Explorar skills

Audit an inherited or unfamiliar codebase systematically rather than ad-hoc. Covers scope discipline, day-0 triage, SAST and SCA tool recipes (semgrep, CodeQL, gitleaks, trivy), OWASP Top 10 mapped to grep patterns, auth-surface walkthrough, and writing reports that drive remediation. Invoke when inheriting a codebase, accepting an audit engagement, or reviewing AI-generated code before shipping.

Find, rotate, and prevent leaked credentials across repositories and disk. Covers leak detection with gitleaks and trufflehog, rotation order (the leaked secret first, then outward), git history purge with git-filter-repo, and prevention via pre-commit scanning. Invoke when a secret was committed to git, when a private repo went public, or as periodic audit.

CEO/founder-mode plan review. Rethink the problem, find the 10-star product, challenge premises, expand scope when it creates a better product. Three modes: SCOPE EXPANSION (dream big), HOLD SCOPE (maximum rigor), SCOPE REDUCTION (strip to essentials). Originally from Garry Tan's gstack (https://github.com/garrytan/gstack). MIT licensed.

Generates a professional GitHub repository social preview image sized 1280x640 pixels as a JPG under 1 MB. Always trigger immediately when the user's message starts with "gsp". Also trigger on "generate github social preview", "create repo preview image", or any request to generate a social preview or OG image for a GitHub repository.

Legacy compatibility alias for StitchFlow. Use when a user explicitly references stitch-design-local, or when older prompts and setups still call that skill name.

Fluxo de trabalho de implementação de recursos com foco em skills para Claude, Codex e Gemini. Utilize quando o usuário solicitar a implementação de um recurso via PRD, TechSpec, Tarefas, verificação, commit local e entrega de branch. O pacote npm instala apenas os arquivos de skill; a skill do LLM executa o fluxo de trabalho.

Desenvolvimento frontend para o governo holandês, utilizando o NL Design System (NLDS) e garantindo acessibilidade digital (WCAG, Axe, leitores de tela), incluindo formulários e componentes de mapa.

Tratamento de erros estruturado em Golang com samber/oops, incluindo construtores de erro, stack traces, códigos, contexto, empacotamento, atributos, mensagens para usuário/desenvolvedor, recuperação de panic e integração com logger. Use ao adotar samber/oops ou quando o código-fonte já o importa.

Audit a public-facing site or server for common misconfigurations without sending exploit traffic. Covers DNS hygiene, TLS and HSTS, security headers, exposed paths (.git, .env, backups), cookie flags, and software fingerprinting. Invoke when onboarding a new client site, before launch, after infrastructure changes, or as periodic re-audit.

Husky v9 setup, lint-staged v16 patterns, commitlint with conventional commits, CI/production handling, monorepo setup, migration from v8

Create a GitHub release with auto-generated changelog. Triggers: "release", "/release", "create release", "сделай релиз"

Tipos monádicos para Golang, utilizando samber/mo, oferecem Option, Result e outros tipos para valores nulos seguros, tratamento de erros e composição funcional. Utilize esta skill ao trabalhar com `github.com/samber/mo` ou ao considerar padrões de programação funcional para um design mais seguro em Golang.