9.7K skills · sorted by relevance
Inspect Android APKs from the command line to understand app logic, permissions, and components. Supports Java decompilation, low-level code edits, rebuilding and signing, plus Frida observation of running methods and routing to native code analysis.
Test iOS apps while they run using Objection and Frida, tools for inspecting and changing runtime behavior. Examine stored credentials, files, memory, and authentication calls, and evaluate client-side protections during authorized security assessments.
Create, update, validate, and reorganize Agent Skills stored in a repository. It covers SKILL.md metadata, reference files, compatibility links, and validation scripts, supporting maintenance of skill folders, categories, and instructions for agents.
Guides security testing of Android and iOS apps through file inspection and observation while the app runs. Covers network traffic, stored secrets, external app interfaces, authentication, and backend APIs, with tool examples and a testing checklist.
Define runtime-validated types with ArkType — TypeScript's 1:1 validator. Use when someone asks to "validate data in TypeScript", "runtime type checking", "ArkType", "type-safe validation", "alternative to Zod", "faster validation library", or "validate with TypeScript syntax". Covers type definitions, validation, morphs (transforms), scopes, and comparison with Zod.
The English summary is being prepared. Showing the original description.
Inspect authorized Android APKs by unpacking files, reading decompiled Java, and observing runtime behavior with Frida. The skill also guides smali bytecode changes, rebuilding and signing packages, and deciding when native .so libraries need further analysis.
Transfer known function and variable names from an older binary to a newer version. Compare disassembly and pseudocode with an LLM, produce structured mappings, and apply names and comments in IDA.
Build Python workflows that constrain language model output using text patterns and grammar rules. Generate structured JSON, restrict classifications to allowed labels, extract information, and combine reusable generation steps with loops and tool selection.
Find prospective candidates on LinkedIn, check them against the role’s Greenhouse recruiting records, and prepare personalized outreach drafts. Each capped batch includes candidate details and match reasons for recruiter review, with sending left to the recruiter.
Build Python workflows that constrain language model output using text patterns and grammar rules. Generate structured JSON, restrict classifications to allowed labels, extract information, and combine reusable generation steps with loops and tool selection.
Audit TLS/SSL, the technology that encrypts network connections, across servers and mobile apps. The skill covers outdated protocols, weak encryption, certificate validation failures, known vulnerabilities, and replay risks, helping organize evidence and prioritize fixes.
Improve validation errors in gh-aw so users can see what went wrong, what input is expected, and how to fix it. Provides writing patterns, valid YAML examples, Go error-handling guidance, and checks for message quality.
Schema validation for notes. Checks against domain-specific templates. Validates required fields, enum values, description quality, and link health. Non-blocking — warns but doesn't prevent capture. Triggers on "/validate", "/validate [note]", "check schema", "validate note", "validate all".
The English summary is being prepared. Showing the original description.
How to handle `GRIDA-SEC-<id>` security boundaries in the Grida repo. Triggers when you encounter a `GRIDA-SEC` tag in source/docs, when modifying files under any tagged path, or when adding a new prevented- vulnerability record. Each `GRIDA-SEC-<id>` identifies a structural trust boundary documented in `/SECURITY.md`. This skill explains the contract, mandates a security review before committing changes to any tagged file, and shows how to register a new id. Use whenever "GRIDA-SEC" appears in context.
The English summary is being prepared. Showing the original description.
Guides work on the Figma I/O package (@grida/io-figma, packages/grida-canvas-io-figma/). Covers the fig-kiwi binary parser, Kiwi→REST→Grida conversion pipeline, fig2grida CLI, REST API JSON conversion, and testing with clipboard/fig/REST fixtures. Use when adding node type support, fixing conversion bugs, extending fig2grida, working on the fig-kiwi parser, writing tests for Figma import, or debugging clipboard paste failures after a Figma update.
The English summary is being prepared. Showing the original description.
Grida AI agent system work: `@grida/daemon` (DaemonServer, loopback HTTP perimeter, files/workspaces, secrets store, daemon discovery) and `@grida/agent` (the agent tenant: sessions, providers/BYOK, runtime/tool execution, skills discovery, prompts, tiers, sandbox hosts). Use for `packages/grida-daemon/**`, `packages/grida-ai-agent/**`, desktop sidecar protocol changes, agent chat transport, and bugs in agent state or streams. For pure Electron window, preload, menu, deep-link, or CDP work, use `desktop`.
The English summary is being prepared. Showing the original description.
IDAPython and IDALib script reference for reverse engineering. Activate when the user needs to write IDAPython scripts in IDA, use IDALib for headless analysis, operate on IDB databases, debug with IDA, manipulate memory/registers, traverse functions/blocks/instructions, work with Hex-Rays decompiler API, handle obfuscation, or batch-process binaries.
The English summary is being prepared. Showing the original description.
「Parse, don't validate」原則に基づくコードレビューと設計支援。validateパターン（チェックして結果を捨てる） をparseパターン（チェック結果を型で保持）に変換し、型システムで不変式を強制する設計を促進する。 コードレビュー、新規実装、リファクタリング時にvalidation関数の改善が必要な場合に使用。 対象言語: Rust, Haskell, TypeScript, Scala, Java, Go, Python。 トリガー：「バリデーションを改善して」「型で保証したい」「shotgun parsingを直して」 「不正な状態を型で防ぎたい」「Maybeを減らしたい」といった型安全性関連リクエストで起動。
The English summary is being prepared. Showing the original description.
Manage recruiting in Ashby with natural language requests from Claude Code. Create and update candidates, create jobs and applications, review interview schedules and candidate notes, and combine records to report on hiring progress.
Plan and document studies that assess whether an analytical procedure suits its intended use. Select the governing framework, evaluate calibration, accuracy, precision, and detection limits, and compare methods using acceptance criteria defined before data collection.
Check Bicep infrastructure definitions before deploying to Azure. Validate syntax, preview resource changes, check deployment permissions, and produce a Markdown report of issues and recommendations using Azure CLI or Azure Developer CLI workflows.
Design Google Cloud systems where multiple AI agents process live audio, video, or text and respond in real time. Guides requirements discovery, architecture diagrams, infrastructure code, deployment instructions, and validation for technical guidance or safety monitoring workloads.
Design hybrid search on AlloyDB by combining meaning-based search, keywords, and SQL filters. Turn requirements into architecture diagrams, database setup scripts, deployment guidance, and validation plans for search applications on Google Cloud.
Review past Claude Code sessions and turn recurring tasks into proposed updates to skills and project memory. Replay tasks, compare scores on separate validation tasks, and review staged edits before applying them with backups.