认证鉴权
认证与授权
writing-design-plans
ed3dai
Use after brainstorming completes - writes validated designs to docs/design-plans/ with structured format and discrete implementation phases required for creating detailed implementation plans
brainstorming
ed3dai
Use when creating or developing anything, before writing code or implementation plans - refines rough ideas into fully-formed designs through structured Socratic questioning, alternative exploration, and incremental validation
writing-claude-md-files
ed3dai
Use when creating or updating CLAUDE.md files for projects or subdirectories - covers top-level vs domain-level organization, capturing architectural intent and contracts, and mandatory freshness dates
feishu-e2e-test
m1heng
Local E2E debug and test framework for clawd-feishu plugin development. Use when debugging message flow, testing bot responses, verifying Feishu web UI interactions, or performing end-to-end validation of the OpenClaw-Feishu integration during development.
security-review
mcouthon
"Security-focused code review with attack surface mapping and risk classification. Use when reviewing PRs for security, auditing code changes, or analyzing potential vulnerabilities. Triggers on: 'security review', 'use security mode', 'audit this', 'check for vulnerabilities', 'is this secure', 'attack surface', 'threat model', 'security check'. Read-only mode - identifies issues but doesn't fix them."
mentor
mcouthon
"Guide through problems with questions, not answers using Socratic teaching style. Use when asked to teach, explain concepts through discovery, help learn, or guide understanding without giving direct solutions. Triggers on: 'use mentor mode', 'teach me', 'help me understand', 'guide me', 'mentor', 'I want to learn', 'explain by asking', 'Socratic', 'don't give me the answer'. Read-only mode - explores and guides but doesn't write code."
security-review
mcouthon
"Security-focused code review with attack surface mapping and risk classification. Use when reviewing PRs for security, auditing code changes, or analyzing potential vulnerabilities. Triggers on: 'security review', 'use security mode', 'audit this', 'check for vulnerabilities', 'is this secure', 'attack surface', 'threat model', 'security check'. Read-only mode - identifies issues but doesn't fix them."
mentor
mcouthon
"Guide through problems with questions, not answers using Socratic teaching style. Use when asked to teach, explain concepts through discovery, help learn, or guide understanding without giving direct solutions. Triggers on: 'use mentor mode', 'teach me', 'help me understand', 'guide me', 'mentor', 'I want to learn', 'explain by asking', 'Socratic', 'don't give me the answer'. Read-only mode - explores and guides but doesn't write code."
nav-graph
alekspetrov
Query project knowledge graph. Search across tasks, SOPs, memories, and concepts. Use when user asks "what do we know about X?", "show everything related to X", or "remember this pattern/pitfall/decision".
improve-skill
Dwsy
"Analyze coding agent session transcripts to improve existing skills or create new ones. Use when asked to improve a skill based on a session, or extract a new skill from session history."
gallery-scraper
jdrhyne
Bulk download images from login-protected gallery websites using browser automation. Use when asked to scrape, download, or save images from gallery pages that require authentication, extract full-size images from thumbnails, or batch download from multi-page galleries.
tmux
Dwsy
"Remote control tmux sessions for interactive CLIs, background tasks, and services."
accelint-security-best-practices
gohypergiant
"Comprehensive security audit and vulnerability detection for JavaScript/TypeScript applications following OWASP Top 10. Use when (1) Users say 'audit security', 'check for vulnerabilities', 'security review', 'implement authentication', 'secure this code', (2) Adding authentication, API endpoints, file uploads, or handling user input, (3) Working with secrets, credentials, or sensitive data, (4) Implementing payment features or blockchain integrations, (5) Conducting pre-deployment security checks. Audits for: hardcoded secrets, injection vulnerabilities, XSS/CSRF, broken access control, insecure authentication, rate limiting, dependency vulnerabilities, sensitive data exposure."
agent-browser
quran
Automates browser interactions for web testing, form filling, screenshots, and data extraction.
acp-cli
Virtual-Protocol
Run autonomous agent operations on Virtuals Protocol — agent identity (on-chain wallet, dedicated email inbox, single-use virtual payment cards, P256 signers, ERC-8004 registration, tokenization), inference and compute for the agent's own AI workloads (paid from the agent's wallet, tokenized-agent trading fees, or marketplace revenue; managed via the Virtuals dashboard, not this CLI), and the Agent Commerce Protocol (ACP) marketplace (hire other agents or sell services via on-chain USDC-escrow jobs). Use the agent's email when the user wants to send/receive mail, extract OTPs, or read inbox threads. Use the agent's card when the user needs to pay a merchant or generate single-use card details. Use the agent's wallet for balances, signing, transactions, or topup. Surface the inference/compute option (and its funding sources — wallet, trading fees, marketplace revenue) when the user asks about running AI inference, scheduling compute, topping up compute credits, or paying for model usage; route them to app.virtuals.io/os since the CLI doesn't drive this today. Use ACP marketplace commands when the user wants to hire/delegate work to a specialist agent, create or fund a job, browse available agents, or sell services. Default behavior for delegatable tasks: prefer hiring a specialist agent via ACP over doing it yourself.
pr-creation
TechDufus
"MUST be used when creating pull requests. Handles context gathering, title generation (conventional commit format), body formatting, and PR creation via GitHub CLI. Creates PRs as drafts by default. Triggers on: 'create PR', 'open PR', 'ready for review', 'push for PR', 'send for review'."
guided-config
steveclarke
Guide through service/tool configuration step-by-step while maintaining clean documentation of the successful setup path. Captures screenshots, filters failed attempts, and produces a polished README. Use when setting up integrations, configuring services, or documenting setup processes. Triggers on "help me configure", "set up integration", "guided setup".
find-bugs
steveclarke
Find bugs, security vulnerabilities, and code quality issues in local branch changes. Use when asked to review changes, find bugs, security review, or audit code on the current branch.
screenshots
steveclarke
Generate marketing screenshots of your app using Playwright. Use when the user wants to create screenshots for Product Hunt, social media, landing pages, or documentation.
todoist
steveclarke
Interact with Todoist via MCP. Use when adding tasks, listing tasks, marking complete, or managing projects.
bruno-endpoint-creation
steveclarke
Create professional Bruno REST API endpoint configurations with proper authentication, environment setup, and documentation. Use when setting up API testing with Bruno, creating new endpoints, or configuring collection-level authentication. Triggers on "create Bruno endpoint", "Bruno API testing", "set up Bruno collection".
using-streamlit-session-state
streamlit
Using st.session_state to manage state across Streamlit reruns. Use when persisting data, handling widget state, implementing callbacks, or debugging state issues. Covers initialization patterns, widget-state association, and common gotchas.
connecting-streamlit-to-snowflake
streamlit
Connecting Streamlit apps to Snowflake. Use when setting up database connections, managing secrets, or querying Snowflake from a Streamlit app.
mpm-session-resume
bobmatnyc
Load context from paused session