发现 Skills

Define scalable design-system foundations with clear ownership and adoption boundaries. Use when multiple teams need shared component standards, foundational patterns, and ownership rules to deliver consistent UI across products; do not use for backend data-model or deployment pipeline decisions.

Use for guided Fizzy.do workflows: "set up Fizzy", "configure Fizzy for this project", "sync my work to Fizzy", "review my Fizzy progress", "end of session cleanup". Provides step-by-step guidance for common operations.

Expert guidance for XState state machines, actor model patterns, React integration, and statecharts. Use when implementing state machines, managing complex application state, using the actor model for concurrent state management, integrating XState with React components, or debugging machines.

Specialized reverse engineering analysis workflows for binary analysis, pattern recognition, and vulnerability assessment

Outlines: structured JSON/regex/Pydantic LLM generation.

Run AI-powered browser automation tasks via Browser Use Cloud API. Automates web scraping, structured data extraction, form filling, authenticated workflows, and any browser task using natural language. Features stealth anti-detect browsers with automatic CAPTCHA solving, Cloudflare bypass, and residential proxies in 195+ countries.

Analyze OpenClaw session logs to report token usage, costs, and performance metrics grouped by model. Use when the user asks about API spending, token usage, session costs, or wants a usage summary.

Brief description of what this Skill does and when to use it. Include specific trigger phrases. Use when user asks "trigger phrase 1", "trigger phrase 2", or wants to [outcome]. Max 1024 characters.

Craft or refactor a CLI interface and behavior using the CLI Guidelines. Use when defining a new CLI spec or reshaping an existing command surface: arguments, flags, subcommands, help text, outputs, errors, exit codes, prompts, config/env precedence, and safe/dry-run behavior.

Use when auditing WCAG compliance, testing with assistive technologies, or fixing accessibility issues

Use when designing IAM policies, troubleshooting access denied errors, implementing SCPs, permission boundaries, cross-account roles, or using IAM Access Analyzer. Covers AWS SCS-C02, SAP-C02, and DVA-C02 identity domains.

Monitor Certificate Transparency (CT) logs using crt.sh and Certstream to detect phishing domains, spoofed certificates, and unauthorized certificate issuances targeting your organization.

Capture and analyze network traffic with Wireshark and tshark to reconstruct network events, extract artifacts, and identify malicious communications.

Guide for implementing smooth, native-feeling animations using React's View Transition API (`<ViewTransition>` component, `addTransitionType`, and CSS view transition pseudo-elements). Use this skill whenever the user wants to add page transitions, animate route changes, create shared element animations, animate enter/exit of components, animate list reorder, implement directional (forward/back) navigation animations, or integrate view transitions in Next.js. Also use when the user mentions view transitions, `startViewTransition`, `ViewTransition`, transition types, or asks about animating between UI states in React without third-party animation libraries.

Build scalable design systems with Tailwind CSS, design tokens, component libraries, and responsive patterns. Use when creating component libraries, implementing design systems, or standardizing UI patterns.

Database design, schema optimization, indexing strategies, and migration management.

Advanced debugging with stack trace analysis, error pattern detection, and fix suggestions. Use when delivering quick diagnostic support for everyday issues.

Shell scripting best practices with bats-core 1.11, ShellCheck 0.10, and POSIX compliance.

Converts Pencil.dev (.pen) designs to SwiftUI code. Reads .pen file structure and generates native SwiftUI Views with proper layout, styling, and component hierarchy. Use when you have a .pen mockup and need SwiftUI implementation.

PlaceholderAPI - Minecraft plugin expansion system for placeholder text replacement

Design-first API development with the Goa v3 framework for Go. Use when user asks to create a Goa service, design a Goa API, write Goa DSL, generate Goa code, add Goa endpoints, set up a Goa project, or work with goa.design. Covers DSL design, code generation, HTTP/gRPC transports, error handling, security, and interceptors.

When the user wants to create or optimize in-app paywalls, upgrade screens, upsell modals, or feature gates. Also use when the user mentions 'paywall', 'upgrade screen', 'upgrade modal', 'upsell', 'feature gate', 'convert free to paid', 'freemium conversion', 'trial expiration screen', 'limit reached screen', 'plan upgrade prompt', 'in-app pricing', 'free users won't upgrade', 'trial to paid conversion', or 'how do I get users to pay.' Use this for any in-product moment where you're asking users to upgrade. Distinct from public pricing pages (see page-cro) — this focuses on in-product upgrade moments where the user has already experienced value. For pricing decisions, see pricing-strategy.

Common Docker Compose patterns for development and production

Execute an OpenSpec tasks.md during implementation. TRIGGER when: working through spec task checkboxes and applying code changes. SKIP: authoring the tasks.md (use spec-design); verifying the result (use spec-review).