Essential command-line tools and system utilities.
Analyze Ruby and Rails code quality with RubyCritic. Identifies code smells, complexity issues, and refactoring opportunities. Provides detailed metrics, scores files A-F, compares branches, and prioritizes high-churn problem areas. Use when analyzing Ruby code quality, reviewing PRs, or identifying technical debt.
Use when preparing code for review or responding to review feedback
Enable stricter TypeScript and linting checks to catch bugs early, especially useful when iterating with AI assistance.
Enforces project file organization standards from CLAUDE.md/PROJECT.md - auto-fix mode
Sensitive data patterns for security testing: API keys, credit cards, emails, SSNs, phone numbers, IPs, and more. Use for data discovery and validation.
Comprehensive testing patterns with Pest. Use when working with tests, testing patterns, or when user mentions testing, tests, Pest, PHPUnit, mocking, factories, test patterns.
Toolkit for interacting with and testing local web applications using Playwright. Supports verifying frontend functionality, debugging UI behavior, capturing browser screenshots, and viewing browser logs.
Review Encore.ts code for best practices and anti-patterns.
Updates Neon logos across repositories to match official brand assets. This skill should be used when updating, replacing, or auditing Neon logo files in any codebase to ensure brand consistency with neon.com/brand guidelines.
Grep the workspace for a pattern using file_search.
Detects changes between joblib versions by comparing git diffs, analyzes API changes (new/modified/removed functions, classes, parameters), and updates corresponding .pyi stub files. Use when joblib releases a new version and stubs need to be synchronized, or when the user mentions "update stubs", "joblib upgrade", "sync stubs with joblib", or "check joblib changes".
Detects stale documentation - outdated status markers, old TODOs, version lag
Compile the YAML artifact into PROMPT.md with deterministic structure. A final agent pass polishes for fluidity, conciseness, and correctness.
Process and implement code review feedback systematically. Use when user provides reviewer comments, PR feedback, code review notes, or asks to implement suggestions from reviews. Activates on phrases like "implement this feedback", "address review comments", or when user pastes reviewer notes.
Package development and extraction of reusable code. Use when working with package development, code reusability, or when user mentions packages, composer packages, extract package, reusable code, package development.
Essential fuzzing payloads: SQL injection, command injection, special characters. Curated essentials for vulnerability testing.
ๅฝ็จๆทๆญฃๅจ่ฟ่ก CTF ๆฏ่ตๆ็ปไน ๏ผ้ๅฐ Misc ็ฑปๅ้ข็ฎๆถ่งฆๅๆญค Skillใ ้็จๅบๆฏๅ ๆฌ๏ผ - ็จๆทไธไผ ๆๆๅไบ้ณ้ขๆไปถ๏ผwav/mp3/flac๏ผใๅพ็ๆไปถ๏ผpng/jpg/bmp/gif๏ผใๅ็ผฉๅ ใpcap ๆต้ๅ ใๅ ๅญ้ๅ๏ผraw/vmem/dmp๏ผ็ญ - ็จๆทๆ่ฟฐไบ้ๅใ็ผ็ ใๅฅๅจใๆไปถๅๆใๅ ๅญๅ่ฏ็ธๅ ณ้ฎ้ข - ็จๆทๆ็กฎ่ฏด"CTF"ใ"Misc"ใ"้ๅ"ใ"ๆพ flag"ใ"่ฟๆฏไธ้้ข"ใ"ๅ ๅญๅ่ฏ"ใ"Volatility"็ญๅ ณ้ฎ่ฏ - ็จๆทๆไพไบ base64/hex/binary ็ญ็ผ็ ๅญ็ฌฆไธฒ้่ฆ่งฃ็ - ็จๆท้่ฆๅๆๅฏ็ๆไปถใๆๅ้่ๆฐๆฎใ่ฟๅๅ่ฎฎๅ ๅฎนใๅๆๅ ๅญ้ๅ
Use this skill when asked to analyze, investigate, or report on honeypot server security. Triggers on keywords like "honeypot investigation", "analyze honeypot", "honeypot security", "honeypot report", or when a server name is mentioned with honeypot analysis context. This skill provides comprehensive security analysis including attack patterns, threat intelligence correlation, IP enrichment, vulnerability assessment, and executive report generation.
ๅฝ็จๆทๆญฃๅจ่ฟ่ก CTF ๆฏ่ตๆ็ปไน ๏ผ้ๅฐ Web ็ฑปๅ้ข็ฎๆถ่งฆๅๆญค Skillใ ้็จๅบๆฏๅ ๆฌ๏ผ - ็จๆทๆ่ฟฐไบ SQL ๆณจๅ ฅใXSSใSSRFใSSTIใXXEใๆไปถๅ ๅซใๅฝไปคๆง่ก็ญ Web ๅฎๅ จ้ฎ้ข - ็จๆท้่ฆ่ฟ่กไฟกๆฏๆ้ใ็ฎๅฝๆซๆใ็ซฏๅฃๆซๆ็ญๆธ้ๅๆๅทฅไฝ - ็จๆท้ๅฐ PHP ็นๆงๅฉ็จใๅๅบๅๅใJWT ไผช้ ็ญ้ซ็บงๆปๅปๅบๆฏ - ็จๆทๆๅ "CTF"ใ"Web"ใ"ๆธ้"ใ"ๆณจๅ ฅ"ใ"็ป่ฟ"ใ"ๆผๆด" ็ญๅ ณ้ฎ่ฏ - ็จๆท้่ฆๅๆ Java ไปฃ็ ๅฎก่ฎกใๅบๅ้พๅฎๅ จใ็ปไปถๆผๆดๅฉ็จ็ญ้ฎ้ข - ็จๆท้่ฆๆ้ payloadใ็ผๅ exploitใๅๆ WAF ็ป่ฟ็ญ็ฅ
Use when errors occur deep in execution and you need to trace back to find the original trigger - systematically traces bugs backward through call stack, adding instrumentation when needed, to identify source of invalid data or incorrect behavior
Essential exploitation payloads: anti-virus test files, file name exploits, malicious files. Curated for testing.
