发现 Skills

Help users understand and respond to competition. Use when someone is positioning against competitors, evaluating market threats, running competitive war games, or deciding how much to focus on competitors versus customers.

Help users understand and build design engineering capabilities. Use when someone is creating a design engineering function, hiring design engineers, or bridging the gap between design and engineering teams.

Help users build relationships with mentors and sponsors for career growth. Use when someone is looking for career guidance, wants to find a mentor, needs an advocate at work, is trying to build their professional network, or asking how to get advice from senior leaders.

Help users build and manage marketplace liquidity. Use when someone is working on a marketplace business, struggling with supply/demand balance, trying to improve match rates, or asking how to reach critical mass in a two-sided market.

Help users develop product taste and intuition. Use when someone wants to improve their product judgment, struggles to evaluate design quality, needs to make decisions without complete data, or wants to build better product instincts.

Help users write effective specs and design documents. Use when someone is creating technical specs, feature specs, design docs, or trying to communicate product requirements to engineering and design teams.

Go programming expert for goroutines, channels, interfaces, modules, and concurrency patterns

Draft, review, and update Software Design Documents (SDDs) using the IEEE 1016-2009 structure with pragmatic compliance checks and output-structure validation. Use this whenever a user asks to write an SDD, assess SDD quality or completeness, align design documents to IEEE 1016, map PRD requirements to design, produce architecture/interface/data design sections, generate a gap report with remediation actions, perform SDD review-only compliance analysis, or update an SDD after architecture changes.

Capture a writer's voice DNA through a collaborative interview and sample analysis. Use when someone wants to document their writing voice for use with a ghostwriter or writing-assistant skill. Produces a Voice DNA Document containing patterns, anti-patterns, and actionable guidance. Handles one register/mode per session and supports iterative refinement over time.

Repeatable process for an application security code review that produces prioritized findings and remediation guidance.

Lightweight, repeatable threat modeling for a feature or service with prioritized mitigations.

Redis patterns including caching strategies, pub/sub, streams for event processing, Lua scripts, and data structures

Generates StoreKit 2 subscription paywall with modern SwiftUI views. Use when user wants to add subscriptions, paywall, or in-app purchases.

Platform-agnostic skills including skill creation templates and best practices. Use when creating new skills or improving existing ones.

Java Web 源码鉴权机制审计工具。从源码中识别所有鉴权实现并分析安全风险。适用于：(1) 识别鉴权框架和实现方式，(2) 发现鉴权绕过漏洞，(3) 分析越权访问风险，(4) 审计权限校验逻辑。支持 Shiro、Spring Security、JWT、Filter/Interceptor、自定义鉴权等。**支持反编译 .class/.jar 文件提取鉴权逻辑**。结合 java-route-mapper 使用可实现完整的路由+鉴权审计。

SPARC development workflow (Specification, Pseudocode, Architecture, Refinement, Completion). Use when: new features, complex implementations, architectural changes. Skip when: simple fixes, documentation, configuration.

Simplify and refine code for clarity, consistency, and maintainability while preserving exact functionality. Use when asked to simplify, refactor for readability, clean up, or standardize code, especially in recently modified sections.

MkDocs example admonition syntax. Use when inserting code examples or worked demonstrations in MkDocs documentation.

When python, flask, or jinja are being written or edited. Use this skill any time you are writing, editing, refactoring, or reviewing Python (.py), Flask routes/blueprints, or Jinja2 templates (.html with Jinja). Trigger even if the user only mentions a .py file, a Flask endpoint, a template, or asks about Python patterns, imports, error handling, or structure.

视频脚本创作助手。帮助用户撰写视频脚本、设计分镜、生成字幕。Triggers: 视频脚本, 短视频, 分镜, video script, storyboard, 脚本, 字幕, subtitle, 视频文案, 口播, 拍摄脚本, 抖音, TikTok, B站, YouTube, Bilibili

Structured logging with proper levels, context, PII handling, centralized aggregation. Use for application logging, log management integration, distributed tracing, or encountering log bloat, PII exposure, missing context errors.

TanStack Router provides type-safe, file-based routing for React. Use it for single-page applications (SPAs), TanStack Query integration, Cloudflare Workers deployments, or when troubleshooting devtools, type-safety, loader, or Vite bundling errors.

A clear description of what this skill does and when to use it

Deep architectural context building for security audits. Use when conducting security reviews, building codebase understanding, mapping trust boundaries, or preparing for vulnerability analysis. Inspired by Trail of Bits methodology.