当拿到一段 AI 生成的代码,还没决定要不要信、要不要跑、要不要往上继续加东西时使用。先做一遍客观体检:行数与嵌套深度、有没有测试、有没有硬编码密钥或遗留 TODO、依赖是不是真实存在、有没有危险调用(eval/exec、shell=True、递归删除、反序列化、提权、外发网络,按正文给的 grep 模式逐类查);再给风险评级和下一步动作。老实写明它查不了算法正确性——体检通过不等于代码是对的。回答里文字、事实和代码混在一起时先用 ai-answer-triage 分级;只审相对已有代码的一份改动用 ai-diff-review-protocol。
The English summary is being prepared. Showing the original description.
ChromiteCr/Skills☆ 4Updated Oct 19, 2026
Detecting misconfigured Azure Storage accounts including publicly accessible blob containers, missing encryption settings, overly permissive SAS tokens, disabled logging, and network access violations using Azure CLI, PowerShell, and Microsoft Defender for Storage.
The English summary is being prepared. Showing the original description.
micsapp/micstec-skills☆ 4Updated Mar 20, 2026
Detects and analyzes fileless malware that operates entirely in memory using PowerShell, WMI, .NET reflection, registry-resident payloads, and living-off-the-land binaries (LOLBins) without writing traditional executable files to disk. Activates for requests involving fileless threat detection, in-memory malware investigation, LOLBin abuse analysis, or WMI persistence examination.
The English summary is being prepared. Showing the original description.
micsapp/micstec-skills☆ 4Updated Mar 20, 2026
Auditing Microsoft Entra ID (Azure Active Directory) configuration to identify risky authentication policies, overly permissive role assignments, stale accounts, conditional access gaps, and guest user risks using AzureAD PowerShell, Microsoft Graph API, and ScoutSuite.
The English summary is being prepared. Showing the original description.
micsapp/micstec-skills☆ 4Updated Mar 20, 2026
Examine Linux system artifacts including auth logs, cron jobs, shell history, and system configuration to uncover evidence of compromise or unauthorized activity.
The English summary is being prepared. Showing the original description.
micsapp/micstec-skills☆ 4Updated Mar 20, 2026
Detect and analyze heap spray attacks in memory dumps using Volatility3 plugins to identify NOP sled patterns, shellcode landing zones, and suspicious large allocations in process virtual address space.
The English summary is being prepared. Showing the original description.
micsapp/micstec-skills☆ 4Updated Mar 20, 2026
Perform static analysis of malicious PDF documents using peepdf, pdfid, and pdf-parser to extract embedded JavaScript, shellcode, and suspicious objects.
The English summary is being prepared. Showing the original description.
micsapp/micstec-skills☆ 4Updated Mar 20, 2026
Analyzes malicious PDF files using PDFiD, pdf-parser, and peepdf to identify embedded JavaScript, shellcode, exploits, and suspicious objects without opening the document. Determines the attack vector and extracts embedded payloads for further analysis. Activates for requests involving PDF malware analysis, malicious document analysis, PDF exploit investigation, or suspicious attachment triage.
The English summary is being prepared. Showing the original description.
micsapp/micstec-skills☆ 4Updated Mar 20, 2026
Create or redesign React and Tailwind sections, pages, flows, shells, and components. Use when the user wants new UI or a redesign. Implement one requested or selected direction directly, or generate distinct alternatives when the user asks to compare options.
The English summary is being prepared. Showing the original description.
aladicf/better-react-web-ui☆ 4Updated Sep 8, 2026
Design charts, metrics, and data tables that help users interpret and compare data. Use when the user asks to visualize data, choose chart types, improve dashboard analytics, or make data presentation accessible. Dashboard navigation and shell layout alone belong to add-ui or arrange.
The English summary is being prepared. Showing the original description.
aladicf/better-react-web-ui☆ 4Updated Sep 8, 2026
Windows アプリ開発 (Windows App SDK / WinRT) の OS 統合 API リファレンス。 DeviceInformation, DeviceWatcher, センサー (Accelerometer, Gyrometer, Pedometer, Compass, OrientationSensor, ActivitySensor), Bluetooth LE, USB, Serial, HID, Battery, HttpClient, StreamSocket, WebSocket, BackgroundDownloader/Uploader, NetworkInformation, PointerInput, KeyboardInput, IME/TextInput, FocusManager, DragAndDrop, ResourceLoader (多言語化・地域化), Calendar, DateTimeFormatter, CurrencyFormatter, PasswordVault, OAuth2Manager, Web Account Manager (WAM) / MSAL, WebAuthenticationBroker, WindowsHello/Passkeys, Age signals, CryptographicBuffer, Clipboard, DataTransferManager, Launcher, ProtocolActivation, JumpList, TaskbarManager, SecondaryTile, StartupTask, Smart App Control, Phone Link。
The English summary is being prepared. Showing the original description.
Fandhe-AI/agent-reference-skills☆ 4Updated Oct 20, 2026
Spawn a new Claude Code session with remote control enabled (default: a detached background session — via screen on macOS/Linux, via a minimized PowerShell Start-Process on Windows — fully remote-safe, no approvals/windows), so it appears in the mobile Claude Code session picker. Takes an optional directory path; defaults to the current working directory. Use when the user runs /rc-new.
The English summary is being prepared. Showing the original description.
phuryn/claude-code-advanced☆ 4Updated Jul 17, 2026
Build and analyze pangenomes for prokaryotes (Panaroo, PPanGGOLiN, PEPPAN, GET_HOMOLOGUES, anvi'o pangenomics) and eukaryotes (Minigraph-Cactus, PGGB, vg pangenome graphs). Implement Tettelin core/accessory/cloud genome decomposition (Tettelin 2005), Heap's law open/closed pangenome modeling, gene presence/absence GWAS (Scoary, pyseer), pangenome graph variant calling (vg, PanGenie), and structural-variation graph indexing. Use when assembling species- or genus-level pan-gene catalogs, separating core from accessory/shell/cloud genes, testing gene-content associations with phenotypes, building pangenome graphs from haplotype-resolved assemblies, calling SVs from pangenome graphs, or selecting between bacterial-pangenome and eukaryotic-pangenome workflows.
The English summary is being prepared. Showing the original description.
peacezha/TRACE☆ 3Updated Oct 20, 2026
Bash scripting workflow for creating production-ready shell scripts with defensive patterns, error handling, and testing.
The English summary is being prepared. Showing the original description.
phoroth/AGENTIC☆ 3Updated Aug 8, 2026
Master defensive Bash programming techniques for production-grade scripts. Use when writing robust shell scripts, CI/CD pipelines, or system utilities requiring fault tolerance and safety.
The English summary is being prepared. Showing the original description.
phoroth/AGENTIC☆ 3Updated Aug 8, 2026
Master of defensive Bash scripting for production automation, CI/CD pipelines, and system utilities. Expert in safe, portable, and testable shell scripts.
The English summary is being prepared. Showing the original description.
phoroth/AGENTIC☆ 3Updated Aug 8, 2026
Reference OpenCode docs when implementing skills, plugins, MCPs, or config-driven behavior.
The English summary is being prepared. Showing the original description.
openrind/openrind-shell☆ 3Updated Oct 19, 2026
Publish the openrind-desktop-orchestrator npm package with clean git hygiene. Triggers when user mentions: - "openrind-desktop-orchestrator npm publish" - "publish openrind-desktop-orchestrator" - "bump openrind-desktop-orchestrator"
The English summary is being prepared. Showing the original description.
openrind/openrind-shell☆ 3Updated Oct 19, 2026
Start the Openrind Desktop dev stack via Docker and verify real user flows via Chrome MCP. Triggers when user mentions: - "dev-up.sh" - "docker dev stack" - "verify in chrome mcp" - "test the real flow"
The English summary is being prepared. Showing the original description.
openrind/openrind-shell☆ 3Updated Oct 19, 2026
Create OpenCode custom commands for repeatable tasks.
The English summary is being prepared. Showing the original description.
openrind/openrind-shell☆ 3Updated Oct 19, 2026
Guide users through browser automation setup using Chrome DevTools MCP only. Use when the user asks to set up browser automation, Chrome DevTools MCP, browser MCP, or runs the browser-setup command.
The English summary is being prepared. Showing the original description.
openrind/openrind-shell☆ 3Updated Oct 19, 2026
Create OpenCode plugins and know where to load them.
The English summary is being prepared. Showing the original description.
openrind/openrind-shell☆ 3Updated Oct 19, 2026
Tauri 2.x + SolidJS stack for Openrind Desktop native app
The English summary is being prepared. Showing the original description.
openrind/openrind-shell☆ 3Updated Oct 19, 2026
Maintain the local OpenCode mirror for self-reference
The English summary is being prepared. Showing the original description.
openrind/openrind-shell☆ 3Updated Oct 19, 2026