Templates

angular-access-modifiers

by araujomartin

Recommended usage of access modifiers in Angular components: public readonly for API (inputs/outputs), protected readonly for template state, private readonly for internal logic. Trigger: When defining component properties in Angular.

filoz-home-desite

by FilOzone

Update the FilOz website (filoz.org Hugo clone). Use when the user asks to update team members, add blog posts, change events, update resources, or modify navigation/footer on the FilOz site. Also use for any content changes to desite.filoz.org.

spec-driven-development

by Contaaltv4782

Use when starting features, projects, or refactors with AI coding agents and requirements feel informal, incomplete, or drift-prone. Triggers: AI generates code that ignores constraints, same prompt produces different implementations across sessions, team lacks shared technical understanding, complex features need traceable design decisions, or vibe-coding produces unreliable output. Keywords: spec-driven, SDD, specification-first, requirements.md, plan.md, tasks.md, constitution.md, design doc, PRD, acceptance criteria, MoSCoW, drift detection, AI planning, feature spec, context drift, hallucination, constrained generation, boundaries, risks-identification, assumption-surface, living-document.

windows-ad-pentesting

by ErenYeager29

Windows AD pentesting beginner to master. Trigger on: Kerberoasting, AS-REP Roasting, Golden/Silver/Diamond/Sapphire Tickets, Pass-the-Ticket, Overpass-the-Hash, noPac, unconstrained/constrained/RBCD delegation, KrbRelay, Bronze Bit, Timeroasting, BloodHound/SharpHound, lateral movement (PsExec, WMI, WinRM, DCOM, PtH), ACL abuse (GenericAll, WriteDACL, GPO, AdminSDHolder, shadow credentials, DNSAdmin), DCSync, credential dumping (Mimikatz, secretsdump, LSASS, DPAPI, DonPAPI, domain backup key), NTLM relay (Responder, ntlmrelayx, PetitPotam), AD CS (ESC1-16, Certifried, Certipy, PKINIT), MSSQL (mssqlclient, xp_cmdshell, linked servers), gMSA, Windows LAPS, ADIDNS/wpad, SCCM/MECM/SharpSCCM, WSUS, persistence, forest/trust attacks, AMSI/ETW/process injection evasion. Vague triggers: "pwn AD", "get DA", "domain admin", "krbtgt", "ntds.dit", "AD lab". All topics: concept, commands, OPSEC, detection.

jonggrang

by porcupine-md

Deterministic AI development workflow orchestrator. Manages task boards (.jonggrang/jonggrang-tasks.json), runs 16-phase pipelines (BUGFIX/SMALL/MEDIUM/LARGE), installs lifecycle hooks for Claude Code and OpenCode, and coordinates five specialist roles (Lead/Developer/Reviewer/TestLead/Tester). Use when planning features, executing multi-step development workflows, or orchestrating AI coding agents. Run via npx jonggrang.

knock-cli

by knocklabs

Guidelines for working with the Knock CLI to manage workflows, templates, and other notification resources in a Knock project.

nuxt-ui

by ahmadzakiy

Build UIs with @nuxt/ui v4 — 125+ accessible Vue components with Tailwind CSS theming. Use when creating interfaces, customizing themes to match a brand, building forms, or composing layouts like dashboards, docs sites, and chat interfaces.

noteplan

by loukandr

Comprehensive knowledge for NotePlan, the Markdown-based productivity app that combines note-taking, task management, and calendar integration. Use this skill whenever the user mentions NotePlan, asks about NotePlan markdown syntax, task scheduling, calendar notes, daily/weekly/monthly/quarterly/yearly notes, project notes, time blocking, templates, frontmatter, search filters, wiki-links, backlinks, tags, mentions, the NotePlan URL scheme (noteplan://), synced lines, Apple Calendar or Reminders integration within NotePlan, NotePlan themes, Kanban/folder views, or wants to build/modify/debug NotePlan plugins (plugin.json, script.js, JavaScript API with DataStore, Editor, CommandBar, HTMLView, Calendar, Clipboard objects).

neldivad-blueprint-instantiator

by neldivad

Bootstraps a new SaaS project from blueprint templates, or resumes an existing one. Runs phased Q&A to extract the idea, fills architecture docs, discovers stack-specific skills, and prepares the project for building. Use when user says "new project", "start a SaaS", "instantiate blueprint", "bootstrap <name>", "resume <name>", "continue <name>", or "load <name>".

training-deck-builder

by OlajideOlagunju

Build role-based walkthrough training slide decks for software tools — produces brand-themed reveal.js HTML decks with real screenshots captured from the running app via Playwright. Use whenever the user asks for training slides, walkthrough decks, tutorial slides, end-user documentation, onboarding decks, or "how to use this app" presentations for a webapp/SaaS tool, even if they don't say the word "skill" or "deck". Trigger on phrases like "training deck", "walkthrough slides", "user training", "role-based tutorial", "how-to slides for the app".

Content & Publishing

by neillock

Readability-first specification for full blog journeys (Home, Category, Article).

Authentication & Account Management

by neillock

Comprehensive standards for implementing secure authentication using Google OAuth 2.0 and NextAuth.js.

🤖 AI 入驻与发布指南

by Haoqi7

homekit-automator

by and3rn3t

Full-featured Apple HomeKit smart home automation skill for macOS. Create, manage, and trigger complex home automations through natural conversation — lights, thermostats, locks, sensors, scenes, and more. Automations are registered as native Apple Shortcuts so they run reliably on schedule even when the AI agent isn't active. Use this skill whenever the user mentions smart home, HomeKit, home automation, Apple Home, lights, thermostat, locks, garage door, scenes, routines, or wants to control or automate anything in their house. Also trigger when the user mentions Shortcuts integration with home devices, energy monitoring, or asks about the state of devices in their home. This skill should be used even for simple queries like "turn off the lights" because it provides richer device context and error handling than raw commands.

moltpulse

by diegosouzapw

Generate industry intelligence reports with MoltPulse. Run when user says "generate report", "daily brief", "weekly digest", "industry analysis", "market intelligence", or "moltpulse run".

supabase-best-practices

by jcastillotx

Supabase development standards. Triggers when working with Supabase projects, Row Level Security, real-time subscriptions, or Edge Functions.

pdf-forge

by rendis

Use when building, extending or using pdf-forge multi-tenant PDF template engine with Typst

Active Directory Attacks

by jcastillotx

This skill should be used when the user asks to "attack Active Directory", "exploit AD", "Kerberoasting", "DCSync", "pass-the-hash", "BloodHound enumeration", "Golden Ticket", "Silver Ticket", "AS-REP roasting", "NTLM relay", or needs guidance on Windows domain penetration testing.

ocean-paper-writer

by 441837297

helps ocean science researchers turn proposals, figures, code, data descriptions, target-journal plans, Zotero-supported literature, and advisor feedback into staged manuscript materials through prepare, methods, structure, writing, review, and polish workflows.

knowledge-site-creator

by alifa555

一句话生成任何领域的知识学习网站。AI自动理解主题、创作内容、生成页面、部署上线。适用于任何需要系统学习的知识领域：进化心理学、大模型术语、化学元素、历史事件等。

prompt-engineering

by zhongjis

Use when writing commands, hooks, skills for agents, or prompts for sub-agents or any other LLM interaction. Triggers on "optimize prompt", "improve LLM output", "prompt template", "write a skill", "system prompt".

uniapp-ui

by zwmmm

"UniApp + UnoCSS + WotUI page generator from designs. Converts screenshots or HTML/CSS to UniApp pages. Features: intelligent component mapping with priority (custom components, then WotUI, then built-in), 6 page templates (form, list, detail, tab, search, grid), auto-analyze custom components, cross-platform compatibility checks. Use for: creating UniApp pages, converting designs to code, mobile app/mini-program/H5 development. Actions: generate, create, build, convert, analyze, design. Tech: Vue3, UnoCSS, Wot Design Uni, UniApp."

Broken Authentication Testing

by jcastillotx

This skill should be used when the user asks to "test for broken authentication vulnerabilities", "assess session management security", "perform credential stuffing tests", "evaluate password policies", "test for session fixation", or "identify authentication bypass flaws". It provides comprehensive techniques for identifying authentication and session management weaknesses in web applications.

webprinter

by SiteHypeInc

Convert Elementor template kits into WebPrinter-compatible templates and deploy automated websites. Use when working with WebPrinter 2.0, converting templates, deploying sites, managing the plugin, or working with the n8n pipeline. Triggers on mentions of WebPrinter, template conversion, Elementor templates, site deployment, kit.json, or the marker system (_wp_repeat, _wp_if, _wp_img, _wp_stock).