认证鉴权
认证与授权
cliproxy
eltmon
Check and restart the CLIProxy sidecar (port 8317). CLIProxy bridges ChatGPT subscription OAuth tokens to an Anthropic-compatible /v1/messages endpoint so Overdeck agents can use GPT models without an OpenAI API key. Use when GPT-model agents are returning API errors or when cliproxy is down.
caveman
eltmon
Ultra-compressed communication mode. Cuts token usage ~75% by speaking like caveman while keeping full technical accuracy. Supports intensity levels: lite, full (default), ultra, wenyan-lite, wenyan-full, wenyan-ultra. Use when user says "caveman mode", "talk like caveman", "use caveman", "less tokens", "be brief", or invokes /caveman. Also auto-triggers when token efficiency is requested.
reflect
iliaal
Session retrospective and skill audit. Use when "/reflect", "session review", "retrospective", "what went wrong", "lessons learned", "what should we remember", or "what can we improve".
-21risk-automation
ComposioHQ
"Automate 21risk tasks via Rube MCP (Composio). Always search tools first for current schemas."
auth-module-architecture
TencentBlueKing
Auth 权限认证模块架构指南，涵盖 IAM 集成、RBAC 权限模型、资源权限校验、权限迁移、OAuth 认证。当用户开发权限功能、配置 IAM 资源、实现权限校验或处理认证流程时使用。
linear
ComposioHQ
Manage issues, projects & team workflows in Linear. Use when the user wants to read, create or updates tickets in Linear.
playwright-cli
NickCrew
Automates browser interactions for web testing, form filling, screenshots, and data extraction. Use when the user needs to navigate websites, interact with web pages, fill forms, take screenshots, test web applications, or extract information from web pages.
owasp-top-10
NickCrew
OWASP Top 10 security vulnerabilities with detection and remediation patterns. Use when conducting security audits, implementing secure coding practices, or reviewing code for common security vulnerabilities.
api-gateway-patterns
NickCrew
API Gateway patterns for routing, authentication, rate limiting, and service composition in microservices architectures. Use when implementing API gateways, building BFF layers, or managing service-to-service communication at scale.
playwright-testing
alinaqi
E2E testing with Playwright - Page Objects, cross-browser, CI/CD
explore-codebase
doodledood
'Find all files relevant to a query with orthogonal exploration for comprehensive coverage. Returns topic-specific overview + file list with line ranges. Uses parallel agents for thorough+ levels to ensure nothing is missed.'
auth
cosmix
Authentication and authorization patterns including OAuth2, JWT, RBAC/ABAC, session management, API keys, password hashing, and MFA. USE WHEN: Implementing login flows, access control, identity management, tokens, permissions, session handling, API key authentication, or MFA. DO NOT USE: For security vulnerability scanning (use /security-scan), for security audits (use /security-audit), for threat modeling (use /threat-model). TRIGGERS: login, logout, signin, signup, authentication, authorization, password, credential, token, JWT, OAuth, OAuth2, OIDC, SSO, SAML, session, cookie, RBAC, ABAC, permissions, roles, MFA, 2FA, TOTP, API key, PKCE.
Navigator
simota
Playwright 㨠Chrome DevTools ãæ´»ç¨ãã¦æ示ãå®éãããã©ã¦ã¶æä½ã¨ã¼ã¸ã§ã³ãããã¼ã¿åéããã©ã¼ã æä½ãã¹ã¯ãªã¼ã³ã·ã§ããåå¾ããããã¯ã¼ã¯ç£è¦ãªã©ã®ã¿ã¹ã¯ãèªååãVoyagerï¼E2Eãã¹ãï¼ã¨ã®å¯¾æ¯ã§ãã¿ã¹ã¯éè¡ãç®çã¨ããããã©ã¦ã¶æä½èªååãå¿ è¦ãªæã«ä½¿ç¨ã
nextjs-stack
fusengine
Next.js 16+ complete stack with App Router, Prisma 7, Better Auth, shadcn/ui, TanStack Form, Zustand. Use as the master reference combining all framework skills.
laravel-auth
fusengine
Use when implementing user authentication, API tokens, social login, or authorization. Covers Sanctum, Passport, Socialite, Fortify, policies, and gates for Laravel 12.
pr-summary
fusengine
Summarize current pull request with diff, comments, and changed files. Use when reviewing PRs or before merging.
Error Code Guide
AsiaOstrich
Design consistent error codes following the PREFIX_CATEGORY_NUMBER format. Use when: defining error codes, creating error handling, designing APIs. Keywords: error code, error handling, error format, API errors, 錯誤碼, 錯誤處理.
e-commerce
miles990
E-commerce platforms, payment processing, and shopping cart patterns
security-practices
miles990
OWASP Top 10, authentication, and secure coding practices
application-patterns
miles990
Common application development patterns and implementations
review-security
ssiumha
Reviews code for security vulnerabilities. Use when implementing auth, handling user input, adding APIs, or before deployment. Checks OWASP Top 10, credentials, injection.
project-context
ssiumha
Generates project context (code structure + architecture intent). Use when starting sessions, understanding codebase structure, onboarding to a project, after major refactoring, or delegating complex work to agents.
bdd-practices
ssiumha
Writes behavior specifications in Gherkin format. Use when defining features from user perspective or creating acceptance tests.
tdd-practices
ssiumha
Applies TDD workflow to development. Use when writing tests before code, implementing features test-first, fixing bugs via failing test, or refactoring with test coverage. Detects AI anti-patterns.