Auth
Authentication and authorization
fortify-fod
by crance
"use this skill whenever the user wants to list and filter application security findings, run SAST/SCA/DAST scans, discover applications and releases, and manage security scanning using Fortify on Demand (FoD). Triggers include: any mention of 'FoD', 'Fortify on Demand', 'list vulnerabilities', 'run SAST scan', 'run SCA scan', 'run DAST scan', 'list applications', 'list releases', 'package source code', 'security scan', and similar requests indicating interaction with FoD for application security scanning and vulnerability management."
progressive-disclosure
by NCMcClure
Design and maintain file-based progressive disclosure memory systems for Claude Code projects. Use when a project needs durable knowledge persistence across sessions — architecture decisions, technical learnings, domain expertise, or people context that outlasts any individual task. Triggers include requests for "project memory", "session persistence", "knowledge base", "memories directory", "progressive disclosure", "remember across sessions", or "capture learnings". Complements the autonomous-loop skill: loops handle intra-task state (progress.txt), memory systems handle institutional knowledge that accumulates over the lifetime of a project.
trinity
by frankyxhl
Multi-model orchestration skill. Dispatch tasks to any LLM provider via background sub-agents with auto-discovery, config overlay, session management, and health monitoring. Use when the user says /trinity or wants to delegate work to another model.
sac
by SeaVerseAI
Use sac (SeaArt CLI) to generate images, video, audio, and 3D assets, chat with LLMs, inspect task results, or manage SeaArt API credentials and config.
playdotfun
by OpusGameLabs
Best practices, references, and templates for integrating games with the Play.fun ecosystem.
social-media-liked-collector
by shipixiun
Use when collecting, resuming, inspecting, or exporting liked/favorited Douyin/抖音 and Xiaohongshu/小红书 social media content from the local social_zongjie project, especially when the user asks for social_media, social media liked collection, 点赞采集, 原文采集, OCR, or Excel output.
ask-me-questions
by Pranav-Karra-3301
Interactive questioning skill to help users understand vibecoded or AI-generated codebases they've lost track of. Use when: (1) User is confused about how something works in their codebase (2) User doesn't understand code that was generated with too much AI autonomy (3) User wants to find gaps, errors, or misunderstandings in implementation (4) User says things like "I don't understand this", "how does X work", "what does this do" (5) User wants to audit their understanding of AI-generated code (6) User mentions "vibecoding", "lost track", "don't know what the agent built" Triggers: "confused", "don't understand", "how does this work", "explain", "audit my understanding", "vibecoded", "what did the agent do"
agent-browser
by zhongjis
Browser automation CLI for AI agents. Use when the user needs to interact with websites, including navigating pages, filling forms, clicking buttons, taking screenshots, extracting data, testing web apps, or automating any browser task. Triggers include requests to "open a website", "fill out a form", "click a button", "take a screenshot", "scrape data from a page", "test this web app", "login to a site", "automate browser actions", or any task requiring programmatic web interaction.
coordinator
by LadderChaos
Coordinate project context, track changes, and ensure collaboration coherence across sessions. Use this skill for maintaining project status, tracking decisions, managing handoffs between sessions, and keeping coordination documents up to date.
eip-7702
by melonask
Expert guide for EIP-7702 implementation, implementing sponsored transactions, creating delegated smart contracts, and interacting via Viem v2. Use when needing to implement gasless token transfers via EIP-7702, create batching contracts, or understand the EIP-7702 transaction flow with Viem.
memento
by Chakibprojects
"Cognitive persistence system for session continuity. Syntax: /memento [action]. Actions: hydrate (restore context), checkpoint (save session), status (view state). Also triggers on intents like 'reprends le contexte', 'sauvegarde la session', 'où on en était'."
better-auth-best-practices
by Jackiexiao
（中文）Skill for integrating Better Auth - the comprehensive TypeScript authentication framework.
mcts-td-planner
by ljjluke
Universal decision engine with language adaptation. MANDATORY RULES: 1. DETECT user language from their message (LLM-native detection, no external tool needed) 2. ALL user-facing output MUST be in detected language — any language works 3. Execute phases: [Constraint Collection] → [Review Map] → [Recon Report] → [Solution List] → [Decision Report] 4. Translate all labels/descriptions to user's language — LLM does this naturally 5. NEVER assume missing info — if constraints are unclear, ASK USER before generating solutions Internal reasoning is English; user sees their language. This is NON-NEGOTIABLE.
asana
by CodeDraig
Enables Claude to create, manage, and track projects and tasks in Asana via Playwright MCP
convex-backend-development
by violabg
Develop and maintain Convex backend functions including queries, mutations, and actions. Use when working with database operations, authentication, game management, scoring logic, and real-time data updates in the dev-quiz-battle app.
writing-plans
by BaxterCooper
Use when creating implementation plans. Mandates exact file paths, complete code samples, and expected output. No vague language allowed.
code-comprehension
by potatoman03
Quiz users about AI-generated code to build understanding and improve prompting skills. Triggers on: /code-comprehension with --setup, --quiz, --status, --mode, --skip, --config, --reset. Also activates automatically after generating code to track changes for quizzing. Helps users understand their codebase and catch issues before committing.
CHAgent Development Skill
by ryanpate
Templates handle empty states gracefully
general-frontend-security
by lenneTech
Framework-agnostic frontend security guide based on OWASP Secure Coding Practices. Covers XSS prevention, CSRF protection, Content Security Policy (CSP), secure cookie configuration, client-side authentication patterns, input validation, secure storage, and security headers. Activates for security audits, vulnerability reviews, or browser security questions in any web application. NOT for backend/NestJS security (use generating-nest-servers). NOT for Nuxt-specific implementation (use developing-lt-frontend).
jsonwebtoken
by yusenthebot
JSON Web Token implementation (symmetric and asymmetric). Use when: algorithm (default: HS256); expiresIn: expressed in seconds or a string describing a time span vercel/ms; notBefore: expressed in seconds or a string describing a time span vercel/ms. NOT for: fine-grained authorization rules; user profile CRUD.
compact-guardian
by ybbms777
两者配合使用效果最好。
ask-user-question
by s-hiraoku
This skill provides structured question-asking capabilities for gathering user input, clarifying requirements, and making decisions during task execution. Use this skill when needing to present multiple choice questions, gather preferences, or get user confirmation on implementation choices.
leadgenius-api
by thierryteisseire
Comprehensive toolset for interacting with LeadGenius Pro APIs. Use for managing B2B leads, clients, companies, enrichment settings, AI-driven lead processing (enrichment, copyright, SDR AI), search history, webhooks, territory analysis, email services, and integrations. Supports Cognito JWT (cookies + Bearer) and API key authentication with multi-tenant data isolation.
amazon-fresh
by CodeDraig
Enables Claude to browse Amazon Fresh groceries, manage lists, and track deliveries