一个技能，一个新的可能。找到适合你的 AI 工作流。
sql-injection-testing
【数据与研究】Execute comprehensive SQL injection vulnerability assessments on web applications to identify database security flaws, demonstrate exploitation techniques, and validate input sanitization mechanisms.
xss-html-injection
【开发与工程】Execute comprehensive client-side injection vulnerability assessments on web applications to identify XSS and HTML injection flaws, demonstrate exploitation techniques for session hijacking and credential theft, and validate input sanitization and output encoding mechanisms.
onboard-context-matic
【开发与工程】Interactive onboarding tour for the context-matic MCP server. Walks the user through what the server does, shows all available APIs, lets them pick one to explore, explains it in their project language, demonstrates model_search and endpoint_search live, and ends with a menu of things the user can ask the agent to do. USE FOR: first-time setup; "what…
editor-fluency
【开发与工程】Demonstrate fluency in code editors and IDEs — keybindings, refactoring tools, debugging workflows, and productivity extensions for VS Code, Vim, or JetBrains.
transfer-bridge
【开发与工程】After the learner demonstrates understanding of a concept, present near-transfer and far-transfer challenges. Use to test whether learning is portable or task-specific — this is what separates understanding from familiarity.
consent-record-keeping
【效率与协作】Guide for building a consent record-keeping system to demonstrate valid consent per GDPR Article 7(1). Covers required fields including timestamp, version, purpose, mechanism, and identity. Implements audit-ready consent receipts per the Kantara Initiative Consent Receipt Specification and supervisory authority expectations.
applying-privacy-design-patterns
【设计与创意】Systematic application of the eight privacy design patterns per Hoepman: minimize, hide, separate, abstract, inform, control, enforce, and demonstrate. Covers pattern selection methodology per processing activity, mapping to GDPR principles, and practical implementation guidance for privacy-by-design system architecture.
alibabacloud-bailian-managed-agent
【开发与工程】Explain, evaluate, demonstrate, provision, and integrate Alibaba Cloud Bailian Managed Agent (CMA / ManagedAgents). Use for Bailian Managed Agent product selection, sales pitches, customer solutions, hands-on PoCs, scheduled report agents, managed environments, and Python/Java backend integration. Prefer Bailian CLI (bl) for quick trials and resource…
pomodoro
【数据与研究】Simple Pomodoro timer for focused work sessions with session tracking and productivity analytics. Use when users request focus timers, ask about productivity patterns, or want to track work sessions over time. Demonstrates the System Skill Pattern (CLI + SKILL.md + Database).
trust-builder
【数据与研究】Analyzes web apps for free-value trust-building opportunities — features, tools, and offerings that demonstrate genuine utility before asking for commitment. Use this when the user says "trust builder", "trust audit", "find free offerings", "free value analysis", "trust building opportunities", or "how can I build trust with users". Explores the code…
curating-game-concept-portfolio
【数据与研究】Curates a supplied set of game ideas into a small mechanically diverse portfolio by normalizing prose into mechanism signatures, clustering structural duplicates, excluding demonstrated hard failures, comparing available evidence without treating missing data as zero, and selecting for coverage rather than one subjective score. Use for pitch triage, …
stress-testing-game-concepts
【设计与创意】Audits one or more game concepts, rule specs, or early prototypes adversarially for unreachable goals, dominant simple policies, agency collapse, irrelevant mechanics, reward exploits, and unsupported design claims while separating demonstrated defects from uncertainty. Use to challenge an existing game idea before implementation, review a ruleset, d…
sql-injection-testing
【数据与研究】ALWAYS use this when the request matches SQL Injection Testing: Execute comprehensive SQL injection vulnerability assessments on web applications to identify database security flaws, demonstrate exploitation techniques, and validate input sanitization mechanisms.
xss-html-injection
【开发与工程】ALWAYS use this when the request matches XSS Html Injection: Execute comprehensive client-side injection vulnerability assessments on web applications to identify XSS and HTML injection flaws, demonstrate exploitation techniques for session hijacking and credential theft, and validate input sanitization and output encoding mechanisms.
sprint-security-review
【开发与工程】Prepares sprint review and retrospective materials that demonstrate security alongside features: green build reports aggregating SAST/DAST/dependency scan results, completed security story summaries, and security metrics trends. Triggers on: "prepare sprint review", "green build report", "security metrics for this sprint", "demo our security work", "…
agentprivacy-understanding-as-key
【效率与协作】Understanding-as-authentication for 0xagentprivacy RPP. Activates when discussing proverb-based access control, demonstrated comprehension as credential, the Oracle verification pipeline, viewing key / signing key separation in knowledge verification, or how understanding replaces passwords.
api-fetch-wrapper
【开发与工程】Wrap a public HTTP API (Open-Meteo weather as the demo) with credential handling, error normalisation, and a single retry on transient network failures. Demonstrates the production-shaped baseline for any "skill that calls an external service" — env-based secrets, structured error output, no leaked API keys in logs, and a deliberate retry policy. The…
applying-privacy-design-patterns
【设计与创意】Systematic application of the eight privacy design patterns per Hoepman: minimize, hide, separate, abstract, inform, control, enforce, and demonstrate. Covers pattern selection methodology per processing activity, mapping to GDPR principles, and practical implementation guidance for privacy-by-design system architecture.