ing

600+ pattern AI agent security defense covering prompt injection, supply chain injection, memory poisoning, action gate bypass, unicode steganography, and…

Guidelines for implementing OAuth 2.0 and OAuth 2.1 authentication flows with security best practices and PKCE

排查和调试 AWS Clean Rooms 协作问题，涉及 IAM 角色、S3 存储桶策略、KMS 密钥、Lake Formation 权限和 CloudWatch…

Jira integration. Manage project management and ticketing data, records, and workflows. Use when the user wants to interact with Jira data.

Structured OSINT investigations — people lookup, company intel, investment due diligence, entity/threat intel, domain recon, organization research using public…

Git troubleshooting techniques including recovering lost commits, fixing merge conflicts, resolving detached HEAD, and diagnosing repository issues. Use when…

KMS 技能的最小化冒烟测试。验证认证和只读密钥列表路径。

You are a security expert specializing in dependency vulnerability analysis, SBOM generation, and supply chain security. Scan project dependencies across…

Guidelines for implementing Clerk authentication in Next.js applications with middleware, hooks, and security best practices

Master of capital preservation and position sizing - combining Kelly Criterion, volatility targeting, correlation analysis, and drawdown management to survive…

Create serverless functions on Azure with triggers, bindings, authentication, and monitoring. Use for event-driven computing without managing infrastructure.

指导创建遵循开放格式规范的最佳实践智能体技能。涵盖前置元数据、目录结构、渐进式披露、…

审核并改进网页无障碍性，遵循 WCAG 2.1 指南。用于响应"改进无障碍性"、"a11y 审计"、"WCAG 合规"、"屏幕阅读器…"等请求时。

Package entire code repositories into single AI-friendly files using Repomix. Capabilities include pack codebases with customizable include/exclude patterns,…

Analyze your reading history and tell you something surprising you don't know about yourself

飞书视频会议与妙记操作。多维搜索历史会议、获取会议纪要/AI 产物/逐字稿、 查询会议录制、下载妙记媒体文件。支持 meeting-ids / minute-tokens / calendar-event-ids 三路径入口。当用户请求"搜索会议"、"会议记录"、"会议纪要"、"逐字稿"、"妙记"、"meeting"、 "vc search"、"vc recording"、"minutes"、"下载妙记"、"妙记视频"、"会议录制"、 "从日程找会议"时使用。

Find, evaluate, and maintain high-quality external resources for JavaScript concept documentation, including auditing for broken and outdated links

Security-focused code review checklist and automated scanning patterns. Use when reviewing pull requests for security issues, auditing authentication/authorization code, checking for OWASP Top 10 vulnerabilities, or validating input sanitization. Covers SQL injection prevention, XSS protection, CSRF tokens, authentication flow review, secrets detection, dependency vulnerability scanning, and secure coding patterns for Python (FastAPI) and React. Does NOT cover deployment security (use docker-best-practices) or incident handling (use incident-response).

Guide for implementing license key management with Dodo Payments - activation, validation, and access control for software products.

Manage evidence freshness by identifying stale decisions and providing governance actions