Loading...
Loading...
Found 3,708 Skills
Crea un guardrail o hook en el agente de programación que se está usando (Claude Code, OpenCode, Codex, Antigravity u otro) - detecta qué agente es, consulta su documentación oficial vigente sobre hooks y permisos, propone el guardrail, espera aprobación, lo configura de forma nativa y lo prueba provocando el evento. Use when the user asks to create, add, or configure a guardrail, hook, permission rule, or automatic block/check for their coding agent.
Codex 連接 Firebase MCP。說「連接 Firebase」時載入。
Define personalized persona for Claude Code. Trigger words: define persona, create identity, persona, role setting, CLAUDE.local.md
Guide for setup Context7 MCP server to load documentation for specific technologies.
Generate new Webflow Code Component boilerplate with React component, definition file, and optional styling. Automatically checks prerequisites and can set up missing config/dependencies.
Register a custom or variant model (e.g. an OpenRouter ":nitro" / ":floor" / ":exacto" slug) in the Pi Agent so it can be set as the global default. Use when Pi silently falls back to a different model (e.g. moonshotai/kimi-k2.6) after setting defaultModel, or when a model slug isn't in Pi's bundled list. Triggers on "Pi reset my model", "Pi won't use this model", "add a model to Pi", "Pi default keeps reverting".
Use only when explicitly invoked by name. Create or audit CODEOWNERS, issue and pull-request templates, contribution policy, and repository governance files from provider rules. Excludes hosted settings mutations, CI pipelines, AGENTS.md, and general README work.
Use when a repo already has an okteto.yaml / okteto.yml and the user wants it faster or reviewed — "make my okteto.yaml faster", "why is my dev environment slow to start or sync", "review this manifest for performance", "tighten the build / dev / test sections" — or when authoring the .dockerignore / .oktetoignore / .stignore files that go with a manifest. Do NOT use on a repo with no manifest yet: service discovery and the first draft belong to okteto-onboarding (optimize its draft here afterwards). Do NOT use to debug a broken environment (okteto-debugging) or to develop inside one (okteto).
Hunt HTTP request smuggling (CL.TE, TE.CL, H2.CL, H2.TE). Cause: front-end proxy and back-end server disagree on where one request ends and the next begins (Content-Length vs Transfer-Encoding header parsing inconsistency). CL.TE: front-end uses CL, back uses TE → smuggle by sending TE: chunked but with body that fits CL count. TE.CL: opposite. H2.CL: HTTP/2 downgrade, smuggle CL into HTTP/1.1 back-end. Detection tools: Burp HTTP Request Smuggler extension, smuggler.py, h2csmuggler. Confirm: time-delay technique (smuggled GET with 30s timeout) — if front-end returns slow on next victim request, smuggling works. Validate: cache poisoning chain (smuggle request that gets cached for victim), credential theft (smuggle X-Forwarded-For override that captures next user's cookies), bypass auth (smuggled internal-path request). Real paid examples from major CDN deployments. Use when hunting H1 paid programs running CDN+origin stacks, when targeting load balancer / WAF bypass.
Trigger: server artifacts, FXServer, txAdmin, server.cfg, gamebuild, sv_enforceGameBuild, update server, deploy, EOL, recommended build. Pick, pin and deploy a supported FXServer build.
Act on a codometer limit breach, a comment budget breach, a stale committed report, or a run that failed outright. Use when a codometer --check exits non-zero, when a size or count limit was breached, when a comment block ran past its word, line, or character budget, when a committed report reads stale against a fresh measurement even though nothing changed, when a limit fails to bind or an input matches no files, or before reaching for a repository's limit value to make a failing check pass.
Patterns for designing well-structured, maintainable Ansible playbooks with state-based (present/absent) design, play organization, and proper variable scoping.