全部能力

Autonomously optimize code for performance using CodSpeed benchmarks, flamegraph analysis, and iterative improvement. Use this skill whenever the user wants to…

Set up performance benchmarks and CodSpeed harness for a project. Use this skill whenever the user wants to create benchmarks, add performance tests, set up…

Create and evolve design systems with design tokens, component architecture, accessibility guidelines, and documentation templates. Ensures consistent,…

Review a project's PRs to check for issues detected in code review by Seer Bug Prediction. Use when asked to review or fix issues identified by Sentry in PR…

Generates Postman collection JSON files from Express, Next.js, Fastify, Hono, or other API routes. Scans route definitions, extracts endpoints, methods,…

UI design system toolkit for Senior UI Designer including design token generation, component documentation, responsive design calculations, and developer…

Security best practices for backend development, microservices, and secure coding patterns with emphasis on input validation and authentication

Build with Firebase Authentication - email/password, OAuth providers, phone auth, and custom tokens. Use when: setting up auth flows, implementing sign-in/sign-up, managing user sessions, protecting routes, or troubleshooting auth/invalid-credential, auth/popup-closed, auth/user-not-found, or token refresh errors. Prevents 12 documented errors.

Four slash commands for documentation lifecycle: /docs, /docs-init, /docs-update, /docs-claude. Create, maintain, and audit CLAUDE.md, README.md, and docs/ structure with smart templates. Use when: starting new projects, maintaining documentation, auditing docs for staleness, or ensuring CLAUDE.md matches project state.

Master the complete penetration testing lifecycle from reconnaissance through reporting. This skill covers the five stages of ethical hacking methodology,…

使用 Model Studio DashScope SDK 通过 Qwen 图像生成模型（qwen-image、qwen-image-plus、qwen-image-max、qwen-image-2.0 系列及…

Use when adding authentication to Angular applications with route guards and HTTP interceptors - integrates @auth0/auth0-angular SDK for SPAs

Build secure, scalable authentication and authorization systems using industry-standard patterns and modern best practices.

测试 Web 应用的 WCAG 合规性，确保残障用户的使用体验。适用于无障碍测试、a11y、axe、ARIA、键盘导航、屏幕阅读器兼容性和 WCAG 验证。

Expert in React Native, Expo, and cross-platform mobile development

针对漏洞赏金和渗透测试中的 REST、SOAP 和 GraphQL API 提供全面的测试技术。涵盖漏洞…

Zero-config animations for React, Vue, Solid, Svelte, Preact with @formkit/auto-animate (3.28kb). Prevents 15 documented errors including React 19 StrictMode bugs, SSR imports, conditional parents, viewport issues, drag & drop conflicts, and CSS transform bugs. Use when: animating lists/accordions/toasts, troubleshooting SSR animation errors, React 19 StrictMode issues, or need accessible drop-in transitions with auto prefers-reduced-motion.

Provide a comprehensive command reference for penetration testing tools including network scanning, exploitation, password cracking, and web application…

Use when working with Payload CMS projects (payload.config.ts, collections, fields, hooks, access control, Payload API). Use when debugging validation errors,…

Teaches React Server Components for zero-bundle server rendering. Use when components only need server-side data access and don't require client-side…