Explorar skills

Realiza auditoria de segurança defensiva pré-entrega para projetos Claude Code, cobrindo web, mobile (MASVS), cloud/IaC, web3 e ML/AI em 18 linguagens e 34 frameworks. Gera um relatório Markdown com score, attack chains, achados detalhados e fixes copy-paste, ativada quando o desenvolvedor solicita uma revisão de segurança antes do deploy.

Bayesian modeling in R with brms, rstanarm, priors, diagnostics, posterior checks, and model comparison.

Generates a project plan from the approved charter, scope, and optional duration/resource estimates. The plan is the first artifact of the Planning phase. Once approved, it unlocks: generate-risk-register (mode: detailed) and generate-comm-plan (can run in parallel). Accepts both structured estimates and free-form descriptions. Triggers RU: «сформируй план проекта», «подготовь план», «составь proj

Root cause analysis for software bugs in large legacy codebases. Use this skill WHENEVER the user asks WHY a bug happens, asks for RCA, mentions root cause analysis, says /bug.why, /bug.investigate, asks "why is this failing", "find the root cause", "trace this exception", "investigate this bug", "post-incident review", or pastes a stack trace, error log, exception, NullReferenceException, SqlExce

Use when asked for "deep research", "thorough analysis", "comprehensive report", "investigate", "due diligence", or when multiple sources are needed to answer complex questions. Produces well-sourced research reports through iterative refinement.

{{ 𝛀𝛀𝛀 }} Investigate a codebase in detail

Systematic 5-step debugging flow for Next.js 15 + React 19 + TypeScript apps. Load when a UI bug is reported, hydration error appears, Server Action returns wrong data, or cache invalidation fails. Forces layer isolation (server vs client, action vs component, cache vs render) before touching code — prevents "fix here, break there" cascades.

Invoke any time a user is writing iOS/Swift tests or asking why tests behave a certain way — including XCTest versus Swift Testing (@Test/#expect) choices, async ViewModel tests with @Observable or @Published, snapshot testing across device sizes, mocking protocols for dependency injection, setUp/tearDown lifecycle issues, tests that fail on CI but pass locally, flaky async tests, testing VIPER/TC

Um motor anti-clichê para escrita de IA que, com um método de escrita central (3 tipos de núcleo), 7 ferramentas, 7 verificações de qualidade e técnicas "golden finger", garante que romances gerados por IA não tenham um "sabor de IA". Validado em 47 capítulos, é compatível com Claude Code, Cursor e Windsurf.

Use when designing, building, or troubleshooting solutions on SAP Business Technology Platform — subaccounts, Cloud Foundry, Kyma, CAP, HANA Cloud, XSUAA, destinations, or any BTP service.

Check domain availability (Available/Taken) for any TLD with confidence scoring, SSL certificate inspection, and IP resolution. Uses 5+ sources in parallel — RDAP, WHOIS (TLD-specific patterns for 30+ ccTLDs/gTLDs, IANA fallback for unknown TLDs), authoritative DNS NS lookup as GDPR tiebreaker for .de/.eu/.at/.ch/.es, DNS A/AAAA, HTTP reachability, and TLS certificate validation. Returns a clear b

Use for quality controlling content drafts inside an SEO agency. Runs AI detection, humanizes via Walter if needed, checks keyword preservation, and produces a QC summary with ready-to-publish recommendation.