发现 Skills

Analyzes smart contract codebases to identify state-changing entry points for security auditing. Detects externally callable functions that modify state, categorizes them by access level (public, admin, role-restricted, contract-only), and generates structured audit reports. Excludes view/pure/read-only functions. Use when auditing smart contracts (Solidity, Vyper, Solana/Rust, Move, TON, CosmWasm) or when asked to find entry points, audit flows, external functions, access control patterns, or privileged operations.

Use this skill whenever the user wants to do anything with PDF files. This includes reading or extracting text/tables from PDFs, combining or merging multiple PDFs into one, splitting PDFs apart, rotating pages, adding watermarks, creating new PDFs, filling PDF forms, encrypting/decrypting PDFs, extracting images, and OCR on scanned PDFs to make them searchable. If the user mentions a .pdf file or asks to produce one, use this skill.

Identifies error-prone APIs, dangerous configurations, and footgun designs that enable security mistakes. Use when reviewing API designs, configuration schemas, cryptographic library ergonomics, or evaluating whether code follows 'secure by default' and 'pit of success' principles. Triggers: footgun, misuse-resistant, secure defaults, API usability, dangerous configuration.

Verifies code implements exactly what documentation specifies for blockchain audits. Use when comparing code against whitepapers, finding gaps between specs and implementation, or performing compliance checks for protocol implementations.

UI/UX design intelligence. 50 styles, 21 palettes, 50 font pairings, 20 charts, 9 stacks (React, Next.js, Vue, Svelte, SwiftUI, React Native, Flutter, Tailwind, shadcn/ui). Actions: plan, build, create, design, implement, review, fix, improve, optimize, enhance, refactor, check UI/UX code. Projects: website, landing page, dashboard, admin panel, e-commerce, SaaS, portfolio, blog, mobile app, .html, .tsx, .vue, .svelte. Elements: button, modal, navbar, sidebar, card, table, form, chart. Styles: glassmorphism, claymorphism, minimalism, brutalism, neumorphism, bento grid, dark mode, responsive, skeuomorphism, flat design. Topics: color palette, accessibility, animation, layout, typography, font pairing, spacing, hover, shadow, gradient. Integrations: shadcn/ui MCP for component search and examples.

Use when writing medical school personal statements, residency application essays, fellowship statements, or graduate school admissions essays. Crafts compelling narratives highlighting clinical experiences, research achievements, and career motivations for healthcare education applications.

This skill MUST be invoked when users want to create, build, or develop MCP (Model Context Protocol) servers. Should be used for any task involving MCP server creation, whether simple calculator tools or complex API integrations. Covers FastMCP (Python) and MCP SDK (Node/TypeScript) implementations, tool design patterns, error handling, security best practices, and testing. Invoke this skill whenever the user mentions 'MCP server', 'MCP tool', 'FastMCP', or asks to create tools for LLM interaction.

This skill provides comprehensive Drizzle ORM patterns for PostgreSQL with Vercel Edge Runtime support. Drizzle is Quetrex's chosen ORM because it's edge-first, type-safe, and supports all deployme...

Master Rust async programming with the Tokio runtime, async/.await, async-trait, robust error handling, and common concurrency patterns. Use this Skill when building async Rust applications, implementing concurrent systems, or debugging async code.

Enterprise WeCom group bot message-pushing skill. Supports sending text, Markdown, images, rich media (text+image), files and other message types to WeCom (Enterprise WeChat) groups.

Enterprise Go for systems and network programming: Go 1.25.4, Fiber v3, gRPC, context patterns, goroutine orchestration, and standard library mastery. Designed for REST APIs, microservices, concurrent systems, backend infrastructure, and performance-critical code.

Enterprise JavaScript for Node.js and browser: Node.js 22.11.0 LTS (Jod), npm 11.x, ES2025 features, async operations, module systems, package management; activates for server-side development, scripting, tooling, package management, and runtime optimization.

PHP 8.4+ best practices with PHPUnit 11, Composer, PSR-12 standards, and web frameworks (Laravel, Symfony).

Enterprise TypeScript with strict typing and a modern ecosystem: TypeScript 5.9.3, Next.js 16, Turbopack, React 19, tRPC, and Zod for type-safe schemas. Activates for full‑stack development, API contract definition, type-safety enforcement, and framework-agnostic TypeScript patterns.

Enterprise encryption security combining an AI-powered cryptographic architecture, Context7 MCP integration, and intelligent encryption orchestration for data protection

Applies a modified Fagan Inspection methodology to systematically resolve persistent bugs and complex issues. Use when multiple previous fix attempts have failed repeatedly, when dealing with intricate system interactions, or when a methodical root cause analysis is needed. Do not use for simple troubleshooting. Triggers after multiple failed debugging attempts on the same complex issue.

Summarize AI text conversations into structured, actionable overviews. Use when a user provides a conversation log, chat export, or dialogue transcript and wants a summary. Supports multiple formats: JSON logs with turn-based structure, ChatGPT/Claude exports, OpenAI API message arrays, JSONL chat logs, and plain-text transcripts with role markers. Triggers on requests like "summarize this conversation," "give me an overview of this chat," "extract key decisions from this dialogue," or "what action items came out of this conversation."

Generate/create/scaffold azure-pipelines.yml, stages, jobs, steps, or reusable templates.

Validate, lint, audit, or fix bash/sh/.sh scripts via ShellCheck.

Generate/create/scaffold Jenkinsfile — declarative, scripted, shared library, CI/CD pipelines.

Use ilspy-cli for .NET assembly decompilation and analysis. Produces clean C# source from .NET IL bytecode. Activate when the user requests: - .NET assembly decompilation - .NET type or method inspection - Detecting whether a binary is .NET or native - Searching decompiled .NET source code - Assembly metadata inspection Prefer ilspy-cli over ghidra-cli for .NET binaries (ghidra produces poor output for .NET IL).

Guide for implementing Cloudflare Browser Rendering — a headless browser automation API for screenshots, PDFs, web scraping, and testing. Use when automating browsers, taking screenshots, generating PDFs, scraping dynamic content, extracting structured data, or testing web applications. Supports REST API, Workers bindings (Puppeteer/Playwright), MCP servers, and AI-powered automation. (project)

在添加认证、处理用户输入、处理密钥、创建 API 端点或实现支付/敏感功能时使用此 skill。提供全面的安全检查清单和模式。

Financial analysis, portfolio management, crypto markets, US equity markets, Indian equity markets (dad's portfolio), risk management, and investment strategy. Use when the user asks about portfolio allocation, market analysis, crypto positions, US stocks (S&P 500, Nasdaq, NYSE), Indian stocks (NSE/BSE, dad's portfolio), hedging strategies, risk assessment, DCA plans, tax optimization, or investment decisions. Triggers on keywords like "portfolio", "crypto", "bitcoin", "ethereum", "stocks", "S&P", "Nasdaq", "NYSE", "NSE", "BSE", "Nifty", "Sensex", "ETF", "TFSA", "RRSP", "allocation", "hedge", "risk", "returns", "DCA", "rebalance", "stoploss", "position sizing", or "market analysis".