全部能力

实现安全 API 设计模式，包括认证、授权、输入验证、速率限制以及针对常见 API 漏洞的防护

Find and fix broken or insecure links across an entire site, including CMS content, to improve SEO and user experience. Audits HTTP/HTTPS issues and validates…

Lightweight NDA, MSA, and vendor contract review for SMBs without legal on staff. Reads contracts from local files, Gmail attachments, or DocuSign envelopes; flags non-standard terms; explains risks in plain English; and outputs a marked-up redline as a separate DOCX. Use when the user says "review this contract," "what am I signing," "red flags," "flag any concerns," "check the payment terms," or uploads/forwards a contract or legal agreement.

Teaches the Higher-Order Component (HOC) pattern for logic reuse. Use when you need to share cross-cutting concerns like authentication, logging, or data…

当用户想要创建、优化或审核 API 介绍/概览页面时。当用户提到"API 页面"、"API 落地页"、"/api…"时也适用。

飞书多维表格（Bitable/Base）操作。底层使用 base/v3 新 API，支持视图完整配置写入、 记录 upsert、记录修改历史、角色 CRUD、高级权限开关、数据聚合查询等。 当用户请求"创建多维表格"、"操作数据表"、"添加记录"、"查询记录"、"管理字段"、 "多维表格"、"base"、"bitable"、"数据表"、"视图排序"、"视图过滤"、"视图分组"、 "角色"、"role"、"高级权限"、"advperm"、"数据聚合"、"data query"、 "复制多维表格"时使用。

Monday integration. Manage project management data, records, and workflows. Use when the user wants to interact with Monday data.

Implement comprehensive security audit logging for compliance, forensics, and SIEM integration. Use when building audit trails, compliance logging, or security monitoring systems.

Comprehensive checklist for conducting thorough code reviews covering functionality, security, performance, and maintainability

项目状态仪表盘 — 未解决的问题、近期提交、活跃分支/工作树、内存状态和暂存区。当用户请求状态报告时使用，…

Expert integration of Supabase Auth with Next.js App Router Use when: supabase auth next, authentication next.js, login supabase, auth middleware, protected…

Automatically fix broken OpenCLI adapters when commands fail. Load this skill when an opencli command fails — it guides you through diagnosing the failure via…

Optimize for search engine visibility and ranking. Use when asked to "improve SEO", "optimize for search", "fix meta tags", "add structured data", "sitemap…

Create, modify, and organise Grafana dashboards including panels, variables, transformations,

在执行 /clear、/compact、恢复会话或上下文丢失后使用。在分支上下文过时或未知时使用。在现有工作树中开始工作时使用。

使用 JWT、OAuth 2.0、API 密钥和会话管理实现安全的 API 认证。适用于保护 API、管理令牌或实现用户认证流程的场景。

在 Arize 上处理 LLM-as-judge 评估工作流，包括创建/更新评估器、在 span 或 experiment 上运行评估、管理任务等。

面向 QQ 邮箱的 IMAP 收邮件、SMTP 发邮件；账号与授权码从环境变量 QQ_EMAIL_ACCOUNT、QQ_EMAIL_AUTH_CODE 读取。在用户要发 QQ 邮件、收邮件、查邮件、代发邮件或配置 QQ 邮箱时使用。

Apply modern web development best practices for security, compatibility, and code quality. Use when asked to "apply best practices", "security audit",…

Security auditor for Laravel applications. Analyzes code for vulnerabilities, misconfigurations, and insecure practices using OWASP standards and Laravel…