代码评审
自动化代码审查与分析
unsafe-checker
actionbook
"CRITICAL: Use for unsafe Rust code review and FFI. Triggers on: unsafe, raw pointer, FFI, extern, transmute, *mut, *const, union, #[repr(C)], libc, std::ffi, MaybeUninit, NonNull, SAFETY comment, soundness, undefined behavior, UB, safe wrapper, memory layout, bindgen, cbindgen, CString, CStr, 安全抽象, 裸指针, 外部函数接口, 内存布局, 不安全代码, FFI 绑定, 未定义行为"
analyzing-heap-spray-exploitation
mukul975
Detect and analyze heap spray attacks in memory dumps using Volatility3 plugins to identify NOP sled patterns,
web-quality-audit
addyosmani
Comprehensive web quality audit covering performance, accessibility, SEO, and best practices. Use when asked to "audit my site", "review web quality", "run lighthouse audit", "check page quality", or "optimize my website".
cron
HKUDS
Schedule reminders and recurring tasks.
contract-redliner
travisjneuman
Contract review, redlining, and negotiation support with clause analysis, risk identification, and markup templates. Use when reviewing contracts, identifying unfavorable terms, suggesting amendments, or preparing negotiation positions.
create-pr
helderberto
Create GitHub pull requests. Use when user asks to "create a pull request", "open a PR", "/create-pr", or requests creating pull requests.
review-pr
helderberto
Review pull requests. Use when user asks to "review a PR", "/review-pr", or wants to review a pull request.
safe-repo
helderberto
Check for sensitive data in repository. Use when user asks to "check for sensitive data", "/safe-repo", or wants to verify no company/credential data is in the repository.
security-monitoring
ibuilder
How to monitor and fix security issues in Massing — CodeQL alerts, dependency audits, secret scanning, and ReDoS/XXE fixes. Invoke after a push (standing directive) or when doing a hardening pass. Emphasises that a green CodeQL run != zero alerts.
git
youlianvr
"Standardized Git operations: conventional commits, branch naming, workflow rules. Create commits with auto-detected type/scope, manage branches, run workflow operations. Use when committing changes, managing branches, or any git workflow task."
fable-method
youlianvr
A step-by-step problem-solving loop (classify the ask, define done, gather evidence, decide, act surgically, verify by observation, report outcome-first). Use when the user says "/fable-method", "use the fable method", or "approach this like Fable", or proactively when starting any multi-step task that no task-specific skill covers. Subcommands - plan (stop after the plan), audit (grade finished work against the loop), report (rewrite an answer outcome-first).
fable-loop
youlianvr
End-to-end workflow that describes the way Fable ran sessions - parallel evidence subagents when the host supports them, one committed plan, surgical execution with an intent gate, adversarial verification, honest outcome-first report. Use for non-trivial multi-step tasks when the user says "/fable-loop", "run the fable loop", or "do this the way Fable would". For the rules alone without orchestration, use fable-method; for the plain task cycle without subagents, use task-cycle; for large multi-phase projects, prefer the GSD workflow and use this inside phases.
code-critic
youlianvr
MUST USE when user asks to review code, find bugs, check for issues, audit code, code review, find bugs, check code, review, re-review, critique this, review this file, is this code good, what's wrong with, check for bugs, find problems. Sends code to proxy:4000 (deepseek-v4-flash) for merciless review. Returns structured report: score (0-10), critical count, each issue with severity/file/line/description/suggestion.
code-audit
youlianvr
Use for authorized source-code security review and SAST workflows including Semgrep, CodeQL patterns, dangerous API hunting, and fix verification.
cross-eval
youlianvr
"/cs:cross-eval <memo> — Multi-model consensus on a board memo or strategy brief. Claude + Codex + Gemini cross-review with graceful degradation. Use when a high-stakes memo needs an independent sanity check before the boardroom — e.g. a bet-the-company pivot or fundraise terms."
brainstorming
youlianvr
"You MUST use this before any creative work - creating features, building components, adding functionality, or modifying behavior. Explores user intent, requirements and design before implementation. Adapted 2026-08-09 for this workspace: design docs go to knowledge/findings/, handoff goes to executing-plans (not writing-plans)."
security
rshankras
Security review and guidance for iOS, macOS, and watchOS apps. Covers secure storage, biometric authentication, network security, and platform-specific patterns. Use when implementing security features or reviewing code for vulnerabilities.
review
bfly123
Dual review with Claude and Codex for quality verification. Use for step or task review.
pstack
Sma1lboy
Rigorous engineering mode for nontrivial work in this repo — a set of named principles plus the leaf skills that apply them. Use when the user says "pstack", "go deep", "be rigorous", "认真做", or when a task involves architecture, a real bug, a refactor, or anything the user will not be watching. Ported from cursor/plugins pstack by Lauren Tan (MIT); see ATTRIBUTION.md.
dyad:pr-fix
dyad-sh
Address all outstanding issues on a GitHub Pull Request by handling both review comments and failing CI checks.
skill-manager
KKKKhazix
Lifecycle manager for GitHub-based skills. Use this to batch scan your skills directory, check for updates on GitHub, and perform guided upgrades of your skill wrappers.
drugbank-database
jimmc414
Access and analyze comprehensive drug information from the DrugBank database including drug properties, interactions, targets, pathways, chemical structures, and pharmacology data. This skill should be used when working with pharmaceutical data, drug discovery research, pharmacology studies, drug-drug interaction analysis, target identification, chemical similarity searches, ADMET predictions, or any task requiring detailed drug and drug target information from DrugBank.
histolab
jimmc414
Digital pathology image processing toolkit for whole slide images (WSI). Use this skill when working with histopathology slides, processing H&E or IHC stained tissue images, extracting tiles from gigapixel pathology images, detecting tissue regions, segmenting tissue masks, or preparing datasets for computational pathology deep learning pipelines. Applies to WSI formats (SVS, TIFF, NDPI), tile-based analysis, and histological image preprocessing workflows.
clinvar-database
jimmc414
"Query NCBI ClinVar for variant clinical significance. Search by gene/position, interpret pathogenicity classifications, access via E-utilities API or FTP, annotate VCFs, for genomic medicine."