Autenticació
Autenticació i autorització
beads
arisng
Track complex, multi-session work with dependency graphs using beads issue tracker. Use when work spans multiple sessions, has complex dependencies, or requires persistent context across compaction cycles. For simple single-session linear tasks, TodoWrite remains appropriate.
agent-browser
fellipeutaka
Browser automation CLI for AI agents. Use when the user needs to interact with websites, including navigating pages, filling forms, clicking buttons, taking screenshots, extracting data, testing web apps, or automating any browser task. Triggers include requests to "open a website", "fill out a form", "click a button", "take a screenshot", "scrape data from a page", "test this web app", "login to a site", "automate browser actions", or any task requiring programmatic web interaction.
learn
mseok
"Extract reusable knowledge from the current session into a persistent skill.\nUse when you discover something non-obvious, create a workaround, or develop\na multi-step workflow that future sessions would benefit from."
adonisjs-best-practices
futuregerald
Use when building AdonisJS v6 applications, implementing features in AdonisJS, or reviewing AdonisJS code. Covers routing, controllers, validation, authentication, database patterns, testing, and error handling.
security-hunter-ts
skyosev
Audit TypeScript code for security vulnerabilities — hardcoded secrets, injection risks, missing input validation at trust boundaries, insecure defaults, auth gaps, sensitive data exposure, and unsafe patterns like eval or innerHTML. Use when: reviewing TypeScript code before deployment, auditing trust boundaries, preparing for a security review, onboarding third-party integrations, or hardening an application.
copilot-sdk-dotnet
arisng
Build applications with GitHub Copilot CLI SDKs for .NET. Use for direct CopilotClient integration or Microsoft Agent Framework. Covers sessions, streaming, tools, MCP, permissions, and multi-agent workflows.
branch-management
jcdendrite
Name a feature branch, start it clean, and anchor the session in its worktree. TRIGGER when: creating a new feature branch, picking a branch name, deciding whether to use a tracker-provided default branch name, entering or re-entering a branch's worktree, starting work in a resumed session. DO NOT TRIGGER when: routine work on an existing branch already anchored in its worktree, syncing a branch with the default (use git-feature-branch-sync instead), or force-pushing.
writing-plans
hxk622
"当有多步骤任务的规格或需求时使用，在动代码之前。编写全面的实施计划，假设工程师对代码库零上下文。Use when you have a spec or requirements for a multi-step task, before touching code. Write comprehensive implementation plans."
coding-workflow
bnadlerjr
Use when user asks to build a feature, implement something new, or make significant code changes. Recognizes requests like "build", "implement", "create a new feature", "add functionality", "develop", "I need to build X", "let's implement", "new feature request", "make these changes". Orchestrates a four-stage workflow (Research → Brainstorm → Plan → Implement) using the appropriate thought pattern skill at each stage.
next-cache-components
fellipeutaka
Next.js 16 Cache Components - PPR, use cache directive, cacheLife, cacheTag, updateTag
lovable-cloud-edge-functions
jcdendrite
Supabase edge function authentication, config.toml, and Lovable Cloud deployment. TRIGGER when: adding, modifying, or reviewing an edge function in a Lovable Cloud project, or modifying a file that configures one (e.g. supabase/config.toml) or invokes one (e.g. pg_cron). DO NOT TRIGGER when: no edge function configured, invoked, or modified.
yopedia
yologdev
Save research and reflections into (and recall from) your personal knowledge vault (yopedia) — your second brain
code-review-claude-config
jcdendrite
Project-specific layer for /code-review, loaded only when reviewing changes in the claude-config repo itself.
agent-browser
markus1189
Automates browser interactions for web testing, form filling, screenshots, and data extraction. Use when the user needs to navigate websites, interact with web pages, fill forms, take screenshots, test web applications, or extract information from web pages.
ralph-session-backup
arisng
Backup a specific Ralph session directory from .ralph-sessions to the Google Drive SwarmSessions folder with versioning support. Use when archiving or copying Ralph session data with all nested files and folders. Auto-zips older backups to save space.
breaking-down-stories
bnadlerjr
Breaks down user stories into small, actionable tasks. Use when decomposing user stories, planning sprint work, creating task lists from tickets, or when the user mentions story breakdown, task decomposition, or sprint planning.
plan-review
jcdendrite
Review implementation plans before presenting to the user. A plan file in .claude/plans/ gates Write/Edit/MultiEdit/ExitPlanMode until this runs; triviality and user waivers do not release it. TRIGGER when: a plan is written or updated in .claude/plans/, or is about to be presented. DO NOT TRIGGER when: the plan lives outside .claude/plans/ (chat-level or /tmp drafts).
ship
mistakeknot
Use when work is done and you need to commit, push, close beads, and sync in one shot. The quick session-close ceremony.
writing-plans
futuregerald
Use when you have a spec or requirements for a multi-step task, before touching code
security-hunter-go
skyosev
Audit Go code for security vulnerabilities — hardcoded secrets, injection risks (SQL, command, template, path), missing input validation at trust boundaries, insecure defaults, auth gaps, sensitive data exposure, unsafe package usage, and weak crypto. Use when: reviewing Go code before deployment, auditing trust boundaries, preparing for a security review, onboarding third-party integrations, or hardening an application.
session-log
mseok
"Create timestamped progress logs for research sessions. Detects multi-project sessions and creates separate logs per project. Enables continuity between Codex sessions."
code-review-security
KentoShimizu
"Run security-focused code review when changes cross trust boundaries or may affect authentication, authorization, input validation, secrets handling, or sensitive-data exposure. Use for merge decisions requiring explicit security findings; do not use for non-security-only review scope."
feature-builder
smallnest
Build complete React features with proper layered architecture including UI components, business logic, API integration, and state management. Use this skill when users request implementing features like "user authentication", "shopping cart", "product listing", "file upload", or any complete functionality that requires UI + business logic + data fetching. Generates all layers - presentation (components), business logic (hooks/stores/validation), and data access (API calls/React Query). Integrates with react-component-generator for UI and provides production-ready, maintainable code following best practices.
polizy
bratsos
Router for polizy authorization library. Use when user mentions authorization, permissions, access control, RBAC, ReBAC, Zanzibar, or asks "who can do what" questions. Routes to specialized skills.