认证鉴权
认证与授权
authentication-patterns
travisjneuman
OAuth 2.0, JWT, SSO, MFA, NextAuth/Clerk/Supabase Auth implementation patterns
hivemind-memory
activeloopai
Global team and org memory powered by Activeloop. ALWAYS check BOTH built-in memory AND Hivemind memory when recalling information.
hivemind-memory
activeloopai
Global team and org memory powered by Activeloop. ALWAYS check BOTH built-in memory AND Hivemind memory when recalling information.
hivemind
activeloopai
Global team and org memory powered by Activeloop. ALWAYS check BOTH built-in memory AND Hivemind memory when recalling information.
security-review
Yeachan-Heo
Run a comprehensive security review on code
learner
Yeachan-Heo
Extract a learned skill from the current conversation
configure-discord
Yeachan-Heo
Configure Discord webhook/bot notifications via natural language
sciomc
Yeachan-Heo
Orchestrate parallel scientist agents for comprehensive analysis with AUTO mode
note
Yeachan-Heo
Save notes to notepad.md for compaction resilience
configure-telegram
Yeachan-Heo
Configure Telegram bot notifications via natural language
configure-notifications
Yeachan-Heo
Configure notification integrations (Telegram, Discord, Slack) via natural language
configure-slack
Yeachan-Heo
Configure Slack incoming webhook notifications via natural language
cancel
Yeachan-Heo
Cancel any active OMC mode (autopilot, ralph, ultrawork, ultraqa, swarm, ultrapilot, pipeline, team)
plan
Yeachan-Heo
Strategic planning with optional interview workflow
project-session-manager
Yeachan-Heo
Manage isolated dev environments with git worktrees and tmux sessions
remote-browser
browser-use
Controls a cloud browser from a sandboxed remote machine. Use when the agent is running in a sandbox (no GUI) and needs to navigate websites, interact with web pages, fill forms, take screenshots, or expose local dev servers via tunnels.
acl-abuse
blacklanternsecurity
Exploits misconfigured Active Directory ACLs for privilege escalation. Covers GenericAll, GenericWrite, WriteDACL, WriteOwner, ForceChangePassword, targeted Kerberoasting via SPN manipulation, shadow credentials (msDS-KeyCredentialLink → PKINIT), and AdminSDHolder persistence.
vibe-build
KhazP
Build your MVP following the AGENTS.md plan. Use when the user wants to start building, implement features, or says "build my MVP", "start coding", or "implement the project".
agent-slackbot
devxoul
Interact with Slack workspaces using bot tokens - send messages, read channels, manage reactions
uipath-coded-apps
UiPath
"UiPath Coded Apps — scaffold, build, run, and deploy Coded Web Apps and Coded Action Apps: React/TypeScript apps that call UiPath Cloud APIs via the @uipath/uipath-typescript SDK and ship to Automation Cloud (push/pull to Studio Web, pack, publish, deploy, OAuth-PKCE). Also generates live analytics & governance dashboards from a plain-language request, wired to tenant data via the Insights real-time API, with edit and deploy flows. For RPA→uipath-rpa, Python agents→uipath-agents, Maestro flows→uipath-maestro-flow, solution packaging→uipath-solution, JS/TS function backends (defineFunction, uip function serve)→uipath-functions."
uipath-solution
UiPath
"Always invoke for .uipx files. UiPath Solution lifecycle via uip solution: init/restore/pack/publish/deploy/activate/upgrade/upload, projects add import remove, resources refresh add remove edit, feeds list, --feed / --personal-workspace. DIAGNOSE lifecycle failures: pack/publish/deploy/activate errors, stale or missing bindings, unimported or unresolved resources, deploy error codes, publish name+version/processKey collisions, redeploy blocked by an existing deployment (deploy upgrade), feed 'not an available publish location', package missing from packages list, 'unknown command' after the new→init rename. Bundles RPA/Flow/Case/Agents/API Workflow/AppV2 coded and coded-action projects into one .uipx. Routing: PDD→SDD design & task derivation→uipath-planner; non-solution Orchestrator/IS/resources/auth/traces→uipath-platform; .xaml/.cs→uipath-rpa; .flow→uipath-maestro-flow; .bpmn→uipath-maestro-bpmn; agent.json/.py agents→uipath-agents; standalone coded-app deploy→uipath-coded-apps."
uipath-connector-builder
UiPath
"UiPath Integration Service connector authoring (REST+JSON) on disk via uip is connectors builder. Triggers on element.json, element-metadata.json, standard-resources/.json, a periodic-uipath-/periodic-design-* connector repo, or any request to build/edit an IS connector: init the connector shell, configure auth (19 types via auth set, incl. jwtOauth claims, FPS, none), add activities with fields/params/methods/hooks, wire polling/webhook triggers, add auth-system resources, inspect, validate, and surgically read/write files via state. Import + publish live on the parent uip is connectors (need uip login). NOT for operating a published connector — connections, ping, run an activity→uipath-platform; NOT for .flow connector nodes→uipath-maestro-flow."
uipath-automationhub
UiPath
"Publish and read business processes in UiPath Automation Hub via the Open API, using the user's cloud login — no admin OpenAPI token needed. PUBLISH an approved process and its PDD/SDD documents (schema-driven payload, base64 file upload or link) to AH as the system of record — e.g. a process captured/approved by Process Scribe. GET a process back by id or search, list its attached documents, and DOWNLOAD their file bytes (e.g. for dedup / related-idea lookups or retrieving a published PDD). Authenticates with the user's cloud bearer token and NEVER sends the admin x-ah-openapi-auth header. CLI-first: when the installed uip has the ah commands, flows run through them (references/*-cli-guide.md); otherwise the raw Open API flows apply. Routes by intent to publish (create/upload) or get (read/fetch/download) references over the shared catalogs. Structured to extend to more Automation Hub operations."
done
mblode
Captures key decisions, questions, follow-ups, and learnings at end of a coding session. Writes a single markdown file per session. Use when done with a session, wrapping up work, running /done, creating a session summary, saving session context, or ending a coding session.