全部能力

通过 OpenAPI/SDK 管理阿里云云防火墙（Cloudfw）。当用户请求防火墙策略/资源操作、变更管理、状态查询等时使用。

通过 OpenAPI/SDK 管理阿里云 Data Lake Formation (DlfNext)。当用户需要进行 DLF Next 目录/治理资源操作时使用，包括…

通过 OpenAPI/SDK 管理阿里云 ID Verification (Cloudauth)。当用户进行身份验证资源操作、配置…时使用。

Single entry point for all AEM as a Cloud Service Dispatcher skills. Covers config authoring, technical advisory, incident response, performance tuning, security hardening, and full lifecycle orchestration for the Adobe Dispatcher Apache HTTP Server module and its HTTPD/dispatcher configuration.

通过 OpenAPI/SDK 管理阿里云安全中心（Sas）。当用户需要安全中心资源操作、配置更新、状态查询等时使用。

API 安全清单，用于部署前审查端点。在创建或修改 API 路由时使用，以确保正确的认证、授权和…

Use when the user asks to set up secret management infrastructure, integrate HashiCorp Vault, configure cloud secret stores (AWS Secrets Manager, Azure Key…

Creates and manages secrets in AWS Secrets Manager following security best practices. Always use this skill when creating secrets — it sets up dedicated KMS…

Deploys smart contracts to Base using Foundry. Covers forge create commands, contract verification, testnet faucet setup via CDP, and BaseScan API key…

Comprehensive Docker security guidelines and threat mitigation strategies

Android APK 解包和资源提取工具，用于逆向工程。在需要解码 APK 文件、提取资源、检查…时使用。

基于权限和策略的角色访问控制（RBAC）。适用于管理后台、企业级访问、多租户应用、细粒度授权等场景…

Manage Google Play Developer Console using the gpd CLI. Use when working with Android app publishing, Play Store releases, app reviews, Android vitals, in-app…

Preflight Google Play releases, validate edits, and verify listing completeness with gpd. Use when shipping to production or troubleshooting a failed release.

Create and manage Hetzner Cloud servers. Use when creating VPS/cloud servers, managing Hetzner infrastructure, or setting up dev/remote servers. Requires…

Expert in macOS Accessibility APIs (AXUIElement) for desktop automation. Specializes in secure automation of macOS applications with proper TCC permissions,…

Senior Project Manager for enterprise software, SaaS, and digital transformation projects. Specializes in portfolio management, quantitative risk analysis,…

Use when cloud Qwen speech features are needed through DashScope, especially for ASR transcription of user audio, Telegram voice-note TTS, or reusable…

Validate, lint, audit, or review azure-pipelines.yml — syntax, security, best practices.

Configures HTTP security headers to protect against XSS, clickjacking, and MIME sniffing attacks. Use when hardening web applications, passing security audits,…