Explorar skills

Git branch completion workflow. Use when implementation is complete, tests pass, and a feature branch needs to be integrated via merge, pull request, or cleanup.

Use proactively after completing any task to suggest logical next steps. Also use when the user seems unsure what to do next, says "what now," "what else," "what should I do," "what's next," "continue," or pauses after a milestone. Anticipates what the user likely needs next based on context and proactively offers actionable suggestions.

Generate JUnit unit tests for a Java class with Mockito mocks and AssertJ assertions. Supports Spring Boot, Quarkus, and Micronaut with framework-appropriate mock patterns. Use when creating test coverage for a Java source file.

Integração de autenticação Clerk para Astro/Next.js. Utilize ao implementar autenticação, gerenciar middleware Clerk, testar com Playwright ou depurar problemas de autenticação.

Web vulnerability triage — JWT flaws (alg confusion, none alg, kid injection), deserialization (Java/Python/PHP/Ruby/Node), prototype pollution, OAuth misconfigs (redirect_uri, PKCE, scope), CSRF, DOM XSS, SSRF. Classification, impact assessment at pattern level, and handoff to remediation.

When the user has PR review feedback to address, CI failures to fix, or wants to automatically resolve common PR issues. Use when the user says "fix the PR," "address review comments," "CI is failing," "fix the build," "autofix," "pr feedback," "resolve comments," "fix merge conflicts," or when a PR needs updates before merge. Reads the review comments, diagnoses issues, and applies fixes.

When starting or ending a work session, or when context files need maintenance. Use when the user says "boot up," "morning briefing," "end session," "session review," "what changed," "sync state," "kairos," "dream," "consolidate," "session start," or at the natural beginning/end of any significant work session. Implements structured session lifecycle with intelligent context loading, state diffing

End-to-end validation of a merchant's UCP integration. Tests profile schema, capability negotiation, catalog search/lookup, checkout lifecycle, and payment handler declaration. Outputs a PASS/FAIL compliance report with 40+ checks. Use after deployment to verify the integration works correctly.

Use when adding, extending, or repairing a repo-owned Playwright E2E harness across Node `@playwright/test`, Playwright Pytest, or .NET/Java test frameworks — including browser installation, harness config, auth reuse plumbing, package placement, or CI smoke/sharding setup. Not for ordinary spec debugging once the harness already works; route that to `playwright-testing`.

Security review workflow for a PR, feature or codebase — scope, automated scans, manual OWASP/CWE pattern-check, prioritize and report. Uses secure-coding as pattern library.

Reasoning and sparring partner mode for rigorous, calibrated engagement on any topic — pressure-testing ideas, researching with current authoritative sources, running reuse-before-rebuild checks on "how do I" tasks, and scoping work thoroughly before diving in. Use this skill ONLY when the user explicitly invokes Newton by name — e.g., the message starts with "Newton —" or "Newton," or the message

SIEM query-builder workflow — Splunk SPL, Microsoft Sentinel/Defender KQL, Elastic EQL/KQL, with cross-translation patterns, performance tuning (data models, summary indexes, CCS), and query-by-detection-need. Source layer for detection-engineer, log-triage, and threat-hunt.