认证鉴权
认证与授权
frontend-async-best-practices
sergiodxa
Async/await and Promise optimization guidelines. Use when writing, reviewing, or refactoring asynchronous code to eliminate waterfalls and maximize parallelism. Triggers on tasks involving data fetching, loaders, actions, or Promise handling.
owasp-security-check
sergiodxa
Security audit guidelines for web applications and REST APIs based on OWASP Top 10 and web security best practices. Use when checking code for vulnerabilities, reviewing auth/authz, auditing APIs, or before production deployment.
gitnexus-impact-analysis
docxology
"Use when the user wants to know what will break if they change something, or needs safety analysis before editing code. Examples: \"Is it safe to change X?\", \"What depends on this?\", \"What will break?\""
Newt Blueprint Generator
rknall
"Generate and validate Pangolin Newt blueprint configurations in YAML or Docker Labels format. Use when creating Pangolin resource configurations, proxy resources, client resources, authentication settings, or Docker Compose blueprints."
dify-knowledge-base-search
tiangong-ai
Dify dataset retrieve API for knowledge base chunk search/testing. Use when integrating or debugging Dify knowledge base retrieval requests, retrieval_model options, or response shaping.
trackrun
JakeB-5
Execute explicitly selected TODO track IDs with replaceable workers, durable filesystem handoffs and separate worktrees. Prefer visible terminals when available. Use for trackrun id1 id2 requests after dashboard or track-picks selection.
clojure-eval
bhauman
Evaluate Clojure code via nREPL using clj-nrepl-eval. Use this when you need to test code, check if edited files compile, verify function behavior, or interact with a running REPL session.
agent-browser
quran
Automates browser interactions for web testing, form filling, screenshots, and data extraction.
corbits-tools
corbitsdev
Give an Interchange agent remote MCP tools, Gmail, or Granola with @corbits/mcp, credential-http, google-tools, and granola. Load when adding MCP servers or third-party tools to an agent.
corbits-inference
corbitsdev
Add OpenAI Responses, Codex, xAI, or Ollama inference and OAuth login to Interchange with the Corbits provider packages. Load when wiring a model provider or a login flow.
create-backend-controller
ProxiBlue
Creates a backend (adminhtml) controller action in Magento 2 with proper ACL, routing, authorization, and admin UI integration. Use when building admin pages, AJAX endpoints, form handlers, or mass actions.
status
SeuPut0705
Check whether ai-memory is capturing this session and its memory tools can reach the server. Run it when memory looks missing or after installing or upgrading ai-memory.
interchange-embed-hub
corbitsdev
Run an Interchange hub inside your own app process (desktop app, single binary, server) with its database, keys, auth origin, and sidecar provisioner. Load when an app must host its own hub.
corbits
corbitsdev
Catalog of the @corbits/* packages and which one to use. Load when a task mentions a Corbits package, or needs inference providers, MCP, memory, cron, webhooks, or agent UI on Interchange.
supabase-extract-jwt
yoanbernabeu
Extract and decode Supabase-related JWTs from client-side code, cookies, and local storage patterns.
marketing-product-analytics
vasilyu1983
Product analytics instrumentation and strategy covering event taxonomy design, tracking plans, user behavior analysis, activation/retention metrics, and marketing attribution. PostHog-first with multi-platform support (Pendo, Amplitude, Mixpanel, Heap).
session-handoff
ToanMobile
Dùng khi User gọi /session-handoff để chuyển công việc đang dở sang session/người khác hoặc sắp hết context. Bỏ qua fact cần lưu lâu dài; dùng .agents/instincts.md cho nội dung persistent.
flowglad-feature-gating
flowglad
Implement feature access checks using Flowglad to gate premium features, create paywalls, and restrict functionality based on subscription status. Use this skill when adding paid-only features or checking user entitlements.
supabase-help
yoanbernabeu
Quick reference for all Supabase security audit skills with usage examples and command overview.
flowglad-subscriptions
flowglad
Manage subscription lifecycle including cancellation, plan changes, reactivation, and status display. Use this skill when users need to upgrade, downgrade, cancel, or reactivate subscriptions.
supabase-audit-functions
yoanbernabeu
Discover and test Supabase Edge Functions for security vulnerabilities and misconfigurations.
contextual-review
flowglad
Review pull requests for code quality, security vulnerabilities, best practices, and potential issues. Use when reviewing PRs, examining diffs, or providing code review feedback.
remia-tooling
remmmi
Point dépôt vs local des plugins de la marketplace remia-tooling (remia, rename-herdr, usec, simple, chatroom, markitdown, herdr-vues, voxtunnel) : ce qui est installé, en retard, nouveau, encore installé à la main ; proposer installations et migrations, mémoriser les réponses, nettoyer après une désactivation. Déclenche sur toute mention de remia-tooling ou "remia", "mes tools", "mes outils du dépôt", "qu'est-ce qui est à jour", "installe <outil du dépôt>", "mets à jour mes outils", "migre cette machine", et sur un message [remia-tooling] injecté par un hook.
dev-workflow-planning
vasilyu1983
Structured development workflows using /brainstorm, /write-plan, and /execute-plan patterns. Transform ad-hoc conversations into systematic project execution with hypothesis-driven planning, incremental implementation, and progress tracking.