Security First
Skills with the best security audit scores
Showing 6,841–6,900 of 13,197 skills · Page 115 of 220
borghei / write-a-skill
817Author, lint, and publish skill packages that satisfy the library authoring standard
borghei / operations-manager
817Operations management across process optimization, efficiency, and continuous improvement
borghei / people-analytics
817People analytics across workforce metrics, predictive modeling, and employee insights
borghei / talent-acquisition
817Talent acquisition across recruiting strategy, sourcing, interviews, and hiring analytics
borghei / contract-review
817Contract review assistant analyzing agreements against playbooks. GREEN/YELLOW/RED severity
borghei / legal-canned-responses
817Generate templated responses for common legal inquiries with escalation detection
borghei / legal-meeting-briefing
817Prepare structured briefings for meetings with legal relevance and track action items
decebals / clean-code
747Clean Code principles (DRY, KISS, YAGNI), naming, function design and readability
decebals / design-patterns
747Common design patterns with Java examples (Factory, Builder, Strategy, Observer, Decorator, etc.)
decebals / java-migration
747Guide for upgrading Java projects between major versions (8→11→17→21→25)
decebals / jpa-patterns
747JPA/Hibernate patterns and common pitfalls (N+1, lazy loading, transactions, queries)
Snowflake-Labs / cocoscout
722Relevance-ranked context loading — Tier 2 async subagent (Haiku, <5s) that fires after Tier 1 deterministic checks in UserPromptSubmit. Injects ranked context from CocoGrove, CocoContext, Environment Inspector, Prompt Studio, and CocoDream.
staruhub / wechat-article-writer
722专业微信公众号文章助手,支持四个独立且可组合模式:article 写正文;image-prompts 从文章生成版本化、provider-neutral 的图片提示词 manifest 与稳定占位符,但不调用生图;layout 把文章和 manifest 确定性转换为微信安全的内联 HTML;full-pipeline 串联正文、提示词/占位符和排版。用户提到公众号、微信文章、推文、配图提示词、图片 manifest、公众号排版、内联 HTML 或完整图文流水线时触发。支持企业官号、个人技术博客、活动回顾和产品评测。不用于:带引用的研究报告(用 deep-research)、PPT/组图(用…
nexscope-ai / amazon-product-photography
712Plan shoot-ready Amazon product photography, listing image sets, infographics, lifestyle scenes, and production briefs
product-on-purpose / tool-note-and-vote
697Structured group-decision mechanic that captures silent ideation, voting summaries, and Decider sign-off in a single bundled artifact
product-on-purpose / utility-pm-skill-builder
697Guides contributors from a PM skill idea to a complete Skill Implementation Packet aligned with pm-skills conventions. Runs gap analysis, validates through a Why Gate, classifies by type and phase, generates draft files, and writes to a staging area for review before promotion.
product-on-purpose / utility-update-pm-skills
697Checks for newer pm-skills releases, compares local vs. latest version, previews what would change, and updates local files after user confirmation. Generates a structured update report documenting changed files, new capabilities, and the value delta between versions
Ar9av / paper-autoraters
664Run the four paper-quality autoraters from PaperOrchestra (arXiv:2604.05018, App. F.3) — Citation F1 (P0/P1 partition + Precision/Recall/F1), Literature Review Quality (6-axis 0-100 with anti-inflation rules), SxS Overall Paper Quality (side-by-side), and SxS Literature Review Quality (side-by-side)…
Ar9av / plotting-agent
664Step 2 of the PaperOrchestra pipeline (arXiv:2604.05018). Execute the visualization plan from outline.json — render plots and conceptual diagrams from experimental_log.md and idea.md, optionally refine via VLM critique loop, and produce context-aware captions.
aiworkskills / aws-wechat-article-images
639公众号封面|公众号配图|公众号插图|AI 生图 — 公众号 AI 封面与配图生成,按文章标题与内容自动匹配画风,一稿多方案,多风格预设可复用。面向公众号编辑、自媒体、品牌设计。触发词:「封面」「配图」「插图」「生成图片」「给文章加图」「做个封面」「文章插图」「配个图」。不写正文只发一组图请走 aws-wechat-sticker;需要多环节串联(写+审+排+配图+发)请走 aws-wechat-article-main。
aiworkskills / aws-wechat-article-review
639公众号审稿|公众号校对|敏感词检测|内容合规 — 公众号发布前合规审查:敏感词扫描、错别字检测、政治合规、平台规范校验,一次性输出修改清单。面向公众号编辑、自媒体作者、合规岗。触发词:「审稿」「审核」「校对」「合规」「敏感词」「错别字」「稿子检查一下」「稿子帮我看看」「稿子写完了」「文章检查一下」「检查下有没有问题」「能不能发」「发布前检查」。需要多环节串联(写+审+排+配图+发)请走 aws-wechat-article-main。
aiworkskills / aws-wechat-article-writing
639公众号写稿|长文写作|文章润色|改写续写 — 公众号长文 AI 写作,从话题或提纲生成完整初稿,支持改写、续写、润色、开头结尾优化,可调 DeepSeek / GPT / Claude 或由 Agent 代写。面向自媒体作者、公众号运营、品牌文案。触发词(**单独触发仅限对已有稿子的修改**):「改写」「润色」「续写」「续一段」「往下写」「接着这段写」「重写开头」「改结尾」「调整语气」「这段润色下」「把这段改活泼点」「优化用词」「用 GPT 重写」「用 DeepSeek 重写」。新写一篇请走 aws-wechat-article-main(main 内部会调用本 skill 生成初稿);需要多…
firecrawl / firecrawl-search
639Find web sources with query-relevant page excerpts and optional full-page content, and discover workflows, data APIs, and indexes. Use for web research or finding structured records, listings, transcripts, and datasets.
nWave-ai / nw-architectural-styles-tradeoffs
617Architectural style selection decision matrices, trade-off analysis, structural enforcement rules, and combination patterns. Load when choosing or evaluating architecture styles.
nWave-ai / nw-ddd-strategic
617Strategic DDD — bounded context discovery, context mapping patterns, subdomain classification, ubiquitous language, and organizational alignment
nWave-ai / nw-devops
617Designs CI/CD pipelines, infrastructure, observability, and deployment strategy
nWave-ai / nw-discuss
617Conducts Jobs-to-be-Done analysis, UX journey design, and requirements gathering through interactive discovery
nWave-ai / nw-divio-framework
617DIVIO/Diataxis four-quadrant documentation framework - type definitions, classification decision tree, and signal catalog
nWave-ai / nw-formal-verification-tlaplus
617TLA+ and PlusCal for specifying distributed system invariants. Decision heuristics for when formal verification adds value, key patterns, state explosion management, and alternatives comparison.
nWave-ai / nw-infrastructure-and-observability
617Infrastructure as Code patterns (Terraform, Kubernetes), observability design (SLOs, metrics, alerting, dashboards), and pipeline security stages. Load when designing infrastructure, observability, or security scanning.
nWave-ai / nw-jtbd-opportunity-scoring
617JTBD opportunity scoring and prioritization - outcome statement format, opportunity algorithm, scoring interpretation, feature prioritization, and opportunity matrix template
nWave-ai / nw-outcome-kpi-framework
617Outcome KPI definition methodology - synthesizes Who Does What By How Much (Gothelf/Seiden), Running Lean (Maurya), and Measure What Matters (Doerr) into a practical framework for measurable outcome KPIs
nWave-ai / nw-sd-patterns-advanced
617Advanced distributed patterns - event sourcing, CQRS, saga, stream processing, append-only log, exactly-once delivery, sequencer, double-entry ledger, erasure coding, order book, watermarks
nWave-ai / nw-security-and-governance
617Database security (encryption, access control, injection prevention), data governance (lineage, quality, MDM), and compliance frameworks (GDPR, CCPA, HIPAA)
nWave-ai / nw-taste-evaluation
617Design taste evaluation framework — DVF primary filter, Apple/Google/Jobs design principles as explicit scoring criteria, weighted decision matrix, and option ranking for the DIVERGE wave
nWave-ai / nw-ux-tui-patterns
617Terminal UI and CLI design patterns for product owners. Load when designing command-line tools, interactive terminal applications, or writing CLI-specific acceptance criteria.
anombyte93 / discover
603Phase 1 of the prd-taskmaster pipeline: brainstorm-driven discovery. Delegates to superpowers:brainstorming in Interactive Mode (one adaptive question at a time), or self-brainstorms in Autonomous Mode when no user is present.
vibeeval / api-patterns
535API design, versioning, testing, schema validation, and contract testing patterns for REST and GraphQL APIs.
vibeeval / competitive-analysis
535Competitive analysis - feature matrix, SWOT, market positioning, benchmark.
vibeeval / developer-relations
535Developer relations - community building, documentation, DevRel metrics.
vibeeval / growth-engineering
535Growth engineering - PLG, referral, viral loops, onboarding optimization.
posit-dev / r-cran-extrachecks
521Prepare R packages for CRAN submission by checking for common ad-hoc requirements not caught by devtools::check()
posit-dev / r-mirai
521Help users write correct R code for async, parallel, and distributed computing using mirai
bitwize-music-studio / lyric-writer
512Writes or reviews lyrics with professional prosody, rhyme craft, and quality checks
bitwize-music-studio / mastering-engineer
512Guides audio mastering for streaming platforms including loudness optimization and tonal balance
bitwize-music-studio / promo-writer
512Generates platform-specific social media copy from album themes, track concepts, and lyrics
aiskillstore / igce-builder-cr
428Trigger for: cost-reimbursement IGCE, CR cost estimate, CPFF, CPAF, CPIF, cost-plus estimate, BAA estimate, fixed-fee analysis, award-fee analysis, incentive-fee analysis, proposed CR rate validation, cost-pool buildup, share-ratio scenario, price-reasonableness memo, or fair-and-reasonable analysis…
aiskillstore / igce-builder-ffp
428Trigger for: FFP IGCE, firm-fixed-price estimate, FFP cost model, proposed FFP rate validation, wrap-rate analysis, Agency BPA rate comparison, price-reasonableness memo, or fair-and-reasonable analysis.
aiskillstore / igce-builder-lh-tm
428Trigger for: Labor-Hour IGCE, LH estimate, Time-and-Materials IGCE, T&M estimate, burdened hourly rate, burden multiplier, labor-category ceiling hours, materials estimate, proposed LH/T&M rate validation, price-reasonableness memo, or fair-and-reasonable analysis.
aiskillstore / market-research-workflow
428Trigger for: federal acquisition market research; FAR Part 10 reports; refreshing an existing market research report; analyzing commerciality, competition, small-business availability, contract type, consolidation, prior awards, vendors, or market conditions; or preparing supported findings for a Pr…
tobihagemann / resolve-pr-comments
405Evaluate, fix, answer, and reply to GitHub pull request review comments and conversation comments. Handles both change requests (fix or skip) and reviewer questions (explain using the rationale recalled from past Claude Code transcripts)
tobihagemann / smoke-test
405Launch the app and hands-on verify that it works by interacting with it. Falls back to an existing integration test suite when there is no interactive surface in scope
jamditis / brazil-records-requests
402Public records requests under Brazil's Access to Information Law (LAI). Use for Fala.BR filings, e-SIC, and CGU/CMRI appeals.
jamditis / brainstorming
402Explores intent and design before implementation. MUST use before creating or modifying any feature, component, or behavior.
hypnguyen1209 / red-team-ops
377Use when running a full red-team engagement end-to-end — initial access, persistence, privilege escalation, defense evasion, C2 infrastructure, EDR bypass, living-off-the-land
AThevon / mobile-principles
370Mobile-specific UX principles - touch targets, hover-less doctrine, thumb zones, safe areas, gestures, mobile perf budgets. Cross-platform (web mobile, iOS, Android).
AThevon / orchestration
370Running a team of subagents on one design build: clone briefs, disjoint file ownership, isolated builds, the evidence packet, review lenses, the fix plan, verdicts, cold eyes and the stop rule, with the workflow templates bunshin runs.
staskh / ib-stop-loss
369Downside stop-loss management for PMCC, naked LEAPS, and stock positions in IB. Computes stop prices, detects alerts, and places conditional combo orders. Dry-run by default. Requires TWS or IB Gateway running locally.
staskh / ib-trailing-stop
369Server-side trailing stop management for stocks and naked LEAPS in IB. Places native TRAIL orders that auto-ratchet the stop as price climbs. Dry-run by default. Requires TWS or IB Gateway running locally.
jaechang-hits / statistical-significance-annotation
367Guide for annotating statistical significance (p-value asterisks) on comparison plots. Covers standard notation (ns, *, **, ***, ****), matplotlib bracket+asterisk implementation, and use with seaborn box/violin/bar plots