Loading...
Loading...
Found 1,398 Skills
Run Semgrep SAST scans on code. Supports 30+ languages with OWASP, security, and custom rulesets. Parses results and provides remediation guidance.
Run Flawfinder SAST scans on C/C++ code. Detects buffer overflows, format string vulnerabilities, race conditions, and other memory safety issues.
Run gosec SAST scans on Go code. Detects SQL injection, hardcoded credentials, insecure TLS, command injection, and other Go security issues.
Use when scanning external trends for strategic planning, monitoring PESTLE forces (Political, Economic, Social, Technological, Legal, Environmental), detecting weak signals (early indicators of change), planning scenarios for multiple futures, setting signposts and indicators for early warning, or when user mentions environmental scanning, horizon scanning, trend analysis, scenario planning, strategic foresight, futures thinking, or emerging issues monitoring.
Security auditing for code vulnerabilities (OWASP Top 10, XSS, SQL injection) and dependency scanning (pnpm audit, Snyk). Use when handling user input, adding authentication, before deployments, or resolving CVEs.
A portable, reproducible UI/UX spec standard: scan a frontend repo for UI sources and scaffold a ui-ux-spec documentation bundle (tokens, global styles, components, patterns, pages, a11y). Also supports plan-driven UI-only refactors based on an existing ui-ux-spec. Excludes business logic and domain workflows.
Expert partnership marketing guidance for building and scaling partner programs, co-marketing campaigns, and channel ecosystems. Use when developing partner strategy, creating co-marketing content, designing partner tiers, building affiliate programs, positioning in integration marketplaces, enabling channel partners, planning joint webinars, or structuring revenue sharing. Use for technology partnerships, reseller programs, strategic alliances, and partner relationship management.
Scaffold a LaTeX project (`latex/main.tex`, bibliography wiring, structure) from an existing Markdown draft and `citations/ref.bib`. **Trigger**: latex scaffold, md→tex, LaTeX 项目骨架, 生成 main.tex. **Use when**: 需要 LaTeX/PDF 交付（例如 arxiv-survey-latex pipeline），且 draft 已生成/已进入写作阶段。 **Skip if**: 还没有 `output/DRAFT.md`（或你不需要 LaTeX 交付）。 **Network**: none. **Guardrail**: 移除 markdown 残留（`##`, `**`, `[@...]`）；bibliography 指向 `citations/ref.bib`；不在此步骤改写内容。
Patterns and best practices for using Lakebase Autoscaling (next-gen managed PostgreSQL) with autoscaling, branching, scale-to-zero, and instant restore.
Use when evaluating business model viability, analyzing profitability per customer/product/transaction, validating startup metrics (CAC, LTV, payback period), making pricing decisions, assessing scalability, comparing business models, or when user mentions unit economics, CAC/LTV ratio, contribution margin, customer profitability, break-even analysis, or needs to determine if a business can be profitable at scale.
Extract and structure personal context from AI chat transcripts into themed markdown files. Use when (1) Processing Claude, Claude Code, or other AI conversation exports, (2) Building personalized AI assistants from chat history, (3) Creating context files for Claude Projects, GPTs, or Gems, (4) Consolidating scattered knowledge from multiple conversations. Optimized for Claude Haiku.
Template management system for code boilerplates, feedback templates, scaffolding, and project optimization workflows. Use when creating code templates, generating boilerplate files, managing project scaffolding, optimizing template performance, or preparing GitHub issue templates. Do NOT use for SPEC document creation (use moai-workflow-spec instead) or documentation generation (use moai-workflow-project instead).