406 skills · sorted by relevance
Test Android and iOS apps by capturing real app traffic and checking backend APIs. When traffic is blocked or cannot be replayed, use decompilation and runtime inspection to uncover endpoints, inspect secrets, or understand request signing.
Screen incoming nondisclosure agreements against a supplied playbook or default criteria. Receive a three-level classification, a summary of problematic clauses, suggested fixes, and recommended next steps for approval or legal review.
Assess iOS apps from IPA acquisition through file inspection and runtime testing. The skill helps uncover embedded credentials, insecure network settings, and app link handling issues using tools such as Frida, objection, and binary analysis utilities.
Investigate clickjacking, where a hidden page tricks users into unintended clicks. Check protective headers, then verify in a real browser whether the embedded page retains authentication and allows sensitive actions.
Assess file upload and import features for weaknesses in file checks and processing. The skill covers extension and content-type bypasses, unsafe image and document handling, archive extraction flaws, and evidence needed to confirm execution or browser-side impact.
Create and edit Obsidian Markdown notes with links between notes, embedded images and PDFs, highlighted callout boxes, tags, and properties. Use Obsidian-specific formatting to connect related material and organize information within notes.
Search Unity's package registry and installed packages by name, ID, or description. Review available versions and installation status before adding a package, using cached results or online lookups for exact matches.
List packages installed in a Unity project with their names, versions, sources, and descriptions. Filter by source or keyword, or show only direct dependencies—the packages explicitly listed in the project manifest.
Apply safeguards when analyzing external articles or posts. Validate URLs, limit fetched content, label source text as untrusted data, and clean analysis output so embedded instructions are treated as material rather than commands.
Turn CSV, Excel, or JSON data into a complete HTML report with key metrics, multiple charts, written insights, and a data table. Embedded charts let readers open the report offline.
Guide authorized clickjacking tests, which examine whether embedded pages can trick users into unintended actions. The skill defines testing boundaries, alternative investigation paths, and reproduction evidence needed to support findings or document an inconclusive result.
Create reports, guides, and project documents in Markdown with Mermaid, a text-based diagram format. Use document templates and style guides to explain workflows, relationships, and timelines while keeping text and diagrams editable and suitable for version control.
Bring up BlueField-3 hardware through RShim, its host management interface, and BFB system images. Follow installation and recovery workflows, diagnose management connectivity and boot state, and verify the installed system and version compatibility.
Test JS logic embedded in HTML using two-layer strategy - Python unit tests + Playwright browser integration tests
The English summary is being prepared. Showing the original description.
Soft, extruded UI elements with inner and outer shadows on monochromatic surfaces for a tactile, embedded look.
The English summary is being prepared. Showing the original description.
Author SVG figures for Grida docs — diff-able, version-controlled vector diagrams embedded in doc pages instead of screenshots. Provides reusable primitives (selection chrome, size badges, anchor pins, resize cursors, click ripples), color/typography tokens, a starter template, and finished examples to crib from. Canvas user docs (docs/editor/) are the first consumer; the kit is meant to generalize to any product's docs. Use when drawing diagrams that explain UI behaviour — gestures, alignment, before/after states — that a screenshot alone can't capture. Trigger phrases: "svg diagram", "draw a figure", "visual for docs", "explain this gesture visually", "before/after diagram".
The English summary is being prepared. Showing the original description.
Land a change everywhere the same fact is stated — enumerating the full surface inventory (landing copy, docs, machine-readable summaries, changelog badges repeated across every page, sitemap, README, descriptions embedded in code, and untyped frontend consumers of typed responses), generating a surface instead of restating it, drift tests where you cannot generate, never hand-maintaining a copy of a surface another codebase owns, shipping a paired PR when you change a format a different codebase decodes, and keeping overloaded product words apart. Use when adding or renaming a user-facing feature, editing product/marketing copy or docs, renaming a serialized response field, changing a serialization or share-link format, wiring one repo's output into another's checks, or reviewing a PR that touched only one place a fact appears.
The English summary is being prepared. Showing the original description.
Scans the biomarker landscape of a disease area by biomarker type, clinical/research use case, evidence layer, validation status, and maturity level. Use this skill when a user wants a field-level biomarker evidence map rather than a generic literature summary. Always separate exploratory biomarkers from externally validated or clinically embedded biomarkers, and never imply clinical maturity without explicit evidence support.
The English summary is being prepared. Showing the original description.
Use this skill when the user asks about Stripe Connect configuration, charge patterns, Dashboard access, or how to get started with Connect, is building a marketplace, platform, multi-vendor store, gig platform, or subscription platform, needs to pay out sellers, vendors, or providers, mentions split payments, revenue sharing, multi-party payments, or similar payment distribution concepts, provides a company URL or business description for a recommendation, builds SaaS that routes money between parties (for example, POS, booking, invoicing — not operational SaaS without payment routing), asks about onboarding or KYC for merchants, sellers, and vendors, mentions connected account Dashboard or responsibility configurations, or asks about payment flows, white-label payments, or embedded payments.
The English summary is being prepared. Showing the original description.
Master Flutter development with Dart 3, advanced widgets, and multi-platform deployment. Handles state management, animations, testing, and performance optimization for mobile, web, desktop, and embedded platforms. Use PROACTIVELY for Flutter architecture, UI implementation, or cross-platform features.
The English summary is being prepared. Showing the original description.
Write efficient C code with proper memory management, pointer arithmetic, and system calls. Handles embedded systems, kernel modules, and performance-critical code. Use PROACTIVELY for C optimization, memory issues, or system programming.
The English summary is being prepared. Showing the original description.
Faithfully archive public WPS/KDocs/金山文档 links, especially embedded ProcessOn .pof mind maps and canvases, as raw source data, original SVG/PNG, and Markdown. Use when a user gives a kdocs.cn or wps.processon.com link and asks to scrape, save, download, 扒下来, 归档, or 转 Markdown without logging in or saving the document to an account.
The English summary is being prepared. Showing the original description.
Extracts Mermaid diagrams from markdown files and generates high-quality PNG images using bundled scripts. Activates when working with Mermaid diagrams, converting diagrams to PNG, extracting diagrams from markdown, or processing markdown files with embedded Mermaid code.
The English summary is being prepared. Showing the original description.
Routes any Feishu/Lark/Doubao operation, including recording lookup by date (按日期找会议录音), through the version-matched lark-cli domain guide embedded in the installed CLI, then executes and verifies the task. Use for 飞书/Lark/Doubao docs, drive, sheets, Base, wiki, minutes, meetings, calendar, IM, mail, tasks, approval, apps, auth/scope, resource URLs or tokens, and lark-cli troubleshooting. This is the single Lark entry point; use ima-copilot instead for Tencent IMA.
The English summary is being prepared. Showing the original description.