Explorar skills

Use when you are about to open a GitHub pull request — generates a semver-prefixed title ([PATCH/MINOR/MAJOR] TICKET: description) and structured body from commits. Always invoke this instead of running gh pr create directly.

Manually-triggered comprehensive codebase health audit covering security, architecture, documentation drift, dead code, and test coverage gaps. Produces a ranked markdown report, files prioritized GitHub issues, and proposes (but never autonomously opens) auto-fix PRs for trivial safe changes. Use when the user wants to audit, scan, review the health of, do a security check on, find dead code in,

Pull the latest headsup release from GitHub and apply it in-place. Use when the user types /headsup-update, asks to "update headsup", or wants to pull the newest version of the tab-color/status hooks.

Automates headless Chrome via MCP for web scraping, screenshots, testing, and browser interactions. Handles multi-instance server selection to avoid lock conflicts between parallel agents. Triggers when browsing a website, taking a screenshot, scraping a page, testing a web app, automating browser interactions, or when chrome-devtools MCP tools are needed.

QA testing for Streamlit applications — locally or on Hugging Face Spaces. Covers app startup, UI rendering, Streamlit-specific checks (session state, widgets, forms, caching), clinical content accuracy, HF Spaces compatibility, and accessibility. Produces a structured QA report with PASS/FAIL/PARTIAL status.

Build high-converting SaaS landing page funnels using proven patterns from top-performing companies. Page structure template, copy frameworks, design rules, conversion tactics, anti-patterns.

Use Bunny.net for CDN, image hosting, video hosting, edge storage, image optimization, AI image generation, edge scripting, container hosting, DNS, and security (WAF/DDoS). Trigger when user mentions bunny, cdn, image hosting, video hosting, media storage, edge storage, image optimization, video streaming, pull zone, storage zone, WebP conversion, AVIF, lazy loading, DRM, video encoding, edge func

Transforma requisitos brutos de produto em critérios de aceitação testáveis, notas de cobertura e contratos legíveis por máquina.

Full-spectrum web application Vulnerability Assessment and Penetration Testing (VAPT). Automates reconnaissance, scanning, injection testing, authentication analysis, and report generation. Supports --mode pro (terse) and --mode dev (educational). Enforces authorization gate before any active testing.

Adversarial test hardening — domain-lens behavioral attacks on contracts before implementation

Use when the operator's requirement, the failing test, the stakeholder argument, or any other inputs are STILL IN FLUX and the temptation is to start implementing now "to be ready" — strategic patience while the situation clarifies, rather than burning cycles on work that may need to be redone after the dust settles

Automatize fluxos de trabalho de revisão de PR do GitHub com revisores configuráveis. Esta skill ajuda a gerenciar revisões de código em escala, iterar ciclos de feedback, abordar comentários e garantir que os testes e CI passem até que todas as revisões sejam resolvidas, suportando múltiplos revisores e uma função de codificador.