AI Agent Skills

End-of-session ritual — audit today's patterns against accumulated memory, propose promotions, refresh MEMORY.md, and write the session handoff. Use when the user says "…

Audit MEMORY.md against the memory discipline — oversized sections, settled multi-session patterns that belong in knowledge/concepts/, session-headed chronicle blocks, r…

Harden an existing prototype for real use, including failure states, accessibility, security boundaries, and maintainability.

Review and fix Gemini API usage against Google's official best practices. Use when modifying src/core/gemini.ts, adding new API calls, or auditing Gemini integration qua…

Java Web 源码反序列化漏洞审计工具。覆盖 Java 原生反序列化、Fastjson/Jackson/XStream/Hessian/JNDI/SnakeYAML 等反序列化入口检测，结合 classpath gadget 链分析进行利用链评估。适用于：(1) 识别反序列化入口点，(2) 检测 classpath 中已知 gadg…

Java Web 源码文件上传漏洞审计工具。用于从源码中识别所有文件上传入口并检查上传路径、文件名处理与校验逻辑漏洞。适用于：(1) 识别 Servlet/Commons FileUpload 与 Spring Boot MultipartFile 上传实现，(2) 发现任意文件上传、路径穿越与可执行文件上传漏洞，(3) 检查文件名/目…

Java Web 源码路由与参数映射分析工具。从源码中提取**所有** HTTP 路由和参数结构，并自动保存为 MD 文档。适用于：(1) 无 API 文档的项目完整接口梳理，(2) 下游漏洞审计 Skill 的路由数据源，(3) 源码端点完整分析。支持 Spring MVC、Servlet、JAX-RS、Struts 2、CXF We…

Master orchestrator for 230+ AWS agent skills from official AWS repositories. Use when working with ANY AWS service, architecture, operations, security, cost op

Master orchestrator for 85+ Google Cloud Platform agent skills from official Google repositories. Use when working with ANY GCP service, architecture, infrastru

For a new TeamWorkflow installation, binding refresh, or drift audit after a pack release, inspect and bind the project workflow. Reuse explicit recorded decisions with…

Configure rate limiting, manage auth secrets, set up CSRF protection, define trusted origins, secure sessions and cookies, encrypt OAuth tokens, track IP addresses, and…

Author-guideline skill for Agriculture & Food Security (BMC / Springer Nature, open access). Use to format or check a manuscript for this BMC journal — structure, mandat…

Give cited, advisory-only Splunk app and add-on lifecycle guidance and assess supplied compatibility, installation, upgrade, validation, deprecation, migration, and remo…

Assess Splunk-related advisories, CVEs, scanner or package findings, remediation and exception evidence, and vulnerability or compliance readiness. Use when Splunk admin…

Reviews risky/notable assumptions and context gaps surfaced by implementor session reports, fixes high-confidence issues directly, and asks one clarifying question at a…

Audits your session for assumptions and context gaps — things only a human can act on. Use when the user says "session report", "review assumptions", "what did you strug…