全部能力

对抗性代码审查，打破自审单一文化。适用于在合并 PR 前对近期变更进行真正批判性审查，或当…

Security review and guidance for iOS, macOS, and watchOS apps. Covers secure storage, biometric authentication, network security, and platform-specific…

Interactive reading teacher that instantly generates playful, engaging learning experiences for children ages 1-10. Creates visual playgrounds, phonics games,…

构建灵活的 API 过滤与排序系统，支持查询参数解析、验证与安全防护。适用于实现搜索端点、构建数据…

Use when Django REST Framework for building APIs with serializers, viewsets, and authentication. Use when creating RESTful APIs.

Accesses the Google Calendar and Tasks API. Use this skill to view or manage calendars, events, schedules, or Google tasks.

Build Python APIs with FastAPI, Pydantic v2, and SQLAlchemy 2.0 async. Covers project structure, JWT auth, validation, and database integration with uv package manager. Prevents 7 documented errors. Use when: creating Python APIs, implementing JWT auth, or troubleshooting 422 validation, CORS, async blocking, form data, background tasks, or OpenAPI schema errors.

为微服务架构配置 API 网关，实现路由、认证、速率限制和请求转换。适用于设置 Kong、Nginx 等场景。

ALWAYS `render inertia: { key: data }` to pass data as props — instance variables are NOT auto-passed (only alba-inertia does that). Rails controller patterns for Inertia.js: render inertia, prop types (defer, optional, merge, scroll), shared data, flash, PRG redirects, validation errors. Use when writing controllers that load data, display records, or serve Inertia responses. CRITICAL: external URLs (Stripe/OAuth) MUST use inertia_location, NEVER redirect_to.

Airtable 集成。管理项目管理数据、记录和工作流。当用户需要与 Airtable 数据交互时使用。

Orchestration hub for Microsoft Graph API across Microsoft 365 services. Use for Graph API integrations, querying Microsoft 365 data, and building applications…

Analyze spending patterns and find savings. 50/30/20 rule, subscription audit, debt payoff strategies, emergency fund roadmap.

Comprehensive security guide for Capacitor apps using Capsec scanner. Covers 63+ security rules across secrets, storage, network, authentication, cryptography,…

创建全面的 API 变更日志，记录重大变更、弃用项以及面向 API 使用者的迁移策略。用于管理 API 版本、…

Run full security scans on the codebase using Ruflo security tools

Test Supabase Realtime WebSocket channels for unauthorized subscriptions and data exposure.

通过 gws CLI 管理 Google Workspace。安装、认证并自动化 Gmail、Drive、Sheets、Calendar、Docs、Chat 和 Tasks。执行安全...

Reddit API with PRAW (Python) and Snoowrap (Node.js)

Analyzes positive customer reviews to surface deep customer insights for ad copy. Use this whenever a user provides customer reviews and wants to understand…

Extract full paper details from a CNKI paper page including title, authors, affiliations, abstract, keywords, fund, classification. Use when the user needs…