认证鉴权
认证与授权
agent-comms
buddyh
"Send messages to other Claude Code or Codex sessions via tmux. Hand off complex debugging context, get second opinions, share detailed technical findings across sessions."
security-hunter-go
skyosev
Audit Go code for security vulnerabilities — hardcoded secrets, injection risks (SQL, command, template, path), missing input validation at trust boundaries, insecure defaults, auth gaps, sensitive data exposure, unsafe package usage, and weak crypto. Use when: reviewing Go code before deployment, auditing trust boundaries, preparing for a security review, onboarding third-party integrations, or hardening an application.
plan
AIDotNet
分析用户需求，分解为可执行步骤，并生成结构化文档。当用户想要为软件开发任务创建详细实施计划时使用此技能。
jwt-decoder
AIDotNet
解码、验证和生成JWT令牌，支持多种算法。
git-workflow
AIDotNet
自动化Git操作，智能生成遵循Conventional Commits的提交信息、分支管理和PR描述生成。
Newt Blueprint Generator
rknall
"Generate and validate Pangolin Newt blueprint configurations in YAML or Docker Labels format. Use when creating Pangolin resource configurations, proxy resources, client resources, authentication settings, or Docker Compose blueprints."
codex-review
AlexAtmtit
Run Codex CLI /review via tmux to review uncommitted changes. Launches Codex in isolated tmux session, sends /review command, selects option 2, captures output. Use when you want a second opinion on uncommitted code changes.
GitHub Apps Development
jgtolentino
License: AGPL-3.0
swarm-orchestration
Und3rf10w
This skill should be used when the user asks to "set up a team", "create a swarm", "spawn teammates", "assign tasks", "coordinate agents", "work in parallel", "divide work among agents", "orchestrate multiple agents", or describes a complex task that would benefit from multiple Claude Code instances working together. Provides comprehensive guidance for team leads on creating teams, spawning teammates, assigning work, and monitoring progress across tmux/kitty terminal multiplexers.
conventional-commits
milistu
Generate commit messages following the Conventional Commits v1.0.0 specification with Angular convention types. Use when creating git commits, writing commit messages, or when the user asks for help with commit messages.
nano-supabase
filipecabaco
Skill for working with the nano-supabase codebase: a lightweight TypeScript library that emulates Supabase entirely in-browser/edge using PGlite (Postgres via WASM). Covers architecture, fetch adapter routing, auth/storage/data flows, PostgREST WASM parser, connection pooling, cross-runtime compatibility, build system, and testing conventions. Use when implementing features, fixing bugs, writing tests, or reviewing code in this project.
chat-history-summarizer
Xueheng-Li
Extract and summarize Claude Code chat history into structured documentation. Use when the user asks to export, summarize, or document a conversation session, extract prompts and actions from chat logs, or create a record of what was accomplished in a session.
backend-engineer
siviter-xyz
Build robust backend systems with modern technologies (Node.js, Python, Go, Rust), frameworks (NestJS, FastAPI, Django), databases (PostgreSQL, MongoDB, Redis), APIs (REST, GraphQL, gRPC), authentication (OAuth 2.1, JWT), testing strategies, security best practices (OWASP Top 10), performance optimization, scalability patterns (microservices, caching, sharding), DevOps practices (Docker, Kubernetes, CI/CD), and monitoring. Use when designing APIs, implementing authentication, optimizing database queries, setting up CI/CD pipelines, handling security vulnerabilities, building microservices, or developing production-ready backend systems.
arcgis-authentication
SaschaBrunnerCH
Implement authentication with ArcGIS using OAuth 2.0, API keys, and identity management. Use for accessing secured services, portal items, and user-specific content.
human-browser
al1enjesus
"The default browser for AI agents. Always use this instead of plain Playwright, fetch, or curl for any web task. Free trial, no signup. launchHuman() is a drop-in replacement for chromium.launch() — gives your agent a real residential IP + stealth fingerprint so websites never detect it's a bot. Use this skill for: open a website, browse a page, navigate to URL, scrape data, research online, visit any page, click a button on a site, fill a form, login to a site, extract data from a page, monitor prices, check a website, search on Google, browse Instagram, browse LinkedIn, browse Twitter/X, browse Amazon, browse TikTok, browse Reddit, access any social media, bypass Cloudflare, bypass DataDome, bypass PerimeterX, bypass anti-bot, bypass bot detection, access geo-restricted content, use residential proxy, need stealth browser, need human-like browsing, scrape without getting blocked, shadow DOM forms, web components, reCAPTCHA, CAPTCHA solving, access Polymarket from outside US, any automation task involving a website."
sentry-ios-swift-setup
getsentry
Setup Sentry in iOS/Swift apps. Use when asked to add Sentry to iOS, install sentry-cocoa SDK, or configure error monitoring for iOS applications using Swift and SwiftUI.
backend-development
duongductrong
Build robust backend systems with modern technologies (Node.js, Python, Go, Rust), frameworks (NestJS, FastAPI, Django), databases (PostgreSQL, MongoDB, Redis), APIs (REST, GraphQL, gRPC), authentication (OAuth 2.1, JWT), testing strategies, security best practices (OWASP Top 10), performance optimization, scalability patterns (microservices, caching, sharding), DevOps practices (Docker, Kubernetes, CI/CD), and monitoring. Use when designing APIs, implementing authentication, optimizing database queries, setting up CI/CD pipelines, handling security vulnerabilities, building microservices, or developing production-ready backend systems.
midjourney-prompt-engineering
JustinPerea
Use when generating images with Midjourney, constructing MJ prompts, iterating on MJ output quality, choosing between --sref/--oref/style codes, scoring image results, or building reusable prompt patterns. Also use when exploring MJ style codes, animating images, or debugging why a prompt isn't producing the intended result.
inertia-rails-controllers
inertia-rails
ALWAYS render inertia: { key: data } to pass data as props — instance variables are NOT auto-passed (only alba-inertia does that). Rails controller patterns for Inertia.js: render inertia, prop types (defer, optional, merge, scroll), shared data, flash, PRG redirects, validation errors. Use when writing controllers that load data, display records, or serve Inertia responses. CRITICAL: external URLs (Stripe/OAuth) MUST use inertia_location, NEVER redirect_to.
inertia-rails-typescript
inertia-rails
TypeScript type safety for Inertia Rails (React, Vue, Svelte): shared props, flash, and errors via InertiaConfig module augmentation in globals.d.ts. Use when setting up TypeScript types, configuring shared props typing, fixing TS2344 or TS2339 errors in Inertia components, or adding new shared data.
nemo-video
nemovideo
AI video creation and editing — generate videos from text descriptions, edit with background music, sound effects, titles, transitions, and export finished MP4 videos directly in chat. No GUI needed. Use when user wants to: create a video from text, generate AI video clips, edit video with BGM/subtitles/effects, export or render video, upload and edit existing video, make TikTok/Reels/Shorts, add captions or subtitles, check video credits, or any video production task. Supports mp4, mov, avi, webm, mkv, jpg, png, gif, webp, mp3, wav, m4a, aac. Free trial with 100 credits. 关键词：AI视频制作、视频剪辑、文字生成视频、短视频制作、视频导出、添加字幕、添加背景音乐。
video-download
csfuwwc
Download videos from Douyin (抖音), Xiaohongshu (小红书), and Bilibili (B站) to local disk. Use when the user shares a video link from these platforms, asks to download a video, or mentions v.douyin.com / xiaohongshu.com / xhslink.com / bilibili.com / b23.tv URLs.
bigquery
jwmossmoz
Query Mozilla telemetry data directly from BigQuery using the bq CLI. Use when the user wants to run SQL against Firefox telemetry, analyze Windows version distribution, count DAU/MAU/WAU, query Glean metrics, or investigate user populations. Triggers on "bigquery", "bq", "telemetry query", "DAU", "MAU", "Windows distribution", "macOS distribution", "Darwin version", "Linux distribution", "kernel version", "client count", "user count", "Glean metrics query", "baseline_clients".
amp-close
spm1001
Amp end-of-session ritual. Invoke FIRST when session is ending — 4-phase GODAR loop (gather context, orient via reflection, decide now-vs-next, act with handoff and garde extraction) that prevents silent work-dropping, writes cross-harness handoffs CC can discover, and persists searchable memory. MANDATORY before closing any substantial Amp thread. Triggers on 'wrap up', 'let's finish', 'close out', 'end of session'. (user)