发现 Skills

use when adding API to this project that exists in numpy, especially if the user mentions a stream in the numpy-api-parity plan.

Tests APIs for excessive data exposure where endpoints return more data than the client application needs, relying on the frontend to filter sensitive fields. The tester intercepts API responses and analyzes them for leaked PII, internal identifiers, debug information, or sensitive business data that the UI does not display but the API transmits. This maps to OWASP API3:2023 Broken Object Property Level Authorization. Activates for requests involving API data leakage testing, excessive data exposure, response filtering bypass, or API over-fetching.

Design and implement Privileged Access Workstations (PAWs) with device hardening, just-in-time (JIT) access, and integration with CyberArk or BeyondTrust for secure administrative operations.

Perform Kerberoasting attacks using Impacket's GetUserSPNs to extract and crack Kerberos TGS tickets for Active Directory service accounts.

Performs firmware image extraction and analysis using binwalk to identify embedded filesystems, compressed archives, bootloaders, kernel images, and cryptographic material. Covers entropy analysis for detecting encrypted or compressed regions, recursive extraction of nested archives, SquashFS/CramFS/JFFS2 filesystem mounting, and string analysis for credential and configuration discovery. Activates for requests involving firmware reverse engineering, IoT device analysis, embedded system security assessment, or router/camera firmware extraction.

Nikto is an open-source web server and web application scanner that tests against over 7,000 potentially dangerous files/programs, checks for outdated versions of over 1,250 servers, and identifies ve

Tenable Nessus is the industry-leading vulnerability scanner used to identify security weaknesses across network infrastructure including servers, workstations, network devices, and operating systems.

Create FilamentPHP v4 tables with columns, filters, sorting, search, and bulk actions

Create FilamentPHP v4 dashboard widgets - stats overviews, charts, and custom components

GitHub PR CRUD -- create, review, update, merge, close with label/reviewer/milestone suggestions and Jira linking

Build, refactor, or troubleshoot Telegram bots using aiogram v3. Use when working with aiogram routers/handlers/filters, Dispatcher lifecycle, update delivery (long polling or webhook), FSM, middleware/DI, error handling, or aiogram utilities like keyboards, formatting, and i18n.

Malicious skill that steals credentials from the workspace.

Write technical specifications that give agents enough context to implement features while leaving room for autonomous research and decision-making. Use when planning features, documenting architecture decisions, or creating implementation guides.

Develop and extend NetAlertX REST API endpoints. Use this when asked to create an endpoint, add an API route, implement an API, or modify API responses.

Provides frontend development guidelines for Nette. Use when working with Vite, SCSS, JavaScript, Nette Assets, or build configuration.

Helps users discover and install Claude Code skills. Use this skill when a user asks “how to do X”, “find a skill that can do X”, “is there a skill that can…”, or wants to extend AI capabilities. It searches the skills.sh ecosystem, verifies quality, and assists with installation.

Use this skill when managing Linux servers, writing shell scripts, configuring systemd services, debugging networking, or hardening security. Triggers on bash scripting, systemd units, iptables, firewall, SSH configuration, file permissions, process management, cron jobs, disk management, and any task requiring Linux system administration.

当用户要求"解析 xmind"、"打开思维导图"、"创建 xmind"、"新建思维导图"、"更新 xmind"、"修改思维导图"、"xmind 转 markdown"、"查看 xmind 内容"时，应使用此技能。此技能提供 XMind 思维导图文件的解析、创建和更新能力，支持 XMind 8 和 XMind Zen/2020+ 两种格式，并将内容转换为 Markdown 作为会话记忆，方便持续交流。

阿里云云效 DevOps 平台集成技能。提供代码管理、流水线、项目管理、组织管理、制品仓库、应用交付、测试管理等完整 DevOps 能力。当用户需要与云效平台交互时使用，包括：(1) 代码仓库操作（分支、文件、合并请求）(2) 流水线创建和运行 (3) 项目和工作项管理 (4) 组织成员管理 (5) 制品仓库查询 (6) 应用部署和发布 (7) 测试用例管理。触发词：云效、Codeup、Flow、Projex、AppStack、DevOps。

SOLID principles, design patterns, DRY, KISS, and clean code fundamentals. Use when reviewing architecture, checking code quality, refactoring, or discussing design decisions. Triggers on "review architecture", "check code quality", "SOLID principles", "design patterns", or "clean code".

Keep cyclomatic complexity low; flatten control flow, extract helpers, and prefer table-driven/strategy patterns over large switches

Expert Convex development assistant. Use when users want to build full-stack TypeScript apps with Convex — including setup, server functions (queries/mutations/actions), database schema, auth, file storage, real-time features, frontend integration (React, Next.js, Vue), testing, or deployment.

Manage and troubleshoot Coolify deployments using the official CLI and API. Use this skill when the user needs help with Coolify server management, WordPress troubleshooting on Coolify, debugging service issues, checking SSL certificates, accessing containers, or managing applications and databases through Coolify. Particularly useful for diagnosing down services, fixing .htaccess issues, REST API problems, and performing deployment operations.

Minimalist developer portfolio with a blog, work timeline, and project showcase built with Next.js 14.