认证鉴权
认证与授权
gdcli
w-winter
Google Drive CLI for listing, searching, uploading, downloading, and sharing files and folders.
Python Security Scan
sugarforever
"Comprehensive security vulnerability scanner for Python projects including Flask, Django, and FastAPI applications. Detects OWASP Top 10 vulnerabilities, injection flaws, insecure deserialization, authentication issues, hardcoded secrets, and framework-specific security problems. Audits dependencies for known CVEs and generates actionable security reports."
Next.js Security Scan
sugarforever
"Comprehensive security vulnerability scanner for Next.js and TypeScript/JavaScript projects. Detects OWASP Top 10 vulnerabilities, XSS, injection flaws, authentication issues, hardcoded secrets, and Next.js-specific security problems. Audits dependencies for known CVEs and generates actionable security reports."
latchkey
imbue-ai
Interact with third-party or self-hosted services (Slack, Google Workspace, Dropbox, GitHub, Linear, Coolify...) using their HTTP APIs on the user's behalf.
beaverhabits
daya0576
Track and manage your habits using the Beaver Habit Tracker API.
state
ab2webco
Show this pane's Agent Teams game state: mode, scene, render, timezone, HUD, rewards and tracker with the layer each came from, this session's own mode and render, the lead and its members with their slots, a held STOP, warnings and links. The game mod answers it from a fresh orca game state, with no model turn. Run it as /orca-game:state.
lead
ab2webco
Make this session the project's lead (orchestrator): it talks to the person, launches one member session per ticket in its own worktree, waits for their reports and relays only what matters. Loads Orca's standing rules plus the project's own from orca.yaml (orca game lead). Runs by itself when the project's orca.yaml sets orchestratorGame.orchestrator.autostart: true. Fire when the person runs /orca-game:lead, or says "modo orquestador", "conviértete en el orquestador", "be the lead", "start the orchestrator". Do NOT fire inside a session a lead launched (a member): it reports to its lead.
quest
ab2webco
Quest mode: alone it prints this pane's game mode and render, each beside the configured value when this session changed it; with on, zen or off it sets the mode, with render classic hd hd-compact the look, with demo a scripted fake party, all for this session only. The game mod answers it, with no model turn. Run it as /orca-game:quest (or /quest, which also runs mid-turn).
orca-per-workspace-env
ab2webco
Set up, review, debug, or validate Orca Lab per-workspace environment recipes — on-demand, disposable runtimes (cloud sandboxes, VMs, or local) created fresh for each workspace. Covers first-time setup (provider prerequisites, the reusable base snapshot, the coding-agent auth snapshot, credentials, and state), not just the per-workspace lifecycle scripts. Use to stand up per-workspace environments, fix an environmentRecipes entry in orca.yaml, scaffold provider lifecycle scripts, or resolve an orca vm recipe doctor failure.
search-past-chats
mlshv
Search past Claude Code conversation history when user asks about previous sessions, mentions "history", "past chats", "did we discuss", "what did we talk about", "show me more from that session", or wants to recall something from earlier conversations.
fork-test
Geeksfino
Minimal skill for testing context fork behavior. Do not use in production.
charles-proxy-extract
wannabehero
Extracts HTTP/HTTPS request and response data from Charles Proxy session files (.chlsj format), including URLs, methods, status codes, headers, request bodies, and response bodies. Use when analyzing captured network traffic from Charles Proxy debug sessions, inspecting API calls, debugging HTTP requests, or examining proxy logs.
castari-deploy
castari
This skill should be used when the user asks to "deploy to castari", "deploy my agent", "deploy agent to production", "castari deploy", "push agent to castari", "ship my agent", "set up castari", or needs help with Castari CLI installation, authentication, agent scaffolding, or deployment to cloud sandboxes.
sentry-cli
getsentry
Guide for using the Sentry CLI to interact with Sentry from the command line. Use when the user asks about viewing issues, events, projects, organizations, making API calls, or authenticating with Sentry via CLI.
pickup
jellydn
Resumes work from a previous handoff session which are stored in .claude/handoffs/
handoffs
jellydn
Creates detailed handoff plans of conversations for continuing work in new sessions
explanation-docs
existential-birds
Explanation documentation patterns for understanding-oriented content - conceptual guides that explain why things work the way they do
liveview-code-review
existential-birds
Reviews Phoenix LiveView code for lifecycle patterns, assigns/streams usage, components, and security. Use when reviewing LiveView modules, .heex templates, or LiveComponents.
supabase-audit-auth-config
yoanbernabeu
Analyze Supabase authentication configuration for security weaknesses and misconfigurations.
supabase-audit-authenticated
yoanbernabeu
Create a test user (with explicit permission) to audit what authenticated users can access vs anonymous users. Detects IDOR, cross-user access, and privilege escalation.
workflow-orchestrator
zhaono1
Automatically coordinates multi-skill workflows and triggers follow-up actions. Use when completing PRD creation, implementation, or any milestone that should trigger additional skills. This skill reads the auto-trigger configuration and executes the workflow chain.
api-designer
zhaono1
REST and GraphQL API architect for designing robust, scalable APIs. Use when designing new APIs or improving existing ones.
auto-trigger
zhaono1
Workflow automation hooks for agent-playbook skills. This skill defines automatic triggers between skills - DO NOT use directly, it's a configuration skill that other skills reference.
session-logger
zhaono1
Saves conversation history to session log files. Use when user says "保存对话", "保存对话信息", "记录会话", "save session", or "save conversation". Automatically creates timestamped session log in sessions/ directory.