Explorar skills

Go implementation and review skill. Use when writing, modifying, refactoring, testing, optimizing, or reviewing Go code, especially production Go that needs clear errors, context propagation, concurrency safety, interface discipline, package boundaries, REST or gRPC service boundaries, standard-library testing, pprof-backed performance work, logging, and tooling discipline. Portable across Go repo

Write skillprobe YAML tests for LLM skills. Use when asked to write tests, create test scenarios, test a skill, generate skillprobe tests, or check whether a skill activates correctly.

Pattern-level payload library for XSS, SSTI, LFI, SSRF, and command injection — context detection (HTML body/attribute/JS/CSS/URL), encoding-bypass shapes (URL/HTML/Unicode/double), polyglots, WAF-bypass patterns at syntax level. No version-specific weaponized exploits.

When the user has a complex task that would benefit from multiple agents working in parallel or in sequence. Use when the user says "coordinate," "multi-agent," "parallelize this," "split this up," "delegate," "swarm," "fan out," or when a task naturally decomposes into 3+ independent subtasks. Orchestrates complex workflows by breaking work into units, dispatching agents, merging results, and res

Write Playwright test campaigns for a migrated entity: CRUD lifecycle, bulk actions, filter/sort, position reorder, and per-tab field verification. Campaigns live in the core repo and import page objects from ui-testing-library. Trigger: "write Playwright tests for {Domain}".

Use when setting up TYPO3 extension test infrastructure, writing unit/functional/E2E tests, configuring PHPUnit 11/12/13, mutation testing, mocking final classes (v14), CI/CD matrix across TYPO3 12/13/14.3 LTS, dev-dependency consolidation via typo3-ci-workflows meta-package, or debugging CI failures. Also triggers on: testing-framework setup, ensure proper testing, test matrix, integration testin

Use antes de commit, /merge-to-main, /workday-complete, ou para validar o estado do repositório. Resolve e executa o comando fast-test configurado do projeto.

When the user needs to plan a complex feature, system, or project that requires deep creative exploration before execution. Use when the user says "plan this," "let's design," "how should we build," "architect this," "brainstorm then plan," "ultraplan," "deep plan," "think this through," or when a task is too complex for a simple plan. Combines creative brainstorming with multi-agent technical val

Triage dependency vulnerabilities against CISA KEV, EPSS, reachability and compensating controls — turn a raw Dependabot/Snyk/osv-scanner dump into fix-now/sprint/quarter/accept decisions with rationale.

Dynamic Application Security Testing workflow — OWASP ZAP automation (baseline/full/API scans), Burp Suite Professional playbooks, Burp Collaborator for out-of-band detection, auth-state orchestration, and CI integration with scope-safe active scanning.

When the user wants to deeply understand a codebase, map its architecture, or build a persistent mental model for future sessions. Use when the user says "explain this codebase," "map the architecture," "codebase insight," "understand this repo," "what does this project do," "how does this work," "analyze the codebase," or when starting work on an unfamiliar project. Produces a persistent insight

Use when facing a bug, test failure, or unexpected behavior that isn't immediately obvious