semgrep
Static analysis with Semgrep - pattern-based security scanning and custom rule creation.
Discover research debugging skills, compare source repositories and read the instructions for each workflow.
Static analysis with Semgrep - pattern-based security scanning and custom rule creation.
Three.js performance optimization - 100+ rules for memory, rendering, geometry, materials, WebGPU, and WebXR.
This skill should be used when working with C projects, "C11", "C17", "C23", "Makefile", "gcc", "clang", "valgrind", "getopt", or C language patterns. Provides comprehensive Modern C (C11-C23) patterns, memory...
Master YARAL query language for low-maintenance threat hunting and detection in Google SecOps. Build behavioral detections without magic strings or IOC lists. Use when writing YARAL queries, creating custom det...
Comprehensive code review toolkit for evaluating quality across multiple languages. Use for PR analysis, quality checking, and generating review reports. Based on alirezarezvani/claude-skills.
Four-phase debugging methodology emphasizing root cause analysis before fixes. Use for bug investigation, preventing random fixes, and systematic problem-solving. Based on obra/superpowers.
Official coding standards and best practices derived from Xcode's internal AI chat templates.
Use when errors are unclear, flaky, or regressions occur; apply a disciplined debugging loop in VS Code Copilot Agent mode.
Comprehensive code review workflow coordinating quality, security, performance, and documentation reviewers. 4-hour timeline for thorough multi-agent review.
Detect recurring patterns in issues and events. Identifies temporal, resource-based, cluster, and cascading patterns. Suggests prevention strategies. Keywords: recurrence, pattern, detection, trending, recurrin...
Interactive debugging through conversation. HOUSTON guides through 4 phases, asks questions, and suggests agents for investigation.
Interactive code review through conversation. HOUSTON guides review, spawns specialized agents, and helps create Beads for issues found.
【强制】所有浏览器操作必须使用本技能,禁止在主对话中直接使用 mcp__chrome-devtools 工具。触发关键词:打开/访问/浏览网页、点击/填写/提交表单、截图/快照、性能分析、自动化测试、数据采集/爬取、网络模拟。本技能通过 c...
【Bug 诊断专用】当遇到程序错误、异常行为、性能问题、功能故障时必须使用本技能。触发关键词:报错、Bug、问题、异常、故障、不工作、诊断、排查、修复。本技能提供系统性根因分析,输出详细诊断报告和可执行修复方案,包含...
Analyze codebase structure using Serena's symbolic tools. Use for understanding project architecture, generating structure overviews, mapping dependencies between components, and onboarding to new codebases.
Automated code review with security scanning, quality metrics, and best practices analysis. Use when reviewing code for: (1) Security vulnerabilities and common attack vectors, (2) Code quality issues and maint...
Professional web application testing and automation using Playwright with support for multiple browsers, mobile emulation, screenshot capture, network interception, and comprehensive test assertions. Use for: (...
Quick code exploration using Serena MCP. Use for small-scale tasks like checking single file structure, finding a specific symbol, or quick reference lookup. No subagent - runs in main context for efficiency.
Systematic debugging and error resolution using the TRACE framework (Trace, Read, Analyze, Check, Execute). Use when debugging errors, analyzing stack traces, investigating failures, root cause analysis, or tro...
This skill should be used when the user requests a code review of changed files. Use this to review git-diffed files for security vulnerabilities (OWASP Top 10), performance issues (O(N) complexity, ORM optimiz...
【大型代码库分析专用】当需要分析整个项目架构、识别代码模式、追踪功能实现、梳理模块关系时必须使用本技能。触发关键词:分析整个项目/代码库、架构梳理、模块划分、代码模式识别、功能追踪、全局扫描。本技能通过 Gemini C...
Performs comprehensive audits to detect placeholder code, mock data, TODO markers, and incomplete implementations in codebases. Use this skill when you need to find all instances of "theater" in code such as ha...
Lightning-fast quality check using parallel command execution. Runs theater detection, linting, security scan, and basic tests in parallel for instant feedback on code quality.
Comprehensive dependency mapping, analysis, and visualization tool for software projects
The default order uses GitHub repository stars from our indexed data. Stars belong to the source repository and may be shared by multiple skills. They indicate repository interest, not skill installs or an independent quality score.