Browse skills

Verifies and injects Google Tag Manager (GTM), GA4 event triggers, and optimized meta tags.

The English summary is being prepared. Showing the original description.

Maps incoming work to the CodeConductor slash command and workflow skill. Use when starting a session or deciding which /cc-* command applies.

The English summary is being prepared. Showing the original description.

Design durable workflows with Temporal for distributed systems. Covers workflow vs activity separation, saga patterns, state management, and determinism constraints. Use when building long-running processes, distributed transactions, or microservice orchestration.

The English summary is being prepared. Showing the original description.

Secures Spring Security filters, JWT validations, OAuth2 setups, and CORS/CSRF headers.

The English summary is being prepared. Showing the original description.

SQLAlchemy 2.x patterns for async FastAPI projects: models, sessions, queries, bulk operations, transactions, and Alembic migrations. Trigger: When writing models, queries, bulk operations, or DB-touching service code.

The English summary is being prepared. Showing the original description.

Provides expert knowledge of the testing pyramid, test design principles, MockK patterns, and integration testing conventions for Spring Boot + Kotlin projects.

The English summary is being prepared. Showing the original description.

Analyze binaries or protocols you own (or have license to inspect) to improve security, compatibility, or incident response. Not for cracking, DRM bypass, or malware creation.

The English summary is being prepared. Showing the original description.

Design, implement, and review web interface layout, component states, feedback, and motion within the current CodeConductor workflow. Use for concrete web UI work or requested UI audits, not backend-only tasks or native mobile apps.

The English summary is being prepared. Showing the original description.

Hunt for adversary techniques in telemetry you are authorized to query. Hypothesis-driven, evidence-first, no live offensive operations.

The English summary is being prepared. Showing the original description.

Review and harden web apps (authz, XSS, CSRF, SSRF, injection) on code you maintain. Complements the OWASP `security` skill. No exploit kits.

The English summary is being prepared. Showing the original description.

Provides expert knowledge of Spring Boot conventions, Kotlin idioms, and MVC patterns for backend API development.

The English summary is being prepared. Showing the original description.

Provides expert knowledge of the testing pyramid, test design principles, MockK patterns, and integration testing conventions for Spring Boot + Kotlin projects.

The English summary is being prepared. Showing the original description.

Audits Tailwind CSS usage ensuring mobile-first responsive utilities and clean classes.

The English summary is being prepared. Showing the original description.

Performs simple mutation testing to verify test coverage and assertions.

The English summary is being prepared. Showing the original description.

Advise on defensive security for industrial control systems you operate. Safety first. No process-disruption guidance.

The English summary is being prepared. Showing the original description.

Harden network architecture, segmentation, TLS, and allowlists for systems you operate. Defensive design and review only.

The English summary is being prepared. Showing the original description.

Automate detection, enrichment, and response playbooks for a SOC you operate. Keep humans in the loop for destructive actions.

The English summary is being prepared. Showing the original description.

Guides the creation of complete Spring Boot features following a structured, layer-by-layer workflow: entity, repository, service, controller, and tests. Applies Kotlin idioms, Bean Validation, and MockK test patterns throughout.

The English summary is being prepared. Showing the original description.

Map owned assets, attack surface, and inventory for systems the requester is authorized to assess. Use for asset discovery, service catalogs, and exposure reviews — never unauthorized scanning.

The English summary is being prepared. Showing the original description.

Plan purple-team / adversary-simulation exercises against systems you are contracted to test. High-level objectives and detection gaps only. No live attack procedures or payloads.

The English summary is being prepared. Showing the original description.

Analyze suspicious artifacts in an isolated lab to contain and recover. For incident responders on owned estates. Never write, improve, or distribute malware.

The English summary is being prepared. Showing the original description.

Plan and report authorized vulnerability assessments on owned systems. Prioritize evidence, severity, and remediations. Do not deliver exploit payloads.

The English summary is being prepared. Showing the original description.

Harden iOS/Android apps you ship: storage, TLS pinning policy, IPC, and backend trust. You still enforce authz on the server.

The English summary is being prepared. Showing the original description.

Audits token storage mechanisms to prevent XSS-based JWT theft.

The English summary is being prepared. Showing the original description.