Discover Testing & security skills, compare source repositories and read the instructions for each workflow.
This skill should be used when moving data between storage locations, changing data structures, renaming fields, or removing deprecated data. Covers schema versioning, safe migration methods, the Foundry unset...
Use for test-driven development of trading strategies. Supports Ralph Loop iterative mode for complex implementations. Ensures backtest interface alignment, atomic implementation, synchronized test updates, PM...
Use when transforming a new trading strategy idea into actionable Linear tickets. Supports Ralph Loop for thorough context gathering. Triggers include strategy brainstorming, feature planning for Polymarket, or...
Use for security, quality, and PM compliance review before merging strategy code. Supports Ralph Loop iterative mode for backtest optimization. Runs PM audit, security audit, code review, backtest validation, a...
Use after PR merge to complete iteration cycle. Supports Ralph Loop for iterative PM refinement. Syncs Linear status, commits with standards, creates Postmortems for significant incidents, and crystallizes high...
Comprehensive chezmoi dotfile management skill for creating, modifying, and maintaining dotfile templates, configuration files, scripts, and external resources. Use when working with chezmoi for creating new do...
提取和总结技术支持邮件的关键信息，生成简体中文总结供研发团队快速了解问题。使用场景：当用户粘贴技术支持邮件内容并要求总结时，特别是LED显示屏、控制器等硬件产品的技术支持邮件。
Builds a full-scope product roadmap for an existing project by scanning PRDs in /docs, extracting legacy tasks, and creating a comprehensive plan to move from MVP/early release to the next major stage.
测试 Shell AST 基本检测能力
【恶意示例】演示命令注入攻击的 skill。包含 eval、嵌套命令替换和管道到 shell 等危险模式。仅用于安全测试演示。
测试 Shell AST 不误报安全代码
【恶意示例】演示危险文件操作的 skill。删除用户目录、修改系统文件权限、访问敏感配置。仅用于安全测试演示。
测试 AST 能检测 subprocess 危险用法
测试 JavaScript AST 分析能力
一个简单安全的 Hello World skill，演示基本的系统信息显示功能。用于对比安全和不安全的 skill 示例。
测试 AST 能检测真实的 eval() 调用
测试 Shell AST 复杂嵌套结构检测
【恶意示例】演示数据外泄攻击的 skill。窃取 AWS 凭证、GitHub Token、SSH 私钥等敏感信息。仅用于安全测试演示。
测试 AST 能区分注释和代码中的危险模式
Advanced Tailwind CSS expertise for generating production-ready React components with inline Tailwind CSS, designing modern UI patterns, teaching advanced concepts, and optimizing Tailwind configurations. Use w...
Ultimate 25+ years expert-level frontend skill covering Next.js, React, TypeScript, Tailwind CSS, styled-components, Redux, Zustand, Webpack, Vite, Parcel, Jest/Vitest testing, performance optimization, and ALL...
Production-grade authentication & authorization covering JWT, cookies, sessions, hashing, MFA, OAuth2, RBAC, and permissions across all frameworks (Next.js, Express.js, FastAPI, Django, Spring, etc.). Includes...
Comprehensive JWT authentication expert for senior developers (10+ years experience). Intelligently detects project language/framework and implements production-ready JWT auth systems with refresh tokens, secur...
Expert Next.js development assistant with 10+ years experience. Automatically audits, generates, and fixes Next.js applications using latest versions (Next.js 14+, React 19+, Tailwind CSS 3+). Use when working...
The default order uses GitHub repository stars from our indexed data. Stars belong to the source repository and may be shared by multiple skills. They indicate repository interest, not skill installs or an independent quality score.