发现 Skills

Flask/Werkzeug-specific pitfalls to check for in addition to the general data-flow analysis. Each pattern lists what to grep for, why it is dangerous, the safe equivalent, and severity guidance.

Configure Better Auth for JWT-based authentication in LearnFlow with student and teacher roles

Design multi-agent architectures for complex tasks. Use when single-agent context limits are exceeded, when tasks decompose naturally into subtasks, or when specializing agents improves quality.

Bundled agents, commands, hooks, and settings that users install via `aspens add` and `aspens doc init` into their .claude/ directories

Expert guidance for FastAPI backend development with RESTful API best practices. Use when building FastAPI applications, creating REST endpoints, implementing CRUD operations, setting up Pydantic models, configuring CORS/middleware, or integrating with databases. Triggers include "FastAPI", "REST API", "backend", "endpoint", "Pydantic", "CORS", "middleware", "async API", or requests to build backend servers with FastAPI.

Scaffold FastAPI + Dapr microservices with OpenAI Agents SDK integration. Creates service structure, Dapr component configs, agent definitions, and Dockerfiles. Triggers on: "scaffold dapr service", "fastapi dapr", "dapr agent", "create microservice with dapr", "dapr pub/sub service".

Read all tasks in Inbox, classify each by priority and source, update frontmatter, and move them to Needs_Action for processing.

Expert prompt engineering using Claude's official best practices. Craft, analyze, optimize, and debug prompts for Claude models (Opus 4.6, Sonnet 4.5, Haiku 4.5). This skill should be used when users ask to write prompts, improve prompts, debug prompt issues, optimize system prompts, create agent instructions, or apply Claude prompting best practices. Triggers on: "write a prompt", "improve this prompt", "prompt engineering", "system prompt", "optimize prompt", "debug prompt".

How the Faebryk component library is structured, how _F.py is generated, and the conventions/invariants for adding new library modules. Use when adding or modifying library components, traits, or module definitions.

React and Next.js performance optimization guidelines from Vercel Engineering. Use when writing, reviewing, or refactoring React/Next.js components, data fetching, or bundle optimization.

Manage agent routing rules: create per-chat or per-user routes to specific providers/agents, test route resolution, and view routing metrics.

ESP32 firmware development for the AutomationOne IoT framework. Use for: C++, PlatformIO, adding sensors, creating actuators, implementing drivers, extending services, adding NVS keys, extending MQTT, defining error codes, GPIO logic, config structure, finding patterns, extending managers, safety controller, health monitor, error tracker, I2C protocol, OneWire bus, PWM controller, Wokwi simulation. Do NOT use for: server-side logic, Python code, log analysis. Boundary: esp32-debug for log analysis, server-dev for server code.

Use when user asks to "deep review the code", "thorough code review", "multi-pass review", or when orchestrating the Phase 9 review loop. Provides review pass definitions (code quality, security, performance, test coverage), signal detection patterns, and iteration algorithms.

Edit PDFs with natural-language instructions using the nano-pdf CLI. Modify text, fix typos, update titles, and make content changes to specific pages without manual editing.

Use when you have a written implementation plan to execute

Use when reviewing code changes, auditing new features, cleaning up PRs, or when a user says "find dead code", "find unused code", "check for unnecessary additions", or "what can I remove".

Captures learnings from the current session and updates skill files. Use when ending a session, after solving problems, debugging issues, or when the user says "retrospective", "capture learnings", or "what did we learn".

Extract text from PDFs and scanned documents. Use web_extract for remote URLs, pymupdf for local text-based PDFs, marker-pdf for OCR/scanned docs. For DOCX use python-docx, for PPTX see the powerpoint skill.

UI/UX design intelligence untuk web dan mobile.包含50+ styles, 161 color palettes, 57 font pairings, 161 product types, 99 UX guidelines, dan 25 chart types across 10 stacks (React, Next.js, Vue, Svelte, SwiftUI, React Native, Flutter, Tailwind, shadcn/ui, HTML/CSS). Trigger: plan, build, create, design, implement, review, fix, improve, optimize, enhance, refactor UI/UX code.

Generate code architecture diagrams from source code. Use when asked to "generate a diagram", "visualize code architecture", "create a class diagram", "draw a sequence diagram", or when converting code into visual Mermaid/PlantUML diagrams.

Protect internal apps with Cloudflare Access, device posture, and Zero Trust policies.

Scan container images for vulnerabilities using Trivy, Grype, and cloud-native tools. Identify security issues in base images, packages, and configurations. Use when implementing container security, building secure images, or meeting compliance requirements.

Build reactive backends with Convex functions, schema validation, auth integration, and deployment workflows.

Implement database backup strategies. Configure automated backups, retention, and recovery testing. Use when designing backup and recovery procedures.