全部能力

GDPR and German DSGVO compliance automation. Scans codebases for privacy risks, generates DPIA documentation, tracks data subject rights requests. Use for GDPR compliance assessments, privacy audits, data protection planning, DPIA generation, and data subject rights management.

Comprehensive security review framework for AI agents. Covers skill/MCP installation, GitHub repos, URLs/documents, on-chain addresses, products/services, and…

Use when starting a new project, adding a new agent to an existing system, or setting up workflow infrastructure from scratch.

Use when a single agent demonstrably cannot handle the task and multi-agent coordination is justified.

Screen resumes efficiently against job requirements with structured scoring, red flag identification, and interview recommendations

Writes PRDs and specs optimized for coding assistants. Use when authoring requirements or project context for Claude Code, Cursor, or Copilot.

Expert SurrealDB 3 architect and developer skill. SurrealQL mastery, multi-model data modeling (document, graph, vector, time-series, geospatial), schema…

Use when the agent needs access to information beyond its training data — knowledge sources, RAG pipelines, or grounding data.

Automated vulnerability scanner for agent platforms. Performs dependency scanning (npm audit, pip-audit), multi-database CVE lookup (OSV, NVD, GitHub…

Use when the user wants to create templates, extract reusable patterns, document solutions, or build a pattern library from working workflows.

For contributors to angular-best-practices. Reviews and audits rule files for accuracy, validity, and formatting compliance. Not for Angular application development — install angular-best-practices instead.

Monitors customer health, predicts churn risk, and identifies expansion opportunities using weighted scoring models for SaaS customer success

Centralized help URL reference for accessibility remediation. Maps axe-core rule IDs to Accessibility Insights info-examples pages, document rule IDs to…

Single-pass codebase analysis leveraging Opus 4.6 1M context for comprehensive security scanning, architecture review, and dependency auditing. Loads entire…

OrchestKit security wrapper for browser automation. Adds URL blocklisting, rate limiting, robots.txt enforcement, and ethical scraping guardrails on top of the…

next-forge expert guidance — production-grade Turborepo monorepo SaaS starter by Vercel. Use when working in a next-forge project, scaffolding with `npx…

Specification-driven feature development with auto-sized depth. Produces spec.md, design.md, and tasks.md artifacts with requirements traceability, plus verify and audit phases tied to acceptance criteria. Use when planning a feature, breaking a change into tasks or stories, implementing a named story or task, verifying implementation against acceptance criteria, auditing goals before closing, or turning a PRD into engineering artifacts. Triggers: "plan this feature", "spec this feature", "turn this PRD into a spec", "break this into tasks/stories", "create technical design", "implement story S-1", "implement task T-1", "verify implementation", "check acceptance criteria", "audit feature", "audit this spec", "validate goals", "UAT", "manual testing", "discuss this feature", "show feature status", "quick fix", "quick task", "quick mode", "small change", and known one-line fixes where the user names file and line. Not for diagnosing unknown bugs, authoring standalone PRD/RFC/ADR/TDD documents, PR/commit mechanics, or PM backlog tracking.

Harden SSH configuration on VPS servers by disabling root login, enforcing SSH key authentication, and creating non-root sudo users to prevent unauthorized…

Creates Cursor-specific AI subagents with isolated context for complex multi-step workflows. Use when creating subagents for Cursor editor specifically,…

Connect to Gmail and Google Calendar via OAuth 2.0. Use when users want to search/read emails, create drafts, search calendar events, check availability, or…