코딩 규칙, 프레임워크, 리팩터링, 코드 리뷰 (1.6만건)
当手上有一个零散的读书会、学生分享、讲座或社群活动想法，想知道下一步该怎么长时使用。先按留下的痕迹（办过几次、来了几个人、留下了什么）判出它实际在哪儿，而不是按它叫什么；再用带证据清单的闸门决定是留在原地、修改后再试、往深处走（Workshop）还是往广处走（公共活动）。深度与广度是两个独立的轴，不是一条梯子。产出各阶段的标准表单与交接，不替使用者编造学校制度、人员、预算或未给出的活动形式定义。
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
当使用者说“按我的模型写代码”“把方程实现成 Python/MATLAB/R”“调试这段建模代码”“补验证和灵敏度分析”“让结果可复现”时使用。只实现学生已确认的模型与数据契约，先写实现合同、手算小例、不变量和验收矩阵，再按读取、变换、求解、验证、敏感性与导出拆分；执行后记录输入快照、种子、环境、求解设置和输出，不静默修数据、不硬编码结果、不替学生发明模型或伪造数据。
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
The runbook a triage agent follows on each run over the super-admin attention dock, through the attention MCP tool. Use when a scheduled attention-triage routine wakes, when asked to triage, clean up or shrink the attention dock or admin alerts, or when the dock's card is over budget.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
Delegate writing predictable code to the `code-write` command, which has a cheaper writer model write the target file directly so the generated code never enters your context. Use for tests, scaffolding, fixtures, boilerplate, or a new file that copies an existing pattern, and when the user says "code write", "生成を委譲", or "雛形を書かせて". Do NOT use for design decisions, changes to public contracts or shared modules, edits inside an existing file that needs judgment, or logic with subtle correctness requirements.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
Check the latest Claude (Anthropic), OpenAI Codex, and Google Gemini model releases from official primary sources, update model selections in this dotfiles repo, and update the Claude Code, Codex, and Antigravity (agy) CLIs through their configured managers. Every run checks both the model settings and CLI for the selected provider, then scans the invoking repository for hardcoded model IDs. Use when the user asks to "モデル更新", "モデルを最新に", "最新モデル確認", "Codex/Claude Code/agy本体の更新", "model bump", "update models", or "update agent CLIs". Do NOT use for one-off model selection in a single conversation, general model questions, or unrelated package updates.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
Operate Orca-managed worktrees, folder contexts, terminals, repos, automations, artifacts, skill sharing, worktree comments, and Orca's embedded browser through the `orca` CLI. Use when the user says "$orca-cli", "Orca worktree", "child worktree", "spawn codex/claude in a worktree", "read/wait/send Orca terminal", "Orca browser", "orca artifacts", or "share skills". Do NOT use for handing a task to another session; use my-handoff. Prefer it over raw git worktree, ad hoc PTYs, or Computer Use when Orca state is involved. Use Computer Use only for external windows or desktop UI that needs OS-level control, and Playwright or CDP for external pages.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
思考フレームワークに基づく対話・レビュー・執筆スキル。「私の視点で」「私の考え方で」をプロンプトに含めると適用される。
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
Discover and inventory shadow API endpoints that operate outside documented specifications using traffic analysis, code scanning, and API discovery platforms.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
Detect and prevent API enumeration attacks including BOLA and IDOR exploitation by monitoring sequential identifier access patterns and authorization failures.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
Deobfuscates malicious JavaScript code used in web-based attacks, phishing pages, and dropper scripts by reversing encoding layers, eval chains, string manipulation, and control flow obfuscation to reveal the original malicious logic. Activates for requests involving JavaScript malware analysis, script deobfuscation, web skimmer analysis, or obfuscated dropper investigation.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
Configure microsegmentation policies to enforce least-privilege workload-to-workload access using tools like VMware NSX, Illumio, and Calico, preventing lateral movement in zero trust architectures.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
A Certificate Authority (CA) is the trust anchor in a PKI hierarchy, responsible for issuing, signing, and revoking digital certificates. This skill covers building a two-tier CA hierarchy (Root CA +
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
Configure secure OAuth 2.0 authorization flows including Authorization Code with PKCE, Client Credentials, and Device Authorization Grant. This skill covers flow selection, PKCE implementation, token
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
Parse Windows Prefetch files using the windowsprefetch Python library to reconstruct application execution history, detect renamed or masquerading binaries, and identify suspicious program execution patterns.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
Traces ransomware cryptocurrency payment flows using blockchain analysis tools such as Chainalysis Reactor, WalletExplorer, and blockchain.com APIs. Identifies wallet clusters, tracks fund movement through mixers and exchanges, and supports law enforcement attribution. Activates for requests involving ransomware payment tracing, bitcoin wallet analysis, cryptocurrency forensics, or blockchain intelligence gathering.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
Builds vendor-agnostic detection rules using the Sigma rule format for threat detection across SIEM platforms including Splunk, Elastic, and Microsoft Sentinel. Use when creating portable detection logic from threat intelligence, mapping rules to MITRE ATT&CK techniques, or converting community Sigma rules into platform-specific queries using sigmac or pySigma backends.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
Detect and analyze heap spray attacks in memory dumps using Volatility3 plugins to identify NOP sled patterns, shellcode landing zones, and suspicious large allocations in process virtual address space.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
Executes malware samples in Cuckoo Sandbox to observe runtime behavior including process creation, file system modifications, registry changes, network communications, and API calls. Generates comprehensive behavioral reports for malware classification and IOC extraction. Activates for requests involving dynamic malware analysis, sandbox detonation, behavioral analysis, or automated malware execution.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
URLScan.io is a free service for scanning and analyzing suspicious URLs. It captures screenshots, DOM content, HTTP transactions, JavaScript behavior, and network connections of web pages in an isolat
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
Analyze Windows LNK shortcut files and Jump List artifacts to establish evidence of file access, program execution, and user activity using LECmd, JLECmd, and manual binary parsing of the Shell Link Binary format.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
Parse Windows PowerShell Script Block Logs (Event ID 4104) from EVTX files to detect obfuscated commands, encoded payloads, and living-off-the-land techniques. Uses python-evtx to extract and reconstruct multi-block scripts, applies entropy analysis and pattern matching for Base64-encoded commands, Invoke-Expression abuse, download cradles, and AMSI bypass attempts.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
Reverse engineer Go-compiled malware using Ghidra with specialized scripts for function recovery, string extraction, and type reconstruction in stripped Go binaries.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
Detect PowerShell Empire framework artifacts in Windows event logs by identifying Base64 encoded launcher patterns, default user agents, staging URL structures, stager IOCs, and known Empire module signatures in Script Block Logging events.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
Identifies and unpacks UPX-packed and other packed malware samples to expose the original executable code for static analysis. Covers both standard UPX unpacking and handling modified UPX headers that prevent automated decompression. Activates for requests involving malware unpacking, UPX decompression, packer removal, or preparing packed samples for analysis.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.