认证鉴权
认证与授权
browser-tools
brettatoms
Interactive browser automation via Chrome DevTools Protocol. Use when you need to interact with web pages, test frontends, or when user interaction with a visible browser is required.
brainstorming
xbklairith
Use when exploring unclear requirements or architectural decisions - refines rough ideas into clear requirements/designs through collaborative questioning (one at a time), explores alternatives, validates incrementally. Activates when user has vague feature idea, mentions "not sure about", "exploring options", "what approach", or during spec-driven requirements/design phases.
code-review-security
hieutrtr
Security-focused code review checklist and automated scanning patterns. Use when reviewing pull requests for security issues, auditing authentication/authorization code, checking for OWASP Top 10 vulnerabilities, or validating input sanitization. Covers SQL injection prevention, XSS protection, CSRF tokens, authentication flow review, secrets detection, dependency vulnerability scanning, and secure coding patterns for Python (FastAPI) and React. Does NOT cover deployment security (use docker-best-practices) or incident handling (use incident-response).
Security-First-Design Skill
ilude
Apply this framework when security is a primary design concern. Work through phases sequentially, documenting findings and mitigations at each stage.
bank-scraper
macaron-software
Bank and broker scraping with Playwright and APIs. Use when building or modifying scrapers for IBKR, Trade Republic, Boursobank, or Crédit Agricole. Handles login flows, virtual keyboards, OTP, anti-bot evasion, and financial data extraction (balances, positions, transactions, dividends).
ios-camera-capture-diag
derKlinke
camera freezes, preview rotated wrong, capture slow, session interrupted, black preview, front camera mirrored, camera not starting, AVCaptureSession errors, startRunning blocks, phone call interrupts camera
readthedocs-project-manager
readthedocs
Manage Read the Docs projects via the RTD API. Use when creating projects, listing repos, triggering builds, syncing versions, or checking build status on Read the Docs.
codereview-security
xinbenlv
Zero-trust security analysis like Cursor BugBot. Focuses exclusively on finding exploitable vulnerabilities with high confidence (>95%). Use when reviewing files that handle input parsing, database queries, authentication, or external API calls.
fastapi-workflow
ilude
FastAPI framework workflow guidelines. Activate when working with FastAPI projects, uvicorn, or FastAPI-specific patterns.
e2e-scraper
macaron-software
End-to-end testing for bank scrapers. Use when writing or modifying tests for the scraping layer. Covers mocking bank websites, testing virtual keyboard solvers, OTP flows, data extraction validation, and scraper resilience (retry, error handling, anti-bot detection).
brainstorming-designs
memyselfandm
Facilitates interactive design brainstorming sessions for UI/UX concepts. Use when exploring visual designs, user flows, component architecture, or creative solutions before implementation.
sinatra-patterns
geoffjay
Common Sinatra patterns, routing strategies, error handling, and application organization. Use when building Sinatra applications or designing routes.
readthedocs-api
readthedocs
Full Read the Docs API v3 client guidance. Use when building or updating an API client, generating requests, or answering questions about Read the Docs API v3 endpoints (projects, versions, builds, subprojects, translations, redirects, environment variables, organizations, remote VCS resources, or embed content).
writing-plans
hxk622
"当有多步骤任务的规格或需求时使用，在动代码之前。编写全面的实施计划，假设工程师对代码库零上下文。Use when you have a spec or requirements for a multi-step task, before touching code. Write comprehensive implementation plans."
managing-sprints
memyselfandm
Manages sprint lifecycle including planning, execution, monitoring, and review. Use for creating sprints from epics (/managing-sprints plan), executing sprints with parallel AI agents (/managing-sprints execute), checking progress (/managing-sprints status), or reviewing completed work (/managing-sprints review). Optimizes for maximum parallelization while avoiding file conflicts.
flask-workflow
ilude
Flask framework workflow guidelines. Activate when working with Flask projects, flask run, or Flask-specific patterns.
session-context-management
ilude
Maintain "just enough" context across work sessions using CURRENT.md, STATUS.md, and LESSONS.md files. Activate when tasks take >15 minutes, touch 3+ files, interruptions likely, or scope uncertain. Includes /snapshot and /pickup commands for saving and resuming work. ADHD-friendly, token-efficient approach.
ios-app-shortcuts-ref
derKlinke
Use when implementing App Shortcuts for instant Siri/Spotlight availability, configuring AppShortcutsProvider, adding suggested phrases, or debugging shortcuts not appearing - covers complete App Shortcuts API for iOS 16+
fastapi-patterns
hieutrtr
FastAPI framework mechanics and advanced patterns. Use when configuring middleware, creating dependency injection chains, implementing WebSocket endpoints, customizing OpenAPI documentation, setting up CORS, building authentication dependencies (JWT validation, role-based access), implementing background tasks, or managing application lifespan (startup/shutdown). Does NOT cover basic endpoint CRUD or repository/service patterns (use python-backend-expert) or testing (use pytest-patterns).
fastmcp-builder
husniadil
Build production-ready MCP servers using FastMCP framework with proven patterns for tools, resources, prompts, OAuth authentication, and comprehensive testing. Use this when creating FastMCP-based MCP servers with features like Google OAuth, multiple resource types, testing with FastMCP Client, or complex tool implementations.
ios-app-composition
derKlinke
Use when structuring app entry points, managing authentication flows, switching root views, handling scene lifecycle, or asking 'how do I structure my @main', 'where does auth state live', 'how do I prevent screen flicker on launch', 'when should I modularize' - app-level composition patterns for iOS 26+
ios-camera-capture-ref
derKlinke
Reference — AVCaptureSession, AVCapturePhotoSettings, AVCapturePhotoOutput, RotationCoordinator, photoQualityPrioritization, deferred processing, AVCaptureMovieFileOutput, session presets, capture device APIs
trent-config
trentshaines
Overview of Trent's development environment and dotfiles setup. Use this skill first to understand the overall setup, then reference specific skills for details. CRITICAL - Trent uses fish shell, NOT zsh.
interview
ardasevinc
Interview user in-depth to elicit requirements, clarify ideas, and surface blind spots. Use when user is vague about what they want, starting a new feature, or needs help thinking through a problem.