ing

Google Workflow：跨服务生产力工作流。

对照生产环境最佳实践，审查和编写 Cloudflare Workers 代码。适用于编写新 Workers、审查 Worker 代码、配置……

构建生产级 Spring Boot 应用 - REST API、安全、数据、Actuator

构建全面的攻击树以可视化威胁路径。适用于梳理攻击场景、识别防御盲点，或向……传达安全风险。

Detects fail-open insecure defaults (hardcoded secrets, weak auth, permissive security) that allow apps to run insecurely in production. Use when auditing…

针对退货授权、收货与检验、处理决策、退款处理、欺诈检测和保修索赔管理的体系化专业知识。由拥有15年以上经验的退货运营管理者总结提炼。包含定级框架、处理经济学、欺诈模式识别和供应商追偿流程。适用于处理产品退货、逆向物流、退款决策、退货欺诈检测或保修索赔等场景。

Comprehensive code review covering security vulnerabilities, performance bottlenecks, best practices, and refactoring opportunities. Use when user requests…

Create security architecture diagrams using PlantUML syntax with identity, encryption, firewall, and compliance stencil icons. Best for IAM flows, zero-trust…

Build production-ready Bright Data integrations with best practices baked in. Reference documentation for developers using coding assistants (Claude Code,…

Deep security review patterns for authorization logic, data access boundaries, action isolation, rate limiting, and protecting sensitive operations

Reconcile App Store Connect subscriptions and in-app purchases with RevenueCat products, entitlements, offerings, and packages using asc and RevenueCat MCP.…

Permission Set analysis, hierarchy viewer, and access auditing. TRIGGER when: user asks "who has access to X?", analyzes permission sets/groups, or touches .permissionset-meta.xml / .permissionsetgroup-meta.xml files. DO NOT TRIGGER when: creating new metadata (use sf-metadata), deploying permission sets (use sf-deploy), or Apex sharing logic (use sf-apex).

Command Line User Interface for Claude Code — a floating macOS desktop overlay with multi-tab sessions, permission approval UI, voice input, and skills…

Run a compliance check on a proposed action, product feature, or business initiative, surfacing applicable regulations, required approvals, and risk areas. Use…

Generates Mermaid diagrams from Trailmark code graphs. Produces call graphs, class hierarchies, module dependency maps, containment diagrams, complexity heatmaps, and attack surface data flow visualizations. Use when visualizing code architecture, drawing call graphs, generating class diagrams, creating dependency maps, producing complexity heatmaps, or visualizing data flow and attack surface paths as Mermaid diagrams.

当用户想要定义、审查或应用品牌战略——包括宗旨、价值观、定位、品牌故事、品牌语调和叙事（不仅限于视觉层面）时。也适用于……

Augments Trailmark code graphs with external audit findings from SARIF static analysis results and weAudit annotation files. Maps findings to graph nodes by file and line overlap, creates severity-based subgraphs, and enables cross-referencing findings with pre-analysis data (blast radius, taint, etc.). Use when projecting SARIF results onto a code graph, overlaying weAudit annotations, cross-referencing Semgrep or CodeQL findings with call graph data, or visualizing audit findings in the context of code structure.

Package an escalation for engineering, product, or leadership with full context. Use when a bug needs engineering attention beyond normal support, multiple…

Audit code for memory leaks and disposable issues. Use when reviewing event listeners, DOM handlers, lifecycle callbacks, or fixing leak reports. Covers…

Troubleshoot production issues using backend function logs. Use when investigating app errors, debugging function calls, or diagnosing production problems in…