发现 Skills

飞书即时通讯：收发消息和管理群聊。发送和回复消息、搜索聊天记录、管理群聊成员、上传下载图片和文件（支持大文件分片下载）、管理表情回复。当用户需要发消息、查看或搜索聊天记录、下载聊天中的文件、查看群成员、管理标记数据时使用。

Library of realistic adversarial attack vectors and anti-patterns to avoid. Contains examples of valid attacks and subtle gaming patterns to reject.

For hot loop optimization: repeated formula evaluation, regex patterns, expression compilation. Transform string to callable once, call many times.

For heterogeneous data: pattern matching on type/structure, interpreter eval loops, handling different expression types.

For result reporting: tabular output, aligned columns, statistical summaries, human-readable reports.

For two-sided matching: hospital-resident, stable marriage, college admissions. Gale-Shapley algorithm for stable matching with preferences.

Analyze completed parallel workflows for lessons learned. Use when: reviewing workflow execution quality, identifying process improvements, evaluating skill effectiveness, post-mortem analysis after parallel work, assessing planning accuracy. Triggers: retrospective, review, post-mortem, lessons learned, workflow analysis, evaluate parallel, workflow quality, planning assessment.

For comparison: display before/after, multiple solutions, diffs side by side for visual comparison.

For 2D grid problems: mazes, board games, tile maps, pixel grids, coordinate systems, cellular automata, flood fill. Uses dict-based Grid class pattern.

For search with undo: explicit decision stack, backtracking when paths fail, depth-first exploration with state restoration.

For data structure validation: test lengths, relationships, constraints that must hold, verify setup is correct.

Systematic framework for evaluating scholarly and research work based on the ScholarEval methodology. This skill should be used when assessing research papers, evaluating literature reviews, scoring research methodologies, analyzing scientific writing quality, or applying structured evaluation criteria to academic work. Provides comprehensive assessment across multiple dimensions including problem formulation, literature review, methodology, data collection, analysis, results interpretation, and scholarly writing quality.

Node.js/TypeScript conventions and quality gates

Audits repository security by analyzing current code and commit history for sensitive information leaks. Detects API keys, passwords, and credentials. Use for "security check", "security audit", and "sensitive information scan" requests.

A Spring Boot 4 data-layer implementation tailored for Domain-Driven Design (DDD). Use this when implementing JPA or JDBC aggregates, Spring Data repositories, transactional service boundaries, projections, or entity auditing. It includes support for aggregate roots via AbstractAggregateRoot, mapping and persistence of value objects, and use of EntityGraph or fetch-joins to prevent N+1 select issues. Also covers Spring Boot 4 specifics such as JSpecify null-safety annotations and AOT-compatible repository patterns for native-image readiness. For DDD concepts and design decisions, see the domain-driven-design skill.

Spring Modulith 2.0 implementation for bounded contexts in Spring Boot 4. Use it when structuring application modules, implementing @ApplicationModuleListener for event-driven communication, testing with the Scenario API, enforcing module boundaries, or externalizing events to Kafka/AMQP. For decisions about modular monolith architecture, see the domain-driven-design skill.

Log in to the ChatGPT web interface for a specific account, complete OpenAI authentication and OTP if required, and save session.json and storage_state.json in that account directory for later automation. Use this when ChatGPT Pro delegation needs a fresh session, when asked to log in to a ChatGPT account, or when saving api/auth/session locally after a browser login.

Research a topic from the last 30 days on Reddit + X + Web, become an expert, and write copy-paste-ready prompts for the user's target tool.

Derive security requirements from threat models and business context. Use when translating threats into actionable requirements, creating security user stories, or building security test cases.

Git branch strategy, commit conventions, and PR process for this project

Audit inline complexity and recommend variable extraction. Produces a report with flattening suggestions for nested expressions.

Generate a structural overview and dependency diagram of the codebase. Use when the user wants to understand codebase structure, visualize architecture, or says "/codebase-map".

A test skill to verify all plugin tools work correctly - use_skill, read_skill_file, run_skill_script, find_skills

Comprehensive PDF manipulation toolkit for extracting text and tables, creating new PDFs, merging/splitting documents, and handling forms. When Claude needs to fill in a PDF form or programmatically process, generate, or analyze PDF documents at scale.