Explorar skills

Assess Linux and Windows privilege escalation vectors from existing authorized footholds.

Writes clear, thorough pull request descriptions from a diff or list of changes.

Use when the user wants a security audit, vulnerability scan, or asks about potential security issues.

Ask OpenCode anything — brainstorm, delegate tasks, get a second opinion

Designs RESTful API endpoints following OpenAPI spec and industry best practices.

Designs a secure authentication and authorization flow for any application, covering login, sessions, roles, and edge cases.

Reviews SQL queries for performance issues and rewrites them with optimized execution plans.

Use when you need to **measure** (not just describe) brand citation frequency across AI search surfaces over time. Runs a configurable brand-mention prompt set weekly against ChatGPT (OpenAI API), Perplexity (Sonar API), and optionally Google AI Mode / AI Overviews / Bing Copilot / Claude.ai (manual workflow). Stores NDJSON history for trend analysis. Triggers from "track AI citations", "AI Overvi

Gerenciamento abrangente para stacks de mídia auto-hospedadas, oferecendo exploração profunda da biblioteca, análises, gerenciamento de conteúdo e solicitações, controle de indexadores, monitoramento de downloads e sincronização de perfis de qualidade.

Expert FinOps guidance covering cloud, AI, SaaS, and adjacent technology spend. Includes AI cost management, GenAI capacity planning, AI-powered FinOps automation, Anthropic billing, AWS (EC2, Bedrock, Savings Plans, CUR, commitment strategy), Azure (reservations, Savings Plans, AHB, OpenAI PTUs, portfolio liquidity), GCP (Vertex AI, Compute Engine, BigQuery), Kubernetes and container FinOps (Open

Condenses long articles, threads, or documents into concise, engaging newsletter-ready summaries.

Use whenever code or infrastructure handles user data and touches a non-EU service or region — even if the user's prompt doesn't mention DSGVO, GDPR, privacy, or "personal data". Any user data (names, emails, IPs, user IDs, avatars, profile pictures, uploaded files, user-generated content, signup/registration/onboarding data, support tickets, chat messages, payment info, location, device IDs) is p