全部能力

Create C-suite and VP level resumes emphasizing strategic leadership

Use when building a Kubernetes Operator — custom controllers that reconcile CRD state. Triggers on "build an operator", "CRD design", "reconcile loop",…

Conventional Commits 1.0.0 + best-practice workflow for git commit messages that serve four readers — `git log` scanners, `git blame` tracers, `git bisect` hunters, and AI agents (LLMs rebuilding context after `/clear`, reviewing PRs, generating changelogs, answering natural-language history queries). Five founding principles (atomic / leaves-repo-green / why-over-what / imperative / searchable), five-step workflow (diff inspection → staging → type decision tree → secrets blocklist → pre-commit checklist), explicit Breaking-Change / Revert / Amend / Trailer protocols, and a dialect scaffolder that generates per-project `docs/references/COMMIT.md` for project-specific extensions (domain proper nouns, custom trailers like `Refs:` / `Flag:` / `Plan SC:`, workflow hooks like PDCA / Linear / Jira / squash-merge PRs). ALWAYS trigger this skill when the user: (1) asks to write, generate, or improve a commit message (2) pastes a commit-message draft for review or critique (3) asks "should I split this commit?" / "what type for this change?" / "is this breaking?" (4) is finishing a logical unit of work and about to run `git commit` (5) mentions stage / staging / amend / revert / fixup / cherry-pick in a commit-authoring context (6) asks how to set up PDCA / Linear / Jira-driven auto-commits (7) requests scaffolding a `COMMIT.md` dialect file for a project Triggers (multi-lingual): EN: commit, git commit, stage, commit message, breaking change, conventional commits, revert, fixup, amend, cherry-pick, changelog KO: 커밋, 깃 커밋, 스테이지, 커밋 메시지, 커밋 룰, 컨벤셔널 커밋, 리버트, 되돌리기, 어맨드, 커밋 컨벤션, 커밋 메시지 검토 JA: コミット, git コミット, ステージ, コミットメッセージ, ブレーキング チェンジ, リバート, アメンド ZH: 提交, git 提交, 暂存, 提交信息, 提交消息, 重大变更, 回滚, 修订 ES: commit, mensaje de commit, preparar, cambio incompatible, revertir FR: commit, message de commit, indexer, changement incompatible, revert DE: Commit, Commit-Nachricht, Staging, breaking change, revert IT: commit, messaggio di commit, modifica incompatibile, revert Do NOT trigger for: pure code generation unrelated to git, branch/merge/ rebase mechanics not about message authoring, CI/CD pipeline configuration, or non-git version-control systems. Audience: developers writing git commits. Use technical terms directly. Korean prose variant available at `lang/ko/SKILL.md` for Korean-first readers — the convention itself stays English-default regardless of variant.

Use when adding, retiring, or auditing feature flags. Triggers on "add a flag", "ship behind a flag", "rollout plan", "kill switch", "stale flags", "flag…

Pre-production audit that scans a codebase for security, database, deployment, code quality, AI/LLM, dependency, frontend, and observability issues. Intercepts deploy commands and blocks until critical items pass. Stack-agnostic. Use for "run ship gate", "am I ready to ship", "pre-launch audit", "can I deploy", "push to production", "go live checklist", "preflight check". Not for CI/CD setup or infra provisioning.

This skill should be used when the user asks to "search for exposed devices on the internet," "perform Shodan reconnaissance," "find vulnerable services using…

Rapid MVP development and feature prioritization for fast product validation. Use when building minimum viable products, prioritizing features, validating…

Generates service-specific configuration files for GitLab stack projects in ./config directory, using .env as the primary configuration source. Creates nginx,…

This skill should be used when the user asks to "search for exposed devices on the internet," "perform Shodan reconnaissance," "find vulnerable services using…

This skill should be used when the user asks to "test for directory traversal", "exploit path traversal vulnerabilities", "read arbitrary files through web…

Add OAuth authentication to MCP servers on Cloudflare Workers. Uses @cloudflare/workers-oauth-provider with Google OAuth for Claude.ai-compatible authentication. Prevents 9 documented errors including RFC 8707 audience bugs, Claude.ai connection failures, and CSRF vulnerabilities. Use when building MCP servers that need user authentication, implementing Dynamic Client Registration (DCR) for Claude.ai, or replacing static auth tokens with OAuth flows. Includes workarounds for production redirect URI mismatches and re-auth loop issues.

This skill should be used when the user asks to "add MCP server", "integrate MCP", "configure MCP in plugin", "use .mcp.json", "set up Model Context Protocol",…

This skill should be used when the user mentions "Taro" in any technical context, asks about "Taro API", "Taro components", "Taro configuration", "Taro…

Design REST and GraphQL APIs. Use when creating backend APIs, defining API contracts, or integrating third-party services. Covers endpoint design,…

UI components with shadcn-svelte and bits-ui. Component patterns, trigger snippets, dialog handling, and accessibility. Keywords: shadcn-svelte, bits-ui, Button, Dialog, Sheet, Popover, DropdownMenu, Tooltip, Form, Input, Select, child snippet, trigger pattern, cn utility

This skill should be used when the user asks to "use Metasploit for penetration testing", "exploit vulnerabilities with msfconsole", "create payloads with…

Comprehensive design architecture review for Python backend applications. Use this skill when users ask you to review, analyze, or provide feedback on backend…

Create new Claude Code Skills with proper YAML frontmatter, progressive disclosure structure, and complete directory organization. Use when you need to build…

This skill should be used when the user asks to "follow red team methodology", "perform bug bounty hunting", "automate reconnaissance", "hunt for XSS…

This skill should be used when the user asks to "test API security", "fuzz APIs", "find IDOR vulnerabilities", "test REST API", "test GraphQL", "API…