全部能力

Lightweight NDA, MSA, and vendor contract review for SMBs without legal on staff. Reads contracts from local files, Gmail attachments, or DocuSign envelopes; flags non-standard terms; explains risks in plain English; and outputs a marked-up redline as a separate DOCX. Use when the user says "review this contract," "what am I signing," "red flags," "flag any concerns," "check the payment terms," or uploads/forwards a contract or legal agreement.

Teaches the Higher-Order Component (HOC) pattern for logic reuse. Use when you need to share cross-cutting concerns like authentication, logging, or data…

当用户想要创建、优化或审核 API 介绍/概览页面时。当用户提到"API 页面"、"API 落地页"、"/api…"时也适用。

Implement comprehensive security audit logging for compliance, forensics, and SIEM integration. Use when building audit trails, compliance logging, or security monitoring systems.

项目状态仪表盘 — 未解决的问题、近期提交、活跃分支/工作树、内存状态和暂存区。当用户请求状态报告时使用，…

Tailwind CSS 4 patterns and best practices. Trigger: When styling with Tailwind (className, variants, cn()), especially when dynamic styling or CSS variables are involved (no var() in className).

Automatically fix broken OpenCLI adapters when commands fail. Load this skill when an opencli command fails — it guides you through diagnosing the failure via…

Optimize for search engine visibility and ranking. Use when asked to "improve SEO", "optimize for search", "fix meta tags", "add structured data", "sitemap…

Expert integration of Supabase Auth with Next.js App Router Use when: supabase auth next, authentication next.js, login supabase, auth middleware, protected…

Use when working with iOS/macOS Keychain Services (SecItem queries, kSecClass, OSStatus errors), biometric authentication (LAContext, Face ID, Touch ID),…

在执行 /clear、/compact、恢复会话或上下文丢失后使用。在分支上下文过时或未知时使用。在现有工作树中开始工作时使用。

使用 JWT、OAuth 2.0、API 密钥和会话管理实现安全的 API 认证。适用于保护 API、管理令牌或实现用户认证流程的场景。

在 Arize 上处理 LLM-as-judge 评估工作流，包括创建/更新评估器、在 span 或 experiment 上运行评估、管理任务等。

Django REST Framework patterns. Trigger: When implementing generic DRF APIs (ViewSets, serializers, routers, permissions, filtersets). For Prowler API specifics (RLS/RBAC/Providers), also use prowler-api.

Audit claude-skills with systematic 9-phase review: standards compliance, official docs verification, code accuracy, cross-file consistency, and version drift detection. Use when investigating skill issues, major updates detected, skill not verified >90 days, or before marketplace submission.

Manage issues, projects & team workflows in Linear. Use when the user wants to read, create or updates tickets in Linear.

Master essential security scanning tools for network discovery, vulnerability assessment, web application testing, wireless security, and compliance…

Implement authentication with auth handlers and gateways in Encore.ts.

Electron development guidelines for building cross-platform desktop applications with JavaScript/TypeScript

Claims-based authorization for agents and operations. Grant, revoke, and verify permissions for secure multi-agent coordination. Use when: permission management, access control, secure operations, authorization checks. Skip when: open access, no security requirements, single-agent local work.