio heat, or abnormal battery drain with read-only ADB evidence and approval gates.

• Safety rules and hard prohibitions inside a skill: they belong in the system prompt, here they protect nothing
• 12 top-level sections: this looks like several domains in one skill
• Does not say what the process needs to start

Override Markstream node renderers and add trusted custom tags across Vue, React, Svelte, and Angular using scoped or renderer-local mappings.

• Safety rules and hard prohibitions inside a skill: they belong in the system prompt, here they protect nothing
• Does not say what the result is
• No condition that starts the skill

Guides creation of Monte Carlo monitors via MCP tools, producing monitors-as-code YAML for CI/CD deployment.

• Safety rules and hard prohibitions inside a skill: they belong in the system prompt, here they protect nothing
• The response is described with custom markup (4 tags): a typed call is more reliable
• 17 mutating operations with no state check

Provide systematic methodologies for discovering and exploiting privilege escalation vulnerabilities on Windows systems during penetration testing engagements.

• Safety rules and hard prohibitions inside a skill: they belong in the system prompt, here they protect nothing
• Does not say what the result is
• No condition that starts the skill