发现 Skills

Deploy code to Railway using "railway up". Use when user wants to push code, says "railway up", "deploy", "ship", or "push". For initial setup or creating services, use railway-new skill. For Docker images, use railway-environment skill.

Bayesian modeling with PyMC. Build hierarchical models, MCMC (NUTS), variational inference, LOO/WAIC comparison, posterior checks, for probabilistic programming and inference.

When the user wants to optimize post-signup onboarding, user activation, first-run experience, or time-to-value. Also use when the user mentions "onboarding flow," "activation rate," "user activation," "first-run experience," "empty states," "onboarding checklist," "aha moment," or "new user experience." For signup/registration optimization, see signup-flow-cro. For ongoing email sequences, see email-sequence.

Use when crafting positioning, differentiating from competitors, writing marketing narratives, or diagnosing why messaging isn't resonating.

Install and build production-ready charts, dashboards, and data widgets using shadcn/ui chart components and Recharts. Use when user asks to "add charts," "build a dashboard," "data visualization," "shadcn charts," "recharts," "KPI widgets," or "analytics UI." For general UI design, see frontend-design.

Adam Grant's framework for intellectual humility, rethinking, and updating beliefs.

Provides expert support on application security, cybersecurity, and security auditing. Covers OWASP Top 10, SQL injection, XSS, CSRF, authentication bypass, API security, dependency vulnerabilities, secrets management, and penetration testing. Use this agent when the user mentions concepts such as security, vulnerability, OWASP, pentest, CVE, SQL injection, XSS, hack, exploit, security flaw, auth bypass, or secure code.

An expert agent that performs architectural design and technical planning for software projects. It decides on tech stack selection, file/folder structure, system architecture, module design, API design, and project scaffolding. Use this agent when the user refers to concepts like new project, architecture, tech stack, project structure, file structure, boilerplate, scaffold, system design, monorepo, or microservice.

Write the PRD before any code. Spec before code.

This skill should be used when creating Git commits to ensure they follow the Conventional Commits specification. It provides guidance on commit message structure, types, scopes, and best practices for writing clear, consistent, and automated-friendly commit messages. Use when committing code changes or reviewing commit history.

Time and timezone utilities for getting current time and converting between timezones. Use when: (1) Getting current time in any timezone, (2) Converting time between different timezones, (3) Working with IANA timezone names, (4) Scheduling across timezones, (5) Time-sensitive operations. Triggers: "what time is it", "current time", "convert time", "timezone", "time in [city]".

Query PubChem via PUG-REST API/PubChemPy (110M+ compounds). Search by name/CID/SMILES, retrieve properties, similarity/substructure searches, bioactivity, for cheminformatics.

Comprehensive PDF manipulation — merge, split, rotate, extract pages, add watermarks, compress, and encrypt PDFs programmatically.

Git commit and pull request summary workflow using Conventional Commits and evidence from the current diff.

Optional per-user Notion workspace for storing and organizing research outputs. Only created when user explicitly wants it. Designs database structure based on user preferences. Triggered by "save to Notion", "create knowledge base", "organize my research", "Notion setup".

Update direct Go module dependencies one by one, validating each bump with tests and linter, committing individually, and producing a summary table for a PR description

Complete browser automation with Playwright. Auto-detects dev servers, writes clean test scripts to /tmp. Test pages, fill forms, take screenshots, check responsive design, validate UX, test login flows, check links, automate any browser task. Use when user wants to test websites, automate browser interactions, validate web functionality, or perform any browser-based testing.

Use when subscribing to game events and tracking tokens in dojo.js. Triggers: subscribe events, game events, token balance, event query, achievements, event subscription, onTokenBalanceUpdated, activity tracking

Update @dojoengine/grpc proto files from Torii repository

Expert firmware analyst specializing in embedded systems, IoT security, and hardware reverse engineering. Masters firmware extraction, analysis, and vulnerability research for routers, IoT devices, automotive systems, and industrial controllers. Use proactively for firmware security audits, IoT penetration testing, or embedded systems research.

MuXi BLAS linear algebra library providing GPU-accelerated Basic Linear Algebra Subprograms (BLAS) implementation with support for Level-1/2/3 routines. It is a core mathematics library for AI and HPC applications.

Conduct security code reviews. Use when reviewing code for vulnerabilities, assessing security posture, or auditing applications. Covers security review checklist.

Pre-engagement reconnaissance workflow using HackerOne MCP tools to enumerate program scope, study prior disclosures, and identify high-value targets before active testing.

Run linting tools (ruff, black, mypy) and fix placeholder/TODO statements