Design e Frontend

Create a PRD through user interview, codebase exploration, and module design, then submit as a GitHub issue. Use when user wants to write a PRD, create a product requirements document, or plan a new feature.

Maps observed adversary behaviors, security alerts, and detection rules to MITRE ATT&CK techniques and sub-techniques to quantify detection coverage and guide control prioritization. Use when building an ATT&CK-based coverage heatmap, tagging SIEM alerts with technique IDs, aligning security controls to adversary playbooks, or reporting threat exposure to executives. Activates for requests involvi

Use when user experience, visual flow, interaction quality, or interface coherence needs a dedicated design-oriented pass.

Operational manual for AI agents using the Ornn skill-lifecycle API via direct HTTPS with a NyxID bearer token (`curl -H "Authorization: Bearer $TOKEN" …`). Once loaded, the host agent can search / pull / execute / build / upload / share skills end-to-end. Authoritative contract between Ornn and the agent. Pair this file with references/api-reference.md (the full per-endpoint catalogue + error leg

Create agent company packages conforming to the Agent Companies specification (agentcompanies/v1). Use when a user wants to create a new agent company from scratch, build a company around an existing git repo or skills collection, or scaffold a team/department of agents. Triggers on: \"create a company\", \"make me a company\", \"build a company from this repo\", \"set up an agent company\", \"cre

Use when a product flow needs interface structure, component planning, interaction details, or screen-level UX shaping before implementation.

User experience and conversion rate optimization audit. Activates when discussing conversion rate, user experience, bounce rate, form optimization, click-to-call, booking flows, analytics setup, conversion tracking, page layout, or converting visitors into leads. Phase 17. Output: {AUDIT_DIR}/cro-findings.md

Executes authorized phishing simulation campaigns to assess an organization's susceptibility to email-based social engineering attacks. The tester designs realistic phishing scenarios, builds credential harvesting infrastructure, sends targeted phishing emails, and tracks open rates, click-through rates, and credential submission rates to measure human security awareness. Activates for requests in

Structured guide for setting up A/B tests with mandatory gates for hypothesis, metrics, and execution readiness.

Identifying and validating cross-site scripting vulnerabilities using Burp Suite's scanner, intruder, and repeater tools during authorized security assessments.

Use esta skill para governança de operações do Microsoft Foundry e Azure AI Foundry: design de limites de recurso versus projeto, revisão de RBAC, planejamento de cotas, isolamento de rede, registro e execução segura de leitura ou escrita com suporte MCP.

Use when legacy prompts or older framework flows reference `tdd-guide` and you need the modern runtime to resolve that capability cleanly.