认证鉴权
认证与授权
security
booch
Security guidelines for secure coding and code review. This skill should be used when architecting/designing systems, writing code, or reviewing code. Use proactively when discussing vulnerabilities, OWASP, injection attacks, XSS, CSRF, SQL injection, authentication, authorization, access control, encryption, secrets management, input validation, or secure coding practices. (user)
agent-browser
grota
Browser automation CLI for AI agents. Use when the user needs to interact with websites, including navigating pages, filling forms, clicking buttons, taking screenshots, extracting data, testing web apps, or automating any browser task. Triggers include requests to "open a website", "fill out a form", "click a button", "take a screenshot", "scrape data from a page", "test this web app", "login to a site", "automate browser actions", or any task requiring programmatic web interaction.
clawville
ItachiDevv
ClawVille gameplay + skill marketplace integration for Hermes. Pair via magic link, buy and read knowledge books in the in-game shop, chat with building teachers, and have purchased skills auto-install as native Hermes skills the moment the book is read. Use when the user mentions ClawVille, asks to learn cron / app-publishing / agent-security / RAG / API / MCP / visual-creation / code-development / messaging-channels / deployment-ops, or wants to buy or install a building skill.
geo-infer-api
ActiveInferenceInstitute
REST and GraphQL API endpoints for geospatial services. Use when building API routes, defining spatial query endpoints, or exposing GEO-INFER functionality as web services.
tmux
grota
Control tmux sessions for interactive CLIs and TUIs. Use this skill whenever you need to send keystrokes to a terminal, run interactive programs (vim, htop, ncurses apps, REPLs, fzf), capture output from long-running processes, or work with full-screen terminal applications. Essential for automating interactive shell workflows that can't be controlled via standard bash. Also use this when a program expects a TTY, needs Ctrl+C/Ctrl+D signals, or when you need to monitor a background process while doing other work.
tmux
knoopx
Manages background processes, captures command output, and handles session multiplexing. Use when running long-running commands, capturing output from detached processes, or managing concurrent tasks in headless environments.
analytics-tracking
silvainfm
When the user wants to set up, improve, or audit analytics tracking and measurement. Also use when the user mentions "set up tracking," "GA4," "Google Analytics," "conversion tracking," "event tracking," "UTM parameters," "tag manager," "GTM," "analytics implementation," or "tracking plan." For A/B test measurement, see ab-test-setup.
api-gateway
maton-ai
Connect to external services through Maton-managed API routes. Use this skill only after the user names the target app, account, and task. Start with read/list calls when possible and follow the app-specific reference before any change.
create-meta-prompts
glittercowboy
Create optimized prompts for Claude-to-Claude pipelines with research, planning, and execution stages. Use when building prompts that produce outputs for other prompts to consume, or when running multi-stage workflows (research -> plan -> implement).
self-improve
knoopx
Analyzes Pi sessions to discover repeating patterns and tool failures, then improves agent behavior through skills, templates, guardrails, and hooks.
uv
knoopx
Initializes Python projects, manages dependencies, pins Python versions, and runs scripts with uv. Use when adding/removing packages, syncing environments, running tools with uvx, or building distributions.
slashy-mcp
Slashy-com
Use Slashy MCP for connected Gmail or Outlook mail, Google or Outlook Calendar, contact research, meeting prep, reminders, and scheduled workflows. Covers connection setup, tool conventions, deep links, and attachments.
better-auth
mrgoonie
Implement authentication and authorization with Better Auth - a framework-agnostic TypeScript authentication framework. Features include email/password authentication with verification, OAuth providers (Google, GitHub, Discord, etc.), two-factor authentication (TOTP, SMS), passkeys/WebAuthn support, session management, role-based access control (RBAC), rate limiting, and database adapters. Use when adding authentication to applications, implementing OAuth flows, setting up 2FA/MFA, managing user sessions, configuring authorization rules, or building secure authentication systems for web applications.
backend-development
mrgoonie
Build robust backend systems with modern technologies (Node.js, Python, Go, Rust), frameworks (NestJS, FastAPI, Django), databases (PostgreSQL, MongoDB, Redis), APIs (REST, GraphQL, gRPC), authentication (OAuth 2.1, JWT), testing strategies, security best practices (OWASP Top 10), performance optimization, scalability patterns (microservices, caching, sharding), DevOps practices (Docker, Kubernetes, CI/CD), and monitoring. Use when designing APIs, implementing authentication, optimizing database queries, setting up CI/CD pipelines, handling security vulnerabilities, building microservices, or developing production-ready backend systems.
payment-integration
mrgoonie
Integrate payments with SePay (VietQR), Polar, Stripe, Paddle (MoR subscriptions), Creem.io (licensing). Checkout, webhooks, subscriptions, QR codes, multi-provider orders.
session-memory
humanplane
Maintains awareness across sessions. Spawns observer agent on start, loads context, notifies of evolution opportunities.
mermaid-generator
zephyrwang6
将任意文本、工作流、逻辑转换为清晰简约的 Mermaid 流程图。支持 flowchart、sequence、class 等多种图表类型。使用场景：(1) 需要可视化工作流程，(2) 将文档/对话转为流程图，(3) 创建系统架构图，(4) 生成时序图/类图。自动保存到 Obsidian 画板目录，按日期和主题分类。
save-session
blacktop
Save AI agent session information for later resumption. Use when: (1) Finishing a work session and want to save progress (2) User says "save session", "remember this session", or "save your session ID" (3) Before ending a long coding/debugging session (4) When user wants to be able to resume this conversation later Supports Claude, Codex, Gemini, Copilot, Cursor, and other AI agents.
feature-workflow-orchestrator
organvm-iv-taxis
End-to-end feature development orchestration from planning through deployment with quality gates
obsidian
Delphine-L
Integration with Obsidian vault for managing notes, tasks, and knowledge when working with Claude. Supports adding notes, creating tasks, and organizing project documentation.
e2e-tester
olehsvyrydov
Senior QA Automation Engineer with 10+ years E2E testing experience. Use when writing end-to-end tests for web apps with Playwright, mobile apps with Detox, testing critical user flows, cross-browser testing, or visual regression testing.
browser
its-ahoh
Control Codey's embedded Browser only. Use for generic live-web/UI tasks from Codey when the user does not request Google Chrome. Never use for a turn from the Chrome Side Panel, the user's current Chrome tab, or an existing Chrome login; those belong to chrome-companion.
chrome-companion
its-ahoh
Control the user's real Google Chrome. Use for every turn originating in Codey's Chrome Side Panel and whenever the user says Chrome, current Chrome tab/window, Chrome extension, or existing Chrome login/session. Takes precedence over browser for those requests; never use it for Codey's embedded Browser.
dex-plan
dcramer
Create dex task from markdown planning documents (plans, specs, design docs, roadmaps)