Explorar skills

Audit an inherited or unfamiliar codebase systematically rather than ad-hoc. Covers scope discipline, day-0 triage, SAST and SCA tool recipes (semgrep, CodeQL, gitleaks, trivy), OWASP Top 10 mapped to grep patterns, auth-surface walkthrough, and writing reports that drive remediation. Invoke when inheriting a codebase, accepting an audit engagement, or reviewing AI-generated code before shipping.

Find, rotate, and prevent leaked credentials across repositories and disk. Covers leak detection with gitleaks and trufflehog, rotation order (the leaked secret first, then outward), git history purge with git-filter-repo, and prevention via pre-commit scanning. Invoke when a secret was committed to git, when a private repo went public, or as periodic audit.

Generates a professional GitHub repository social preview image sized 1280x640 pixels as a JPG under 1 MB. Always trigger immediately when the user's message starts with "gsp". Also trigger on "generate github social preview", "create repo preview image", or any request to generate a social preview or OG image for a GitHub repository.

Crie planos de treino estruturados, blocos de progressão e programação de fitness específica para os objetivos de Mick. Ative quando o usuário solicitar um programa de treino, plano de blocos, preparação para corrida, layout de temporada híbrida, divisão de exercícios, estratégia de progressão ou perguntar como treinar para objetivos como pull-ups, ciclismo, triatlo, ganho muscular ou perda de gordura.

Fluxo de trabalho de implementação de recursos com foco em skills para Claude, Codex e Gemini. Utilize quando o usuário solicitar a implementação de um recurso via PRD, TechSpec, Tarefas, verificação, commit local e entrega de branch. O pacote npm instala apenas os arquivos de skill; a skill do LLM executa o fluxo de trabalho.

Use this skill when the user wants to turn an invention idea into a structured invention disclosure, prior art search strategy, claim candidates, and provisional patent draft package. This skill is for patent drafting assistance only and must not provide legal advice or guarantee patentability.

Verify and process Stripe webhooks safely against the real-world failure modes. Covers signature verification against the raw body, idempotency keys, replay protection, event-type allowlists, the partial-refund and dual-currency traps, and re-fetching authoritative state from Stripe for real-money actions. Invoke when wiring webhooks for the first time, when adding a new event type, or after a pay

Analyze food photos, nutrition labels, and ingredient lists. Trigger on food images, nutrition label scans, macro questions, glycemic questions, medication interaction checks, and similar food-analysis requests.

Work safely in the Trading repository for Alpaca helpers, backtesting, journaling, scheduling, and related PowerShell modules. Prefer additive changes, preserve existing trading logic unless the user asks otherwise, and default to paper-trading-safe guidance.

Detect and contain WordPress compromises, then harden the install against re-entry. Covers webshell detection across the Sid Gifari, WSO, FilesMan, b374k and c99 families, backdoored mu-plugins, malicious admin accounts, and shared-hosting lateral-movement defense. Invoke when a WordPress site shows unexpected files, suspicious admin accounts, defaced pages, or when hardening a fresh install on sh

Crie ou otimize skills do Claude Code com estrutura de melhores práticas, recursos empacotados e padrões de engenharia de prompt.

LiteLLM proxy server setup, TypeScript client patterns via OpenAI SDK, model routing, fallbacks, load balancing, spend tracking, virtual keys, and production deployment