Auth
Authentication and authorization
explicit-identity
by parcadei
Explicit Identity Across Boundaries
implement_plan
by parcadei
Implement technical plans from thoughts/shared/plans with verification
implement_plan_micro
by parcadei
Implement technical plans from thoughts/shared/plans with verification
product-manager
by shining319
"Senior product manager for end-to-end product development from requirements to design. Use when users need: (1) Requirements analysis and product direction, (2) User personas and scenario analysis, (3) Feature and interaction design, (4) PRD writing, (5) Feasibility assessment. Triggers: product design, requirements, user persona, PRD, feature planning, MVP, user story. 资深产品经理，负责需求分析到产品设计全流程。触发词：产品设计、需求分析、用户画像、PRD、功能规划、MVP、用户故事、产品方案。"
agent-ros-bridge
by webthree549-bot
Universal ROS1/ROS2 bridge for AI agents to control robots and embodied intelligence systems.
spring-boot-security
by joaquimscosta
Spring Security 7 implementation for Spring Boot 4. Use when configuring authentication, authorization, OAuth2/JWT resource servers, method security, or CORS/CSRF. Covers the mandatory Lambda DSL migration, SecurityFilterChain patterns, @PreAuthorize, and password encoding. For testing secured endpoints, see spring-boot-testing skill.
been-there-done-that
by rfxlamia
Guides an agent to document developer progress objectively after completing a sprint, project phase, or milestone. Reads a global markdown file, detects git work sessions via 3-day gap analysis, writes factual entries (no sycophancy, no praise), and performs cross-entry progression analysis for portfolio and gig use. USE WHEN: User says "document my progress", "log what I did", "I just finished [sprint/project/phase]", "update btdt", or provides a repo path after completing work. WORKFLOW: Pre-flight → Session Detection → Collection → Analysis → Write → Confirm OUTPUT: Extends the user's global progress log (been-there-done-that.md) with a dated, factual entry placed at the correct position in a Year/Month/Date/Project tree. Default output language: English (ask user on first run if file is new). CRITICAL: Agent MUST stop and wait at every STOP gate. Do not proceed without explicit user confirmation. No assumptions. No skipping.
dida-coach
by siyuanfeng636-cpu
基于 dida-cli 和本地生产力系统的任务教练技能，用于把目标拆解成阶段计划、把任务转换成时间盒，并自然地查询、创建、更新、完成、移动任务，支持管理视角、承诺跟踪、周/月复盘与闭环跟进。用户提到“拆目标”“做计划”“时间盒”“复盘”“改时间”“提醒”“拖延”“查任务”“完成任务”“清单管理”“生产力系统”“承诺”“等待项”时使用。
code-reviewer
by masanao-ohba
Code review methodology, severity classification, and quality assessment patterns
polymarket-clob-auth-trade
by lubluniky
Advanced procedural workflow for L1/L2 authentication, EIP-712 signing, and placing trades on Polymarket CLOB API.
atlassian
by i9wa4
Atlassian (Jira/Confluence) operations using acli and REST API scripts. Use when: - Working with Jira issues, boards, sprints - Converting Confluence pages to Markdown - Checking Jira authentication status - Searching or viewing Jira work items
webact
by kilospark
Use when the user asks to interact with a website, browse the web, check a site, send a message, read content from a web page, or accomplish any goal that requires controlling a browser
perf-audit
by Faresabdelghany
Use when asked to "test speed", "check performance", "run lighthouse", "audit performance", "speed test", or diagnose slow page loads, high LCP, layout shifts, or large bundles. Supports Next.js, React, Angular, Vue, and .NET projects.
adk-frontend
by botpress
Guidelines for building frontend applications that integrate with Botpress ADK bots - covering authentication, type generation, client setup, and calling bot actions
psc
by unlimiting-studio
Google Play Developer API Edits workflow CLI(@unlimiting/psc)를 설치하고 사용해 Android 앱 배포를 수행한다. psc 설치, 서비스 계정 인증, auth 상태 점검, edits/bundles/tracks 수동 배포, publish submit 원샷 배포, 점진 배포(inProgress), release notes JSON 적용, 자격증명/환경변수 우선순위 설정이 필요한 작업에서 사용한다.
browser-use
by yoloshii
Agentic browser automation with persistent sessions and ARIA snapshot-based navigation. Use when user needs to browse websites, interact with web pages, fill forms, login to sites, warm up social accounts, bypass anti-bot protection, take screenshots, execute JavaScript on pages, manage cookies, handle multi-tab workflows, extract page content as Markdown, search page text, find elements by role or text, upload files, download files, use WebMCP structured tools on Chrome 146+ pages, or perform any multi-step browser task. Three stealth tiers (Playwright, Patchright, Camoufox) with auto-escalation for anti-bot, session persistence with cookie/storage profiles, element ref system, WebMCP tool discovery, new-element detection between snapshots, action loop detection with escalating warnings, auto popup dismissal, download handling, click-by-coordinate fallback, context compaction for long sessions, idle session GC, and per-session locking.
context-saver
by mhylle
Save session context to disk for seamless continuation in new chat sessions. This skill should be used when the user asks to save context, preserve work state, checkpoint progress, or prepare for session handoff. Triggers on "save context", "checkpoint", "save progress", "preserve state", or when explicitly asked to create a context file for later resumption. Optimizes for correctness, completeness, minimal size, and trajectory preservation.
codebase-research
by mhylle
Orchestrates comprehensive codebase research by decomposing user queries into parallel sub-agent tasks and synthesizing findings. This skill should be used when users ask questions about how code works, where functionality exists, how components interact, or need comprehensive documentation of existing implementations. It focuses exclusively on documenting and explaining the codebase as it exists today.
typescript-better-auth-best-practices
by jasonraimondi
Skill for integrating Better Auth - the comprehensive TypeScript authentication framework.
create-plan
by mhylle
Create detailed implementation plans through interactive research and iteration. This skill should be used when creating new implementation plans, designing feature specifications, planning technical work, or when the user asks to plan an implementation. Triggers on requests like "create a plan", "plan the implementation", "design how to implement", or when given a feature/task that needs structured planning before implementation.
tooling-agent-browser
by jasonraimondi
Browser automation CLI for AI agents. Use when the user needs to interact with websites, including navigating pages, filling forms, clicking buttons, taking screenshots, extracting data, testing web apps, or automating any browser task. Triggers include requests to "open a website", "fill out a form", "click a button", "take a screenshot", "scrape data from a page", "test this web app", "login to a site", "automate browser actions", or any task requiring programmatic web interaction.
code-review
by mhylle
Systematic code review for implementation phases verifying architectural principles, framework standards, ADR compliance, and code quality. This skill is invoked by implement-phase as part of its quality gate pipeline, or manually when reviewing code changes. Triggers on "review code", "code review", "/code-review", or automatically as Step 3 of implement-phase.
strategic-compact
by mhylle
Strategic compaction suggestion framework that monitors session complexity and suggests context compaction at optimal logical boundaries rather than arbitrary thresholds.
frontend-async-best-practices
by sergiodxa
Async/await and Promise optimization guidelines. Use when writing, reviewing, or refactoring asynchronous code to eliminate waterfalls and maximize parallelism. Triggers on tasks involving data fetching, loaders, actions, or Promise handling.