投行并购 (投行并购 / 交易撮合 (Investment Banking M&A / Dealmaking) — 面向并购顾问、企业融资、卖方/买方交易执行的职业认知操作系统,从业者(分析师 Analyst / 经理 Associate / 副总裁 VP / 董事 Director / 董事总经理 MD / 内部公司发展 Corp Dev / PE 投资人)、想入行者、以及服务这行(法律/会计/估值/咨询)的视角。覆盖: (a) 第一性张力 — 投行 M&A 的核心世界观分歧: **价格 vs 价值 (price 是市场愿意付的, value 是内在的, deal 在两者缝隙里成交) ⇄ 确定性 vs 最高价 (certainty of close 对卖方常胜过纸面最高报价) ⇄ 顾问/中介 vs 委托代理 (banker 是 agent, 客户利益 vs 成交费的激励冲突真实存在, 「banker 总想成交」是行业原罪批判)**; 更深层 — 「过程/竞价纪律 (controlled auction 制造竞争张力、信息不对称管理) ⇄ 关系/信任 (relationship banking、长期 coverage、reputational capital)」, 「叙事/包装 (the story, equity story, positioning) ⇄ 数字/尽调 (the numbers, diligence, quality of earnings)」, 「估值的科学外衣 (DCF/comps 的伪精确) ⇄ 谈判的真实定价 (价格由 leverage、竞争、时机决定)」; (b) 估值与分析正典 (最标准化、最易蒸出高质量+CLI 化) — DCF (折现现金流: FCF 预测/WACC 折现率/terminal value 终值/Gordon growth vs exit multiple), Comparable Companies (可比公司/trading comps: EV/EBITDA, EV/Revenue, P/E), Precedent Transactions (先例交易/deal comps: control premium 控制权溢价), LBO (杠杆收购模型: IRR/MOIC/debt schedule/sources & uses), Accretion/Dilution (增厚/摊薄分析: EPS 影响、pro forma), Sum-of-the-Parts (分部估值/SOTP), Football Field (估值区间图), Merger Model (合并模型: synergies 协同/purchase accounting/goodwill), Sensitivity/scenario; (c) 交易流程与产出物 — 卖方流程 (sell-side: teaser 简介 → NDA → CIM/IM 信息备忘录 → management presentation → IOI 意向函 → data room 数据室 → LOI/term sheet → confirmatory diligence → SPA 买卖协议 → signing → closing), 买方流程 (buy-side: thesis/sourcing → outreach → valuation → bid → exclusivity → diligence → financing → close), auction 类型 (broad/targeted/negotiated/preemptive bid); 产出物: pitchbook 推介材料、CIM、fairness opinion 公平意见、board presentation、fee letter、engagement letter; (d) 交易结构与条款 — consideration (cash/stock/mix/earnout 对赌)、deal protections (breakup fee 分手费/go-shop/no-shop/MAC 重大不利变化条款)、representations & warranties 陈述与保证、escrow 托管、working capital adjustment 营运资金调整、reverse termination fee、collar 价格区间、tender offer vs merger、hostile vs friendly、defensive tactics (poison pill 毒丸/white knight 白衣骑士/staggered board); (e) 行业结构与角色 — bulge bracket (高盛/摩根士丹利/JPM/BofA/花旗) vs elite boutique (Centerview/Evercore/Moelis/Lazard/PJT/Perella) vs middle market (Houlihan Lokey/William Blair/Harris Williams) vs regional/independent; analyst→associate→VP→director→MD 晋升金字塔; coverage (行业组) vs product (M&A/ECM/DCM/leveraged finance/restructuring); sponsors group (服务 PE); 买方包括 PE/strategic acquirer/corp dev; (f) 量化指标与节奏 — deal fee (success fee 业内通常约 1-2% 视规模递减/retainer/Lehman formula)、league table 排行榜、pitch→mandate 转化、deal velocity、hours culture (analyst 80-100h/week 文化批判)、bonus/comp 结构、deal sheet (简历上的成交清单); (g) 争议/批判 — fairness opinion 是否橡皮图章 (利益冲突: 出意见的 banker 也收成交费)、estimate 的伪精确 (DCF garbage in garbage out、假设驱动结论)、banker 永远建议成交 (deal 偏见、empire building 助推 CEO 自利并购)、协同效应系统性高估 (大量并购毁灭价值、winner's curse 赢家诅咒)、analyst 血汗工厂文化 (2021 高盛 13 人 deck 事件、过劳死争议)、advisory 价值 vs 中介寻租之争、bulge vs boutique 的利益独立性叙事 (boutique 标榜「无承销利益冲突」)、SPAC 泡沫与 de-SPAC 教训; (h) 流派/思想谱系 — 估值学派 (Aswath Damodaran 估值教父/纽大、Tim Koller McKinsey《Valuation》、McKinsey valuation 体系) vs 公司金融教科书派 (Rosenbaum & Pearl《Investment Banking》行业圣经、Brealey Myers Allen、CFI/WSP/BIWS 培训体系) vs 交易实战派 (Bruce Wasserstein《Big Deal》、Joseph Perella/Felix Rohatyn 老派 dealmaker、现代 boutique 创始人) vs 行为/批判派 (并购毁灭价值的学术证据、Damodaran 对协同/控制权溢价的批判、Matt Levine《Money Stuff》解构华尔街逻辑) vs PE/buy-side 视角 (LBO 数学、value creation 杠杆/运营/multiple expansion)。不含: 二级市场股票交易/卖方研究 (equity research)、零售财富管理/private banking、纯 ECM/IPO 承销执行 (虽相关但聚焦 M&A advisory)、纯 PE 投后运营、量化交易/对冲基金策略、纯公司财务报表会计。) Master OS — automated mastery of 投行并购 / 交易撮合 (Investment Banking M&A / Dealmaking) — 面向并购顾问、企业融资、卖方/买方交易执行的职业认知操作系统,从业者(分析师 Analyst / 经理 Associate / 副总裁 VP / 董事 Director / 董事总经理 MD / 内部公司发展 Corp Dev / PE 投资人)、想入行者、以及服务这行(法律/会计/估值/咨询)的视角。覆盖: (a) 第一性张力 — 投行 M&A 的核心世界观分歧: **价格 vs 价值 (price 是市场愿意付的, value 是内在的, deal 在两者缝隙里成交) ⇄ 确定性 vs 最高价 (certainty of close 对卖方常胜过纸面最高报价) ⇄ 顾问/中介 vs 委托代理 (banker 是 agent, 客户利益 vs 成交费的激励冲突真实存在, 「banker 总想成交」是行业原罪批判)**; 更深层 — 「过程/竞价纪律 (controlled auction 制造竞争张力、信息不对称管理) ⇄ 关系/信任 (rela
日本語の概要は準備中です。原文の説明を表示しています。
swaylq/master-skill☆ 1572026年9月6日 更新
Hugging Face Hub CLI (`hf`) for downloading, uploading, and managing models, datasets, spaces, buckets, repos, papers, jobs, and more on the Hugging Face Hub. Use when: handling authentication; managing local cache; managing Hugging Face Buckets; running or scheduling jobs on Hugging Face infrastructure; managing Hugging Face repos; discussions and pull requests; browsing models, datasets and spaces; reading, searching, or browsing academic papers; managing collections; querying datasets; configuring spaces; setting up webhooks; or deploying and managing HF Inference Endpoints. Make sure to use this skill whenever the user mentions 'hf', 'huggingface', 'Hugging Face', 'huggingface-cli', or 'hugging face cli', or wants to do anything related to the Hugging Face ecosystem and to AI and ML in general. Also use for cloud storage needs like training checkpoints, data pipelines, or agent traces. Use even if the user doesn't explicitly ask for a CLI command. Replaces the deprecated `huggingface-cli`.
日本語の概要は準備中です。原文の説明を表示しています。
Scoheart/agentskills☆ 22026年8月4日 更新
Use when fine-tuning LLMs, training custom models, or adapting foundation models for specific tasks. Invoke for configuring LoRA/QLoRA adapters, preparing JSONL training datasets, setting hyperparameters for fine-tuning runs, adapter training, transfer learning, finetuning with Hugging Face PEFT, OpenAI fine-tuning, instruction tuning, RLHF, DPO, or quantizing and deploying fine-tuned models. Trigger terms include: LoRA, QLoRA, PEFT, finetuning, fine-tuning, adapter tuning, LLM training, model training, custom model.
日本語の概要は準備中です。原文の説明を表示しています。
Jeffallan/claude-skills☆ 1.2万2026年10月4日 更新
Guidance for .NET MAUI XAML and C# data bindings — compiled bindings, INotifyPropertyChanged / ObservableObject, value converters, binding modes, multi-binding, relative bindings, fallbacks, and MVVM best practices. USE FOR: setting up compiled bindings with x:DataType, implementing INotifyPropertyChanged or CommunityToolkit ObservableObject, creating IValueConverter / IMultiValueConverter, choosing binding modes, configuring BindingContext, relative bindings, binding fallbacks, StringFormat, code-behind SetBinding with lambdas, and enforcing XC0022/XC0025 warnings. DO NOT USE FOR: CollectionView item templates and layouts (use maui-collectionview), Shell navigation data passing (use maui-shell-navigation), dependency injection (use maui-dependency-injection), or animations triggered by property changes (use .NET MAUI animation APIs).
日本語の概要は準備中です。原文の説明を表示しています。
dotnet/skills☆ 5,6342026年10月14日 更新
Rigorous, defensible email-spoofability verdict and SPF supply-chain risk analysis computed from published DNS alone. Deepens the record-level SPF/DMARC/DKIM/BIMI/MTA-STS/DNSSEC fetch recipes in the offensive-osint arsenal (§16.14) with the reasoning that section doesn't do: a priority-ordered composite verdict for whether an attacker can actually land header-From-spoofed mail in an inbox, and by which vector (exact-domain vs subdomain) — grounded in the single most-misunderstood distinction in email security: the envelope MAIL FROM that SPF authenticates vs the visible header From: that only DMARC governs. Explains precisely why SPF -all/~all alone is NOT spoof-proof without DMARC enforcement, and why SPF +all bypasses DMARC even under p=reject pct=100. Covers RFC 7208 §4.6.4's 10-DNS-lookup / 2-void-lookup PermError fail-open condition with a runnable stdlib-only lookup-counter script, plus the SPF-include-takeover supply-chain vector (an attacker re-registering a dead include inherits SPF-pass authority over the victim domain) with strict transient-vs-NXDOMAIN discrimination discipline so a temporary SERVFAIL is never mistaken for a takeover lead. Fully passive: DNS TXT reads only, no mail sent, no RCPT TO probe, no API keys. Use when auditing a domain's real spoofing resistance (not just its published records), explaining to a client why 'we have SPF -all' does not mean they're covered, investigating an SPF PermError or an unusually long include chain, evaluating a dead SPF include as a takeover lead, or writing a defensible spoofability finding for a deliverable.
日本語の概要は準備中です。原文の説明を表示しています。
elementalsouls/Claude-OSINT☆ 2,8192026年10月10日 更新
Guidance for .NET MAUI XAML and C# data bindings — compiled bindings, INotifyPropertyChanged / ObservableObject, value converters, binding modes, multi-binding, relative bindings, fallbacks, and MVVM best practices. USE FOR: setting up compiled bindings with x:DataType, implementing INotifyPropertyChanged or CommunityToolkit ObservableObject, creating IValueConverter / IMultiValueConverter, choosing binding modes, configuring BindingContext, relative bindings, binding fallbacks, StringFormat, code-behind SetBinding with lambdas, and enforcing XC0022/XC0025 warnings. DO NOT USE FOR: CollectionView item templates and layouts (use maui-collectionview), Shell navigation data passing (use maui-shell-navigation), dependency injection (use maui-dependency-injection), or animations triggered by property changes (use .NET MAUI animation APIs).
日本語の概要は準備中です。原文の説明を表示しています。
managedcode/dotnet-skills☆ 4862026年10月14日 更新
侍酒师与葡萄酒 (侍酒师 / 葡萄酒 (Sommelier & Wine) — 葡萄酒鉴赏 + 侍酒服务的职业认知操作系统,从业者/侍酒师/学习者视角。覆盖: (a) 两大认证体系张力 — WSET (Wine & Spirit Education Trust, 英国, 知识+SAT 系统化品鉴方法, Diploma/L4 笔试导向) vs Court of Master Sommeliers (CMS, 美/英, 服务+盲品演绎法+理论三位一体, MS 头衔), 外加 Institute of Masters of Wine (MW, 学术研究+论文) 与 UC Davis 葡萄酒学/葡萄栽培学学院派; (b) 盲品 = 纯 tacit 校准技能 — 演绎品鉴网格 (deductive tasting: 看色/闻香/品味 → 结构线索 calculated structure → 推断品种/产区/年份/酒龄), WSET SAT vs CMS deductive grid 两套方法论; (c) 第一性张力 — codifiable 理论层 (产区/品种/酒法/风土/酿造/葡萄栽培) ⇄ tacit 校准层 (品鉴味觉记忆/盲品/侍酒服务), 这行的核心矛盾是「可背诵的知识」与「不可言传的味觉」之间; (d) 旧世界 vs 新世界框架 — 旧世界以风土/法定产区为组织原则 (AOC/DOCG/QbA 分级法), 新世界以品种为标签; 风土 (terroir) 是核心组织概念; (e) 侍酒服务/酒店层 — 餐厅 floor 的配餐 (food pairing)、醒酒/侍酒温度、酒单与酒窖管理、by-the-glass 与饮品项目经济学、盲品 service exam; (f) 葡萄酒商业层 — 三级分销体系 (美国 three-tier)、定价/配额 (allocation)、期酒 (en primeur)、投资酒 (Liv-ex) 与拍卖; (g) 智识/品味演进 — 帕克百分制 (Robert Parker / Wine Advocate 100-point) vs Jancis Robinson 20 分制散文派; 经典派 vs 现代派酿造; 自然酒/低干预 (natural/minimal-intervention) vs 传统技术派. 学派分歧: WSET 知识体系派 vs CMS 服务盲品派、旧世界风土派 vs 新世界品种/技术派、自然酒派 vs 传统派、百分制点评派 vs 散文叙述派、经典平衡派 vs 浓郁现代派. 不含: 家庭自酿 DIY 套件、纯调酒/鸡尾酒/烈酒、葡萄园重型农机工程、酒精成瘾/公共卫生政策、酒类电商运营纯营销。) Master OS — automated mastery of 侍酒师 / 葡萄酒 (Sommelier & Wine) — 葡萄酒鉴赏 + 侍酒服务的职业认知操作系统,从业者/侍酒师/学习者视角。覆盖: (a) 两大认证体系张力 — WSET (Wine & Spirit Education Trust, 英国, 知识+SAT 系统化品鉴方法, Diploma/L4 笔试导向) vs Court of Master Sommeliers (CMS, 美/英, 服务+盲品演绎法+理论三位一体, MS 头衔), 外加 Institute of Masters of Wine (MW, 学术研究+论文) 与 UC Davis 葡萄酒学/葡萄栽培学学院派; (b) 盲品 = 纯 tacit 校准技能 — 演绎品鉴网格 (deductive tasting: 看色/闻香/品味 → 结构线索 calculated structure → 推断品种/产区/年份/酒龄), WSET SAT vs CMS deductive grid 两套方法论; (c) 第一性张力 — codifiable 理论层 (产区/品种/酒法/风土/酿造/葡萄栽培) ⇄ tacit 校准层 (品鉴味觉记忆/盲品/侍酒服务), 这行的核心矛盾是「可背诵的知识」与「不可言传的味觉」之间; (d) 旧世界 vs 新世界框架 — 旧世界以风土/法定产区为组织原则 (AOC/DOCG/QbA 分级法), 新世界以品种为标签; 风土 (terroir) 是核心组织概念; (e) 侍酒服务/酒店层 — 餐厅 floor 的配餐 (food pairing)、醒酒/侍酒温度、酒单与酒窖管理、by-the-glass 与饮品项目经济学、盲品 service exam; (f) 葡萄酒商业层 — 三级分销体系 (美国 three-tier)、定价/配额 (allocation)、期酒 (en primeur)、投资酒 (Liv-ex) 与拍卖; (g) 智识/品味演进 — 帕克百分制 (Robert Parker / Wine Advocate 100-point) vs Jancis Robinson 20 分制散文派; 经典派 vs 现代派酿造; 自然酒/低干预 (natural/minimal-intervention) vs 传统技术派. 学派分歧: WSET 知识体系派 vs CMS 服务盲品派、旧世界风土派 vs 新世界品种/技术派、自然酒派 vs 传统派、百分制点评派 vs 散文叙述派、经典平衡派 vs 浓郁现代派. 不含: 家庭自酿 DIY 套件、纯调酒/鸡尾酒/烈酒、葡萄园重型农机工程、酒精成瘾/公共卫生政策、酒类电商运营纯营销。: top builders' mental models, tool stack, current workflows, jargon, and where to keep up. Trigger this skill when the user works on 侍酒师 / 葡萄酒 (Sommelier & Wine) — 葡萄酒鉴赏 + 侍酒服务的职业认知操作系统,从业者/侍酒师/学习者视角。覆盖: (a) 两大认证体系张力 — WSET (Wine & Spirit Education Trust, 英国, 知识+SAT 系统化品鉴方法, Diploma/L4 笔试导向) vs Court of Master Sommeliers (CMS, 美/英, 服务+盲品演绎法+理论三位一体, MS 头衔), 外加 Institute of Masters of Wine (MW, 学术研究+论文) 与 UC Davis 葡萄酒学/葡萄栽培学学院派; (b) 盲品 = 纯 tacit 校准技能 — 演绎品鉴网格 (deductive tasting: 看色/闻香/品味 → 结构线索 calculated structure → 推断品种/产区/年份/酒龄), WSET SAT vs CMS deductive grid 两套方法论; (c) 第一性张力 — codifiable 理论层 (产区/品种/酒法/风土/酿造/葡萄栽培) ⇄ tacit 校准层 (品鉴味觉记忆/盲品/侍酒服务), 这行的核心矛盾是「可背诵的知识」与「不可言传的味觉」之间; (d) 旧世界 vs 新世界框架 — 旧世界以风土/法定产区为组织原则 (AOC/DOCG/QbA 分级法), 新世界以品种为标签; 风土 (terroir) 是核心组织概念; (e) 侍酒服务/酒店层 — 餐厅 floor 的配餐 (food pairing)、醒酒/侍酒温度、酒单与酒窖管理、by-the-glass 与饮品项目经济学、盲品 service exam; (f) 葡萄酒商业层 — 三级分销体系 (美国 three-tier)、定价/配额 (allocation)、期酒 (en primeur)、投资酒 (Liv-ex) 与拍卖; (g) 智识/品味演进 — 帕克百分制 (Robert Parker / Wine Advocate 100-point) vs Jancis Robinson 20 分制散文派; 经典派 vs 现代派酿造; 自然酒/低干预 (natural/minimal-intervention) vs 传统技术派. 学派分歧: WSET 知识体系派 vs CMS 服务盲品派、旧世界风土派 vs 新世界品种/技术派、自然酒派 vs 传统派、百分制点评派 vs 散文叙述派、经典平衡派 vs 浓郁现代派. 不含: 家庭自酿 DIY 套件、纯调酒/鸡尾酒/烈酒、葡萄园重型农机工程、酒精成瘾/公共卫生政策、酒类电商运营纯营销。 problems and wants industry-grade thinking, tool selection, or workflow guidance. 触发词:「侍酒师」「sommelier」「葡萄酒」「wine」「盲品」
日本語の概要は準備中です。原文の説明を表示しています。
swaylq/master-skill☆ 1572026年9月6日 更新
亚马逊管理之道 (亚马逊管理之道 (The Amazon Way — Amazon 自身的领导力与运营操作系统) — 这个 master skill 蒸馏的不是『在亚马逊平台上开店卖货』(那是跨境电商运营,已由 cross-border-ecommerce 另蒸),也不是 AWS 云技术架构;而是亚马逊这家公司『怎么运营自己、怎么做决策、怎么招人、怎么创新、怎么规划』的一整套可迁移的管理机制(mechanisms)与心智操作系统。面向想在自己团队/公司引入亚马逊式机制的创始人/CEO/高管/运营负责人(COO)、产品经理与技术产品经理(PM/PMT)、组织与流程设计者(chief of staff / ops)、以及在亚马逊工作或准备面试亚马逊(著名的 LP 行为面试 + Bar Raiser)的人。覆盖: (a) 第一性张力 — 亚马逊 OS 的核心世界观分歧: **机制 > 良好意图(Good intentions don't work, mechanisms do:问题不能靠『下次更努力』修复,要装一个带检查闭环的自我强化流程) ⇄ 可控输入指标 vs 滞后输出指标(管你能控制的 input 如选品/价格/在库/配送速度,而非 revenue/股价这类滞后又不可控的 output) ⇄ 长期主义 vs 季度业绩(Day 1、willing to be misunderstood、用现金流+飞轮长期投入,宁可牺牲短期利润) ⇄ 客户执念 vs 竞争对手执念(working backwards 从客户倒推,而非从竞品或『我们能造什么』正推) ⇄ 叙事备忘录 vs PPT(6-pager + 开会前静默阅读、动手前先写 PR/FAQ;写作逼出清晰思考,禁 PowerPoint) ⇄ 单线程负责人/两个披萨团队 vs 协调税(separable、autonomous、one owner per initiative,砍掉跨团队依赖) ⇄ 高标准可学习可传递 vs 与生俱来(insist on the highest standards + Bar Raiser 招聘门,标准是 domain-specific 且能教的) ⇄ 节俭催生创造力 vs 血汗文化(frugality/约束驱动发明 —— 但 frugality + 高压 bar + URA 强制淘汰 = 文化阴暗面批判) ⇄ 两类决策(Type 1 不可逆/单向门 慎重 vs Type 2 可逆/双向门 高判断力个人快速决策,别用重流程拖慢))**; (b) 核心机制(mechanisms,本行的『工具栈』其实是一套运营机制而非软件) — Leadership Principles(14 条→2021 增至 16 条,是一套运营语言和决策仲裁器)、Working Backwards(从客户倒推:动手前先写新闻稿+常见问答 PR/FAQ)、叙事备忘录(6-pager narrative / 1-pager + silent reading 静默阅读、禁 PPT)、Weekly Business Review(WBR + metrics deck 指标看板)、input/output metrics(可控输入指标体系、DMAIC 式指标选择)、年度规划(OP1/OP2 + S-Team goals)、Bar Raiser(招聘机制,独立于用人经理的抬杠者拥有一票否决)、Two-Pizza Team / Single-Threaded Leader STL / separable teams、Correction of Errors(COE 事故复盘 + 5 Whys 五问法)、Andon Cord(安灯绳,借自丰田,一线可拉停)、Flywheel(飞轮:低价→更多客户→更多卖家→更多选品→更低成本结构→更低价)、Type 1/Type 2(单向门/双向门决策分级)、Regret Minimization Framework(遗憾最小化,贝索斯创业决策法); (c) 心智模型层 — customer obsession(客户执念是所有 LP 之首)、long-term thinking / Day 1(第二天就是停滞衰亡)、invent and simplify、ownership(主人翁,不说 that's not my job)、bias for action(可逆决策就快,speed matters)、disagree and commit(充分反对后即便不同意也全力执行)、frugality、dive deep(深入细节、不靠代理指标脱离一线)、think big、are right a lot(用强判断力和证伪自己的能力多做对的判断)、earn trust、deliver results; (d) 工作流/SOP — 用亚马逊方式发起一个新产品/业务(先写 PR/FAQ→评审→倒推着造)、如何跑一场 WBR、如何写和评审一份 6-pager(叙事流程 + 静默阅读)、Bar Raiser 招聘 loop、年度规划(OP1/OP2→S-Team goals→输入指标追踪)、事故后的 Correction of Errors; (e) 知识正典(en-primary,极其丰富且可取一手) — 贝索斯致股东信 1997-2021(1997 首封是奠基文本,每年附在信末;Day 1、遗憾最小化、long term)、《Working Backwards》Colin Bryar & Bill Carr(2021,运营机制圣经)、《The Everything Store》Brad Stone(2013,公司史)、《Amazon Unbound》Brad Stone(2021,权力与阴暗面续作)、《Invent and Wander》贝索斯文集(2020)、《The Amazon Way》/《Think Like Amazon》John Rossman(前亚马逊高管)、Amazon 官方 Leadership Principles 页(amazon.jobs,一手)、HBR『The Institutional Yes』(2007 贝索斯访谈); (f) 行业大佬/figures — Jeff Bezos(创始人,源头教义)、Andy Jassy(现任 CEO,OS 超越创始人的证据 + AWS 缔造者)、Colin Bryar(前贝索斯影子/TPM,《Working Backwards》作者)、Bill Carr(前数字媒体 VP,《Working Backwards》作者)、Jeff Wilke(前全球消费者 CEO,运营架构师)、John Rossman(前亚马逊、机制布道者/顾问)、Brad Stone(记者/编年史作者,批判性外部视角); (g) 争议/批判(必须保留,不能洗白) — 文化阴暗面(NYT 2015『Inside Amazon: Wrestling Big Ideas in a Bruising Workplace』揭露高压职场)、仓储与一线劳工争议、URA(unregretted attrition 强制淘汰)与 stack-ranking 的残酷、frugality + 高 bar = 燃尽(burnout);机制能否迁出亚马逊(cargo-culting:在初创或非科技公司照搬 PR/FAQ/输入指标/Bar Raiser 常失败);是贝索斯个人天才(personality)还是制度化机制(institution)—— OS 在贝索斯卸任后于 Jassy 治下延续,是机制派的证据; (h) 流派/思想谱系 — **信徒/机制布道派(Bryar & Carr《Working Backwards》+ 前亚马逊 operator 顾问圈,信 mechanisms 可移植、任何公司可安装)** vs **批判派(Brad Stone《Amazon Unbound》+ NYT + 劳工视角,认为 OS 与高淘汰的残酷机器不可分割,不该被浪漫化)** vs **情境/规模怀疑派(机制之所以有效是因为亚马逊特定的规模/现金流/创始人权力,照搬到小公司=cargo cult)** vs **创始人中心 vs 制度中心之争(是贝索斯个人 vs 可传承的机制)**。不含: 在亚马逊开店卖货/选品/PPC/FBA 的卖家运营(=cross-border-ecommerce)、AWS 云技术架构与运维、通用 MBA 管理理论泛泛而谈、把普通商业常识包装成『亚马逊独家秘诀』。) Master OS — automated mastery of 亚马逊管理之道 (The Amazon Way — Amazon 自身的领导力与运营操作系统) — 这个 master skill 蒸馏的不是『在亚马逊平台上开店卖货』(那是跨境电商运营,已由 cross-border-ecommerce 另蒸),也不是 AWS 云技术架构;而是亚马逊这家公司『怎么运营自己、怎么做决策、怎么招人、怎么创新、怎么规划』的一整套可迁移的管理机制(mechanisms)与心智操作系统。面向想在自己团队/公司引入亚马逊式机制的创始人/CEO/高管/运营负责人(COO)、产品经理与技术产品经理(PM/PMT)、组织与流程设计者(chief of staff / ops)、以及在亚马逊工作或准备面试亚马逊(著名的 LP 行为面试 + Bar Raiser)的人。覆盖: (a) 第一性张力 — 亚马逊 OS 的核心世界观分歧: **机制 >
日本語の概要は準備中です。原文の説明を表示しています。
swaylq/master-skill☆ 1572026年9月6日 更新
Activates Warren Buffett's complete investment thinking system. The following scenarios must trigger it: analyzing any stock or company, evaluating investment opportunities, interpreting financial reports/annual reports/shareholder letters, assessing business moats or competitive advantages, evaluating management quality and integrity, making buy/hold/sell decisions, understanding core value investing concepts (compounding/intrinsic value/margin of safety/circle of competence/Mr. Market), analyzing any industry (insurance/banking/consumer/media/energy/railroads/technology), handling capital allocation/buybacks/dividends questions, assessing market sentiment and macro risks, exploring when to sell, analyzing institutional imperative or management behavior. Even if the user does not mention "Buffett," proactively trigger whenever the topic involves investment analysis, business quality assessment, or investment decision-making.
日本語の概要は準備中です。原文の説明を表示しています。
FDU-INS/Insurance-Skills☆ 762026年7月12日 更新
Windowsのデスクトップアプリを実際に操作する自動テストを作るスキルです。画面要素の識別、待機処理、失敗時の記録、CIへの組み込みを扱います。
- Windowsアプリの操作テスト作成
- 不安定なGUIテストを調べたいとき
- 画面部品に安定した識別子を付けたいとき
affaan-m/ECC☆ 27.9万2026年10月10日 更新
AndroidやKotlin Multiplatformの非同期処理とデータ更新を実装し、並行実行、画面状態の管理、キャンセル、エラー処理、テストまで扱うスキル。
- 複数データを並行して読み込みたいとき
- StateFlowによる画面状態の管理
- 検索入力の間引きや通信の再試行
affaan-m/ECC☆ 27.9万2026年10月12日 更新
Social engineering attack techniques beyond email phishing for authorized red team and physical penetration testing engagements. Covers pretexting methodology (persona creation, authority and urgency psychological triggers, rapport building), vishing (voice phishing via caller ID spoofing, IVR system exploitation, VoIP infrastructure setup with Twilio/Asterisk), smishing (SMS-based phishing, carrier gateway abuse, short code impersonation), physical social engineering (tailgating and piggybacking, RFID badge cloning with Proxmark3, lock picking and bypass, dumpster diving for sensitive documents), USB drop attacks (Rubber Ducky keystroke injection, Bash Bunny multi-vector payloads, O.MG cable covert implants, BadUSB firmware attacks), watering hole attack planning and execution, and OSINT-driven targeting (LinkedIn harvesting, organizational chart reconstruction, employee pattern analysis). Integrates with the Social Engineering Toolkit for attack automation, Proxmark3 for RFID/NFC cloning, USB Rubber Ducky and Bash Bunny for physical payload delivery, and BeEF for browser exploitation. Maps to MITRE ATT&CK T1598 (Phishing for Information), T1566 (Phishing), T1091 (Replication Through Removable Media), and T1189 (Drive-by Compromise). All techniques require explicit written authorization and defined rules of engagement.
日本語の概要は準備中です。原文の説明を表示しています。
SnailSploit/Claude-Red☆ 7,5112026年10月13日 更新
Backlink / off-page SEO audit. Works WITHOUT a paid tool by default — it uses the Google Search Console Links report (your top linking sites, most-linked pages, and anchor text) plus any backlink export the user provides (Ahrefs / Semrush / Majestic / DataForSEO CSV). Analyzes referring-domain profile, anchor-text distribution (over-optimized / spammy patterns), most-linked pages vs. money pages (internal-linking opportunity), toxic/spam link signals, and link-building priorities. Use this skill when the user asks about backlinks, link building, off-page SEO, referring domains, anchor text, toxic/spam links, disavow, or their link profile. Trigger on: "backlinks", "backlink audit", "link building", "off- page SEO", "referring domains", "anchor text", "toxic links", "spam links", "disavow file", "who links to me", "link profile", "domain authority". NOTE: rich third-party metrics (DR/DA, full link index) require a paid data source; this skill is explicit about what it can and can't see without one.
日本語の概要は準備中です。原文の説明を表示しています。
nowork-studio/notfair-plugin☆ 3,9352026年10月14日 更新
Org-grade attack-surface mapping: given a company's legal identity, discover its ENTIRE owned internet footprint — corporate family -> owned domains -> owned netblocks/ASN -> live assets — with attribution discipline, not just DNS breadth. The org-first attribution pyramid (legal entity -> LEI/registration -> corporate family -> owned domains -> owned netblocks/ASN -> live assets). Corporate-identity resolution via the GLEIF LEI API (legal name -> LEI, exact-LEI direct-children expansion, downward-only depth-capped BFS, NEVER a name re-resolution), SEC-EDGAR full-text search + Exhibit-21 subsidiary entity names, OpenCorporates entity corroboration, Wikidata SPARQL corporate graph (P856/P355/P749/P1830). Domain attribution via reverse-WHOIS (WhoisXML preview-then-purchase quota guard, SecurityTrails associated-domains — both paid), crt.sh O= certificate-transparency organization pivot (keyless), infrastructure correlation (shared NS/MX/SaaS-TXT, netblock membership, reverse-DNS PTR), and the independent-evidence combiner (1-prod(1-w_i), rule of three, OwnerTier NONE/WEAK/MODERATE/STRONG/CONFIRMED) — discover-only `related:` candidates are NEVER auto-scanned. Netblock/ASN attribution via org-first RIR queries (ARIN Whois-RWS org-handle search, RIPE DB organisation + inverse-org search) that recover 'dark netblocks' with no DNS link to the seed, ASN discovery (RIPEstat + BGPView union), the HYPERSCALER-SCOPE GUARD (never attribute a whole AWS/GCP/Azure/Cloudflare announced range to a tenant — keep only the seed-containing block, tag shared_hosting_cdn), and org-identity-seeded internet-scan-index queries (Shodan/Censys/ZoomEye/FOFA/BinaryEdge org: filters + an always-on keyless crt.sh fallback). Promote-to-scan triage ranks forgotten discover-only netblocks by remote-access exposure (gateway-vendor/KEV/control-plane/datastore port scoring) into an operator queue. Attribution confidence rubric + anti-patterns (namesake grafting via GLEIF name re-resolution, single-signal ownership, hyperscaler over-attribution, privacy-WHOIS pivot poisoning, RIR org-name collisions). Passive/keyless-first OSINT only — every paid-key dependency is enrichment on top of a keyless core, never a hard requirement. Use when mapping an organization's full corporate-family internet footprint, resolving a legal entity to its LEI/subsidiaries, discovering domains/netblocks/ASNs an org owns beyond its one seed domain, auditing M&A/shadow-IT sprawl, or scoping an engagement that starts from a company NAME rather than a domain.
日本語の概要は準備中です。原文の説明を表示しています。
elementalsouls/Claude-OSINT☆ 2,8192026年10月10日 更新
Organization-grade identity-fabric mapping: tenant/federation fingerprinting and the pre-auth user-ENUMERATION oracle methodology — enumeration and fingerprint only, never credential submission. Covers domain-to-tenant resolution (Microsoft getuserrealm.srf Managed/Federated namespace check, Entra OIDC metadata tenant-GUID extraction, Autodiscover v2), keyless Microsoft tenant-federation mapping (GetFederationInformation SOAP -> sibling-domain discovery, discover-only ROE, FEDERATED_WITH provenance edge held out of attack-path pivoting), Okta org-slug derivation + OIDC fingerprint + governed custom-domain enumeration, ADFS passive/active fingerprint + version inference, Google Workspace MX-correlated detection, generic OIDC (Auth0/Keycloak/Ping Identity/OneLogin/Duo) discovery, SAML metadata (5 paths), Azure AD Seamless-SSO Negotiate-challenge detection, Microsoft Defender for Identity (MDI) sensor-API presence check, the user-enumeration oracle methodology for Microsoft GetCredentialType (IfExistsResult semantics: exists / doesn't-exist / exists-in-federated-tenant / throttled) and Okta /api/v1/authn (errorCode differential), Medium-detectability discipline with a hard 20-candidate-per-tenant cap and admin/role interest-based ranking, and name x confirmed-email-pattern login-candidate synthesis that FAILS CLOSED with zero output when no org pattern is confirmed. Grounded directly in a production ASM implementation's sso_idp.py, tenant_recon.py, and core/email_patterns.py modules. Deepens — does not duplicate — offensive-osint skill's Identity Fabric endpoint reference with the tenant-federation MAP, the oracle WORKFLOW, and the candidate-SYNTHESIS methodology that reference lacks. Use when fingerprinting an organization's identity provider, mapping its tenant/federation boundary, running an authorized pre-auth user-enumeration pass, or synthesizing login candidates from harvested names to feed that oracle — never for password spray, credential submission, or auth bypass.
日本語の概要は準備中です。原文の説明を表示しています。
elementalsouls/Claude-OSINT☆ 2,8192026年10月10日 更新
Configuring and running Pipeline Inspection in Sales Cloud: enabling the feature, mapping forecast categories into the inspection view, Days in Stage and other deal-change metrics, and pipeline review cadence for sales managers. Use when designing or improving how a team monitors deal health and pipeline movement. NOT for the Revenue Intelligence app, Einstein deal insights, or forecast-accuracy dashboards — use admin/revenue-intelligence-setup. NOT for forecast types, quotas, or forecast hierarchy setup — use admin/collaborative-forecasts. Keywords: pipeline review, coverage ratio, stage conversion, slippage, stale deals, days in stage, LastStageChangeInDays, LastStageChangeDate, AgeInDays, PushCount, ForecastCategoryName, enablePipelineInspection, PipelineInspMetricConfig, OpportunitySettings, review cadence, commit call.
日本語の概要は準備中です。原文の説明を表示しています。
PranavNagrecha/AwesomeSalesforceSkills☆ 192026年10月4日 更新
Assigns pathogen lineages (SARS-CoV-2 Pangolin via UShER mode; Nextclade clade + QC; pango-designation alias_key.json resolution) and tracks variant frequencies over time using Nextstrain (Augur + Auspice), wastewater deconvolution (Freyja, COJAC, alcov, lineagespot), lineage fitness modelling (Wenseleers / Bedford-Figgins multinomial logistic), and recombinant detection (3SEQ, RDP4, Bolotie). Covers Pangolin pangolin-data version pinning (mandatory for reproducibility), Nextclade dataset versioning (lineage-defining mutations change with dataset), Freyja barcode forward-only date constraint, ARTIC primer scheme version churn (V3 / V4 / V4.1 / V5.3.2 / Midnight 1200) with documented dropout regions, recombinant X-prefix Pango designation lag, GISAID vs INSDC dual-deposition tensions, and the Karthikeyan 2022 wastewater early-detection signal with explicit reproducibility caveats. Use when assigning Pango lineages and Nextclade clades to viral consensus sequences, building Nextstrain Augur surveillance pipelines, deconvolving wastewater pooled samples into lineage frequencies with Freyja, tracking lineage frequencies and growth advantages over time, pinning pangolin-data / Nextclade dataset versions for reproducibility, handling ARTIC primer dropouts (V4.1 amplicons 64 / 76 / 88-90), or running variant surveillance for SARS-CoV-2 / influenza / Mpox / RSV / H5N1 / measles.
日本語の概要は準備中です。原文の説明を表示しています。
peacezha/TRACE☆ 32026年10月13日 更新
Assigns pathogen lineages (SARS-CoV-2 Pangolin via UShER mode; Nextclade clade + QC; pango-designation alias_key.json resolution) and tracks variant frequencies over time using Nextstrain (Augur + Auspice), wastewater deconvolution (Freyja, COJAC, alcov, lineagespot), lineage fitness modelling (Wenseleers / Bedford-Figgins multinomial logistic), and recombinant detection (3SEQ, RDP4, Bolotie). Covers Pangolin pangolin-data version pinning (mandatory for reproducibility), Nextclade dataset versioning (lineage-defining mutations change with dataset), Freyja barcode forward-only date constraint, ARTIC primer scheme version churn (V3 / V4 / V4.1 / V5.3.2 / Midnight 1200) with documented dropout regions, recombinant X-prefix Pango designation lag, GISAID vs INSDC dual-deposition tensions, and the Karthikeyan 2022 wastewater early-detection signal with explicit reproducibility caveats. Use when assigning Pango lineages and Nextclade clades to viral consensus sequences, building Nextstrain Augur surveillance pipelines, deconvolving wastewater pooled samples into lineage frequencies with Freyja, tracking lineage frequencies and growth advantages over time, pinning pangolin-data / Nextclade dataset versions for reproducibility, handling ARTIC primer dropouts (V4.1 amplicons 64 / 76 / 88-90), or running variant surveillance for SARS-CoV-2 / influenza / Mpox / RSV / H5N1 / measles.
日本語の概要は準備中です。原文の説明を表示しています。
peacezha/HPClaw☆ 32026年10月11日 更新
JavaのSpring Bootで、APIやデータ処理の実装・レビューを支援するスキル。処理の役割分担から入力検証、例外処理、キャッシュ、非同期処理、ログまで扱います。
- API設計と処理の役割分担
- データアクセスやトランザクションの確認
- 入力検証と共通の例外処理の追加
affaan-m/ECC☆ 27.9万2026年10月12日 更新
PythonアプリをWindows向けに配布するため、Nuitkaでのコンパイル、不要ファイルやDLLの分析、Inno Setupでの軽量なインストーラー作成を支援します。
- PythonアプリのWindows配布
- 配布容量の大きな依存関係を調べたいとき
- 新しいWindows環境での起動不良調査
affaan-m/ECC☆ 27.9万2026年10月12日 更新
DockerとDocker Composeで開発環境を構成し、通信・データ保存・権限を見直すほか、元のファイルを変更せずにCLIの導入手順を検証するスキル。
- アプリとDBの開発環境を構築
- コンテナの通信とデータ保存の確認
- Docker設定のセキュリティ見直し
affaan-m/ECC☆ 27.9万2026年10月12日 更新
Guides Metronome usage-based billing integration decisions — event ingestion (single and batch, idempotency, billable metrics), contract design (rate cards, overrides, dimensional pricing, products), invoicing lifecycle (grace periods, finalization, Stripe sync), credit and commit management (prepaid, postpaid, thresholds, auto-recharge), and Stripe integration (arrears invoicing, tax providers, line item limits). Use when building, modifying, or reviewing any Metronome integration — including ingesting usage events, creating customers, contracts, or rate cards, designing billable metric group keys, managing credits and commits, configuring invoicing, syncing invoices with Stripe Billing, billing AI applications for token usage, setting up self-serve (PLG) pricing, reviewing customer health, commit burn, portfolios, or renewals, or migrating from Stripe Billing Meters to Metronome.
日本語の概要は準備中です。原文の説明を表示しています。
fcakyon/claude-codex-settings☆ 1,1762026年10月13日 更新
Load this first for any task involving images, pictures, photos, scans, frames, volumes, or visual data — including reading, writing, filtering, enhancing, denoising, sharpening, deblurring, thresholding, segmenting, masking, detecting, finding or counting objects, removing backgrounds, measuring, comparing, registering, stitching, aligning, cropping, resizing, transforming, or analyzing. Use for image I/O (TIFF, PNG, JPEG, RAW, HDR), histograms, edge detection, color processing, morphology, geometric transforms, deep learning for images, quality assessment, and 3-D volume processing. Also triggers when users describe image problems (dark, noisy, blurry, low contrast, uneven lighting, hazy, color cast) or data exploration tasks (folder of images, characterize data, understand format). Handles microscopy (cells, particles) and general scientific imaging. Routes to sibling skills for medical imaging (DICOM, NIfTI), hyperspectral data, and visual inspection.
日本語の概要は準備中です。原文の説明を表示しています。
matlab/matlab-agentic-toolkit☆ 1,1682026年10月9日 更新
GitHub 解封 — 账号封禁/限制/恢复的领域操作系统。覆盖:(a) GitHub 官方政策体系 (TOS / 可接受使用政策 / Trust & Safety 执行模式 / 公开申诉路径 / 受制裁地区解读);(b) 封号原因诊断学 (spam / abuse / 制裁误标 / 2FA 丢失 / ToS 违规 / 账号劫持误判 / ban evasion 等子类型 + 症状→原因映射 + 自我分诊压测);(c) 申诉实操 craft (写一封能让 T&S 快速判误伤的英文申诉信 + 升级阶梯 + 法务介入边界 + Don'ts);(d) 制裁与合规硬边界 (OFAC SDN 名单 / 哪些国家或地区真不可达 / VPN 误判路径 / 中国大陆不是美国制裁地区的反复重申);(e) 中国大陆开发者特别处境 (sanctioned region 误标 + SMS 验证不支持 +86/+852 + Gitee/GitLab/Codeberg/JihuLab 备用迁移 + 私有自托管 Gitea/Forgejo);(f) 真实案例库 (~30+ 公开案例分类拆解:误伤 / 真违规 / 制裁误标三类各自赔率与申诉成功路径)。伦理锚绝不软化:不教 ban evasion / 不教撒谎式申诉 / 真违规承认改进 / 丢 2FA 无恢复因子则诚实告知 / 中国制裁误标靠申诉不靠换 VPN / 申诉 6 个月窗口必算清 / 约 3% (业内估) 真违规恢复 vs 约 79% (业内估) 误伤申诉成功率分层标。 (GitHub Account Reinstatement — the domain operating system for GitHub (and analogous platform) account suspension, restriction, appeal, and recovery. Covers: (a) GitHub official policy architecture (TOS / Acceptable Use Policies / Trust & Safety enforcement patterns / public appeals pathways / sanctioned-region interpretation); (b) suspension-cause diagnostics (spam / abuse / sanctions mis-flag / 2FA loss / ToS violation / account hijack false-positive / ban evasion taxonomy + symptom→cause mapping + self-triage pressure test); (c) appeal craft (writing an English appeal letter that gets T&S to fast-track a false-positive ruling + escalation ladder + legal-engagement boundary + Don'ts); (d) sanctions and compliance hard boundaries (OFAC SDN list / which countries/regions are truly unreachable / VPN false-positive paths / China is NOT a US-sanctioned region — repeated emphasis); (e) mainland China developer special circumstances (sanctioned-region mis-flag + SMS verification does not support +86/+852 + Gitee/GitLab/Codeberg/JihuLab fallback migration + self-hosted Gitea/Forgejo); (f) real-case library (~30+ public cases with categorized analysis: false-positive / genuine violation / sanctions mis-flag, each with win-rate and appeal success path). Ethical anchors absolutely not softened: do NOT teach ban evasion (creating new accounts turns a temp ban into a permanent one — the single biggest mistake); do NOT teach social engineering or lying in appeals (misuse + actually confirms violation); genuine violations: admit + improve beats denial; lost 2FA + no recovery factor → do not pretend recovery is possible; China sanctioned-region mis-flag → fix via appeal, not repeated VPN switching; appeal form 6-month window must be counted carefully; historical 约 3% (业内估) genuine-violation recovery vs 约 79% (业内估) false-positive appeal success rate stratification must be honestly labeled. Anti-samples (explicitly describe harm, never endorse): developer permabanned for ban evasion / open-source team org-banned for personal attacks in public issues / cases where repeated VPN switching escalated risk-control severity.) Master OS — automated mastery of GitHub Account Reinstatement — the domain operating system for GitHub (and analogous platform) account suspension, restriction, appeal, and recovery. Covers: (a) GitHub official policy architecture (TOS / Acceptable Use Policies / Trust & Safety enforcement patterns / public appeals pathways / sanctioned-region interpretation); (b) suspension-cause diagnostics (spam / abuse / sanctions mis-flag / 2FA loss / ToS violation / account hijack false-positive / ban evasion taxonomy + symptom→cause mapping + self-triage pressure test); (c) appeal craft (writing an English appeal letter that gets T&S to fast-track a false-positive ruling + escalation ladder + legal-engagement boundary + Don'ts); (d) sanctions and compliance hard boundaries (OFAC SDN list / which countries/regions are truly unreachable / VPN false-positive paths / China is NOT a US-sanctioned region — repeated emphasis); (e) mainland China developer special circumstances (sanctioned-region mis-flag + SMS verification does not support +86/+852 + Gitee/GitLab/Codeberg/JihuLab fallback migration + self-hosted Gitea/Forgejo); (f) real-case library (~30+ public cases with categorized analysis: fa
日本語の概要は準備中です。原文の説明を表示しています。
swaylq/master-skill☆ 1572026年9月6日 更新