模板
项目与代码模板
security-audit
Aedelon
Proactive security audit: OWASP top 10, dependency vulnerabilities, secrets detection, input validation, auth patterns, and secure defaults. MUST BE USED when user mentions: "security", "vulnerability", "audit", "OWASP", "CVE", "security review", "pentest", "injection", "XSS", "CSRF", "authentication", "authorization", "secrets", "hardcoded password", "secure", "npm audit", "pip-audit", "check security", "is this secure", "security risk", "data leak", "SQL injection", "command injection", "path traversal", "SSRF", "RCE", "privilege escalation", "supply chain", "dependency scan", "snyk", "trivy", "semgrep", "bandit". Scans code for vulnerabilities, checks dependencies, verifies auth patterns. NOT for explaining security concepts (use pedagogical-explain), or general code review (use code-review).
anti-hallucination
Aedelon
CRITICAL SAFETY SKILL — Verify ALL technical claims, API signatures, library methods, code behavior, and factual statements before answering. Use Context7, WebSearch, and Read tools to confirm. MUST BE USED PROACTIVELY whenever: writing code that calls any library or API, answering technical questions, stating facts about frameworks or tools, mentioning version numbers, describing function behavior, recommending libraries, comparing technologies, or making any claim that could be wrong. Triggers: "how does X work", "what are the arguments for", "does this function exist", "is this the right syntax", "what version", "API reference", "documentation for", "how to use", "method signature", "return type", "parameters", "correct usage", "does this library support", "what's the default", "is this deprecated". Prevents hallucinated code, wrong function names, fabricated documentation, and incorrect facts. When in doubt about ANY technical claim, this skill MUST activate.
core-protocols
Aedelon
Debug errors systematically by searching first, then analyzing, then proposing verified solutions. MUST BE USED when user reports: "error", "bug", "doesn't work", "fails", "crash", stack traces, exception messages, or any troubleshooting scenario. Triggers: "TypeError", "ImportError", "undefined is not a function", "segfault", "panic", "broken", "not working", "unexpected behavior", "regression", "failing", "exception", "traceback", "stack trace", "debug this", "why does this fail", "help me fix". Also enforces confidence levels and output templates. Prevents guessing solutions without research.
code-patterns
Aedelon
Reference patterns for REST APIs, pytest/vitest testing, Docker multi-stage builds, GitHub Actions CI/CD, PostgreSQL, TypeScript generics, Python async, and React Server Components. MUST BE USED when user asks about: "API design", "how to test", "Dockerfile", "CI/CD pipeline", "database schema", "TypeScript types", "async/await", "React hooks", "Next.js", "FastAPI", "testing pattern", "mock", "fixture", "docker compose", "github actions", "workflow yaml", "postgres query", "SQL pattern", "migration", "generic type", "server component", "use client", "use server", "middleware pattern", "error handling pattern", "retry logic". Includes code examples and validation commands. NOT for running tests (use smart-test-runner), security patterns (use security-audit), or git operations (use commit-message).
research-protocol
Aedelon
Conduct rigorous research with proper citations (DOI, arXiv, PMID) and source triangulation. MUST BE USED when user asks: "what is SOTA", "recent developments", "compare X vs Y", "is it true that", "research says", "latest papers on", "scientific evidence", "studies show", "state of the art", "literature review", "find papers", "academic research", "benchmark results", "who published", "when was X released", "current best", "what does the research say", "evidence for", "peer reviewed". Searches multiple sources, evaluates reliability, states confidence level. NOT for verifying API signatures (use anti-hallucination) or general web search (use WebSearch directly).
Template Usage & Application Patterns
kriscard
"Obsidian: Use when selecting or applying note templates. NOT for general vault organization (use obsidian-workflows)."
Vault Structure & Configuration
kriscard
"Obsidian: Reference for user's vault folders, tags, and templates. Load when needing vault layout context for note operations."
Swift Unit Testing Skill
fal3
Guidelines and templates for writing effective unit tests with XCTest, including test-driven development practices and mocking techniques.
builder-ux
Bbeierle12
Builder user experience systems for Three.js building games. Use when implementing prefab/blueprint save/load, undo/redo command patterns, ghost preview placement, multi-select, or copy/paste building mechanics. Covers the UX layer that makes building feel responsive and intuitive.
nushell-data
sebnow
"Teaches agents to use nushell for structured data manipulation instead of python3 boilerplate or complex jq pipelines. Use when parsing JSONL, filtering JSON, aggregating data, or converting between formats (JSON, CSV, YAML, TOML). Triggers: JSONL parsing, data aggregation, format conversion, 'count occurrences', 'filter records', 'convert to CSV'. Do NOT use for text search across files (use grep/rg), simple key extraction from a single JSON object (use jq), or tasks requiring libraries beyond nushell builtins."
astro-supabase-netlify
rebyteai-template
Astro with Supabase integration for Netlify.
financial-deep-research
rebyteai-template
Conduct enterprise-grade financial research with multi-source synthesis, regulatory compliance tracking, and verified market analysis. Use when user needs comprehensive financial analysis requiring 10+ sources, verified claims, market comparisons, or investment research. Triggers include "financial research", "market analysis", "investment analysis", "due diligence", "financial deep dive", "compare stocks/funds", or "analyze [company/sector]". Do NOT use for simple stock quotes, basic company lookups, or questions answerable with 1-2 searches.
ai-chatbot
rebyteai-template
Full-featured AI chatbot with Next.js 15, Auth.js, Drizzle ORM, and multi-model support.
happiness-dashboard
rebyteai-template
Evidence framework data dashboard with DuckDB. Write SQL in markdown to create visualizations.
vite-vue
rebyteai-template
Vite + Vue 3.5 template with TypeScript. Clone, setup, build, and deploy to Vercel or Netlify.
langchain-retrieval-agent
rebyteai-template
AI agent with retrieval tool for document Q&A using RAG and LangGraph.
content-ops-netlify
rebyteai-template
Next.js content model with visual editing for Netlify.
stripe-one-time-payment
rebyteai-template
Stripe Checkout for one-time payments with Express.js. Auto-creates products if not configured.
mantis-react-admin
rebyteai-template
React 19 admin dashboard with Material UI v7, Vite 7, and MUI X Charts.
astrowind
rebyteai-template
Astro 5.0 + Tailwind CSS landing page with blog, dark mode, and perfect PageSpeed scores.
fastapi-backend-template
rebyteai-template
FastAPI with PostgreSQL, async SQLAlchemy 2.0, Alembic, and Docker.
magic-portfolio
rebyteai-template
Next.js 16 portfolio with MDX blog/projects, Once UI, auto SEO, and endless theming.
sec-edgar-skill
rebyteai-template
SEC EDGAR filing analysis using EdgarTools. Use when user asks about SEC filings, company financials, 10-K/10-Q analysis, insider trading, revenue trends, or financial comparisons. Triggers include "SEC filing", "10-K", "10-Q", "8-K", "EDGAR", "company financials", "revenue", "earnings", "insider trading", "financial statements". Do NOT use for real-time stock prices or market data (use market-data skill instead).
natural-language-postgres
rebyteai-template
Chat app that lets you ask questions in plain English and query your PostgreSQL database.