全部能力

使用 Vercel AI SDK v6 构建 React 聊天界面。涵盖 useChat/useCompletion/useObject hooks、消息分片结构、工具审批工作流，以及 18 种 UI 错误解决方案。预防 React Strict Mode、并发请求、闭包过期和工具审批边缘场景等文档记录问题。适用场景：实现 AI 聊天 UI、v5→v6 迁移、排查 "useChat failed to parse stream"、"stale body values"、"React maximum update depth"、"Cannot read properties of undefined (reading 'state')" 或工具审批工作流错误。

Quick install of the Google Workspace CLI (gws) on an additional machine using existing OAuth credentials. Requires client_secret.json from a previous…

Elite CI/CD pipeline engineer specializing in GitHub Actions, GitLab CI, Jenkins automation, secure deployment strategies, and supply chain security. Expert in…

将 .mmd 或 .md 文件中的 Mermaid 代码块转换为动态 GIF，支持自定义动画风格（渐进、高亮遍历、脉冲流动、波浪）。

Expert patterns for Neon serverless Postgres, branching, connection

Entry P1 category router for injection testing. Use when routing between XSS, SQLi, SSRF, XXE, SSTI, command injection, and NoSQL injection workflows based on how attacker-controlled input is consumed.

Expert guidance for using the GitLab CLI (glab) to manage GitLab issues, merge requests, CI/CD pipelines, repositories, and other GitLab operations from the…

Entry P1 category router for authentication and authorization. Use when testing login flows, sessions, object authorization, JWT, OAuth, CORS, CSRF, and enterprise SSO weaknesses before any deeper auth topic skill.

Perform relative value analysis on bonds by combining pricing, yield curve context, credit spreads, and scenario stress testing. Use when analyzing bond…

Entry P1 category router for reconnaissance and methodology. Use when mapping scope, discovering assets, fingerprinting technology, building endpoint inventory, and choosing the first high-value security testing path.

Authentication bypass testing playbook. Use when assessing login flows, password reset logic, account recovery, MFA bypass, token predictability, brute-force resistance, and session boundary flaws.

Convert UI screenshots into working HTML/CSS/React/Vue code. Detects design patterns, components, and generates responsive layouts. Use this when users provide…

Add Stripe payments to a web app — Checkout Sessions, Payment Intents, subscriptions, webhooks, customer portal, and pricing pages. Covers the decision of…

IDOR and broken object authorization testing playbook. Use when requests expose object identifiers, tenant boundaries, writable fields, or missing object-level authorization checks.

API 安全的 P1 分类入口路由。用于在任何更深层的 API 主题技能之前，在 API 侦察、授权、令牌滥用和隐藏参数工作流之间进行选择。

CSRF testing playbook. Use when reviewing state-changing web flows, anti-CSRF defenses, SameSite behavior, JSON CSRF, login CSRF, and OAuth state handling.

Generate a comprehensive marketing website for a web app — multi-page with real screenshots, animated GIF walkthroughs, feature deep-dives, and workflow…

Comprehensive guide for creating and managing skills in Claude Code with auto-activation system, following Anthropic's official best practices including the…

Build professional financial services data packs from various sources including CIMs, offering memorandums, SEC filings, web search, or MCP servers. Extract,…

You are an expert performance marketer with direct access to ad platform accounts. Your goal is to help create, optimize, and scale paid advertising campaigns…