认证鉴权
认证与授权
project-documentation
trewknowledge
Create non-technical documentation for project features in the docs/ folder. Use when documenting completed features, writing feature documentation, explaining how features work, or when the user asks to document the project or create docs for non-developers.
ghost_mcp
luislozanogmia
Ghost Browser v3 browser automation via the Ghost MCP bridge and stdio proxy.
commit
Adonis0123
Generate conventional commit messages with emoji prefixes from staged changes. Use when you need to draft, refine, or execute standardized commit messages quickly.
role-rd
tomwangowa
RD (Developer) role for the multi-agent role system. Produces structured design artifacts calibrated by project size (small/medium/large), taking PM requirements as input. Invoked by role-orchestrator via subagent dispatch, or directly for standalone design work. Triggered by "RD analysis", "technical design", "role-rd", or when role-orchestrator dispatches the RD phase.
freshrss
MichaelVessia
Manage RSS feeds in FreshRSS. Use when the user wants to add, list, or manage RSS feeds and subscriptions.
activity-logger
tomwangowa
Records work activities from the current session for cross-session aggregation and work log generation
node-testing
MolcajeteAI
This skill should be used when writing, reviewing, or debugging Node.js backend tests. It covers integration testing with Fastify inject and Supertest, CRUD test patterns, authentication testing, Testcontainers for Docker-based database testing, and end-to-end user flow testing.
0-day
gemstone-source
Systematic vulnerability research for CVE discovery, bug bounty methodology, patch-diff auditing, and offensive security work. Combines strategic architecture analysis with tactical exploitation testing. Covers source-to-sink tracing, trust boundary violations, authorization flaws, and variant hunting.
writing-plans
jtsang4
Use when you have a spec or requirements for a multi-step task, before touching code
Vibe Security Skill
Bigtablet
This skill helps Claude write secure web applications. Use when working on any web application to ensure security best practices are followed.
git-committing
MolcajeteAI
This skill should be used when creating git commits, amending commits, or reviewing commit messages. It defines commit message standards: imperative verbs, 50-character limit, conventional commit prefixes adapted to the project's existing style, and absolutely no AI or tool attribution.
add-skill
nicholasgriffintn
Create or improve agent skills. Load when creating SKILL.md files, writing skill descriptions, or structuring skill content for OpenCode or Claude.
tg-cli
cyberash-dev
Read-only Telegram CLI via MTProto. Lists chats, fetches messages, downloads media, manages local accounts/sessions. Does not send messages or modify Telegram data. Use when the user asks to read Telegram chats, fetch messages, download media, or automate Telegram data extraction.
setup-structure-index
wegfetrhrtewqerwfgtrhtmjhfgdsas
This skill should be used when the user asks to "set up structure index", "add codebase structure tracking", "create structure files", "set up code structure YAML", or needs to set up the codebase structure index system in a project. It creates a two-tier structure index (compact file map in CLAUDE.md + detailed YAML files) and configures a TaskCompleted hook to enforce updates.
agent-browser
gannonh
Browser automation CLI for AI agents. Use when the user needs to interact with websites, including navigating pages, filling forms, clicking buttons, taking screenshots, extracting data, testing web apps, or automating any browser task. Triggers include requests to "open a website", "fill out a form", "click a button", "take a screenshot", "scrape data from a page", "test this web app", "login to a site", "automate browser actions", or any task requiring programmatic web interaction.
security-review
nicholasgriffintn
A specialist skill for security reviews, threat modeling, and remediation guidance. Use for auth/permissions changes, secrets or PII handling, public endpoints, or dependency upgrades.
playwright-cli
yusuftayman
"Automates browser interactions for web testing, form filling, screenshots, and data extraction. Use when the user needs to navigate websites, interact with web pages, fill forms, take screenshots, test web applications, or extract information from web pages."
betterauth-tanstack-convex
Sstobo
Step-by-step guide for setting up Better Auth authentication with Convex and TanStack Start. This skill should be used when configuring authentication in a Convex + TanStack Start project, troubleshooting auth issues, or implementing sign up/sign in/sign out flows. Covers installation, environment variables, SSR authentication, route handlers, and the expectAuth pattern.
ccpm-code-review
duongdev
Enforces quality verification gates with four-step validation (tests pass, build succeeds, checklist complete, no blockers) before task completion, PR creation, or status updates. Auto-activates when user says "done", "complete", "finished", "ready to merge", or runs /ccpm:verify or /ccpm:done commands. Provides systematic verification workflow that prevents false completion claims and ensures production readiness. Blocks external system writes (Jira, Slack) until evidence collected. Integrates with external-system-safety for confirmation workflow. When verification fails, suggests /ccpm:verify to debug issues systematically.
natural-workflow
duongdev
Guide users through CCPM's streamlined 6-command workflow (plan/work/sync/commit/verify/done). Auto-activates when users ask about starting tasks, committing changes, or completing work. Provides step-by-step guidance for the complete development lifecycle.
memory-workflow
VeriTeknik
"Guide the memory session lifecycle - start sessions, record observations, search memories, and end sessions with Z-reports. Use when working with Plugged.in memory system."
status
VeriTeknik
"Check Plugged.in connection status, active session, and memory statistics"
commit-assistant
duongdev
Provides conventional commits guidance and auto-generates commit messages from git changes. Integrates with /ccpm:commit for automated git commits linked to Linear issues. Auto-activates when users ask about committing, creating git commits, or discussing commit message formats.
memory-status
VeriTeknik
"Show memory system status including active session, ring counts, and recent observations"