发现 Skills

Converts a PRD or plan markdown file into prd.json format for ralph-json-start-loop to execute autonomously. Use when user wants to convert a PRD or plan to JSON stories.

Use this when the user wants to plan a content strategy, decide what content to create, or figure out what topics to cover. Also use it when the user mentions 'content strategy,' 'what should I write about,' 'content ideas,' 'blog strategy,' 'topic clusters,' 'content planning,' 'editorial calendar,' 'content marketing,' 'content roadmap,' 'what content should I create,' 'blog topics,' 'content pillars,' or 'I don't know what to write.' Use this whenever someone needs help deciding what content to produce, not just writing it. For writing individual pieces, see copywriting. For SEO-specific audits, see seo-audit. For social media content specifically, see social-content.

USE FOR: Formally verifiable AI, high-stakes AI systems, safety-critical deployment, certification, and regulatory compliance. Use for reasoning about AI systems that must be provably correct, auditable, or certifiable — medical AI, autonomous vehicles, legal decision support, military/intelligence systems, and the project's approach to making AI governance mathematically rigorous. DO NOT USE FOR: formal verification proofs in Lean (use @lean-ai-formalization); agentic AI dynamics (use @ai-agentic-evolving); causal/deontic reasoning (use @ai-causal-deontic). TRIGGERS: high stakes, verifiable AI, safety critical, certification, regulatory compliance, AI assurance.

Security audit and vulnerability scanner for AI agent skills before installation. Use when: (1) evaluating a skill from an untrusted source, (2) auditing a skill directory or git repo URL for malicious code, (3) as a pre-install security gate for Claude Code plugins, OpenClaw skills, or Codex skills, (4) scanning Python scripts for dangerous patterns like os.system, eval, subprocess, or network exfiltration, (5) detecting prompt injection in SKILL.md files, (6) checking dependency supply-chain risks, (7) verifying file-system access stays within skill boundaries. Triggers: "audit this skill", "is this skill safe", "scan skill for security", "check skill before install", "skill security check", "skill vulnerability scan".

Migrate session logs from markdown to JSON format. Use when PRs contain markdown session logs that need conversion to the new JSON schema, or when batch-migrating historical sessions.

Generate Supertest API integration tests for Express/NestJS routes. Trigger when asked to write tests for an HTTP endpoint, REST API, or route handler. Use when the test involves an actual HTTP request/response cycle, request body validation, status codes, or auth middleware.

User-flow and endpoint validation skill for realistic functional testing with reproducible steps and evidence.

Use when working with the full-stack orchestration feature.

DEPRECATED — Permission hook removed in v4.6.0. See /pds:sandbox for current security model.

Generate Power Automate flows from natural language. Reads connector schemas from work repo, outputs deployable solution files. USE WHEN user says 'create flow', 'power automate', 'automate workflow', or describes a business process to automate.

Review workflow for AI/LLM output usage to prevent over-trust, injection, and unsafe automation.

Creates a new Agent Skill that follows the agentskills.io open specification. Use this skill whenever a user or agent wants to author a new skill, scaffold a skill directory, write a SKILL.md, add reference files, or add scripts to an existing skill. Activate for phrases like: "create a skill", "write a skill", "new skill for X", "scaffold a skill", "add a skill to my repo", or "make a SKILL.md".

Reference for operating in a Linux terminal. Use when the user or agent needs to run bash commands, combine commands with && or pipes, read files, sort and deduplicate output, write and execute shell scripts, work with the filesystem (files, links, mounts, permissions), install or update packages, get help on commands, manage containers with Podman, make HTTP requests with curl, manage Kubernetes clusters with kubectl, manage Helm charts, handle environment variables, or launch AI coding agents (aider-chat, claude). Activate this skill for any task involving: bash, shell, terminal, CLI, script, pipe, podman, kubectl, helm, curl, apt, pip, environment variable, aider, or any Unix command.

Manage kind (Kubernetes IN Docker) local clusters. Use when creating, testing, or developing with local Kubernetes clusters in Docker containers.

This skill provides an advanced financial modeling suite with DCF analysis, sensitivity testing, Monte Carlo simulations, and scenario planning for investment decisions

Scientific research and analysis skills

You are a dependency security expert specializing in vulnerability scanning, license compliance, and supply chain security. Analyze project dependencies for known vulnerabilities, licensing issues,...

AI-powered PPT generation with document analysis and styled images

Pairwise test generation

This skill should be used when the user asks to "escalate privileges on Windows," "find Windows privesc vectors," "enumerate Windows for privilege escalation," "exploit Windows miscon...

Publish articles to X/Twitter

Generates comprehensive Product Requirements Document from product plan. Creates PRD.md with features, user stories, acceptance criteria, and success metrics. Use when creating product requirements.

Generate git conventional commit messages from staged changes or diffs. Produces structured commit messages with type, optional scope, subject, and body. Use when committing code or when asked to write a commit message.

Enables ultra-granular, line-by-line code analysis to build deep architectural context before vulnerability or bug finding.