Browse Skills

security-audit.md

4

1 export security-audit

2 from "tunnox-net/tunnox-core"

3 安全审计技能。审查隧道系统的安全性，包括认证、加密、权限控制、漏洞检测。关键词：安全、审计、加密、认证、漏洞、权限。

2026-01-05

testing-patterns.md

4

1 export testing-patterns

2 from "lambdamechanic/tooltest"

3 Testing patterns and standards for this codebase, including async effects, fakes vs mocks, and property-based testing.

2026-01-05

widget-creator.md

4

1 export widget-creator

2 from "mitchdenny/hex1b"

3 Step-by-step guide for creating new widgets in the Hex1b TUI library. Use when implementing new widgets from scratch, including widget records, nodes, extension methods, theming, reconciliation, and tests.

2026-01-05

create-backend-controller.md

4

1 export create-backend-controller

2 from "ProxiBlue/claude-skills"

3 Creates a backend (adminhtml) controller action in Magento 2 with proper ACL, routing, authorization, and admin UI integration. Use when building admin pages, AJAX endpoints, form handlers, or mass actions.

2026-01-05

due-diligence.md

4

1 export due-diligence

2 from "andersnygaard/ettsted2"

3 Comprehensive application audit. Analyzes best practices, security compliance, frontend design quality. Identifies top improvements and critical errors. Produces scores for design, code quality, and security.

2026-01-05

vitest-dom.md

4

1 export vitest-dom

2 from "sanand0/scripts"

3 Use vitest + jsdom for fast, lightweight unit tests for front-end apps

2026-01-05

skill-name.md

4

1 export skill-name

2 from "AgentSecOps/SecOpsAgentKit"

3 [REQUIRED] Comprehensive description of what this skill does and when to use it. Include: (1) Primary functionality, (2) Specific use cases, (3) Security operations context. Must include specific "Use when:" clause for skill discovery. Example: "SAST vulnerability analysis and remediation guidance using Semgrep and industry security standards. Use when: (1) Analyzing static code for security vulnerabilities, (2) Prioritizing security findings by severity, (3) Providing secure coding remediation, (4) Integrating security checks into CI/CD pipelines." Maximum 1024 characters.

2026-01-05

terraform-audit.md

4

1 export terraform-audit

2 from "huseyindeniz/gitops-lab"

3 Audits Terraform code for anti-patterns, security issues, and best practice violations. Use when asked to audit, review, or check terraform code quality. Generates a comprehensive report under reports/YYYY-MM-DD/terraform-audit.md. (project)

2026-01-05

rust-guidelines.md

4

1 export rust-guidelines

2 from "lambdamechanic/tooltest"

3 Pragmatic Rust conventions to keep code readable, testable, and performant for this project.

2026-01-05

agileflow-acceptance-criteria.md

4

1 export agileflow-acceptance-criteria

2 from "projectquestorg/AgileFlow"

3 Generates detailed Given/When/Then acceptance criteria when user describes feature behavior or requirements. Enhances user stories with testable scenarios.

2026-01-05

mlflow-python.md

4

1 export mlflow-python

2 from "terrylica/cc-skills"

3 Log experiment metrics, parameters, and artifacts using MLflow Python API. Query and analyze runs with DataFrame operations. Use when user mentions "log backtest", "MLflow metrics", "experiment tracking", "log parameters", "search runs", "MLflow query", or needs to record strategy performance.

2026-01-05

detection-sigma.md

4

1 export detection-sigma

2 from "AgentSecOps/SecOpsAgentKit"

3 Generic detection rule creation and management using Sigma, the universal SIEM rule format. Sigma provides vendor-agnostic detection logic for log analysis across multiple SIEM platforms. Use when: (1) Creating detection rules for security monitoring, (2) Converting rules between SIEM platforms (Splunk, Elastic, QRadar, Sentinel), (3) Threat hunting with standardized detection patterns, (4) Building detection-as-code pipelines, (5) Mapping detections to MITRE ATT&CK tactics, (6) Implementing compliance-based monitoring rules.

2026-01-05

api-mitmproxy.md

4

1 export api-mitmproxy

2 from "AgentSecOps/SecOpsAgentKit"

3 Interactive HTTPS proxy for API security testing with traffic interception, modification, and replay capabilities. Supports HTTP/1, HTTP/2, HTTP/3, WebSockets, and TLS-protected protocols. Includes Python scripting API for automation and multiple interfaces (console, web, CLI). Use when: (1) Intercepting and analyzing API traffic for security testing, (2) Modifying HTTP/HTTPS requests and responses to test API behavior, (3) Recording and replaying API traffic for testing, (4) Debugging mobile app or thick client API communications, (5) Automating API security tests with Python scripts, (6) Exporting traffic in HAR format for analysis.

2026-01-05

sast-horusec.md

4

1 export sast-horusec

2 from "AgentSecOps/SecOpsAgentKit"

3 Multi-language static application security testing using Horusec with support for 18+ programming languages and 20+ security analysis tools. Performs SAST scans, secret detection in git history, and provides vulnerability findings with severity classification. Use when: (1) Analyzing code for security vulnerabilities across multiple languages simultaneously, (2) Detecting exposed secrets and credentials in git history, (3) Integrating SAST into CI/CD pipelines for secure SDLC, (4) Performing comprehensive security analysis during development, (5) Managing false positives and prioritizing security findings.

2026-01-05

your-skill-name.md

4

1 export your-skill-name

2 from "outfitter-dev/agents"

3 [YOUR_DESCRIPTION] - Be specific about what the skill does, when to use it, and include trigger keywords. Example: "Deploy applications to production with automated testing, health checks, and rollback capabilities. Use when deploying, shipping to production, or when users mention deployment, release, or going live."

2026-01-05

test-writer.md

4

1 export test-writer

2 from "ahkohd/dotfiles"

3 Write comprehensive tests with emphasis on ALL error paths, edge cases, and regression coverage for code changes

2026-01-05

qwen-wsp-compliance-auditor.md

4

1 export qwen-wsp-compliance-auditor

2 from "Foundup/Foundups-Agent"

3 Qwen WSP Compliance Auditor

2026-01-05

storybook-stories.md

4

1 export storybook-stories

2 from "andersnygaard/ettsted2"

3 Write comprehensive Storybook stories for React components with proper TypeScript types, args, controls, decorators, and interaction tests. Use this skill when the user asks to create or improve Storybook stories for components in the /components workspace.

2026-01-05

writing-skills.md

4

1 export writing-skills

2 from "NickCrew/claude-cortex"

3 Use when creating new skills, editing existing skills, or verifying skills work before deployment - applies TDD to process documentation by testing with subagents before writing, iterating until bulletproof against rationalization

2026-01-05

hammer-build-validate.md

4

1 export hammer-build-validate

2 from "Ronin15/SDL3_HammerEngine_Template"

3 Runs complete build validation pipeline for SDL3 HammerEngine including Debug build, smoke test execution, core test suite, and summary report generation. Use when the user wants to quickly validate their changes, check if the codebase is in a good state, or run the standard daily validation workflow.

2026-01-05

phoenix-liveview.md

4

1 export phoenix-liveview

2 from "forest/dotfiles"

3 Critical Phoenix LiveView guidelines that prevent common bugs, memory issues, and deprecated patterns. Use when writing LiveView modules, LiveView tests, or working with streams, navigation, forms, or JS hooks. Prevents memory ballooning from improper collection handling, deprecated function usage, and common test failures.

2026-01-05

pr-description.md

4

1 export pr-description

2 from "projectquestorg/AgileFlow"

3 Generate pull request description with testing instructions and comprehensive checklist

2026-01-05

analysis-tshark.md

4

1 export analysis-tshark

2 from "AgentSecOps/SecOpsAgentKit"

3 Network protocol analyzer and packet capture tool for traffic analysis, security investigations, and forensic examination using Wireshark's command-line interface. Use when: (1) Analyzing network traffic for security incidents and malware detection, (2) Capturing and filtering packets for forensic analysis, (3) Extracting credentials and sensitive data from network captures, (4) Investigating network anomalies and attack patterns, (5) Validating encryption and security controls, (6) Performing protocol analysis for vulnerability research.

2026-01-05

authentication-security.md

4

1 export authentication-security

2 from "ikeniborn/familyBudget"

3 Автоматизация JWT аутентификации, Telegram OAuth и security middleware

2026-01-05