Explorar skills

Command-and-Control infrastructure hygiene for red teams — redirector architecture (HTTP/HTTPS/DNS), traffic shaping (sleep/jitter/staging), TLS-cert and domain aging, OPSEC checklist, and defensive detection opportunities mapped to ATT&CK Command and Control (TA0011).

Automate Openweather API tasks via Rube MCP (Composio). Always search tools first for current schemas.

Utilize quando o Codex precisar gerenciar repositórios GitHub usando o gh CLI ou as APIs do GitHub. Isso abrange desde issues, pull requests e CI do GitHub Actions até proteção de branch, auditoria de segurança e governança de repositórios.

Designs API contracts for consumer experience first — making correct usage obvious and incorrect usage impossible.

Profile and diagnose performance bottlenecks in web and backend applications. Activate whenever the user reports slow performance, asks about profiling tools, investigates memory leaks, needs to generate flame graphs, or is optimizing CPU or memory usage. Also activate when mentioning Chrome DevTools, cProfile, py-spy, pprof, or heap snapshots.

Next.js App Router patterns including server components, route handlers, middleware, parallel routes, intercepting routes, streaming, and caching strategies. Use when the user is building with Next.js 13+/14+/15+, asking about the App Router, server components vs client components, route handlers, Next.js middleware, or Next.js caching and revalidation. Trigger on any mention of Next.js, App Route

Análise de categorias de Mais Vendidos da Amazon para pesquisa e seleção de produtos de e-commerce. Ativa quando usuários analisam categorias da Amazon, encontram produtos de alto potencial, pesquisam concorrentes ou avaliam oportunidades de entrada no mercado.

Patterns for using TaskCreate, TaskUpdate, TaskList, and TaskGet to coordinate multi-step work. Use when the user has a complex project with multiple steps, needs progress tracking, dependency management, or multi-agent task assignment.

Red-green-refactor TDD cycle, test-first methodology, coverage targets (80%+), and test pyramid. Use when the user is implementing a new feature, fixing a bug, asks about TDD, or mentions writing tests before code. Always push for test-first.

API security review against OWASP API Top 10 2023. Covers auth (OAuth2/JWT/API-keys), object-level authorization (BOLA/IDOR), schema validation, rate-limiting, CORS, SSRF, and GraphQL-specific concerns (introspection, query depth, batching).

Build async FastAPI applications with async/await endpoints, background tasks, middleware, lifespan events, WebSockets, and streaming responses. Use when the user builds a FastAPI app, asks about async patterns, implements real-time features, or needs non-blocking I/O. Trigger when you see synchronous code in FastAPI that should be async.

Patterns for Claude tool use including tool definition schemas, multi-tool orchestration, parallel tool calls, error handling, and result formatting. Use when the user is defining tools for Claude, building agentic workflows with tool calling, handling tool errors, or implementing multi-step tool pipelines.