发现 Skills

Throwaway experiments to validate an idea before build.

Control a running TouchDesigner instance via twozero MCP — create operators, set parameters, wire connections, execute Python, build real-time visuals. 36 native tools.

Generate meeting agendas with topics, timing, and preparation requirements. Use before meetings to plan structure and expected outcomes. Triggers: "meeting agenda", "plan meeting", "agenda", "schedule meeting".

Build stateful serverless applications using Cloudflare Workers and Durable Objects. Use when creating real-time collaborative apps, chat systems, multiplayer games, WebSocket servers, rate limiters, or any application requiring coordination between clients, persistent state, or scheduled tasks with Cloudflare's edge computing platform.

Extract durable memories from recent conversation turns into user, feedback, project, and reference categories while avoiding stale code-state facts.

Supports agile, specification-driven REST API development using Jakarta EE 10 and JAX-RS 3.1. Prioritizes shared business SPECs (common/), and develops by use case. Separates generation of production code and test code, and implements tests from both black-box and white-box perspectives. Tasks are already defined for common and each use case, and each developer implements according to them. The convergence point is the integration tests.

Edit and improve articles by restructuring sections, improving clarity, and tightening prose. Use when a user wants to edit, revise, or improve an article draft.

Browser automation patterns via the browser_* tools (Playwright). Use when the user asks me to navigate a website, fill a form, scrape data, or test a UI flow.

Structured review checklist before implementing changes. Use when planning a feature, before opening a PR, or when the user shares code that needs scrutiny across architecture, code quality, tests, and performance.

Create production-ready public repos with complete documentation, automated setup, bundled dependencies, and user-friendly installation.

Create exercise directory structures with sections, problems, solutions, and explainers that pass linting. Use when user wants to scaffold exercises, create exercise stubs, or set up a new course section.

Systematic VPS cleanup — analyze files, categorize by importance, safely delete temporary/old data to free disk space

Use when helping with home lighting design, smart light setup, or ambiance -- covers color theory, circadian rhythms, room profiles, Philips Hue patterns, and scene design

Google Workspace CLI (gogcli) for Gmail, Calendar, Drive, Tasks, Contacts, Classroom, and Chat. Use it to access Google services from the command line, automate email and calendar operations, manage Google Drive files, and work with Google Tasks and Contacts.

Complete ANC Proposal Engine project bible. Use at the START of every conversation about this project. Contains architecture, patterns, file locations, stakeholder rules, deployment workflow, known bugs, and lessons learned. This is the single source of truth.

Document findings and maintain task notes using Flow framework. Use when user says "document", "document this", "document finding", "add notes", "add this to notes", "write this down", "summarize", "summarize this", "generate changelog", "create changelog", or wants to capture discoveries. Helps update task Notes sections, create summaries with /flow-summarize, and keep documentation synchronized with work. Focuses on concise, actionable documentation.

Navigate Flow projects with dashboard-first pattern. Use when user asks about status, current work, what's next, or project progress. Read-only skill.

Plan phases, tasks, and iterations. Use when structuring new work, adding features, or organizing development plans.

Use when defining how an AI product stands out — defensibility assessment, outcome-based messaging, feature vs product decision, competitive moat design, and positioning for a specific niche.

Use when executing a structured workflow — select and run a feature, bugfix, refactor, research, or incident template with correct agent and model assignments per phase.

Map observed adversary behaviors, security alerts, and detection rules to MITRE ATT&CK techniques and sub-techniques to quantify detection coverage and guide control prioritization. Use this when building ATT&CK-based coverage heatmaps, tagging SIEM alerts with technique IDs, aligning security controls with adversary playbooks, or reporting threat exposure to senior leadership. Applicable to requests involving ATT&CK Navigator, Sigma rules, MITRE D3FEND, or coverage-gap analysis.

Perform automated static analysis of Android applications using the Mobile Security Framework (MobSF) to identify hard-coded keys, unsafe permissions, vulnerable components, weak cryptographic algorithms, and code-level security defects without running the app. Suitable for security assessments of Android APK/AAB files before deployment, during penetration testing, or as part of CI/CD security gates. Trigger when requests involve Android static analysis, MobSF scanning, APK security assessment, or mobile app code review.

Evaluate the security of Bluetooth Low Energy (BLE) devices by scanning, enumerating GATT services, and detecting vulnerabilities.

Use when testing the complete Avinode integration workflow end-to-end, from flight request through proposal, contract, payment, deal closure, and archival, verifying bidirectional RFP flow between ISO agent and operator roles in the Avinode Sandbox, or when debugging any stage of the charter flight lifecycle using browser automation.