全部能力

Monday integration. Manage project management data, records, and workflows. Use when the user wants to interact with Monday data.

飞书多维表格（Bitable/Base）操作。底层使用 base/v3 新 API，支持视图完整配置写入、 记录 upsert、记录修改历史、角色 CRUD、高级权限开关、数据聚合查询等。 当用户请求"创建多维表格"、"操作数据表"、"添加记录"、"查询记录"、"管理字段"、 "多维表格"、"base"、"bitable"、"数据表"、"视图排序"、"视图过滤"、"视图分组"、 "角色"、"role"、"高级权限"、"advperm"、"数据聚合"、"data query"、 "复制多维表格"时使用。

Comprehensive checklist for conducting thorough code reviews covering functionality, security, performance, and maintainability

Implement comprehensive security audit logging for compliance, forensics, and SIEM integration. Use when building audit trails, compliance logging, or security monitoring systems.

项目状态仪表盘 — 未解决的问题、近期提交、活跃分支/工作树、内存状态和暂存区。当用户请求状态报告时使用，…

Automatically fix broken OpenCLI adapters when commands fail. Load this skill when an opencli command fails — it guides you through diagnosing the failure via…

Optimize for search engine visibility and ranking. Use when asked to "improve SEO", "optimize for search", "fix meta tags", "add structured data", "sitemap…

Expert integration of Supabase Auth with Next.js App Router Use when: supabase auth next, authentication next.js, login supabase, auth middleware, protected…

Tailwind CSS 4 patterns and best practices. Trigger: When styling with Tailwind (className, variants, cn()), especially when dynamic styling or CSS variables are involved (no var() in className).

Create, modify, and organise Grafana dashboards including panels, variables, transformations,

Use when working with iOS/macOS Keychain Services (SecItem queries, kSecClass, OSStatus errors), biometric authentication (LAContext, Face ID, Touch ID),…

Run loan, investment, NPV, retirement, savings, and risk calculations with schedules and charts. Use for deterministic financial modeling tasks.

在执行 /clear、/compact、恢复会话或上下文丢失后使用。在分支上下文过时或未知时使用。在现有工作树中开始工作时使用。

使用 JWT、OAuth 2.0、API 密钥和会话管理实现安全的 API 认证。适用于保护 API、管理令牌或实现用户认证流程的场景。

在 Arize 上处理 LLM-as-judge 评估工作流，包括创建/更新评估器、在 span 或 experiment 上运行评估、管理任务等。

面向 QQ 邮箱的 IMAP 收邮件、SMTP 发邮件；账号与授权码从环境变量 QQ_EMAIL_ACCOUNT、QQ_EMAIL_AUTH_CODE 读取。在用户要发 QQ 邮件、收邮件、查邮件、代发邮件或配置 QQ 邮箱时使用。

Apply modern web development best practices for security, compatibility, and code quality. Use when asked to "apply best practices", "security audit",…

Django REST Framework patterns. Trigger: When implementing generic DRF APIs (ViewSets, serializers, routers, permissions, filtersets). For Prowler API specifics (RLS/RBAC/Providers), also use prowler-api.

Security auditor for Laravel applications. Analyzes code for vulnerabilities, misconfigurations, and insecure practices using OWASP standards and Laravel…

Audit claude-skills with systematic 9-phase review: standards compliance, official docs verification, code accuracy, cross-file consistency, and version drift detection. Use when investigating skill issues, major updates detected, skill not verified >90 days, or before marketplace submission.