250 skills · sorted by relevance
Build TanStack Start pages from JSON specifications. This skill connects URL routes, shared layouts, server-side data loading, page metadata such as titles, and client navigation, including loading, error, and missing-page displays.
Build Apple platform applications with Swift, including SwiftUI screens and state management. Design reusable interfaces with protocols, implement asynchronous tasks, protect shared data with actors, and check code through builds, performance profiling, and tests.
Build JavaScript or TypeScript applications that run text, image, and audio models in browsers or server runtimes. Guides compatible model selection, GPU or CPU execution, caching, and memory cleanup without requiring a Python server.
Create typed data services for panels using direct or server-proxied API calls. Add caching and a circuit breaker, a mechanism that pauses requests after repeated failures, with cached or default data as fallback results.
Build TypeScript data services that separate API calls from display components. Add caching and a circuit breaker, which pauses calls after repeated failures, while keeping user-triggered requests able to report errors directly.
Set up the iPolloWork server in Daytona, connect an Electron desktop client through public preview URLs, and check service health and logs. Supports cloud feature validation with separate server and desktop test environments.
Implement and review browser API requests in OpenBot using shared patterns for reading and changing data. Covers cache keys, refreshing stored results after changes, error handling, and how components display request states.
Configure Vite projects for development and production builds, create plugins, and build libraries or apps with server-side rendering, where pages are generated on the server. The skill also covers migrating configuration to Vite 8.
Add, review, or fix calls between Blazor and JavaScript. Organize JavaScript modules alongside components, control when calls run, combine related operations, and clean up references with handling for server disconnections.
Investigate browser-side security flaws in DOM handling, cross-window messages, Service Workers, and CSS. Trace untrusted input to sensitive operations and verify observable impact, helping distinguish reproducible vulnerabilities from harmless signals.
Test CDN-backed websites for cache poisoning and Web Cache Deception, where private pages are mistakenly cached as public content. The skill guides cache behavior checks, input testing, and independent-client verification to establish reproducible impact.
Test APIs for NoSQL injection, where user input changes database queries unexpectedly. The skill focuses on MongoDB login bypass, unauthorized data retrieval, and response timing checks, and also covers Redis command injection through server-side requests.
Guides backend development for Node.js, Express, and Next.js API routes. It covers separating application logic from data access, reducing database queries, caching, authentication, error handling, and background jobs through concrete implementation examples.
Configure XRequest for API calls and streaming responses, where data arrives in successive pieces. This skill covers request settings, authentication, debugging, and environment-specific handling of credentials for standalone requests or integration with chat providers.
Review web application code against OWASP Top 10 (2021), a list of common security risks. Receive findings with file locations, severity ratings, concrete fix code, and a prioritized list of remediation tasks.
Build Next.js 14+ applications with App Router, covering pages, server-side processing, data fetching, and caching. The skill also guides performance improvements, search engine metadata, and production deployment to Vercel or a self-hosted environment.
Schedule recurring or one-time BB tasks using an agent for work that needs reasoning or a server-side script for fixed checks. Manage schedules, pause and resume tasks, run them manually, and inspect execution history.
Golang everyday observability — the always-on signals in production. Covers structured logging with slog, Prometheus metrics, OpenTelemetry distributed tracing, continuous profiling with pprof/Pyroscope, server-side RUM event tracking, alerting, and Grafana dashboards. Apply when instrumenting Go services for production monitoring, setting up metrics or alerting, adding OpenTelemetry tracing, correlating logs with traces, migrating legacy loggers (zap/logrus/zerolog) to slog, adding observability to new features, or implementing GDPR/CCPA-compliant tracking with Customer Data Platforms (CDP). Not for temporary deep-dive performance investigation (→ See `samber/cc-skills-golang@golang-benchmark` and `samber/cc-skills-golang@golang-performance` skills).
The English summary is being prepared. Showing the original description.
[omh] Designing an API, server, or data-layer change: prepare server, API, and data-layer contracts — auth boundary, error paths, response shape, and schema/migration discipline — before implementation. Use when the user says: backend, back-end, back end, backend skill, server side, server-side, api design, api contract.
The English summary is being prepared. Showing the original description.
The reference presentation-tool contract, covering server-side enrichment, suggestion chips, the event stream, progressive rendering, both roles' built-in components, and adding a vertical component. Load when building or reviewing how a commerce agent's output reaches a frontend.
The English summary is being prepared. Showing the original description.
Set up, repair, or migrate to Cloudflare Turnstile bot verification in an existing frontend and backend, including server-side Siteverify.
The English summary is being prepared. Showing the original description.
Install the Anima SDK and configure authentication for Figma-to-code generation. Use when setting up design-to-code automation, configuring Figma token access, or initializing the @animaapp/anima-sdk for server-side code generation. Trigger with: "install anima", "setup anima", "anima auth", "anima figma token".
The English summary is being prepared. Showing the original description.
Advanced prototype pollution playbook — server-side RCE, client-side gadgets, filter bypasses, and detection techniques. Companion to ../prototype-pollution/ for basics. Use when you've confirmed pollution and need to escalate to code execution or find framework-specific gadgets.
The English summary is being prepared. Showing the original description.
SSRF playbook. Use when the server fetches URLs, resolves hostnames, imports remote content, or can be driven toward internal networks, cloud metadata, or secondary protocols.
The English summary is being prepared. Showing the original description.