AI Skills Registry

Manage multiple Alibaba Cloud accounts and batch-export Security Center (SAS) baseline and vulnerability reports via the aliyun CLI and Pyth

PHP type juggling and weak comparison (`==`) bypass. Use when authentication, HMAC/signature checks, or token validation uses loose equality

Traffic analysis and PCAP forensics playbook. Use when analyzing network captures including Wireshark filters, protocol analysis (HTTP/DNS/F

Access ATXP paid API tools for web search, AI image generation, music creation, video generation, and X/Twitter search. Use when users need

Configure TOTP authenticator apps, send OTP codes via email/SMS, manage backup codes, handle trusted devices, and implement 2FA sign-in flow

Implement GDPR-compliant data handling with consent management, data subject rights, and privacy by design. Use when building systems that p

Build, review, refactor, or architect ASP.NET Core web applications using current official guidance for .NET web development. Use when worki

Access security tokens and smart cards using CryptoTokenKit. Use when building token driver extensions with TKTokenDriver and TKToken, commu

Use when building email features, emails going to spam, high bounce rates, setting up SPF/DKIM/DMARC authentication, implementing email capt

Entry P1 category router for authentication and authorization. Use when testing login flows, sessions, object authorization, JWT, OAuth, COR

Credential exposure detection, OAuth flow validation, API key management testing, and data sanitization verification for n8n workflows. Use

Role-based access control (RBAC) with permissions and policies. Use for admin dashboards, enterprise access, multi-tenant apps, fine-grained

Skill for integrating Better Auth - comprehensive TypeScript authentication framework for Cloudflare D1, Next.js, Nuxt, and 15+ frameworks.

Analyze debt covenants and credit agreement terms from SEC filings using Octagon MCP. Use when researching financial covenants, leverage rat

Ensure HIPAA compliance when handling PHI (Protected Health Information). Use when writing code that accesses user health data, check-ins, j

Use when working with iOS/macOS Keychain Services (SecItem queries, kSecClass, OSStatus errors), biometric authentication (LAContext, Face I

Common recurring mistakes in LobeHub code review — `console.*` leftovers, missing `return await`, hardcoded secrets, hardcoded i18n strings,

Common recurring mistakes in LobeHub code review — `console.*` leftovers, missing `return await`, hardcoded secrets, hardcoded i18n strings,

MUST activate when the project contains a uiBundles/*/src/ directory and the task involves ANY Salesforce record operation — reading, creati

Python configuration management via environment variables and typed settings. Use when externalizing config, setting up pydantic-settings, m

Guidelines for implementing NextAuth.js (Auth.js v5) authentication in Next.js applications with session management and security best practi

Assess IT vendors and third-party partners with multi-factor risk scoring and regulatory compliance checklists. Use when evaluating technolo