安全
安全扫描与漏洞检测
pentest-mobile-app
jd-opensource
OWASP Mobile Top 10 security testing for Android and iOS — local storage, certificate pinning bypass, IPC abuse, and binary protections.
hooks-eval
athola
'Use this skill BEFORE deploying hooks to production. Use when auditing
oracle-family-scan
Soul-Brews-Studio
Manage Oracle family - scan, track, welcome new Oracles. Use when user says "family scan", "oracle registry", "welcome new oracles", or needs to check Oracle population.
release-checklist
yonatangross
Walks through the OrchestKit release checklist — build, test, validate counts, changelog, version bump, commit, tag, push. Use when preparing a release, cutting a version tag, or verifying release readiness before pushing to main.
audit-full
yonatangross
"Full-codebase audit using 1M context window. Security, architecture, and dependency analysis in a single pass. Use when you need whole-project analysis."
chrome-extension-development
Mindrally
Expert guidelines for Chrome extension development with Manifest V3, covering security, performance, and best practices
bash-scripting
Mindrally
Bash scripting guidelines covering security, portability, error handling, and automation best practices for DevOps.
docker
Mindrally
Docker containerization best practices for building, securing, and deploying containers.
gemini-peer-review
jezweb
"Get a second opinion from Gemini on code, architecture, debugging, or security. Uses gemini-coach CLI with AI-to-AI prompting for clear, actionable analysis. Trigger with 'ask gemini', 'gemini review', 'second opinion', 'peer review', or 'consult gemini'."
electron-skills
llama-farm
Electron patterns for LlamaFarm Desktop. Covers main/renderer processes, IPC, security, and packaging.
typescript-skills
llama-farm
Shared TypeScript best practices for Designer and Electron subsystems.
python-skills
llama-farm
Shared Python best practices for LlamaFarm. Covers patterns, async, typing, testing, error handling, and security.
v4-security-foundations
Uniswap
Security-first Uniswap v4 hook development. Use when user mentions "v4 hooks", "hook security", "PoolManager", "beforeSwap", "afterSwap", or asks about V4 hook best practices, vulnerabilities, or audit requirements.
domain-authority-auditor
aaron-he-zhu
'Use when the user asks to "audit domain authority", "domain trust score", "CITE audit", "how authoritative is my site", "domain credibility check", "is my domain trustworthy", or "domain credibility score". Runs a full CITE 40-item domain authority audit, scoring domains across 4 dimensions with weighted scoring by domain type. Produces a detailed report with per-item scores, dimension analysis, veto checks, and a prioritized action plan. For content-level assessment, see content-quality-auditor. For link profile details, see backlink-analyzer.'
code-review
tao12345666333
Provides expert code review guidelines and best practices
capacitor-security
Cap-go
Comprehensive security guide for Capacitor apps using Capsec scanner. Covers 63+ security rules across secrets, storage, network, authentication, cryptography, and platform-specific vulnerabilities. Use this skill when users need to secure their mobile app or run security audits.
code-review-playbook
yonatangross
Use this skill when conducting or improving code reviews. Provides structured review processes, conventional comments patterns, language-specific checklists, and feedback templates. Use when reviewing PRs or standardizing review practices.
assess
yonatangross
"Assesses and rates quality 0-10 with pros/cons analysis. Use when evaluating code, designs, or approaches."
audit-skills
yonatangross
Audits all OrchestKit skills for quality, completeness, and compliance with authoring standards. Use when checking skill health, before releases, or after bulk skill edits to surface SKILL.md files that are too long, have missing frontmatter, lack rules/references, or are unregistered in manifests.
mcp-patterns
yonatangross
MCP server building, advanced patterns, and security hardening. Use when building MCP servers, implementing tool handlers, adding authentication, creating interactive UIs, hardening MCP security, or debugging MCP integrations.
onvifscan
BrownFineSecurity
ONVIF device security scanner for testing authentication and brute-forcing credentials. Use when you need to assess security of IP cameras or ONVIF-enabled devices.
nmap
BrownFineSecurity
Professional network reconnaissance and port scanning using nmap. Supports various scan types (quick, full, UDP, stealth), service detection, vulnerability scanning, and NSE scripts. Use when you need to enumerate network services, detect versions, or perform network reconnaissance.
security
alinaqi
OWASP security patterns, secrets management, security testing
agent-teams
alinaqi
Claude Code Agent Teams - default team-based development with strict TDD pipeline enforcement