发现 Skills

Implement CQRS pattern with MediatR for .NET applications

Diagnose and fix Kubernetes deployment failures, especially ImagePullBackOff, CrashLoopBackOff, and architecture mismatches. Battle-tested from a 4-hour AKS debugging session with 10+ failure modes resolved.

Implements real-time streaming UI patterns for ChatKit applications. This skill should be used when adding response lifecycle management, progress indicators, client effects, and thread state synchronization. Covers onResponseStart/End, onEffect, ProgressUpdateEvent, and thread lifecycle events.

Design database schemas — tables, columns, types, constraints, indexes, and

Edit SOPS-encrypted secrets files from any machine. Use when modifying secrets.yaml files.

Python development best practices and patterns

Develop user interfaces following the TERAS Brand Manual v1.0. Use when the user mentions TERAS, Teras Capital, fintech/private capital products, or any UI that must convey technical sobriety, professional rigor, and strong visual impact using the Teras Black/Red and Teras Grey color system.

Turn Notion specs into implementation plans, tasks, and progress tracking; use when implementing PRDs/feature specs and creating Notion plans + tasks from them.

Molt Motion Pictures platform skill. Create AI-generated Limited Series content, manage studios, submit scripts for agent voting, and earn 1% of tips. Wallet-based auth, x402 payments.

Updates the Monarch Initiative publications page with latest data from Google Scholar. Use this when the user asks to update publications, refresh citation metrics, or add new papers to the publications page.

Converted from the Claude plugin command 'query' (Pinecone). Use when the user wants to run this slash-command workflow. Query a user's index with Pinecone MCP. Accepts an index name, an input query, and optionally a top-k value.

Analyze and optimize tweets for maximum reach using Twitter's open-source algorithm insights. Rewrite and edit user tweets to improve engagement and visibility based on how the recommendation system ranks content.

Pragmatic Rust design guidelines from Microsoft. Use when writing, reviewing, or refactoring Rust code. Covers universal patterns, libraries (interop, UX, resilience, building), applications, FFI, safety, performance, documentation, and AI-friendly design. Triggers include "Rust best practices", "Rust code review", "idiomatic Rust", "Rust API design", "Rust guidelines", or any Rust development task.

../../SKILL.md

Configure secure, high-performance connectivity between on-premises infrastructure and cloud platforms using VPN and dedicated connections. Use when building hybrid cloud architectures, connecting data centers to cloud, or implementing secure cross-premises networking.

Create production-ready Kubernetes manifests for Deployments, Services, ConfigMaps, and Secrets following best practices and security standards. Use when generating Kubernetes YAML manifests, creating K8s resources, or implementing production-grade Kubernetes configurations.

Python design patterns including KISS, Separation of Concerns, Single Responsibility, and composition over inheritance. Use when making architecture decisions, refactoring code structure, or evaluating when abstractions are appropriate.

Package entire code repositories into single AI-friendly files using Repomix. Capabilities include packing codebases with customizable include/exclude patterns, generating multiple output formats (XML, Markdown, plain text), preserving file structure and context, optimizing for AI consumption with token counting, filtering by file types and directories, and adding custom headers and summaries. Use when packaging codebases for AI analysis, creating repository snapshots for LLM context, analyzing third-party libraries, preparing for security audits, generating documentation context, or evaluating unfamiliar codebases.

Analyze binary exploitation techniques including buffer overflows and ROP chains using pwntools Python library. Covers checksec analysis, gadget discovery with ROPgadget, and exploit development for CTF and authorized security assessments.

Detects and analyzes Bluetooth Low Energy (BLE) security attacks including sniffing, replay attacks, GATT enumeration abuse, and Man-in-the-Middle interception. Uses Ubertooth One and nRF52840 sniffers for packet capture, the bleak Python library for GATT service enumeration, and crackle for BLE encryption cracking. Use when assessing IoT device BLE security, monitoring for BLE-based attacks on wireless infrastructure, or performing authorized BLE penetration testing. Activates for requests involving BLE security assessment, Ubertooth sniffing, GATT enumeration, or BLE replay detection.

Red team engagement planning is the foundational phase that defines scope, objectives, rules of engagement (ROE), threat model selection, and operational timelines before any offensive testing begins.

Automate OSINT collection using SpiderFoot REST API and CLI for target profiling, module-based reconnaissance, and structured result analysis across 200+ data sources

Performs systematic security testing of web applications following the OWASP Web Security Testing Guide (WSTG) methodology to identify vulnerabilities in authentication, authorization, input validation, session management, and business logic. The tester uses Burp Suite as the primary interception proxy alongside manual testing techniques to find flaws that automated scanners miss. Activates for requests involving web app pentest, OWASP testing, application security assessment, or web vulnerability testing.

Identify and test open redirect vulnerabilities in web applications by analyzing URL redirection parameters, bypass techniques, and exploitation chains for phishing and token theft.