发现 Skills

Enterprise-grade compliance architecture for SOC 2, HIPAA, GDPR, PCI-DSS. Provides compliance checklists, security controls, audit guidance, and regulatory requirements for serverless and cloud architectures. Activates for compliance, HIPAA, SOC2, SOC 2, GDPR, PCI-DSS, PCI DSS, regulatory, healthcare data, payment card, data protection, audit, security standards, regulated industry, BAA, business associate agreement, DPIA, data protection impact assessment.

Expert knowledge for Azure Container Storage development including troubleshooting, decision making, limits & quotas, security, and configuration. Use when building, debugging, or optimizing Azure Container Storage applications. Not for Azure Blob Storage (use azure-blob-storage), Azure Files (use azure-files), Azure Elastic SAN (use azure-elastic-san), Azure NetApp Files (use azure-netapp-files).

Spawn and manage multiple Codex CLI agents via tmux to work on tasks in parallel. Use whenever a task can be decomposed into independent subtasks (e.g. batch triage, parallel fixes, multi-file refactors). When codex and tmux are available, prefer this over the built-in Task tool for parallelism.

Translate and sync bilingual documentation.

Generate a deterministic, CycloneDX-aligned AI BOM from point-in-time AI asset inventory snapshots. Supports normalized multi-cloud inventory documents plus provider-shaped snapshots for AWS SageMaker and Bedrock, Google Vertex AI, and Azure Machine Learning. Use when the user mentions AI BOM, model inventory, AI asset discovery, evidence collection for AI systems, PCI / SOC 2 technical evidence, or wants a portable bill of materials for models, endpoints, datasets, vector stores, runtimes, and guardrails. Do NOT use on raw cloud audit logs or OCSF findings — this skill expects asset inventory, not events. Do NOT use as a live monitor or to claim compliance by itself — it produces a point-in-time inventory artifact and never mutates cloud state.

Performs static analysis of Windows PE (Portable Executable) malware samples using PEStudio to examine file headers, imports, strings, resources, and indicators without executing the binary. Identifies suspicious characteristics including packing, anti-analysis techniques, and malicious imports. Activates for requests involving static malware analysis, PE file inspection, Windows executable analysis, or pre-execution malware triage.

Frida 17 JavaScript API compatibility checker and fixer. Use when writing, reviewing, or fixing Frida scripts, especially when migrating from older Frida versions. Detects deprecated APIs removed in Frida 17 (May 2025) and provides correct replacements. Covers Module, Memory, Process APIs and common naming conflicts.

Create distinctive, production-grade frontend interfaces with high design quality. Use this skill when the user asks to build web components, pages, or applications. Generates creative, polished code that avoids generic AI aesthetics.

Master product strategy, market analysis, competitive positioning, and long-term product vision. Define business models and craft go-to-market strategies that drive success.

Navigate through plant intelligence and living forest consciousness. Deploy ONLY when nature consciousness, ecological wisdom, or plant medicine context emerges naturally. Deep respect for Indigenous knowledge holders required. NOT for recreational or appropriative use.

Deploy systematic liberation technology - Gunasthanas, Kevala Jnana, Tirthankara navigation active.

Guide spec-driven development workflow (Requirements → Design → Tasks → Implementation) with approval gates between phases. Use when user wants structured feature planning or says "use spec-driven" or "follow the spec process".

Convert UI screenshots into working HTML/CSS/React/Vue code. Detects design patterns, components, and generates responsive layouts. Use this when users provide screenshots of websites, apps, or UI designs and want code implementation.

Generate an image of a whimsical, fairytale-inspired floral · arch with pastel-colored flowers and delicate ivy.

Airtable integration. Manage project management data, records, and workflows. Use when the user wants to interact with Airtable data.

自动化 Web 任务执行服务。

Discover and control Apple media/AirPlay devices (HomePod, Apple TV, AirPlay speakers) from macOS. Use when you want to scan for AirPlay devices, map names→IPs/IDs, pair/connect, and control playback/volume using pyatv (atvremote) and Airfoil.

使用百度地图Web服务API进行地点搜索、天气查询、路线规划和地理编码。

Generate descriptive git branch names from plain English. Use when you need a branch name that follows conventions.

Manage Bring! shopping lists via the unofficial bring-shopping Node.js library using email/password login. Use for listing lists, reading items, adding/removing items, and checking/unchecking items when API-style access is acceptable.

Multi-channel follow-up campaign orchestrator for ShapeScale sales. Schedules and executes SMS + Email sequences with CRM logging and auto-termination on replies. Use when following up with demo leads or managing outreach campaigns.

Control smart home devices via Homebridge Config UI X REST API. Use to list, turn on/off, adjust brightness, color, or temperature of HomeKit-compatible accessories. Supports lights, switches, thermostats, fans, and other Homebridge-managed devices.

高精度文档解析技能，从 PDF、图片、Word 文档中提取结构化数据。

Real-time OCR and data extraction API by Veryfi (https://veryfi.com). Extract structured data from receipts, invoices, bank statements, W-9s, purchase orders, bills of lading, and any other document. Use when you need to OCR documents, extract fields, parse receipts/invoices, bank statements, classify documents, detect fraud, or get raw OCR text from any document.