代码评审
自动化代码审查与分析
codex-cto
tdimino
Inverted orchestration—Codex CLI acts as CTO (planning and reviewing), Claude Code executes with native tools. Use when a task benefits from external architectural oversight before and after implementation.
Next.js Security Scan
sugarforever
"Comprehensive security vulnerability scanner for Next.js and TypeScript/JavaScript projects. Detects OWASP Top 10 vulnerabilities, XSS, injection flaws, authentication issues, hardcoded secrets, and Next.js-specific security problems. Audits dependencies for known CVEs and generates actionable security reports."
hai-audit-docs-internally
hylarucoder
Audits a document or doc set from the inside and produces a prioritized findings report (P0-P3) of internal conflicts, stale content, terminology drift, duplication, and misplaced or unsupported claims, plus update/move/merge/remove/split decisions and a suggested repair order. Use this whenever the user wants docs sanity-checked or cleaned up for self-consistency without comparing against code, even when they never say "audit": contradictory or duplicate sections, stale assumptions, unclear structure, or a PRD/spec that should hang together. Trigger on casual and Chinese phrasings too: 文档自相矛盾, 文档前后不一致, 文档内部冲突, 审一下这份文档, 帮我审审这个 PRD, 文档体检, "these two sections disagree", "is this spec consistent", "the docs repeat themselves". If the truth source is the code, use hai-audit-docs-against-code instead.
task-planner
barkain
Analyze user request, explore codebase, decompose into subtasks, assign agents, and return complete execution plan with wave assignments.
breadth-reader
barkain
Forked skill for breadth tasks (explore, review, summarize)
paper-writer
kgraph57
"Medical/scientific paper writing workflow skill. Manages the full pipeline from literature search to submission-ready manuscript. Creates and manages a project directory with IMRAD-format section files, literature matrix, reference management, and quality checklists. Supports both English and Japanese papers. Triggers: 'write paper', 'paper-write', 'start manuscript', '論文を書く', '論文執筆', '論文プロジェクト', 'manuscript', 'research paper', '原稿作成'."
Behavioral Modification
pjt222
Agent Almanac — a curated reference of executable skills, specialist agents, and teams for AI-assisted development, with interactive visualization
debug-github-ci
ericmjl
Debug GitHub Actions and CI failures using gh CLI: watch PR checks, fetch run logs, analyze failures, reproduce locally, and suggest fixes. Use when CI fails, when the user wants to watch or verify CI, or when debugging workflow runs.
workos-authkit-nextjs
workos
Integrate WorkOS AuthKit with Next.js App Router (13+). Server-side rendering required.
gplay-review-management
tamtom
Review monitoring, filtering, and automated responses for Google Play. Use when managing user reviews and feedback.
workos-authkit-react
workos
Integrate WorkOS AuthKit with React single-page applications. Client-side only authentication. Use when the project is a React SPA without Next.js or React Router.
workos-authkit-base
workos
Architectural reference for WorkOS AuthKit integrations. Fetch README first for implementation details.
workos-authkit-nextjs
workos
Integrate WorkOS AuthKit with Next.js App Router (13+). Server-side rendering required.
workos-authkit-base
workos
Architectural reference for WorkOS AuthKit integrations. Fetch README first for implementation details.
histolab
jimmc414
Digital pathology image processing toolkit for whole slide images (WSI). Use this skill when working with histopathology slides, processing H&E or IHC stained tissue images, extracting tiles from gigapixel pathology images, detecting tissue regions, segmenting tissue masks, or preparing datasets for computational pathology deep learning pipelines. Applies to WSI formats (SVS, TIFF, NDPI), tile-based analysis, and histological image preprocessing workflows.
dev.loop
kevinslin
Drive a development task end-to-end from a user-stated goal through planning, context gathering, execution, verification. Use when the user asks to run a devloop, drive a task to completion, or wants a plan-gather-execute-verify workflow with phased commits and CI verification. Also use if user asks to invoke any individual phase of the devloop
meta.skill-optimizer
kevinslin
Optimize existing skills and their associated files (SKILL.md, scripts, references, assets) for clarity, concision, and ease of use. Use when asked to optimize, streamline, simplify, or clean up a skill; consolidate duplicated or conflicting instructions; add small, clarifying examples; or run an evidence-based skill review using past runs/sessions and learnings.
dev.do
kevinslin
End-to-end development task intake and execution. Use when the user gives a dev task (feature/bug/refactor) as a file path, pasted description, or git issue and wants it completed; this skill gathers context, asks clarifying questions if needed, then runs the dev.loop workflow to deliver the change.
dev.can-make-public
kevinslin
Scan a repository and its git history for secrets, credentials, private keys, internal URLs, PII, and other sensitive artifacts before making it public. Use when a user asks if a repo is safe to open-source, requests a pre-publication audit, or wants to sanitize a repo for public release.
hn-title
kevinslin
This skill should be used when the user wants to create, analyze, or improve blog titles for Hacker News submissions. Invoke when the user mentions "HN title", "Hacker News title", wants to optimize their post title, or wants to increase their chances of reaching the HN front page.
ag-learn
kevinslin
learn from the current session, run a time-bounded review across sessions,
dev.review
kevinslin
Multi-type review skill for code, design docs/specs, architecture, UX,
dev.shortcuts
kevinslin
Mandatory shortcut trigger and usage guidance. ALWAYS check if shortcut. Applies before responding to ANY coding or development request.
using-rails-ai
zerobearing2
Rails-AI introduction - explains how rails-ai (Rails domain layer) integrates with superpowers (universal workflows) for Rails development