测试与安全技能

Audits what Claude may do (permission rules, hooks, MCP scope, an agent's grants) and maps what it reaches on disk. Trigger on audit my permissions, why was this allowed, what stalls a routine, swap an allow for a deny, is this hook safe, gate my git pushes, a guard hook or call cap, PowerShell twins of Bash denies, where a rule should live, what is eating my disk, where has Claude been, config drift from a repo copy, skills loading twice; or say gatewarden (audit, harden, explain, scan, hooks, capreview, layout, map, footprint, drift, loads, status, refresh). Installs are trustwarden's; tokens keywarden's; secrets shieldwarden's; standing config rigwright's; agent design agentwright's.

中文简介正在准备中。当前显示原文说明。

Writes and cleans up messages and docs for their channel and reader (email, Slack, a text, release notes, store pages, READMEs, Claude Docs) in a plain voice that never moves a fact. Trigger to write, rewrite, shorten, line-edit, retell or change the tone of any message, even a two-line text; to strip dashes or AI tells; to fix UI wording (a dialog, button or error); to score text without rewriting; to plan release comms; to write a store page, launch post or listing title, blurb and tags; to write in a voice or learn one; or say commscribe (draft, reshape, humanize, audit, retell, formats, cadence, voice, docs). It never sends. A skill's own files (SKILL.md, references) are skillwright's; brand voice and layout brandscribe's; sourced write-ups researchscribe's.

中文简介正在准备中。当前显示原文说明。

Drives OBS Studio through its WebSocket, read-only by default, and turns recordings into clips, VOD cuts and chapters with FFmpeg. Trigger to audit an OBS setup; when a stream drops frames or lags; to switch a scene, mark a moment or save the replay buffer; to cut clips, burn in captions, normalize loudness or write chapters; to line a recorded playtest up with a game's log; when OBS shares a GPU; or say obsrunner (audit, check, set, mark, post, sheet, playtest, status, hold, release, refresh). Live work needs the user-installed obsws-python package. Never goes live, uploads or moderates chat. Caption files are whisperrunner's; thumbnails comfyrunner's; titles commscribe's; analytics duckrunner's.

中文简介正在准备中。当前显示原文说明。

Hands work to a local model served by LM Studio and verifies what comes back. Trigger to offload, delegate or batch work to a local, offline or on-device model; to queue unattended runs that keep only what passes; to ask which installed model fits a job or whether to switch; to size a task before delegating; when a local model returns nothing, repeats itself or drifts on a long list; when LM Studio shares the GPU with an image tool, or to free its hold; or say lmstudiorunner (audit, size, queue, run, status). Reads models from the live LM Studio API. Cloud model picks and prompt text are promptwright's; a schedule's guardrails agentwright's.

中文简介正在准备中。当前显示原文说明。

Runs image, video and audio generation on a local ComfyUI server and guards the GPU before long renders. Trigger to generate an image, video, audio or music locally; to run, test or check a ComfyUI workflow before a long or queued render; when a video render crashed the machine, ran out of memory or hung in VAE decode; to render while LM Studio holds the GPU; to run a pixelsmith brief locally; or say comfyrunner (audit, check, test, run, status). Refuses an untiled video decode and scores resolution times frames. Briefs and judging art are pixelsmith's; sound briefs soundsmith's; freeing LM Studio lmstudiorunner's; schedules agentwright's.

中文简介正在准备中。当前显示原文说明。

Builds, audits and packages Agent Skills, with their evals. Trigger to build, audit (security too), score or package a skill or SKILL.md; to design or integrate a pack; whether a skill beats incumbents; for trigger evals, test cases or assertion suites (skill, prompt card, agent spec); to slim a skill; when a skill did not fire or a run cost too much; for a prose pass on a skill's own files; to port or sanitize a skill set; to build or contract-test the MCP tools a plugin or mod ships; or say skillwright (evals, slim, diagnose, mcp, refresh, port, pack, integrate, upkeep). Prompt tuning is promptwright's; running a suite, claude plugin eval's; config slims, rigwright's; other docs, commscribe's; brands, brandscribe's; runtime grants, gatewarden's.

中文简介正在准备中。当前显示原文说明。

Decides where a standing rule lives and builds the config Claude reads before work — CLAUDE.md, AGENTS.md, Project instructions and knowledge files, profile preferences, .claude/rules and agents, hooks, .mcp.json. Trigger on 'where should this rule live', 'set up a Claude Project', 'write or trim my CLAUDE.md', 'my rules get ignored', 'audit my setup for bloat or stale status', 'cut my CLAUDE.md token cost', 'add what we learned to CLAUDE.md', or rigwright (place, build, audit, learn, slim, refresh). Permissions, hook safety and config maps are gatewarden's; skills, skillwright's; unattended work, agentwright's; a block's wording, promptwright's.

中文简介正在准备中。当前显示原文说明。

Keeps brand definitions, several side by side, and turns one into a Claude Design System, DESIGN.md, VOICE.md or guide. Trigger to define a brand, palette, type or voice; turn a style guide or site into tokens; make, connect or sync a design system; audit for brand drift (off-palette colours, old names); pass or fail a page against a brand, or apply one to a README or generated output; critique or check a built UI, or a built site (dist/) for UI problems before it ships (hierarchy, spacing, states, generic look); or say brandscribe (setup, build, export, sync, audit, gate, ui). Microcopy and messages are commscribe's; React libraries design-sync's; charts dataviz's; canon lorescribe's; a pre-build brief, fit across widths and themes, and game UI uismith's; no logos.

中文简介正在准备中。当前显示原文说明。

Interviews a request until no essential choice is left to guess, then hands the settled decisions on. Trigger on 'grill me', 'interview me before you build', 'stress-test this idea', 'ask me questions until it's clear', 'what am I missing before we start', or a vague plan, feature, prompt or skill where a wrong build costs more than questions. Or say grillwright (grill, record, resume, questionnaire — for someone else to answer, docs — check against glossary and ADRs). Builds nothing — prompts are promptwright's, skills skillwright's, agents agentwright's, game code slicesmith's, what a running agent may do gatewarden's, even asked as a grill.

中文简介正在准备中。当前显示原文说明。

Designs, hardens and audits the system around an agent that runs on its own — bot, scheduled task, routine, automation — all but the prompt text. Trigger for guardrails, kill switches, cadence and loop pacing (cron, wake, /loop), retries and failures, output contracts, protected resources, handoffs between agents, or isolating untrusted email and web content; to emit a spec as a Cowork task, routine, scheduled task or CI job; or say agentwright (emit, audit, refresh); it never schedules or runs one. Prompt text is promptwright's; CLAUDE.md, rigwright's; skills, skillwright's; runtime grants and credentials, gatewarden's scan; code threats, a security harness's.

中文简介正在准备中。当前显示原文说明。

Runs a session's fan-out — splits a large request into tiered, recoverable units, dispatches and reconciles them against the repo. Trigger when work needs many agents or spans many repos or files (rebuild, re-architect, sweep, migrate, 'do all of this'); when subagents would launch with no model or effort set; for the plan table (units, models, tokens, meters) before launch; to resume a unit that died or hit a usage limit; when units would share a repo; or say dispatchwright (plan, dispatch, resume, audit, refresh). Tiers come from its own table (scoutwright flags it stale); pacing, pacewright's; hooks, rigwright's; schedules, agentwright's.

中文简介正在准备中。当前显示原文说明。

Security review checklist for Convex functions, auth logic, public queries, admin routes, webhooks, uploads, components, and AI-generated code. Use when reviewing code that touches user data, PII, or access control, or before any deploy of an app with auth.

中文简介正在准备中。当前显示原文说明。

Use when the user wants to design, redesign, shape, critique, audit, polish, clarify, distill, harden, optimize, adapt, animate, colorize, extract, or otherwise improve a frontend interface. Covers websites, landing pages, dashboards, product UI, app shells, components, forms, settings, onboarding, and empty states. Handles UX review, visual hierarchy, information architecture, cognitive load, accessibility, performance, responsive behavior, theming, anti-patterns, typography, fonts, spacing, layout, alignment, color, motion, micro-interactions, UX copy, error states, edge cases, i18n, and reusable design systems or tokens. Also use for bland designs that need to become bolder or more delightful, loud designs that should become quieter, live browser iteration on UI elements, or ambitious visual effects that should feel technically extraordinary. Not for backend-only or non-UI tasks.

中文简介正在准备中。当前显示原文说明。

Audits and realigns UI to match design system standards, spacing, tokens, and patterns. Use when the user mentions consistency, design drift, mismatched styles, tokens, or wants to bring a feature back in line with the system.

中文简介正在准备中。当前显示原文说明。

Premium brand-kit image generation skill for creating high-end brand-guidelines boards, logo systems, identity decks, and visual-world presentations. Trained for minimalist, cinematic, editorial, dark-tech, luxury, cultural, security, gaming, developer-tool, and consumer-app brand systems. Optimized for intentional logo concepting, refined composition, sparse typography, strong symbolic meaning, premium mockups, art-directed imagery, and flexible grid layouts.

中文简介正在准备中。当前显示原文说明。

Evaluate design from a UX perspective, assessing visual hierarchy, information architecture, emotional resonance, cognitive load, and overall quality with quantitative scoring, persona-based testing, and actionable feedback. Use when the user asks to review, critique, evaluate, or give feedback on a design or component.

中文简介正在准备中。当前显示原文说明。

Guide for when to use and when not to use return validators in Convex functions. Use this skill whenever the user is writing Convex queries, mutations, or actions and needs guidance on return value validation. Also trigger when the user asks about Convex type safety, runtime validation, AI-generated Convex code, Convex AI rules, Convex security best practices, or when they're debugging return type issues in Convex functions. Trigger this skill when users mention "validators", "returns", "return type", or "exact types" in the context of Convex development. Also trigger when writing or reviewing Convex AI rules or prompts that instruct LLMs how to write Convex code.

中文简介正在准备中。当前显示原文说明。

Audits Convex performance for reads, subscriptions, write contention, and function limits. Use for slow features, insights findings, OCC conflicts, or read amplification.

中文简介正在准备中。当前显示原文说明。

Run convex-doctor static analysis, interpret findings, and fix issues across security, performance, correctness, schema, and architecture categories. Use when running convex-doctor, fixing convex-doctor warnings or errors, improving the convex-doctor score, or when asked about Convex code quality, static analysis, or linting Convex functions.

中文简介正在准备中。当前显示原文说明。

Run technical quality checks across accessibility, performance, theming, responsive design, and anti-patterns. Generates a scored report with P0-P3 severity ratings and actionable plan. Use when the user wants an accessibility check, performance audit, or technical quality review.

中文简介正在准备中。当前显示原文说明。

Security review checklist for Convex functions, auth logic, public queries, admin routes, webhooks, uploads, and AI-generated code. Use when reviewing code that touches user data, PII, or access control.

中文简介正在准备中。当前显示原文说明。

Audit and optimize an existing Convex app: security, scale, upgrades, observability.

中文简介正在准备中。当前显示原文说明。

Audit and harden a Convex app's authorization: identity-from-arg impersonation, missing per-document ownership checks, public queries leaking data by a client-supplied id, and writes into a parent/container the caller doesn't own. Scans for the 4 shapes, applies requireIdentity/requireOwner, verifies with tsc. TRIGGER on 'secure my app', 'audit auth/authz', 'who can access this data'. SKIP when there is no convex/ directory.

中文简介正在准备中。当前显示原文说明。

Convex code reviewer — security, auth, validators, performance, and pattern checks for code in a convex/ directory. Use to review or audit Convex functions before shipping.

中文简介正在准备中。当前显示原文说明。