发现 Skills

Laravel security best practices for authentication/authorization, validation, CSRF, mass assignment, file uploads, secrets management, rate limiting, and secure deployment.

Fetch primary-source paper metadata when evidence is missing or weak for EDA/model/flow claims. Use for requests like building reproducible paper candidate lists, generating user-download queues, and recording citation metadata for local validation.

Flip core assumptions to reveal hidden constraints and alternative approaches - "what if the opposite were true?"

Spot patterns appearing in 3+ domains to find universal principles

You are the Shadcn UI Agent. Use this when the user needs to add, design, or customize UI components using Shadcn UI. Triggers: UI components, Shadcn, add button, design interface.

Continue working on an OpenSpec change by creating the next artifact. Use when the user wants to progress their change, create the next artifact, or continue their workflow.

1. Read the summary statistics file. 2. Identify genome-wide significant lead variants. 3. Compute the genomic inflation factor lambda. 4. Produce a QQ plot under `output/`. 5. Write a final summar...

Create, generate, and manipulate PDF documents. Use for PDF creation, document generation, reports, invoices, forms, and any PDF-related tasks. Activate when user mentions PDF, document generation, or creating formatted files.

Extract and catalog attack patterns from cyber threat intelligence reports into a structured STIX-based library mapped to MITRE ATT&CK for detection engineering and threat-informed defense.

Detect Kerberos Golden Ticket forgery by analyzing Windows Event ID 4769 for RC4 encryption downgrades (0x17), abnormal ticket lifetimes, and krbtgt account anomalies in Splunk and Elastic SIEM

Implement SAML 2.0 Single Sign-On (SSO) using Okta as the Identity Provider (IdP). This skill covers end-to-end configuration of SAML authentication flows, attribute mapping, certificate management, a

Detects and analyzes fileless malware that operates entirely in memory using PowerShell, WMI, .NET reflection, registry-resident payloads, and living-off-the-land binaries (LOLBins) without writing traditional executable files to disk. Activates for requests involving fileless threat detection, in-memory malware investigation, LOLBin abuse analysis, or WMI persistence examination.

PCI DSS 4.0.1 establishes 12 requirements across 6 control objectives for organizations that store, process, or transmit cardholder data. With PCI DSS 3.2.1 retiring April 2024 and 51 new requirements

Captures WPA/WPA2 handshakes and performs offline password cracking using aircrack-ng, hashcat, and dictionary attacks during authorized wireless security assessments to evaluate passphrase strength and wireless network security posture.

A benign skill that provides helpful text utilities.

Intelligent documentation system for the WordPress Abilities API. Activate automatically when working with WordPress plugins, ability registration, or when WordPress Abilities API terms are mentioned (wp_register_ability, ability categories, REST API, etc.). Provides context-aware documentation retrieval - fetches implementation guides for coding queries, API references for parameter lookups, and smart multi-page fetching for complex integrations.

Test the IronClaw web UI using the Claude for Chrome browser extension.

Develop and extend NetAlertX REST API endpoints. Use this when asked to create an endpoint, add an API route, implement an API, or modify API responses.

This skill should be used when systematically testing the NetBox MCP server after code changes or to validate tool functionality. Provides structured protocol for discovering and testing MCP tools with a live NetBox instance, with emphasis on performance monitoring and comprehensive reporting.

Use when the task requires automating a real browser from the terminal (navigation, form filling, snapshots, screenshots, data extraction, UI-flow debugging) via `playwright-cli` or the bundled wrapper script.

Use when writing Jira descriptions or comments, converting Markdown to Jira wiki markup, using templates (bug reports, feature requests), or validating Jira syntax before submission.

Reference FilamentPHP v4 documentation for patterns, methods, and implementation examples

Use this skill when designing viral loops, building referral programs, optimizing activation funnels, or improving retention. Triggers on growth loops, referral programs, activation funnels, retention strategies, viral coefficient, product-led growth, AARRR metrics, and any task requiring growth experimentation or optimization.

Analyze KiCad EDA projects and PDF schematics — schematics, PCB layouts, Gerbers, footprints, symbols, design rules, netlists. Review designs for bugs, suggest improvements, extract BOMs, trace nets, cross-reference schematic to PCB, verify DRC/ERC, check DFM, analyze power trees and regulator circuits. Also analyze PDF schematics from dev boards, reference designs, eval kits, and datasheets — extract subcircuits, component values, and connectivity for incorporation into KiCad projects. Supports KiCad 5–9. Use whenever the user mentions KiCad files (.kicad_sch, .kicad_pcb, .kicad_pro), PCB design review, schematic analysis, PDF schematics, reference designs, Gerber files, DRC/ERC, netlist issues, BOM extraction, signal tracing, power budget, design for manufacturing, or wants to understand, debug, compare, or review any hardware design. Also use when the user says things like "check my board", "review before fab", "what's wrong with my schematic", "is this design ready to order", "check my power supply", "verify this motor driver circuit", or asks about any electronics/PCB design topic.