403 skills · sorted by relevance
Turn enterprise red-team findings into client-facing reports with clear observations, business impact, remediation, and reproducible evidence. The skill provides report structure, severity and status guidance, and a Markdown-to-DOCX workflow with embedded screenshots and delivery checks.
Inspect Android apps for embedded credentials, internal API addresses, and components exposed to other apps. The skill guides APK acquisition, code inspection, and runtime traffic analysis to support a mobile security assessment.
Design studies that combine quantitative data, such as surveys, with qualitative evidence, such as interviews. It recommends a suitable design and outlines study phases, participant selection, timing, and ways to combine findings into an integrated interpretation.
Inspect files with Apache Tika to identify their actual format, embedded content, revision traces, and risk indicators. Save extracted evidence and file hashes while distinguishing recorded claims from observed structure, without asserting authorship or validating signatures.
Compare text and metadata extracted by two Tika builds from the same file collection. Generate reports to investigate content differences, encoding changes, new exceptions, and missing embedded documents, then repeat the evaluation after fixes.
Check the health of published EAS Updates: crash rates, install/launch counts, unique users, payload size, and the split between embedded and OTA users per channel. Use when the user asks how an update is performing, whether a rollout is healthy, how many users are on the embedded build vs OTA, or wants to gate CI on update health.
The English summary is being prepared. Showing the original description.
Check the health of published EAS Update: crash rates, install/launch counts, unique users, payload size, and the split between embedded and OTA users per channel. Use when the user asks how an update is performing, whether a rollout is healthy, how many users are on the embedded build vs OTA, or wants to gate CI on update health.
The English summary is being prepared. Showing the original description.
Demonstrate a credential-shaped payment key embedded in instructions
The English summary is being prepared. Showing the original description.
Nuxt adapter for embedding emulators directly in a Nuxt app via @emulators/adapter-nuxt. Use when the user needs to embed emulators in Nuxt, set up same-origin OAuth for preview deployments, create an emulate catch-all server route, configure persistence for embedded Nuxt emulators, or wrap nuxt.config with withEmulate. Triggers include "Nuxt emulator", "adapter-nuxt", "embedded emulator", "same-origin OAuth", "createEmulateHandler", "withEmulate", or any task requiring emulators inside a Nuxt app.
The English summary is being prepared. Showing the original description.
Expert firmware analyst specializing in embedded systems, IoT security, and hardware reverse engineering. Masters firmware extraction, analysis, and vulnerability research for routers, IoT devices, automotive systems, and industrial controllers. Use PROACTIVELY for firmware security audits, IoT penetration testing, or embedded systems research.
The English summary is being prepared. Showing the original description.
Senior embedded software engineer specializing in firmware and driver development for ARM Cortex-M microcontrollers (Teensy, STM32, nRF52, SAMD). Decades of experience writing reliable, optimized, and maintainable embedded code with deep expertise in memory barriers, DMA/cache coherency, interrupt-driven I/O, and peripheral drivers.
The English summary is being prepared. Showing the original description.
Optimizes Simulink models for Embedded Coder generated code. Use when asked to optimize or improve generated code, or reduce code metrics for a Simulink model. Targets: execution time, memory footprint (RAM, ROM, stack, data copies), code size, MISRA compliance, or any semantically similar generated-code metric. Works iteratively — measures baseline, suggests changes, applies, and re-measures to confirm improvement. Triggers can be prompts similar to: optimize generated code runtime, reduce runtime, shrink code size, improve code efficiency, reduce memory usage, speed up generated code, follow MISRA compliance and so on. CAUTION: Do NOT attempt to optimize Simulink models for generated code efficiency without following this skill — the iterative measurement, gating, and rollback workflow is essential for safe optimization.
The English summary is being prepared. Showing the original description.
Use the skill to control and verify the code interface configuration of your model — how Simulink® model elements are represented in the generated C or C++ code. This includes — (1) specifying names, types (storage classes), and placement of variables that represent model elements (for example, making a model parameter tunable as a global extern variable); (2) specifying names, types, and placement of functions that represent model algorithms; (3) selecting the deployment type (Component, Subcomponent, or Automatic); (4) selecting the interface configuration type (data or service interface); (5) linking a shared Embedded Coder dictionary to a model; (6) creating Embedded Coder dictionary entries and setting their properties; (7) for service interface configuration — specifying service interface definitions, including sender, receiver, client, and server services. Items 1 and 2 can be set per element or as a category-wide default. Item 1 applies to GRT and ERT models; the rest to ERT models only.
The English summary is being prepared. Showing the original description.
Configure Simulink models for Embedded Coder (ERT), Simulink Coder (GRT rapid-prototyping), or AUTOSAR code generation. Use when the user asks to generate embedded C or C++ code, run a full build of a model, produce a code generation report, configure a model for production/ECU deployment or rapid-prototyping code, target ARM or x86 hardware, apply MISRA C/C++ compliance (ERT/AUTOSAR only — Simulink Coder does not ship MISRA profiles), or set up GRT, ERT, AUTOSAR, or shared-library targets. Handles target selection, hardware mapping, model hierarchy propagation, and constraint introspection via the configure_for_codegen function. Do NOT use for GRT shared-library variants (grt_malloc.tlc), DDS, or ROS, or for iterative optimization workflows that measure baseline metrics, apply targeted changes, and re-measure to confirm improvement.
The English summary is being prepared. Showing the original description.
Generate, verify, refine, and accelerate C/C++ or CUDA code from MATLAB with MATLAB Coder, Embedded Coder, GPU Coder, or MATLAB Test. Also covers writing codegen-ready MATLAB code: language constraints, coder.* directives, and optimization patterns. Triggers on: codegen, MEX, deploy MATLAB as C/C++, GPU Coder, coder.screener, coder.config, coder.gpuConfig, coder.typeof, coder.runTest, matlabtest.coder.TestCase, SIL, embedded config, no dynamic memory, EnableMexProfiling, coder.timeit, coder.perfCompare, %#codegen, writing codegen-ready MATLAB, code generation readiness, coder.varsize, coder.unroll, coder.noImplicitExpansionInFunction, coder.ceval, coder.inline, coder.extrinsic, coder.const, coder.classSignature, class codegen limitations, temporal types codegen, DMA-off, stack-only, host-target InstructionSetExtensions, SIMDAcceleration, OptimizeReductions, host SIMD tuning, host OpenMP, codegen performance.
The English summary is being prepared. Showing the original description.
Add captions or subtitles to an existing single-subject talking-head video without editing the footage. Use for plain verbatim captions, cinematic captions embedded behind the subject, VFX captions, “炸/特效/酷炫字幕,” or a named identity from the 35-style catalog. Route by visual identity, not by backend engine. The quiet `anchor` rail is the default; embed every word only when the user explicitly wants a fully cinematic treatment. The workflow runs locally end to end, including transcription and subject matting; split multi-shot footage before applying it.
The English summary is being prepared. Showing the original description.
DuckDB is an in-process analytical database that runs embedded inside your application with zero external dependencies. It can query CSV, Parquet, and JSON files directly without loading them into tables first, making it ideal for local data exploration, ETL pipelines, and analytical workloads where spinning up a server is overkill.
The English summary is being prepared. Showing the original description.
Patterns for embedded software development including real-time systems, memory management, hardware abstraction, interrupt handling, and debugging techniques for resource-constrained environments. Use when ", " mentioned.
The English summary is being prepared. Showing the original description.
招聘与猎头 (招聘与猎头 (Recruiting & Executive Search) — 面向甲方招聘负责人/HR 与市场化猎头顾问「双侧视角」的『把一个模糊的用人需求，变成一个来得了、干得好、留得住的人』的判断体系；不是候选人一侧的求职与简历面经（那是 job-hunting-coach 的范围），也不是薪酬绩效/员工关系/组织发展的泛 HR 全模块，更不是劳动法条文解读。覆盖：(a) 第一性张力 —— 这行的核心世界观分歧：**需求诊断优先 ⇄ 快速供给优先**（用人经理提来的岗位需求几乎总是一张愿望清单，资深招聘先开 intake 会把『必须有』与『最好有』拆开、把画像逼成可证伪的成功标准；但按成单计酬的猎头把诊断时间压不进单价里，于是行业里同时存在『先诊断再搜寻』和『先扔简历再说』两种作业习惯）；**结构化面试 ⇄ 看人的直觉**（工业与组织心理学近一个世纪的效度元分析一致指向：结构化面试、工作样本、认知能力测验的预测效度明显高于非结构化面谈与经验年限，但一线用人经理绝大多数仍相信自己聊两句就能看准人——这是本行最大的知行落差，也是所有循证招聘流派的出发点；顺带一提，业内长期奉为圭臬的 Schmidt-Hunter 效度排序近年被重新校正，工作样本的效度被下调，这场修正本身就是本行必须如实呈现的争议）；**能力素质 ⇄ 文化匹配**（culture fit 既是最常被写在拒信里的理由，也是被批评得最凶的偏见外壳，Google 一派主张改口叫 culture add，看的是这个人补上了团队缺的东西，而不是像不像我们）；**主动寻访 sourcing ⇄ 被动投递漏斗**（高端与稀缺技能岗只有 outbound 人才地图一条路；量大岗位靠渠道效率、转化率与自动化，两条路的技能树几乎不重叠）；**人才地图是资产 ⇄ 人才地图是浪费**（保留制猎头把 mapping 当交付物的一部分，成功付费猎头认为地图做完单子已经黄了）；**保留制 retained ⇄ 成功付费 contingency**（按阶段预付、独家、深度地图 vs 多家赛马、入职才收钱、速度压倒深度；两种商业模式塑造出两种截然不同的作业节奏、候选人对待方式与职业道德边界，比如 off-limits 不挖回自己安置过的人）；**内部招聘团队 ⇄ 外部猎头与 RPO**（成本、速度、知识沉淀、雇主品牌归属谁的长期争论；embedded recruiter 是近年的折中）；**候选人体验 ⇄ 筛选效率**（漏斗越严体验越差，被拒者也是客户与口碑）；**AI 筛选的效率 ⇄ 合规与偏见**（简历解析、AI 面试评分、自动排序已在大规模使用，同时被监管盯上：纽约市 Local Law 144 要求自动化决策工具做偏见审计并公示、欧盟 AI 法案把招聘划为高风险场景、伊利诺伊州对 AI 视频面试单独立法；业内既离不开它，也在诉讼与审计里学做记录）；**offer 谈判的锚定 ⇄ 薪酬透明**（多地薪酬区间披露立法把谈判起点从『你现在多少』改成『这个岗位值多少』，问薪酬历史在不少法域已被禁止）；**counter-offer 该不该接**（猎头几乎一致反对，认为留下来的人多数一年内还是会走，但这条业内定论的证据基础本身也在被质疑）；**入职后早期流失算谁的**（保证期与退款条款把这场争论直接写进了合同）。(b) 工具栈 —— 申请人追踪系统 ATS（Greenhouse、Lever、Ashby、Workday Recruiting、SmartRecruiters、iCIMS、Taleo，中国侧 Moka、北森、大易、e成）、猎头 CRM 与交付系统（Bullhorn、Vincere、Loxo、Clockwork、Recruit CRM）、寻访与触达（LinkedIn Recruiter、SeekOut、hireEZ、Amazing Hiring、GitHub 与学术检索，中国侧 BOSS 直聘、猎聘、脉脉、拉勾、牛客）、评估与测评（HackerRank、CodeSignal、CoderPad、结构化面试题库与 scorecard 评分卡、Hogan、SHL、Predictive Index、Criteria、案例作业与工作样本）、面试调度与视频（GoodTime、Calendly、HireVue、Spark Hire）、背景调查与合规（HireRight、Checkr、Sterling，中国侧 i背调、八方锦程，以及个人信息保护法与 GDPR 下的授权链、FCRA 的不利行动通知）、数据与漏斗分析（time to fill 与 time to hire 的口径差异、offer 接受率、通过率与转化漏斗、quality of hire 的度量困境、招聘成本 cost per hire 的口径战争）、以及最被低估的纸笔工具（intake 提纲、成功标准清单、scorecard、人才地图表格、Boolean 检索式、一页纸的岗位价值主张）—— 选型的真正分岔从来不是功能清单，而是『你的岗位是靠触达赢还是靠转化赢』。(c) 心智模型层 —— 招聘是一次双向销售而不是一场考试；岗位画像要写成结果（这个人半年内要做成什么）而不是资历清单；信号与噪音（公司名与学历是弱信号，工作样本与具体行为证据是强信号）；结构化与评分卡的意义在于让判断可比而不是显得严谨；漏斗每一层都在丢人，所以要从入职倒推触达量；稀缺人才不看招聘广告，只在熟人与私域里流动；offer 是谈判也是承诺，谈崩与反悔的代价高度不对称；招聘的质量要到入职之后才结算。(d) 工作流 —— intake 需求诊断会、岗位画像与成功标准、渠道策略与人才地图 mapping、Boolean 与主动触达、简历筛选与电话初筛、结构化面试与 debrief 定校准、工作样本与技术评估、reference check 与背调、offer 设计与谈判、counter-offer 应对、入职前 no-show 防范与 pre-boarding、试用期与早期留存复盘、招聘漏斗与数据复盘、以及岗位关闭或撤销时的收尾。(e) 表达 DNA、质量基准（什么算一次好的招聘）、反模式（外行与新手最容易犯的错：照抄 JD、面试问脑筋急转弯、用薪酬历史锚定、把候选人当库存、背调走过场、offer 口头承诺）、智识谱系（工业与组织心理学的效度学派、循证与结构化招聘派、保留制高管寻访派、增长型 sourcing 与招聘运营派、雇主品牌与候选人体验派、中国互联网大厂的人才盘点与赛马派）。) Master OS — automated mastery of 招聘与猎头 (Recruiting & Executive Search) — 面向甲方招聘负责人/HR 与市场化猎头顾问「双侧视角」的『把一个模糊的用人需求，变成一个来得了、干得好、留得住的人』的判断体系；不是候选人一侧的求职与简历面经（那是 job-hunting-coach 的范围），也不是薪酬绩效/员工关系/组织发展的泛 HR 全模块，更不是劳动法条文解读。覆盖：(a) 第一性张力 —— 这行的核心世界观分歧：**需求诊断优先 ⇄ 快速供给优先**（用人经理提来的岗位需求几乎总是一张愿望清单，资深招聘先开 intake 会把『必须有』与『最好有』拆开、把画像逼成可证伪的成功标准；但按成单计酬的猎头把诊断时间压不进单价里，于是行业里同时存在『先诊断再搜寻』和『先扔简历再说』两种作业习惯）；**结构化面试 ⇄ 看人的直觉**（工业与组织心理学近一个世纪的效度元分析一致指向：结构化面试、工作样本、认知能力测验的预测效度明显高于非结构化面谈与经验年限，但一线用人经理绝大多数仍相信自己聊两句就能看准人——这是本行最大的知行落差，也是所有循证招聘流派的出发点；顺带一提，业内长期奉为圭臬的 Schmidt-Hunter 效度排序近年被重新校正，工作样本的效度被下调，这场修正本身就是本行必须如实呈现的争议）；**能力素质 ⇄ 文化匹配**（culture fit 既是最常被写在拒信里的理由，也是被批评得最凶的偏见外壳，Google 一派主张改口叫 culture add，看的是这个人补上了团队缺的东西，而不是像不像我们）；**主动寻访 sourcing ⇄ 被动投递漏斗**（高端与稀缺技能岗只有 outbound 人才地图一条路；量大岗位靠渠道效率、转化率与自动化，两条路的技能树几乎不重叠）；**人才地图是资产 ⇄ 人才地图是浪费**（保留制猎头把 mapping 当交付物的一部分，成功付费猎头认为地图做完单子已经黄了）；**保留制 retained ⇄ 成功付费 contingency**（按阶段预付、独家、深度地图 vs 多家赛马、入职才收钱、速度压倒深度；两种商业模式塑造出两种截然不同的作业节奏、候选人对待方式与职业道德边界，比如 off-limits 不挖回自己安置过的人）；**内部招聘团队 ⇄ 外部猎头与 RPO**（成本、速度、知识沉淀、雇主品牌归属谁的长期争论；embedded recruiter 是近年的折中）；**候选人体验 ⇄ 筛选效率**（漏斗越严体验越差，被拒者也是客户与口碑）；**AI 筛选的效率 ⇄ 合规与偏见**（简历解析、AI 面试评分、自动排序已在大规模使用，同时被监管盯上：纽约市 Local Law 144 要求自动化决策工具做偏见审计并公示、欧盟 AI 法案把招聘划为高风险场景、伊利诺伊州对 AI 视频面试单独立法；业内既离不开它，也在诉讼与审计里学做记录）；**offer 谈判的锚定 ⇄ 薪酬透明**（多地
The English summary is being prepared. Showing the original description.
@arm-cortex-expert workflow skill. Use this skill when the user needs Senior embedded software engineer specializing in firmware and driver development for ARM Cortex-M microcontrollers (Teensy, STM32, nRF52, SAMD) and the operator should preserve the upstream workflow, copied support files, and provenance before merging or handing off.
The English summary is being prepared. Showing the original description.
@arm-cortex-expert workflow skill. Use this skill when the user needs Senior embedded software engineer specializing in firmware and driver development for ARM Cortex-M microcontrollers (Teensy, STM32, nRF52, SAMD) and the operator should preserve the upstream workflow, copied support files, and provenance before merging or handing off.
The English summary is being prepared. Showing the original description.
Reads the visual content of slides, pages, and images the way a human would, not just their embedded text. Use when a PPTX or PDF has image slides, screenshots, charts, scanned figures, or flattened-to-image layouts that the built-in pptx/pdf skills read as empty; when asked to transcribe, describe, OCR, or extract what is shown in an image, slide deck, or document page; or when embedded-text extraction returned little or nothing from a visually rich file. Triggers on 'read this deck', 'what's on these slides', 'transcribe', 'OCR', 'extract text from image', 'describe this chart/diagram', .pptx/.pdf/.png/.jpg with visual content.
The English summary is being prepared. Showing the original description.
Deconstructs structured note payoffs with embedded option identification, issuer credit risk, and all-in cost analysis. Use when analyzing structured notes, evaluating embedded options, or assessing structured product costs.
The English summary is being prepared. Showing the original description.
Use this skill when read_file is not enough to read a PDF — it failed, timed out, or returned garbled or empty text, or the question is about figures, charts, layout, embedded images, attachments, or form-field values. Covers content inventory, text extraction, page rasterization for visual inspection, embedded image/attachment/table/form-field extraction, and choosing the right reading strategy for different document types (text-heavy, scanned, slide-decks, forms, data-heavy). Do NOT use this skill for PDF creation, merging, splitting, watermarking, or encryption — use the pdf skill instead — nor to fill, annotate, redact or rotate: office_edit where the chat has it, else the pdf-forms skill.
The English summary is being prepared. Showing the original description.