全部能力

Run the SPARC Architecture and Implementation phases — design module boundaries, write pseudocode, implement code, and run tests

Comprehensive React development guide covering component architecture, hooks, state management, TypeScript integration, useEffect patterns, and testing with…

Transform vague feature ideas into clear, testable requirements using EARS format. Capture user stories, define acceptance criteria, identify edge cases, and…

当你有针对多步骤任务的规范或需求时，在编写代码之前使用。

Extract the Supabase project URL from client-side JavaScript code, environment variables, and configuration files.

Notion CLI — manage pages and blocks, sync workspace to local SQLite, detect stale pages, and track changes. Trigger phrases: `find stale notion pages`, `sync…

Adds debugging capabilities and troubleshoots Pine Script issues in TradingView's opaque environment. Use when scripts have errors, unexpected behavior, need…

Attempt to list and read files from storage buckets to verify access controls.

API reference: Apple Human Interface Guidelines. Query for design patterns, UI components, accessibility, color, typography, layout, haptics.

Use when building, testing, and deploying JavaScript/TypeScript applications. Reach for Bun when you need to run scripts, manage dependencies, bundle code, or…

Production-grade backend APIs for Node.js, Python, Go, Rust, and C# with PostgreSQL. Use when building REST/GraphQL/tRPC services or auth.

Compare two security audit reports to track remediation progress and identify new vulnerabilities.

Generate end to end automated tests for existing features. Use when the user says "create qa automated tests for [feature]"

Use this skill when managing InsForge infrastructure with the CLI: projects, SQL, migrations, RLS policies, functions, storage buckets, frontend deployments, compute services, secrets/env vars, AI/OpenRouter key setup, Stripe payment keys/catalog/products/prices/webhooks, schedules, logs, diagnostics, import/export, **declarative auth redirect URLs via `insforge.toml`** (applied with `config apply`), or **managing backend branches** (creating a branch project to test risky schema/auth/RLS changes, merging a branch back to prod, resolving merge conflicts). For app code with @insforge/sdk, use the insforge skill instead.

Extract and decode Supabase-related JWTs from client-side code, cookies, and local storage patterns.

Master Solidity smart contract development with patterns, testing, and best practices

在实现完成、测试通过，且代码需要合入 main 分支时使用——通过启用自动合并的 PR（CI 正常时）或本地浅克隆合并（CI 故障时）进行。

This skill should be used when the user asks to "evaluate agent performance", "build test framework", "measure agent quality", "create evaluation rubrics", or…

CRITICAL - Detect if the Supabase service_role key is leaked in client-side code. This is a P0 severity issue.

Landing page and marketing page conversion rate optimization covering value proposition clarity, headline effectiveness, CTA hierarchy, visual flow, social proof placement, objection handling, and structured A/B testing.