全部能力

Extract the Supabase anon/public API key from client-side code. This key is expected in client apps but important for RLS testing.

Production-grade backend APIs for Node.js, Python, Go, Rust, and C# with PostgreSQL. Use when building REST/GraphQL/tRPC services or auth.

Attempt to list and read files from storage buckets to verify access controls.

Reduces JS/TS bundle size via tree-shaking, code splitting, and unused dependency removal. Use when optimizing frontend bundle size.

Extract the Supabase project URL from client-side JavaScript code, environment variables, and configuration files.

Compare two security audit reports to track remediation progress and identify new vulnerabilities.

Extract and decode Supabase-related JWTs from client-side code, cookies, and local storage patterns.

Use this skill when managing InsForge infrastructure with the CLI: projects, SQL, migrations, RLS policies, functions, storage buckets, frontend deployments, compute services, secrets/env vars, AI/OpenRouter key setup, Stripe payment keys/catalog/products/prices/webhooks, schedules, logs, diagnostics, import/export, **declarative auth redirect URLs via `insforge.toml`** (applied with `config apply`), or **managing backend branches** (creating a branch project to test risky schema/auth/RLS changes, merging a branch back to prod, resolving merge conflicts). For app code with @insforge/sdk, use the insforge skill instead.

CRITICAL - Detect if the Supabase service_role key is leaked in client-side code. This is a P0 severity issue.

CRITICAL - Detect exposed PostgreSQL database connection strings in client-side code. Direct DB access is a P0 issue.

An SEO agent skill for quick, lightweight, default single-page SEO audits. Performs basic on-page and site-level checks and outputs a structured basic SEO audit report. Use when the user asks for "SEO audit", "SEO check", "check my page SEO", "page analysis", or wants a first-pass review of a URL. If the user requests "deep audit", "full report", "technical SEO audit", or "advanced SEO", use seo-audit-full instead.

Use this skill when designing backend systems, databases, APIs, or services. Triggers on schema design, database migrations, indexing strategies, distributed systems architecture, microservices, caching, message queues, observability setup, logging, metrics, tracing, SLO/SLI definition, performance optimization, query tuning, security hardening, authentication, authorization, API design (REST, GraphQL, gRPC), rate limiting, pagination, and failure handling patterns. Acts as a senior backend engineering advisor for mid-level engineers leveling up.

Replaces custom modules with OSS packages using atomic keep/discard testing. Use when migrating custom code to established libraries.

Performs comprehensive codebase analysis covering architecture, code quality, security, performance, testing, and maintainability. Use when user wants to audit…

Use when designing animations for banking apps, payment systems, investment platforms, or financial dashboards

End-to-end Stellar development playbook. Covers Soroban smart contracts (Rust SDK), Stellar CLI, JavaScript/Python/Go SDKs for client apps, Stellar RPC…

Cross-language clean code standard with stable CC-* rule IDs. Use when writing/reviewing code, defining team standards, or citing lint findings.

CloudBase (腾讯云开发) 适用场景：全栈 Web、微信小程序、静态托管、云函数、云托管、文档/MySQL 数据库、身份认证、云存储等。用于在 OpenClaw/Moltbot 下配置 CloudBase（mcporter + 提示词约束，无脚本、设备码登录）。

Systems programming expertise for Tauri desktop application backend development with memory safety and performance optimization

System administration for Linux servers. Manage packages, services, and system configuration. Use when administering Linux systems.