发现 Skills

Migrate MSTest v1 or v2 test project to MSTest v3. Use when user says "upgrade MSTest", "update test framework", "modernize tests", or has build errors after updating MSTest packages from 1.x/2.x. USE FOR: upgrading from MSTest v1 assembly references (Microsoft.VisualStudio.QualityTools.UnitTestFramework) or MSTest v2 NuGet (MSTest.TestFramework 1.x–2.x) to MSTest v3, fixing assertion overload errors (AreEqual/AreNotEqual), updating DataRow constructors, replacing .testsettings with .runsettings, timeout behavior changes, target framework compatibility (net5.0 unsupported — use net6.0+; .NET Fx < 4.6.2 unsupported), adopting MSTest.Sdk, parallel execution. First step toward MSTest v4 — after this, use migrate-mstest-v3-to-v4. DO NOT USE FOR: migrating to MSTest v4 (use migrate-mstest-v3-to-v4), migrating between frameworks (MSTest to xUnit/NUnit), or general .NET upgrades unrelated to MSTest.

Analyze skill execution traces to identify issues and automatically evolve or improve skills. Use when users provide trace files (JSON) from skill runs and want to improve skill performance based on real execution data. Triggers on requests like "analyze traces", "evolve skill based on traces", "improve skill from execution history", "find issues in skill traces", or when working with skill trace/log files.

Orchestrate multi-agent coding tasks via Claude DevFleet — plan projects, dispatch parallel agents in isolated git worktrees, monitor progress, and read structured reports.

Run a comprehensive health audit on a Shopify store, scoring products, collections, SEO metadata, and policies on a 0-100 scale with prioritized action items.

Implement observability solutions. Use when setting up monitoring, logging, or tracing. Covers OpenTelemetry, metrics, and alerting.

AI/LLM data exfiltration techniques via rendered markdown, HTML-in-markdown, tool artifacts, domain encoding, and url_safe bypasses. Use when crafting exfil payloads for AI red teaming, analyzing AI app rendering pipelines for exfil surfaces, bypassing URL filters/sanitizers, or reviewing AI-generated output for exfil risk.

Exploit parsing differences between frontend/backend, proxy/origin, or WAF/app to bypass auth, ACLs, and input validation. Use when multiple layers process the same request differently.

Complete catalog of all 183 transforms with exact names, parameters, categories, and LLM requirements

Enforce TDD workflow and ensure proper execution of the Red-Green-Refactor cycle. Use when starting a new feature implementation, bug fix, or refactoring.

Synchronizes documentation (README.md, CHANGELOG.md, API docs) with implementation. Preserves user content outside speckit markers. Updates are non-destructive and clearly delineated. Always run after /speckit.implement completes.

A skill for automating deep research using Google NotebookLM. Supports parallel notebook management, AI queries, and multi-source analysis.

Use when designing or decomposing a task for agent execution — applies 15-minute task units, eval-first loops, and explicit input/output contracts so agents work reliably without implicit state

Use when you're ready to let Copilot execute a multi-step plan autonomously — configures appropriate guardrails, handles plan-to-autopilot transitions, and sets safety boundaries.

Use when you're preparing to launch a product or feature publicly — builds a structured checklist covering positioning, distribution, messaging, and success metrics from private beta to GA.

Use when implementing framework-specific or library-specific code — verify non-trivial APIs against official documentation before writing them, and record the source in task notes, docs, or the PR.

Use when a user reports CSS, layout, or styling issues in a Next.js application — "element overlapping," "spacing is wrong," "responsive layout broken," "dark mode not working," "Tailwind classes not applying," or "alignment off." Diagnoses through a 6-phase pipeline that mirrors browser evaluation order, covering token resolution, cascade conflicts, layout models, stacking contexts, and viewport responsiveness. Handles Tailwind, CSS Modules, styled-components, and vanilla CSS. Not for JavaScript logic bugs, data fetching issues, or server-side rendering errors — route those to ui-bug-investigator.

Use this skill when analyzing kernel security at the hardware/software interface — memory management, process isolation, privilege escalation paths, or IOMMU/SMMU configuration. Triggers on "kernel hardening review", "IOMMU bypass analysis", "privilege escalation audit", "container escape assessment", "KASLR/KPTI evaluation". Do NOT use for microarchitectural attacks (use microarch-attack-skill) or physical side-channels (use physical-sca-skill).

Use when a verified fix needs a regression test — "write a test for this fix," "generate regression test," or "add test coverage for this bug." Auto-detects project test conventions, routes to Vitest+RTL or Playwright based on component type (sync vs async server), generates targeted tests with anti-brittleness constraints, and annotates coverage boundaries. Not for diagnosing bugs, applying fixes, or writing feature tests — use ui-bug-investigator, component-fix-and-verify, or manual test authoring respectively.

Build agent-facing web experiences with ATXP-based authentication, following the ClawDirect pattern. Use this skill when building websites that AI agents interact with via MCP tools, implementing cookie-based agent auth, or creating agent skills for web apps. Provides templates using @longrun/turtle, Express, SQLite, and ATXP.

AI-powered startup mindset coach that helps founders upgrade their thinking patterns, track mental model progress, and set weekly challenges. Use when: - User is a startup founder seeking to improve their entrepreneurial mindset - User wants to detect and overcome low-level thinking patterns - User needs guidance on applying mental models (PMF, 4Ps, NFX frameworks) - User wants to set and track weekly challenges - User requests a weekly progress report - User is discussing startup challenges and needs Socratic questioning

OpenClaw Optimizer — Analyzes your setup and tells you what to improve: free disk space, optimize RAM, fix security, enable features, recover disabled cron jobs, cleanup duplicates. Actionable steps with priority.

Information about dust-hive, a CLI tool for running multiple isolated Dust development environments. ALWAYS enable this skill when the working directory is under ~/dust-hive/. Use for understanding port allocation, running tests, and working with the environment.

Draft, rewrite, or critique a Duvo Assignment SOP. Use when the user wants to improve an existing SOP or write a new one from a brief. Returns the SOP as a single complete markdown document in the canonical GOAL / STEPS / NOTES shape.

Core engineering principles for sustainable, maintainable code. No shortcuts, no hacks. Quality gates before completion.