783 skills · sorted by relevance
Compare application pages, interactive components, API endpoints, and key user journeys with existing tests. Get a coverage matrix, an estimated coverage percentage, and a prioritized plan for missing tests with suggested templates and effort estimates.
Review REST API specifications with automated checks for inconsistent conventions and breaking changes—changes that disrupt existing clients. Get a design grade, improvement recommendations, and tool reports to support release reviews and API migrations.
Inspect and manage model tuning jobs, which adapt models through additional training, in Agent Platform. List jobs, check their status and details, and cancel running jobs after reviewing the target and explicitly confirming the action.
Prepare to fine-tune open models or Gemini models on Agent Platform. Check the environment, convert and validate training data, choose supported models and settings, and estimate tuning costs for open models.
Manage machine learning models and their versions in the Agent Platform Model Registry. List registered models, inspect details, upload new versions, update names or descriptions, and delete models through workflows that require confirmation for changes.
Build Next.js applications with App Router, the app directory routing system. Get guidance on server rendering, data fetching, caching, API endpoints, and deployment settings, including loading states and image optimization for responsive page experiences.
Manage Hugging Face Hub through the hf command line tool. Download and upload models or datasets, organize cloud storage, manage authentication and local caches, run scheduled jobs, and deploy or maintain model inference services.
Create reference documentation directly from source code for public functions, classes, command-line commands, and endpoints. Organize parameters, defaults, return values, errors, and runnable examples, then check that the documentation matches the implementation.
Assess GraphQL APIs during penetration tests, from finding endpoints and mapping data structures to checking access controls, query limits, subscriptions, and uploads. Includes example queries, guidance for testing tools, and defensive controls for interpreting findings.
Assess server-side template injection, where user input is interpreted as template code. Identify template engines, evaluate information exposure and code execution risks, and organize evidence alongside detection and prevention measures.
Query trading activity, capital flows, and positions across Polymarket, Hyperliquid, and Meteora. The skill covers wallet scoring, large trades, and liquidity pool analytics through 63 API endpoints, paid per request with USDC on Solana without API keys.
Review Apache Pinot changes against naming and API conventions, including public names, method signatures, REST endpoints, JSON fields, and documentation. Use it when adding or renaming elements exposed to other code or users.
Guide Nexent backend design, implementation, debugging, and review across database schemas, FastAPI endpoints, services, and configuration. Check existing interfaces, consult references for each affected layer, and verify successful and failed behavior while preserving public contracts.
Discover subdomains, live hosts, and URLs to build a prioritized map for web security testing. Includes JavaScript analysis, API specification discovery, and monitoring for new subdomains, JavaScript changes, and GitHub commits.
Investigate authentication gaps across single sign-on, APIs, and legacy login endpoints. The skill helps map entry points, compare their protections, test token trust between portals, and document whether a flaw grants access to protected accounts or functions.
Review authentication, payments, API endpoints, and sensitive data handling for security weaknesses. Checklists and code examples cover input validation, secret storage, access permissions, common web attacks, dependency checks, and security tests before deployment.
Expose new backend API endpoints through the TypeScript SDK, or record intentional exclusions. Follow existing entity and client conventions, check generated request types, and verify that each endpoint is either used by the SDK or explicitly skipped.
Generate OpenAPI 3.0.3 specifications, a standard format for describing APIs, from route definitions in supported web frameworks. Extract paths, HTTP methods, parameters, and available model information into JSON or YAML for Swagger UI or Redoc.
Use DeepAPI to search the web, collect website and social platform data, and produce sourced research. It also routes tasks to services for public website actions, email, image generation, and persistent agent memory.
Create FastAPI routers with CRUD operations, authentication dependencies, and proper response models. Use when building REST API endpoints, creating new routes, implementing CRUD operations, or adding authenticated endpoints in FastAPI applications.
The English summary is being prepared. Showing the original description.
Configures VPC endpoints (interface and gateway) for private AWS service access using AWS PrivateLink. Use when setting up secure private connectivity to S3, DynamoDB, and other AWS services without internet gateway, NAT device, or public IP addresses. Covers endpoint creation, security groups, route tables, and DNS configuration.
The English summary is being prepared. Showing the original description.
Draft a clinical trial protocol synopsis with the elements regulators and IRBs expect. Use when asked to write a clinical trial protocol, a study protocol synopsis, a trial design, or to structure endpoints/eligibility/statistics for an interventional study. Produces a structured protocol synopsis — objectives, design, population with eligibility, interventions, endpoints, statistics, and safety/ethics — for expert review. (For non-clinical/UX research, use research-protocol.)
The English summary is being prepared. Showing the original description.
Designs REST and GraphQL APIs including endpoints, error handling, versioning, and documentation. Use when creating new APIs, designing endpoints, reviewing API contracts, or when asked about REST, GraphQL, or API patterns.
The English summary is being prepared. Showing the original description.
Detect missing authentication and broken function-level authorization vulnerabilities in a codebase using a three-phase approach: recon (map endpoints and the role/permission system), batched verify (check auth/authz in parallel subagents, 3 endpoints each), and merge (consolidate batch results). Covers unauthenticated access and vertical privilege escalation (e.g., regular user accessing admin-only functions). Requires sast/architecture.md (run sast-analysis first). Outputs findings to sast/missingauth-results.md. Use when asked to find missing auth, broken access control, or privilege escalation bugs.
The English summary is being prepared. Showing the original description.