Auth
Authentication and authorization
plan-writing
by vudovn
Structured task planning with clear breakdowns, dependencies, and verification criteria. Use when implementing features, refactoring, or any multi-step work.
research
by tavily-ai
"Comprehensive research grounded in web data with explicit citations. Use when you need multi-source synthesis—comparisons, current events, market analysis, detailed reports. "
red-team-tactics
by vudovn
Red team tactics principles based on MITRE ATT&CK. Attack phases, detection evasion, reporting.
vulnerability-scanner
by vudovn
Advanced vulnerability analysis principles. OWASP 2025, Supply Chain Security, attack surface mapping, risk prioritization.
camoufox-cli
by Bin-Huang
Anti-detect browser automation CLI for AI agents. Use when the user needs to interact with websites with bot detection, CAPTCHAs, or anti-bot blocks, including navigating pages, filling forms, clicking buttons, taking screenshots, extracting data, testing web apps, or automating any browser task that requires bypassing fingerprint checks.
hive-credentials
by aden-hive
Set up and install credentials for an agent. Detects missing credentials from agent config, collects them from the user, and stores them securely in the local encrypted store at ~/.hive/credentials.
configure
by Rich627
Set up the WhatsApp channel — configure the phone number, review access policy, and manage auth state. Use when the user asks to configure WhatsApp, set a phone number, check channel status, or reset authentication.
setup
by Rich627
Interactive WhatsApp channel onboarding — guides through device linking, phone number config, and access control setup
aiox-analyst
by SynkraAI
Business Analyst (Atlas). Use for market research, competitive analysis, user research, brainstorming session facilitation, structured ideation workshops, feasibility studies, i...
git-commit-formatter
by rominirani
Formats git commit messages according to Conventional Commits specification. Use this when the user asks to commit changes or write a commit message.
security-hardening
by rohitg00
Application security covering input validation, auth, headers, secrets management, and dependency auditing
better-auth-best-practices
by novuhq
Skill for integrating Better Auth - the comprehensive TypeScript authentication framework.
email-best-practices
by novuhq
Use when building email features, emails going to spam, high bounce rates, setting up SPF/DKIM/DMARC authentication, implementing email capture, ensuring compliance (CAN-SPAM, GDPR, CASL), handling webhooks, retry logic, or deciding transactional vs marketing.
postkit
by varunchopra
PostgreSQL-native identity, configuration, metering, and job queues. SQL functions that work with any language or driver. Use when working with user management, sessions, permissions, access control, login/logout, MFA, password resets, relationship-based access, versioned configuration, prompts, usage tracking, quotas, billing periods, or background jobs in PostgreSQL. Covers authn (user/session management), authz (ReBAC permissions), config (versioned key-value storage), meter (usage tracking with reservations), and queue (job scheduling with retries and dead letters).
woocommerce-store-api
by woocommerce
Add or modify routes in the WooCommerce Store API (/wc/store/v1/*). Use when creating new Store API endpoints, modifying existing ones, or designing the schemas blocks and external integrations consume. Covers authentication, REST URL design, schema/response alignment, variation handling, idempotency, and common pitfalls.
playwriter
by mikeyobrien
Browser automation via Playwriter (remorses) using persistent Chrome sessions and the full Playwright Page API.
tmux-terminal
by mikeyobrien
Interactive terminal control via tmux for TUI apps, prompts, and long-running CLI workflows.
ralph-operations
by mikeyobrien
Use when managing Ralph orchestration loops, analyzing diagnostic data, debugging hat selection, investigating backpressure, or performing post-mortem analysis
code-change-summarizer
by ArabelaTso
"Generates clear and structured pull request descriptions from code changes. Use when Claude needs to: (1) Create PR descriptions from git diffs or code changes, (2) Summarize what changed and why, (3) Document breaking changes with migration guides, (4) Add technical details and design decisions, (5) Provide testing instructions, (6) Enhance descriptions with security, performance, and architecture notes, (7) Document dependency changes. Takes code changes as input, outputs comprehensive PR description in Markdown."
signet-sessions
by Signet-AI
Search Signet transcript/session evidence from Codex.
security-review
by mcouthon
"Security-focused code review with attack surface mapping and risk classification. Use when reviewing PRs for security, auditing code changes, or analyzing potential vulnerabilities. Triggers on: 'security review', 'use security mode', 'audit this', 'check for vulnerabilities', 'is this secure', 'attack surface', 'threat model', 'security check'. Read-only mode - identifies issues but doesn't fix them."
mentor
by mcouthon
"Guide through problems with questions, not answers using Socratic teaching style. Use when asked to teach, explain concepts through discovery, help learn, or guide understanding without giving direct solutions. Triggers on: 'use mentor mode', 'teach me', 'help me understand', 'guide me', 'mentor', 'I want to learn', 'explain by asking', 'Socratic', 'don't give me the answer'. Read-only mode - explores and guides but doesn't write code."
Cancel Auto Command
by anton-abyzov
EMERGENCY ONLY - Cancel running auto session and generate summary report.
openspec-bulk-archive-change
by studyzy
一次归档多个已完成的变更。用于归档多个并行变更。