Auth
Authentication and authorization
implementing-dynamic-authorization
by sumik5
Dynamic authorization design covering ABAC, ReBAC, PBAC models and Cedar policy language. Use when designing access control systems, choosing authorization models, or writing Cedar policies. Distinct from securing-code (code-level) by focusing on authorization model selection and policy-based access control.
gap-analysis
by HikaruEgashira
技術選定や競合分析を行う際に自律的にギャップ分析を行うメタスキルです。 複数の軸で類似概念を調査し、現行システムとのギャップを洗い出し、 なぜそのギャップが生じているのかを自問して戦略を立案します。 Trigger: 技術選定, 競合分析, 改善提案, ギャップ分析
handover
by shuymn
Creates or refreshes a HANDOVER.md that captures current session state for the next assistant. Use when wrapping up a session, context is getting full, switching operators, or when the user asks for a handoff summary including decisions, pitfalls, lessons learned, next steps, and important files. Also trigger when the user says "save progress", "session summary", or "prepare for next session".
brainstorm
by manastalukdar
Interactive design refinement with structured exploration
prd
by alienfast
Create agent-friendly Linear tickets with PRDs, sub-issues, and clear success criteria. Use when planning features or breaking down work for agentic coding.
rviz-screenshot-loop
by Idate96
Capture RViz/GUI screenshots via MCP to close the loop while debugging ROS. Use when you need visual verification in RViz or other windows.
kuroco-docs
by diverta
Kurocoドキュメントの検索・参照ガイド。使用キーワード：「Kurocoドキュメント」「Kuroco公式」「ドキュメント検索」「マニュアル」「チュートリアル」「リファレンス」「使い方」「やり方」「設定方法」「実装方法」「Kurocoヘルプ」「Kuroco仕様」「公式ガイド」「ドキュメント同期」「Kurocoの○○はどうやる」「Kurocoで○○したい」。ドキュメントから情報を探す場合に使用。
@tank/node-express
by tankpkg
"Production-grade Node.js/Express patterns for API servers. Triggers: node, node.js, express, express.js, api server, rest api, backend, middleware, route handler, router, endpoint, request validation, zod, jwt, session auth, oauth, rate limiting, error handling, logging, graceful shutdown, prisma, drizzle, postgres, mysql, mongodb, http server, health check."
debug-session
by manastalukdar
Document debugging sessions with hypothesis tracking and knowledge base
analyze-video
by evillollive
Use when the user wants to analyze one or more videos (URLs or local files) and produce a Word document with embedded frames and a written timestamp-based analysis. Triggers on "analyze this video", "make a report from this video", "write up this YouTube link", "document what's in these videos", "analyze these clips", "video analysis", or any request that includes video URLs or local video paths and asks for a written deliverable.
@tank/google-calendar
by tankpkg
"Create, query, update, and manage Google Calendar events and availability. Covers event CRUD, free/busy queries, recurring events with RRULE, Google Meet conferencing, attendee management, multi-calendar operations, and incremental sync. Triggers: calendar, event, meeting, schedule, availability, free busy, recurring event, RRULE, Google Meet, attendee, reminder, timezone, booking, appointment, Google Calendar."
Shellforge Realms - Agent Deployment Skill
by ear2earGrin
🔹
controller-testing
by hosmelq
"Writes Pest feature tests for Laravel HTTP controllers with repeatable patterns for web/session and API/JSON flows. Activates for controller-focused feature tests (especially under tests/Feature/Http/Controllers/**), CRUD action matrices, nested route binding checks, authorization outcomes (403 vs 404), validation datasets, and persistence assertions. Takes precedence over pest-testing for controller-focused feature tests."
dotnet-core
by dmonteroh
"Build and review modern .NET (ASP.NET Core / .NET 8+) backend services with DI, auth, data access, and production readiness. Use for implementing or auditing .NET server code and architecture choices."
secure-webapp
by hov172
Use for OWASP-grounded security guidance when building, editing, or reviewing web applications. Trigger proactively for auth, sessions, JWT/OAuth/OIDC, user input, DB queries, file uploads, API endpoints, cookies/CORS/CSP/security headers, secrets, redirects, external URL fetches, logging/errors, dependencies, threat modeling, hardening, audits, or vulnerability classes such as XSS, SQLi, IDOR, CSRF, SSRF, open redirect, prototype pollution, deserialization, and supply chain risk.
cursor-agent-development
by trotsky1997
Guides developers through using cursor-agent CLI for interactive development, session management, and implementing development-verification loops. Use when working with cursor-agent, creating projects with agent supervision, managing chat sessions, or implementing agent-based development workflows.
building-multi-tenant-saas
by sumik5
Multi-tenant SaaS architecture covering deployment models, tenant isolation, and data partitioning. Use when designing SaaS platforms or evaluating silo vs pool strategies. Covers identity, onboarding, tiering, and operations. For Next.js single-tenant SaaS (auth, payments), use building-nextjs-saas instead.
analytics-tracking
by sarfraznawaz2005
When the user wants to set up, improve, or audit analytics tracking and measurement. Also use when the user mentions "set up tracking," "GA4," "Google Analytics," "conversion tracking," "event tracking," "UTM parameters," "tag manager," "GTM," "analytics implementation," or "tracking plan." For A/B test measurement, see ab-test-setup.
code-explain
by dmonteroh
"Explain complex code clearly for humans and agents. Produce a structured walkthrough (high-level intent -> data/control flow -> key invariants -> edge cases) with optional Mermaid diagrams and actionable next steps. Use for onboarding, debugging understanding, and “how it works” docs."
@tank/tank-package-publisher
by tankpkg
Package lifecycle specialist for Tank directory publishing. Use when users ask to publish a skill to Tank, run tank publish, fix publish failures, validate skills.json, bump versions, or verify releases. Handles dry-run-first workflow, manifest validation, and publish error remediation.
writing-plans
by rakaadi
Use when you have a spec or requirements for a multi-step task, before touching code
electorn-live-testing
by Mzeey-Empire
Keep one Mcode Electron application open and control it across many Playwright commands through the persistent Node REPL. Use when inspecting, debugging, benchmarking, or verifying desktop-only behavior, including existing Browser tabs, background tabs, tab switching, popups, provider selection, reloads, and restart boundaries.
backlink-pilot
by Genzo2327
Automated backlink submission toolkit. Use when user wants to submit a product to directory sites, awesome-lists, or search engines. Handles stealth browser automation, form filling, CAPTCHA solving, and submission tracking.
kotlin-ktor
by pluginagentmarketplace
Ktor framework - routing, authentication, WebSockets