Auth
Authentication and authorization
deploying-app
by wasp-lang
deploy the Wasp app to Railway or Fly.io using Wasp CLI.
superpowers-plan
by anthonylee991
Writes an implementation plan with small steps, exact files to touch, and verification commands. Use before making non-trivial changes.
api-security-checker
by armanzeroeight
Audit API security for OWASP Top 10 vulnerabilities, authentication issues, and authorization flaws. Use when securing APIs, fixing security vulnerabilities, or implementing security best practices.
agents-to-im
by francize
Manage the Feishu/Lark bridge daemon for Claude Code and Codex. Use for: setup guidance, start/stop/status/logs/doctor, checking bridge health, or explaining how to configure the Feishu bot. This skill is Feishu/Lark-only.
springboot-security
by Ashfaqbs
Spring Security best practices for authn/authz, validation, CSRF, secrets, headers, rate limiting, and dependency security in Java Spring Boot services.
iterative-retrieval
by Ashfaqbs
Pattern for progressively refining context retrieval to solve the subagent context problem
laravel-api
by noartem
Build production-grade Laravel REST APIs using opinionated architecture patterns with Laravel best practices. Use when building, scaffoling, or reviewing Laravel APIs with specifications for stateless design, versioned endpoints, invokable controllers, Form Request DTOs, Action classes, JWT authentication, and PSR-12 code quality standards. Triggers on "build a Laravel API", "create Laravel endpoints", "add API authentication", "review Laravel API code", "refactor Laravel API", or "improve Laravel code quality".
google-sheets
by chnlich
This skill should be used when the user asks to read, create, or edit Google Sheets spreadsheets, or manage cell data through the Google Sheets API.
tmux
by sebnow
"Teaches agents to control tmux sessions for interactive CLIs and long-running processes via the Bash tool. Use when running REPLs, debuggers, database shells, long-running servers, or any tool requiring a persistent TTY. Triggers: 'start a REPL', 'run interactively', 'interactive session', 'long-running process', 'background server', 'keep running'. Do NOT use for simple one-shot commands or non-interactive background tasks that the Bash tool handles natively."
hermes-agent
by kzinmr
Complete guide to using and extending Hermes Agent — CLI usage, setup, configuration, spawning additional agents, gateway platforms, skills, voice, tools, profiles, and a concise contributor reference. Load this skill when helping users configure Hermes, troubleshoot issues, spawn agent instances, or make code contributions.
slack
by chnlich
This skill should be used when the user asks to read Slack messages, search Slack conversations, look up Slack users, check DMs, or interact with the Slack workspace in any way.
swarm-orchestration
by Und3rf10w
This skill should be used when the user asks to "set up a team", "create a swarm", "spawn teammates", "assign tasks", "coordinate agents", "work in parallel", "divide work among agents", "orchestrate multiple agents", or describes a complex task that would benefit from multiple Claude Code instances working together. Provides comprehensive guidance for team leads on creating teams, spawning teammates, assigning work, and monitoring progress across tmux/kitty terminal multiplexers.
google-workspace
by kzinmr
Gmail, Calendar, Drive, Contacts, Sheets, and Docs integration for Hermes. Uses Hermes-managed OAuth2 setup, prefers the Google Workspace CLI (gws) when available for broader API coverage, and falls back to the Python client libraries otherwise.
gmail
by chnlich
Use when the user asks to read, search, or list Gmail messages, threads, or labels. Readonly access only — no sending or modifying.
mercor
by Daisuke134
"Use for Mercor revenue jobs, assessments, applications, replies, work submission, authentication, and verified earnings."
browser-foundation
by Daisuke134
Use when a Life Manager loop drives a registered Chromium identity, needs TikTok login, message, or authenticated-identity readback, leases CDP tabs or contexts, restores sessions, or handles browser resource pressure.
self/coordinate
by Daisuke134
INFO-SHARING (bot2bot, #9/H6) — share ONE notable strategy lesson with the colony, or read what peers already shared for your own earn slots, so no instance has to rediscover the same thing. A TOOL, not a decision.
camofox-browser
by Daisuke134
Stealth Firefox browser server for agent-driven Google OAuth and bot-protected sites. REST API on :9377. Use whenever a target site rejects agent-browser/playwright due to fingerprint detection (Google login, reCAPTCHA, Cloudflare). Wraps Camoufox (Firefox fork with C++-level fingerprint spoofing). Required for Anicca to login to Printful, Stripe Connect, Slack admin, Shopify, etc. via Google OAuth without human input after first 2FA. Cookie/storage persistence per (userId, sessionKey).
kanban-codex-lane
by kzinmr
Use when a Hermes Kanban worker wants to run Codex CLI as an isolated implementation lane while Hermes keeps ownership of task lifecycle, reconciliation, testing, and handoff.
zendesk
by andmarios
Interact with Zendesk Support via CLI - search tickets, view details, analyze metrics, manage users/organizations, and update tickets. All responses are saved locally for efficient jq querying.
adr-writing
by sebnow
"Use when documenting significant architectural decisions. Creates focused ADRs explaining context, decision, and alternatives. Prevents vague documentation and implementation detail bloat. Triggers: 'create ADR', 'document decision', making technology/framework/persistence/auth choices, cross-cutting concerns."
xurl
by kzinmr
Interact with X/Twitter via xurl, the official X API CLI. Use for posting, replying, quoting, searching, timelines, mentions, likes, reposts, bookmarks, follows, DMs, media upload, and raw v2 endpoint access.
debug-cao
by githubnext
Diagnose a Central Agentic Ops deployment failure and leave bounded, reproducible evidence for the next action.
setup-cao
by githubnext
"Set up a bare Central Agentic Ops (CAO) control plane. Use when a user asks to create, bootstrap, initialize, install, or get started with CAO. Create or reuse one control repository, install the runtime, establish exact repository scope, configure authentication, and stop before campaign installation or execution."