Types
Type checking and type generation
emotional-stakes
by axiomantic
"Use when writing subagent prompts, skill instructions, or any high-stakes task requiring accuracy and truthfulness"
enforcing-code-quality
by axiomantic
Use when writing or modifying code. Enforces production-quality standards, prohibits common shortcuts, and ensures pre-existing issues are addressed. Invoked automatically by implementing-features and test-driven-development.
harden
by florianbuetow
This skill should be used when the user asks to "harden code", "security hardening", "improve security posture", "add security headers", "tighten security", "defensive coding suggestions", or "proactive security improvements". Also triggers when the user asks about CSP, CORS hardening, rate limiting, input validation improvements, security logging, or defense-in-depth measures.
adl
by Tyler-R-Kendrick
Use when defining AI agents declaratively with Agent Definition Language (ADL). Covers agent identity, LLM configuration, tools, permissions, RAG inputs, and governance metadata. USE FOR: declarative agent blueprints, agent identity and permissions, LLM configuration, governance metadata DO NOT USE FOR: agent runtime orchestration (use cagent), tool integration (use mcp), agent communication (use a2a)
Split Primitive
by bdambrosio
file-upload
by florianbuetow
This skill should be used when the user asks to "check file upload security", "analyze upload validation", "find upload vulnerabilities", "check for zip slip", "audit file upload handling", or mentions "file upload", "upload validation", "content-type check", "magic bytes", "zip slip", or "path traversal in upload" in a security context.
code-style-reviewer
by devstefancho
Code style principle-based review - checks SRP (Single Responsibility Principle), DRY (Don't Repeat Yourself), Simplicity First, YAGNI (You Aren't Gonna Need It), and Type Safety. Also evaluates code structure and naming conventions. Automatically used when code review is needed.
brand-compile
by phrazzld
Compile brand.yaml into CSS custom properties, Tailwind 4 theme, and TypeScript tokens. Run after modifying brand.yaml or when setting up a new project.
terraform-specialist
by olehsvyrydov
"[Extends devops-engineer] Terraform/OpenTofu specialist. Use for advanced Terraform modules, multi-cloud providers, state management, workspaces, CI/CD for IaC. Invoke alongside devops-engineer for complex IaC projects."
insecure-design
by florianbuetow
This skill should be used when the user asks to "check for design flaws", "analyze security design", "find insecure design patterns", "review threat model", "check business logic security", "find missing security controls", or mentions "insecure design" in a security context. Maps to OWASP Top 10 2021 A04:2021 - Insecure Design.
fba
by fastapi-practices
FastAPI Best Architecture (fba) project development guide. Provide complete architecture specifications, coding styles, and plugin development guidance.
html-visual
by 2ykwang
"Generate an interactive single-file HTML visualization (mockup, wireframe, ERD, flowchart, chart, slides, architecture diagram, dashboard, timeline, mindmap, kanban, table)."
frontend-tester
by olehsvyrydov
Senior Frontend QA Engineer with 10+ years JavaScript/TypeScript testing experience. Use when writing unit tests for React components, creating integration tests with React Testing Library, testing custom hooks, mocking APIs, or following TDD for frontend.
graphql-developer
by olehsvyrydov
"[Extends solution-architect] GraphQL API specialist. Use for GraphQL schemas, Apollo Server/Federation, DataLoader, resolvers, subscriptions. Invoke alongside solution-architect for GraphQL API design."
phpstan-fixer
by marcelorodrigo
Fix PHPStan static analysis errors by adding type annotations and PHPDocs. Use when encountering PHPStan errors, type mismatches, missing type hints, or static analysis failures. Never ignores errors without user approval.
discover-plt
by rand
Automatically discover programming language theory skills when working with compilers, parsers, type systems, interpreters, grammars, language design, type theory, or abstract syntax tree. Activates for PLT development tasks.
inertia-rails-forms
by cole-robertson
Build forms in Inertia Rails applications with proper validation, file uploads, and error handling. Use when implementing forms, handling validation errors, or working with file uploads in Inertia.js with Rails.
express-api
by AIDotNet
生成Express.js REST API，包含TypeScript、中间件、验证、错误处理和认证模式。
exceljs
by AIDotNet
在Node.js中读取、操作和写入Excel电子表格（XLSX）。完全支持样式、公式、图表和大文件流式处理。
security-scanner
by AIDotNet
全面的安全分析，识别OWASP Top 10漏洞、检测硬编码密钥和审查安全配置。
puppeteer
by AIDotNet
使用Puppeteer（Google）进行浏览器自动化和PDF生成。支持无头Chrome控制，用于网页爬虫、截图、PDF生成和自动化测试。
nodemailer
by AIDotNet
从Node.js应用发送邮件。最流行的邮件发送模块，支持SMTP、OAuth2、附件和HTML模板。
sharp
by AIDotNet
高性能Node.js图片处理库。使用libvips最快速地调整JPEG、PNG、WebP、AVIF和TIFF图片大小。
playwright
by AIDotNet
微软开发的跨浏览器自动化框架。使用单一API支持Chromium、Firefox和WebKit，用于测试、爬虫和自动化。