全部能力

Lua development guidelines covering tables, metatables, error handling, game development, and performance optimization.

SAML SSO assertion attack playbook. Use when testing signature validation, assertion wrapping, audience restrictions, ACS handling, XML trust boundaries, and enterprise SSO flaws.

Generates unit tests, integration tests, and E2E tests for React/Next.js applications. Scans components to create Jest + React Testing Library test stubs,…

Creates Next.js frontends with shadcn/ui. Use when building React UIs, components, pages, or applications with shadcn, Tailwind, or modern frontend patterns.…

Clickjacking playbook. Use when testing whether target pages can be framed, whether X-Frame-Options or CSP frame-ancestors are properly configured, and whether UI redress attacks can trigger sensitive actions.

Best practices for CSS development including modern layout techniques, naming conventions, theming, and maintainable stylesheet architecture

Tailwind CSS v4 principles. CSS-first configuration, container queries, modern patterns, design token architecture.

Use when building cloud-native apps. Keywords: kubernetes, k8s, docker, container, grpc, tonic, microservice, service mesh, observability, tracing, metrics,…

Build responsive, accessible UI components and layouts using Chakra UI v3, install or configure Chakra UI in new and existing projects, and design scalable themes using tokens, semantic tokens, recipes, and slot recipes. Use this skill whenever a user asks to build, create, or generate any UI component, page, form, dashboard, navbar, card, landing section, pricing table, or layout using Chakra UI; wants to add Chakra UI to a project, set up ChakraProvider, run CLI snippets, configure color mode, or fix provider wrapping; or asks about theming — defining brand colors, design tokens, semantic tokens, dark mode values, component recipes, slot recipes, typegen, or ejecting the default theme. Trigger on any Chakra UI building, setup, or theming or charts request, however casually phrased — "add my brand colors", "make a reusable card style", "build a bar chart", "show me a line chart", "make me a login form", "build a sidebar", "add Chakra to my app".

使用 Vercel AI SDK v6 稳定版构建后端 AI。涵盖 Output API（替代 generateObject/streamObject）、语音合成、转录、嵌入、MCP 工具及安全指南。包含 v4→v5 迁移和 15 种错误解决方案及变通方法。适用场景：实现 AI SDK v5/v6、版本迁移、排查 AI_APICallError、Workers 启动问题、Output API 错误、Gemini 缓存问题、Anthropic 工具错误、MCP 工具或流恢复失败。

使用 HTML/CSS/JavaScript/React 构建高质量的可视化 Web 产物——包括网页、落地页、仪表盘、交互式原型、HTML 幻灯片、动画演示、UI 模型、数据可视化等。当用户的请求涉及可视化、交互式或前端交付物时，请使用此技能，包括： - 创建网页、落地页、仪表盘、营销页面 - 构建交互式原型或 UI 模型（带设备边框） - 构建 HTML 幻灯片/演示文稿 - 创建 CSS/JS 动画或基于时间轴的动画演示 - 将设计模型、截图或 PRD 转换为交互式实现 - 数据可视化（Chart.js / D3 等） - 设计系统 / UI Kit 探索 即使用户没有明确提及“HTML”或“网页”，只要其意图是生成可视化、交互式或用于展示的内容，均适用此技能。 不适用场景：纯后端逻辑、CLI 工具、数据处理脚本、非可视化代码任务、命令行调试。

Motion (Framer Motion) React animation library. Use for drag-and-drop, scroll animations, gestures, SVG morphing, or encountering bundle size, complex transitions, spring physics errors.

Choose the right Zoom building surface for a use case and explain the tradeoffs clearly. Use when deciding between REST API, Webhooks, WebSockets, Meeting SDK,…

Reference skill for Zoom Probe SDK. Use after routing to a preflight workflow when testing browser compatibility, media permissions, audio or video…

Supabase open-source Firebase alternative with Postgres, authentication, storage, and realtime subscriptions. Use when building full-stack applications…

Configure Ollama as embedding provider for GrepAI. Use this skill for local, private embedding generation.

Next.js with Supabase and Drizzle ORM

Decide when Zoom MCP is the right fit and produce a safe setup plan for Claude. Use when planning AI workflows over Zoom data, deciding between MCP and REST,…

Build financial models, backtest trading strategies, and analyze market data. Implements risk metrics, portfolio optimization, and statistical arbitrage.

iOS pentesting playbook. Use when testing iOS applications for keychain extraction, URL scheme hijacking, Universal Links exploitation, runtime manipulation, binary protection analysis, data storage issues, and transport security bypass during authorized mobile security assessments.