发现 Skills

LLM/AI security — prompt injection, prompt leakage, instruction injection, jailbreak techniques and defensive methods.

Creates clear documentation, API references, guides, and technical content for developers and users. Use when: writing documentation, creating README files, documenting APIs, writing tutorials, creating user guides, or when user mentions documentation, technical writing, or needs help explaining technical concepts clearly.

Pack-specific learnings, gotchas, and configuration patterns for Spectro Cloud Palette. Covers storage, networking, security, and application packs.

Generate context-efficient prompts for SpectroCloud tasks. Skills are global - agents must READ them. Learnings stay local.

Debug Spectro Cloud Palette clusters using event streams, log bundles, and edge host logs. Tracks known errors - both actionable and noise.

Build systematic literature databases for sociology research using the OpenAlex API. Guides you through search, screening, snowballing, annotation, and synthesis with structured user interaction at each stage.

Stata statistical analysis for publication-ready sociology research. Guides you through phased workflows for difference-in-differences (DiD), instrumental variables (IV), matching, panel methods, and more. Use when doing quantitative analysis in Stata for academic papers.

Iterative PDCA cycle for systematic experimentation and continuous improvement

Apply writing rules to any documentation that humans will read. Makes your writing clearer, stronger, and more professional.

Use when Codex is building or iterating on a web game (HTML/JS) and needs a reliable development + testing loop: implement small changes, run a Playwright-based test script with short input bursts and intentional pauses, inspect screenshots/text, and review console errors with render_game_to_text.

netiCRM/CiviCRM PHP backend standards for BAO, DAO, Form, and API classes. Use when writing PHP in /CRM/, implementing BAO business logic, Form handlers, API v3 endpoints, Menu XML routes, or checking permissions. Ensures CiviCRM class hierarchy, naming conventions, and security practices.

Use when evaluating projects for production readiness, implementing supply chain security (SLSA, signing, SBOMs), hardening CI/CD pipelines, establishing quality gates, or pursuing OpenSSF Best Practices Badge.

Use when upgrading to PHP 8.1+ to implement type safety, configure PHPStan/Rector/PHP-CS-Fixer, or modernize PHP code with enums, DTOs, and readonly properties.

Use when conducting security assessments, CVSS scoring, or auditing PHP/TYPO3 projects against OWASP Top 10 and CWE Top 25.

After-Action Review—structured debrief asking what was expected, what happened, why the difference, and what next. Use after projects, launches, presentations, or any significant event.

Blameless post-mortem incident analysis with timeline, root cause, and action items. Use after outages, security incidents, project failures, or any event you want to prevent recurring.

This skill should be used when writing Dioxus code, building Rust web/desktop/mobile apps with Dioxus, using the RSX macro, signals, server functions, or any Dioxus features from 0.5+ (2024–2026). It documents the idiomatic APIs and patterns introduced in 0.5+: the simplified component signature (fn App() -> Element); hook-style primitives such as use_signal and use_memo; the Signal<T> model with read/peek/write plus global and mapped signals; RSX patterns like conditionals, conditional attributes, keyed lists, children props, optional/default/Into props, and event/attribute idioms; asset management with asset! and per-asset options (images, CSS, preloads, minification); and server functions (# [server]) including route/query params, middleware, and extractors. Apply this skill when authoring components, building stateful reactive UIs, bundling assets, or implementing server-client endpoints to benefit from clearer ergonomics, stronger type-safety, and consistent launch/runtime behavior.

Fetch up-to-date library documentation via the Context7 REST API. Use when needing current API docs, framework patterns, or code examples for any library. Use when a user asks about React, Next.js, Prisma, Express, Vue, Angular, Svelte, or any npm/PyPI package. Use when a user says "how do I use X library", "what's the API for Y", or needs official documentation. Lightweight alternative to Context7 MCP with no persistent context overhead.

Designing anatomically plausible, visually distinctive creatures that communicate threat, personality, and role through form — from terrifying bosses to collectible companions. Use when "creature design, design a creature, design a monster, monster design, boss design, enemy creature, companion creature, pet design, wildlife design, alien creature, fantasy creature, horror monster, cute creature, pokemon style, creature anatomy, creature silhouette, creature movement, hybrid animal, ecosystem creatures, creature family, mount design, dragon design, beast design, creature, monster, boss, enemy, companion, wildlife, horror, cute, pokemon, anatomy, silhouette, locomotion, ecosystem, hybrid, fantasy, sci-fi, kaiju, cryptid" are mentioned.

Embedded systems development best practices for ESP32, FreeRTOS, and ESP-IDF. Use when writing firmware code, reviewing implementations, or learning about embedded patterns.

Use this skill when designing event-driven systems, implementing event sourcing, applying CQRS patterns, selecting message brokers, or reasoning about eventual consistency. Triggers on tasks involving Kafka, RabbitMQ, event stores, command-query separation, domain events, sagas, compensating transactions, idempotency, message ordering, and any architecture where components communicate through asynchronous events rather than direct synchronous calls.

Evidence-first revenue, pricing, refunds, team-billing, and billing-model truth workflow for ECC. Use when the user wants a sales snapshot, pricing comparison, duplicate-charge diagnosis, or code-backed billing reality instead of generic payments advice.

Modern Android development - Jetpack, Compose, Architecture Components

Generate LogQL queries, log stream selectors, metric queries, and alerting rules for Grafana Loki.