发现 Skills

Use in the final phase to reduce coding-pipeline observations to actionable items. Removes out-of-scope concerns, framework-handled cases, test-fixture flags, items already addressed in code, and other non-actionable noise.

Tests privilege escalation: state-changing endpoints accessible beyond intended roles, missing authorization guards, and admin paths reachable by regular users

Security perspective — OWASP Top 10, auth/authz, input validation, secrets, encryption. Lead when security fix is primary; analyst/reviewer otherwise.

Knowledge management workflow based on Qian Xuesen's engineering cybernetics: layered storage of experience, daily organization of skills according to the cybernetics framework

Execute Google Drive/Docs/Sheets integrations safely on Drive-type MCP and, when needed, connect to Colab notebook operations.

Generate images utilizing ComfyUI's powerful node-based workflow capabilities. Supports dynamically loading multiple pre-configured generation workflows from different instances and their corresponding parameter mappings, converting natural language into parameters, driving local or remote ComfyUI services, and ultimately returning the images to the target client. **Use this Skill when:** (1) The user requests to "generate an image", "draw a picture", or "execute a ComfyUI workflow". (2) The user has specific stylistic, character, or scene requirements for image generation.

Read, summarize, and translate any webpage content, or extract specific elements from a page. Use when a user provides a URL and requests to view, read, summarize, translate, or save webpage content; also use when a user asks to extract images, download links, specific fields, etc. Supports Xiaohongshu (Little Red Book), WeChat Official Accounts, Zhihu, general webpages, and SPA/JS-rendered pages.

Train or fine-tune language and vision models using TRL (Transformer Reinforcement Learning) or Unsloth with Hugging Face Jobs infrastructure. Covers SFT, DPO, GRPO and reward modeling training methods, plus GGUF conversion for local deployment. Includes guidance on the TRL Jobs package, UV scripts with PEP 723 format, dataset preparation and validation, hardware selection, cost estimation, Trackio monitoring, Hub authentication, model selection/leaderboards and model persistence. Use for tasks involving cloud GPU training, GGUF conversion, or when users mention training on Hugging Face Jobs without local GPU setup.

Perform language- and framework-specific security best-practice reviews and suggest improvements. Trigger only when the user explicitly requests security best practices guidance, a security review/report, or secure-by-default coding help. Trigger only for supported languages (Python, JavaScript/TypeScript, Go). Do not trigger for general code review, debugging, or non-security tasks.

Control Philips Hue lights/scenes via the OpenHue CLI.

Modern UI/UX design specialist for web applications, mobile apps, and design systems. Covers design principles, user research, interaction patterns, accessibility (WCAG), responsive design, component libraries (Tailwind, shadcn/ui, Material), prototyping, and usability testing. Creates beautiful, functional interfaces following best practices.

Create Hummingbot-branded PDF slides from markdown with Mermaid diagram support. Use for presentations, decks, and technical documentation with professional diagrams.

Prepare, build, and publish a Flutter Web app to S3-compatible object storage. Use when Codex needs to bump or update pubspec.yaml version, create a Flutter Web release tag, configure S3 deployment, build build/web, upload or promote web assets, or inspect a Flutter Web S3 release workflow.

It reads from your local zettelkasten notes, find a random idea, and find references by links or tags, then expand the idea with the references.

Render A2UI JSON as native Castella widgets. Parse A2UI messages, handle actions, progressive rendering, data binding, and connect to A2UI-enabled agents.

Build chat interfaces and agent management UIs with Castella. Create chat components, display tool calls, manage multiple agents, and build agent hubs.

Build desktop, web, or terminal UIs with Castella. Create widgets, components, layouts, manage reactive state, handle events, and use the theme system.

Create publication-quality scientific diagrams using Nano Banana Pro AI with smart iterative refinement. Uses Gemini 3 Pro for automated quality review and only regenerates outputs when the quality score for your document type falls below the configured threshold. Specialized for neural network architectures, system diagrams, flowcharts, biological pathways, and other complex scientific visualizations.

Add or remove devices from a Hubitat app instance (e.g., Maker API)

Mermaid syntax for flowcharts, sequence diagrams, C4, and entity-relationship diagrams

Use this skill when the user asks whether the **base skill** works, or asks you to test/verify the base skill.

Designing anatomically plausible, visually distinctive creatures that communicate threat, personality, and role through form — from terrifying bosses to collectible companions. Use when "creature design, design a creature, design a monster, monster design, boss design, enemy creature, companion creature, pet design, wildlife design, alien creature, fantasy creature, horror monster, cute creature, pokemon style, creature anatomy, creature silhouette, creature movement, hybrid animal, ecosystem creatures, creature family, mount design, dragon design, beast design, creature, monster, boss, enemy, companion, wildlife, horror, cute, pokemon, anatomy, silhouette, locomotion, ecosystem, hybrid, fantasy, sci-fi, kaiju, cryptid" mentioned.

Develop examples for AI SDK functions. Use when creating, running, or modifying examples under examples/ai-functions/src to validate provider support, demonstrate features, or create test fixtures.

You are an error-tracking and observability expert who implements end-to-end error monitoring solutions. Set up error tracking systems, configure alerting, implement structured JSON logging with correlation IDs, and instrument distributed tracing across services.