537 skills · sorted by relevance
Identify a project's existing test tools and conventions, then run the smallest useful test suite for a specific change. Add or update tests when authorized, and report commands, results, and remaining gaps without overstating coverage.
Carry a clear, authorized coding request or approved plan through focused changes and appropriate checks. The workflow confirms acceptance criteria, keeps edits small, and reports what changed, what was verified, and what remains unresolved.
Build Spring Boot applications with guidance on project structure, configuration, APIs, database access, logging, testing, and security. Apply practices such as constructor injection, passing required components through constructors, and consistent handling of validation errors.
Build Helidon 4 applications on Java 21 or later with guidance for SE and MP. Apply practical patterns for HTTP endpoints, database access, configuration, testing, and security while accounting for API changes from Helidon 3.
Assess an authorized Active Directory environment by simulating attacks against credentials, permissions, and trust relationships. Use BloodHound and related testing tools to identify paths to administrator access, evaluate detection capabilities, and document findings with remediation recommendations.
Analyze AWS IAM access policies with boto3 and Cloudsplaining-style checks to find permissions that could grant greater access. Produces a JSON report linking risky permissions to users or roles, with severity ratings and remediation guidance.
Review security across web apps, APIs, mobile apps, Kubernetes, and AI agents using six OWASP references. Identify risky authentication, access controls, configurations, and prompt handling, then use examples and checklists to plan fixes.
Plan authentication for a Zoom integration by choosing an app type, selecting an authorization flow, and defining minimum permissions. Work through token storage, renewal, and authentication failures with a clear implementation approach.
Plan authorized security exercises that simulate attackers reaching important assets. Organize techniques into attack stages, rank effort and detection risk, identify shared points across attack paths, and use findings to assess detection and response coverage.
Build, review, and refactor ASP.NET Core web applications using official guidance. Helps choose application structure, implement pages and APIs, configure authentication and services, and plan testing, performance improvements, deployment, and version upgrades.
Install the free OpenWork desktop app on macOS, Windows, or Linux using the appropriate download for the computer. Guide initial setup, folder authorization, model selection, and a first task such as summarizing local files.
Find past discussions across existing screenpipe, Codex, Claude, Cursor, and Gemini CLI chats by title, workspace, or message text. With explicit authorization, send follow-up work to a specific supported chat; Gemini CLI supports search only.
Implement and debug Google OAuth 2.0 refresh tokens bound to a client key. Covers key generation, signed DPoP proofs that demonstrate key possession, and nonce challenge retries in WebCrypto and JavaScript environments.
Prepare and run Google Cloud CLI commands with syntax checks, explicit project and location settings, and focused output. Guides agents through change previews and authorization requirements for destructive operations and sensitive infrastructure changes.
Diagnose why GKE Pods cannot authenticate to Google Cloud APIs. Inspect cluster settings, service account bindings, resource permissions, and metadata server health, then provide evidence and concrete fixes for a human to apply.
Set up credentials and a development environment for your first Google Ads API request to retrieve campaigns. Choose from six official client libraries or direct HTTP requests, with guidance for account IDs, developer tokens, and common authorization errors.
Investigate 403 and 500 errors in Google Cloud Gemini Enterprise Agent Platform. Examine logs, registered destinations, agent identities, and authorization policies to produce a diagnostic report with evidence, recommended fixes, and verification steps.
Build live backends that store data, broadcast changes, and run handlers automatically. Covers subscription authorization, connection events, and atomic updates, which apply changes safely when multiple writers act at once.
Review source code, dependencies, and infrastructure settings for security issues. Find exposed credentials, unsafe input handling, and access control gaps, then organize findings into a report with severity levels, affected locations, and recommended fixes.
Connect supported work apps through browser consent without sharing passwords with the agent. The skill checks available connection methods, provides a single-use authorization link when appropriate, and guides personal Slack account linking.
Configure OAuth, the authorization flow used for provider sign-in, with portless development URLs. It guides callback registration and authentication library settings, helping diagnose rejected domains, redirect URL mismatches, and callbacks that point to the wrong address.
Build Python APIs with FastAPI and Pydantic V2, including input validation, database operations that avoid blocking other work, and token-based authentication. Implement REST or WebSocket endpoints, then check their behavior with automated tests and generated API documentation.
Query, create, update, and delete Tencent Cloud resources through tccli, its command-line tool. The skill checks API documentation before calls, supports browser-based OAuth authorization, and helps interpret results and troubleshoot errors during cloud automation.
Audit and fix four access-control problems in Convex apps: impersonation, missing ownership checks, sensitive data exposure, and writes into another user's container. Check the authentication foundation first, then verify changes with TypeScript.