认证鉴权
认证与授权
sequential-thinking
duongdev
Structured problem-solving through iterative reasoning with revision and branching capabilities for complex problems. Use when tackling multi-step problems with uncertain scope, design planning, architecture decisions, or systematic decomposition. Auto-activates when user asks about breaking down epics, designing systems, assessing complexity, or performing root-cause analysis. Uses 6-step process: Initial assessment (rough estimate) → Iterative reasoning (learn progressively) → Dynamic scope adjustment (refine as understanding deepens) → Revision mechanism (update when assumptions change) → Branching for alternatives (explore multiple approaches) → Conclusion (synthesize findings). Supports explicit uncertainty acknowledgment within thoughts. Adjusts total thought count dynamically (e.g., "Thought 3/8" when initially estimated 5). Recommends binary search for intermittent issues and five-whys technique for root causes.
xiaohongshu-publisher
iamzifei
Publish images to Xiaohongshu (小红书) via CDP browser. Always saves as draft.
ccpm-debugging
duongdev
Systematic debugging with defense-in-depth approach (symptoms → immediate cause → root cause → systemic issues → prevention). Auto-activates when user mentions "error", "failing", "broken", "debug", "bug", "issue" or when /ccpm:verify runs. Uses Observe → Hypothesize → Test → Confirm → Fix → Verify → Document workflow. Updates Linear with findings and automatically logs blockers that require external fixes. Traces root causes instead of patching symptoms. Integrates with ccpm-code-review to verify fixes pass all gates before marking complete. Suggests binary search for intermittent issues and five-whys analysis for complex problems.
auth-implementation-patterns
xfstudio
Master authentication and authorization patterns including JWT, OAuth2, session management, and RBAC to build secure, scalable access control systems. Use when implementing auth systems, securing APIs, or debugging security issues.
springboot-security
Ashfaqbs
Spring Security best practices for authn/authz, validation, CSRF, secrets, headers, rate limiting, and dependency security in Java Spring Boot services.
iterative-retrieval
Ashfaqbs
Pattern for progressively refining context retrieval to solve the subagent context problem
eval-harness
Ashfaqbs
Formal evaluation framework for Claude Code sessions implementing eval-driven development (EDD) principles
code-security-review
DauQuangThanh
Conducts comprehensive security code reviews including vulnerability detection (OWASP Top 10, CWE), authentication/authorization flaws, injection attacks, cryptography issues, sensitive data exposure, API security, dependency vulnerabilities, security misconfigurations, and compliance validation (PCI-DSS, GDPR, HIPAA). Produces detailed security assessment reports with CVE references, CVSS scores, exploit scenarios, and remediation guidance. Use when reviewing code security, performing security audits, checking for vulnerabilities, validating security controls, assessing security risks, or when users mention "security review", "vulnerability scan", "security audit", "penetration test", "OWASP", "security assessment", "secure coding", or "security compliance".
keycloak-administration
DauQuangThanh
Provides comprehensive KeyCloak administration guidance including realm management, user/group administration, client configuration, authentication flows, identity brokering, authorization policies, security hardening, and troubleshooting. Covers SSO configuration, SAML/OIDC setup, role-based access control (RBAC), user federation (LDAP/AD), social login integration, multi-factor authentication (MFA), and high availability deployments. Use when configuring KeyCloak, setting up SSO, managing realms and clients, troubleshooting authentication issues, implementing RBAC, or when users mention "KeyCloak", "SSO", "OIDC", "SAML", "identity provider", "IAM", "authentication flow", "user federation", "realm configuration", or "access management".
exploration-tracking
DoubleslashSE
Exploration map management for tracking discussed areas and uncharted territory during DISCUSS phase
formbuilder-admin
vishalsachdev
Create, edit, and manage forms in the University of Illinois ATLAS FormBuilder Admin application (appserv7.admin.uillinois.edu/FormBuilderAdmin). Use when the user needs to work with FormBuilder forms including: creating or editing form questions and sections, configuring event session categories and event sessions, setting up payment line items and CFOAPAL codes, managing workflow phases and routing triggers with conditional statements, configuring authentication and self-registration for local users, editing form periods, managing waitlists and registration limits, setting up question triggers for conditional visibility, working with text merge fields, handling form responses and reports, or troubleshooting form behavior. Keywords: FormBuilder, ATLAS, UIUC, form builder, event registration, survey, form questions, payment configuration, workflow, routing triggers, phases, event sessions, iPay, CFOAPAL.
Omnigent Cloudflare Server
hansakoch
Check query parameters: runner_id and conversation_id
zenstack
beshkenadze
ZenStack access policies and enhanced Prisma ORM. Use when defining access control rules (@@allow/@@deny), integrating with tRPC, setting up auth(), or working with ZModel schemas.
code-reviewer
beshkenadze
Review code for quality, security, and best practices. Use when asked to review code, find bugs, or suggest improvements.
integrate-anything
membranehq
Connect to any external API and perform actions — Slack, HubSpot, Salesforce, GitHub, Jira, Google Sheets, and 100,000+ more. Send messages, create tasks, sync data, manage contacts, or run any API operation.
aws-sso-auth-guide
stakpak
AWS SSO discovery, configuration, and terminal usage
exploration-tracking
DoubleslashSE
Mind mapping and exploration state tracking for workshops. Use to maintain awareness of explored vs uncharted territory, implement backtracking, and ensure comprehensive coverage or documented gaps.
brainstorming
DoubleslashSE
Brainstorming techniques for idea generation. Use when facilitating brainstorming sessions, leading ideation exercises, or helping teams generate creative solutions.
x-composer
JungHoonGhae
Compose and post to X.com using Chrome CDP automation. Use when user asks to "post to X", "tweet", "draft a tweet", "share on X", or "write a thread". Handles Chrome launch, text input with emoji/unicode support, and multi-paragraph formatting via real browser automation (no API costs, bypasses anti-bot detection).
facilitation-techniques
DoubleslashSE
Core facilitation skills for running effective workshops. Use when facilitating any type of group session, managing participation, and guiding discussions.
linear-create
alexanderguy
Create well-structured Linear issues, projects, or initiatives
economist-tui
tmustier
Terminal UI + CLI to browse Economist headlines, search articles, and read full content in the terminal. Requires one-time browser login for full articles.
session-documentation
DoubleslashSE
Documentation practices for capturing workshop outputs. Use when creating session records, idea inventories, decision logs, and action item trackers.
slack
lox
Read Slack messages, threads, and channels via CLI. Use when asked to view Slack URLs, search Slack, or look up Slack users.