发现 Skills

Create new Azure Database for PostgreSQL Flexible Server instances and configure passwordless authentication with Microsoft Entra ID. Set up developer access, managed identities for apps, group-based permissions, and migrate from password-based to Entra ID authentication. Trigger phrases include "passwordless for postgres", "entra id postgres", "azure ad postgres authentication", "postgres managed identity", "migrate postgres to passwordless".

Token-efficient tracking for AI orchestration. CLI-first for status updates (~50 tokens), agent fallback for complex ops (~1KB). Use when: updating task status, querying blockers, creating progress files, validating phases.

Manage SkillMeat and Claude Code environments through natural language. Use this skill for artifact discovery/deployment/management, bundles, MCP and context entity operations, and Memory & Context workflows. This skill uses progressive disclosure: load only the specific workflow or reference docs needed for the current user request.

Julia development guidelines covering multiple dispatch, the type system, performance optimization, and scientific computing best practices.

Frontend development knowledge: React, Tailwind, state management, mobile UI, etc.

Knowledge about Marp (slide generation). Covers Marp Core, themes, iOS support, PDF generation, CLI, and related topics.

Example v2 skill demonstrating the agentskills.io standard with subdirectories

Browser automation using Playwright MCP. Navigate websites, fill out forms, click elements, take screenshots, and extract data. Use this when tasks require web browsing, form submission, web scraping, UI testing, or any browser interaction. Not for simple static content fetches (use curl/wget instead).

Use when the task requires automating a real browser from the terminal (navigation, form filling, snapshots, screenshots, data extraction, UI-flow debugging) via `playwright-cli` or the bundled wrapper script.

Generate structured API documentation from PRD or requirement inputs. Use when defining endpoints for backend and frontend integration.

Best practices for Remotion - Video creation in React

Package entire code repositories into single AI-friendly files using Repomix. Capabilities include packing codebases with customizable include/exclude patterns, generating multiple output formats (XML, Markdown, plain text), preserving file structure and context, optimizing for AI consumption with token counting, filtering by file types and directories, and adding custom headers and summaries. Use when packaging codebases for AI analysis, creating repository snapshots for LLM context, analyzing third-party libraries, preparing for security audits, generating documentation context, or evaluating unfamiliar codebases.

use when adding API to this project that exists in numpy, especially if the user mentions a stream in the numpy-api-parity plan.

Tests APIs for excessive data exposure where endpoints return more data than the client application needs, relying on the frontend to filter sensitive fields. The tester intercepts API responses and analyzes them for leaked PII, internal identifiers, debug information, or sensitive business data that the UI does not display but the API transmits. This maps to OWASP API3:2023 Broken Object Property Level Authorization. Activates for requests involving API data leakage testing, excessive data exposure, response filtering bypass, or API over-fetching.

Design and implement Privileged Access Workstations (PAWs) with device hardening, just-in-time (JIT) access, and integration with CyberArk or BeyondTrust for secure administrative operations.

Detects and analyzes fileless malware that operates entirely in memory using PowerShell, WMI, .NET reflection, registry-resident payloads, and living-off-the-land binaries (LOLBins) without writing traditional executable files to disk. Activates for requests involving fileless threat detection, in-memory malware investigation, LOLBin abuse analysis, or WMI persistence examination.

Perform Kerberoasting attacks using Impacket's GetUserSPNs to extract and crack Kerberos TGS tickets for Active Directory service accounts.

Performs firmware image extraction and analysis using binwalk to identify embedded filesystems, compressed archives, bootloaders, kernel images, and cryptographic material. Covers entropy analysis for detecting encrypted or compressed regions, recursive extraction of nested archives, SquashFS/CramFS/JFFS2 filesystem mounting, and string analysis for credential and configuration discovery. Activates for requests involving firmware reverse engineering, IoT device analysis, embedded system security assessment, or router/camera firmware extraction.

Nikto is an open-source web server and web application scanner that tests against over 7,000 potentially dangerous files/programs, checks for outdated versions of over 1,250 servers, and identifies ve

Tenable Nessus is the industry-leading vulnerability scanner used to identify security weaknesses across network infrastructure including servers, workstations, network devices, and operating systems.

Create FilamentPHP v4 tables with columns, filters, sorting, search, and bulk actions

Create FilamentPHP v4 dashboard widgets - stats overviews, charts, and custom components

GitHub PR CRUD -- create, review, update, merge, close with label/reviewer/milestone suggestions and Jira linking

Build, refactor, or troubleshoot Telegram bots using aiogram v3. Use when working with aiogram routers/handlers/filters, Dispatcher lifecycle, update delivery (long polling or webhook), FSM, middleware/DI, error handling, or aiogram utilities like keyboards, formatting, and i18n.