安全

安全审查、认证、权限和风险检查

242 个 Skills 可用

Skills 列表

convex-authz

convex-authz

42security

Audit and harden Convex authorization: identity-from-arg impersonation, missing per-document ownership checks, PII-leaking public queries, and writes into containers the caller doesn't own. Deterministic scan + canonical requireIdentity/requireOwner fix + tsc verify. Use for 'secure my app' / 'audit auth' / 'who can access this data', not generic code review.

get-convex avatarget-convex
获取
convex-self-heal

convex-self-heal

42security

Production error → triaged, root-caused, repaired, and certified (tsc + rehearsal + reproduce-then-gone) fix PR for a human to merge — then confirm the error stops recurring. Never auto-merges.

get-convex avatarget-convex
获取
qianwen-image-generation

qianwen-image-generation

41security

[QianWen] Generate and edit images using Wan and Qwen Image models. Supports text-to-image, image editing (style transfer, subject consistency, text rendering), and interleaved text-image output. TRIGGER when: user wants to create illustrations, product images, artistic designs, posters, text-to-image generation, edit/transform existing images, apply style transfer, generate images based on reference photos, interleaved text-image content, mentions Wan/Qwen Image models/AI art creation, or explicitly invokes this skill by name (e.g. use qianwen-image-generation). DO NOT TRIGGER when: user wants to understand/analyze existing images or OCR (use qianwen-vision), video generation (use qianwen-video-generation), text-only tasks.

qianwen-ai avatarqianwen-ai
获取
qianwen-audio-tts

qianwen-audio-tts

41security

[QianWen] Synthesize speech from text with Qwen TTS models. TRIGGER when: user wants to convert text to speech, create voiceovers, generate audio narration, read text aloud, build TTS applications, mentions speech synthesis/voice generation/audio output from text, or explicitly invokes this skill by name (e.g. use qianwen-audio-tts). DO NOT TRIGGER when: user wants speech recognition/ASR, text generation without audio, non-Qwen audio tasks.

qianwen-ai avatarqianwen-ai
获取
qianwen-vision

qianwen-vision

41security

[QianWen] Understand images and videos with Qwen vision models. TRIGGER when: user wants to analyze, describe, or extract information from images or videos, OCR text extraction, chart/table reading, visual reasoning, multi-image comparison, screenshot understanding, video comprehension, or explicitly invokes this skill by name (e.g. use qianwen-vision). DO NOT TRIGGER when: user wants to generate/create images (use qianwen-image-generation), generate videos (use qianwen-video-generation), text-only tasks without visual input, or non-Qwen vision tasks.

qianwen-ai avatarqianwen-ai
获取
insforge-debug

insforge-debug

27security

>-

insforge avatarinsforge
获取
ace-step

ace-step

21security

通过 `runcomfy` CLI 在 RunComfy 上使用 ACE Step 生成、修补和扩展音乐。ACE Step 是 StepFun-AI 的开源权重音乐基础模型——基于标签的作曲(流派、情绪、乐器)、支持多语言歌词和段落标记、5 秒到 4 分钟立体声输出、每秒 $0.0002–0.0003(比 ElevenLabs Music 便宜约 27 倍)。四个端点:ACE Step 文本转音频(默认)、ACE Step 1.5 文本转音频(50+ 语言歌词、改进的结构化歌词处理)、ACE Step 音频修补(在现有音轨内重新生成时间范围)、ACE Step 音频扩展(在现有音轨前后扩展)。触发词包括 "ace step"、"ace-step"、"acestep"、"ACE music"、"open music model"、"cheap AI music"、"inpaint audio"、"audio inpaint"、"extend music"、"audio outpaint"、"lengthen track"、"music with tags" 或任何明确要求使用 ACE Step 生成或编辑音乐的请求。

agentspace-so avataragentspace-so
获取
ai-music

ai-music

21security

通过 `runcomfy` CLI 在 RunComfy 上生成 AI 音乐——一个智能路由,覆盖音乐模型目录。路由到 ElevenLabs AI 音乐生成(高级 44.1 kHz 立体声人声曲目,5 秒–5 分钟,$0.0083/秒)和 ACE Step / ACE Step 1.5(StepFun-AI 开源权重,标签驱动作曲,多语言歌词,$0.0002–0.0003/秒,约便宜 27 倍),以及 ACE Step 音频修补(在现有曲目内重新生成时间范围)和 ACE Step 音频外扩(在曲目前或后扩展)。根据用户的实际意图选择正确的模型——高级人声片段、廉价背景音乐库、多语言流行歌曲、修复糟糕的副歌、将 30 秒草稿延长为 2 分钟剪辑——并提供每个模型的文档化提示模式以及最小的 `runcomfy run` 调用。触发词包括“生成音乐”、“制作歌曲”、“AI 音乐”、“背景音乐”、“器乐曲目”、“配乐”、“广告歌”、“主题音乐”、“免版税音乐”、“作曲”、“带歌词的音乐”、“扩展音乐”、“修复这首歌”、“修补音乐”,或任何明确的生成或编辑音乐的请求。

agentspace-so avataragentspace-so
获取
emblem-ai-agent-wallet

emblem-ai-agent-wallet

12security

Connect to EmblemVault and manage wallet-aware workflows via EmblemAI with review-first, operator-controlled actions. Supports Solana, Ethereum, Base, BSC, Polygon, Hedera, and Bitcoin. Also use when the user needs Emblem's auth model explained: one browser auth flow can log a user in with wallets, email/password, or social sign-in, while agent mode can auto-provision a profile-scoped wallet with no manual setup.

emblemcompany avataremblemcompany
获取
ai-music

ai-music

8security

Generate AI music on RunComfy via the `runcomfy` CLI — a smart router across the music-model catalog. Routes to ElevenLabs AI Music Generation (premium 44.1 kHz stereo vocal tracks, 5 s–5 min, $0.0083/s) and ACE Step / ACE Step 1.5 (StepFun-AI open-weights, tag-driven composition, multilingual lyrics, $0.0002–0.0003/s, ~27× cheaper), plus ACE Step audio-inpaint (regenerate a time range inside an existing track) and ACE Step audio-outpaint (extend a track before or after). Picks the right model for the user's actual intent — premium vocal hook, cheap background music library, multilingual pop song, repair a bad chorus, lengthen a 30 s draft into a 2 min cut — and ships each model's documented prompting patterns plus the minimal `runcomfy run` invoke. Triggers on "generate music", "make a song", "AI music", "background music", "instrumental track", "soundtrack", "jingle", "theme music", "royalty-free music", "compose", "music with lyrics", "extend music", "fix this song", "inpaint music", or any explicit ask to generate or edit music.

skills-collective avatarskills-collective
获取
emblem-ai-agent-wallet

emblem-ai-agent-wallet

7security

Connect to EmblemVault and manage crypto wallets via EmblemAI. Supports Solana, Ethereum, Base, BSC, Polygon, Hedera, and Bitcoin. Use when the user wants to trade crypto, check balances, swap tokens, interact with blockchain wallets, or create and use profile-scoped agent wallets.

emblemcompany avataremblemcompany
获取
meticulous-cli-update

meticulous-cli-update

7security

Check whether the Meticulous CLI (@alwaysmeticulous/cli) is installed and up to date, and install/update it if not. Invoked at the start of every other Meticulous skill, since the CLI is under active development with frequent changes and improvements.

alwaysmeticulous avataralwaysmeticulous
获取
grimoire-polymarket

grimoire-polymarket

6security

通过 Grimoire 场所 CLI 包装器(基于官方 Polymarket CLI)查询 Polymarket 市场数据和 CLOB 状态,并管理 CLOB 订单。

franalgaba avatarfranalgaba
获取
agentwallet

agentwallet

4security

Wallets for AI agents with x402 and MPP payment signing, referral rewards, and policy-controlled actions.

frames-engineering avatarframes-engineering
获取
ace-step

ace-step

2security

通过 `runcomfy` CLI 在 RunComfy 上使用 ACE Step 生成、修补和扩展音乐。ACE Step 是 StepFun-AI 的开源权重音乐基础模型——基于标签的作曲(流派、情绪、乐器)、支持多语言歌词和段落标记、5 秒到 4 分钟的立体声输出,每秒 $0.0002–0.0003(比 ElevenLabs Music 便宜约 27 倍)。四个端点:ACE Step 文本转音频(默认)、ACE Step 1.5 文本转音频(50+ 语言歌词、改进的结构化歌词处理)、ACE Step 音频修补(在现有音轨内重新生成时间范围)、ACE Step 音频扩展(在现有音轨前后扩展)。触发词包括 "ace step"、"ace-step"、"acestep"、"ACE music"、"open music model"、"cheap AI music"、"inpaint audio"、"audio inpaint"、"extend music"、"audio outpaint"、"lengthen track"、"music with tags" 或任何明确要求使用 ACE Step 生成或编辑音乐的请求。

doany-ai avatardoany-ai
获取
ai-music

ai-music

2security

通过 `runcomfy` CLI 在 RunComfy 上生成 AI 音乐——一个智能路由,覆盖音乐模型目录。路由到 ElevenLabs AI 音乐生成(高级 44.1 kHz 立体声人声曲目,5 秒–5 分钟,$0.0083/秒)和 ACE Step / ACE Step 1.5(StepFun-AI 开放权重,标签驱动作曲,多语言歌词,$0.0002–0.0003/秒,约便宜 27 倍),以及 ACE Step 音频修补(在现有曲目内重新生成时间范围)和 ACE Step 音频外延(在曲目前后扩展)。根据用户的实际意图选择正确的模型——高级人声片段、廉价背景音乐库、多语言流行歌曲、修复糟糕的副歌、将 30 秒草稿延长为 2 分钟剪辑——并提供每个模型的文档化提示模式以及最小的 `runcomfy run` 调用。触发词包括“生成音乐”、“制作歌曲”、“AI 音乐”、“背景音乐”、“器乐曲目”、“配乐”、“广告曲”、“主题音乐”、“免版税音乐”、“作曲”、“带歌词的音乐”、“扩展音乐”、“修复这首歌”、“修补音乐”或任何明确的生成或编辑音乐的请求。

doany-ai avatardoany-ai
获取
ai-music

ai-music

2security

通过 `runcomfy` CLI 在 RunComfy 上生成 AI 音乐——一个智能路由,覆盖音乐模型目录。路由到 ElevenLabs AI 音乐生成(高级 44.1 kHz 立体声人声轨道,5 秒–5 分钟,$0.0083/秒)和 ACE Step / ACE Step 1.5(StepFun-AI 开放权重,标签驱动作曲,多语言歌词,$0.0002–0.0003/秒,约便宜 27 倍),以及 ACE Step 音频修补(在现有轨道内重新生成时间范围)和 ACE Step 音频外延(在轨道前后扩展)。根据用户的实际意图选择正确的模型——高级人声片段、廉价背景音乐库、多语言流行歌曲、修复糟糕的副歌、将 30 秒草稿延长为 2 分钟剪辑——并提供每个模型的文档化提示模式以及最小的 `runcomfy run` 调用。触发词包括“生成音乐”、“制作歌曲”、“AI 音乐”、“背景音乐”、“器乐轨道”、“配乐”、“广告曲”、“主题音乐”、“免版税音乐”、“作曲”、“带歌词的音乐”、“扩展音乐”、“修复这首歌”、“修补音乐”,或任何明确要求生成或编辑音乐的请求。

runcomfy-com avatarruncomfy-com
获取
ace-step

ace-step

2security

通过 `runcomfy` CLI 在 RunComfy 上使用 ACE Step 生成、修补和扩展音乐。ACE Step 是 StepFun-AI 的开源音乐基础模型——基于标签的作曲(流派、情绪、乐器)、支持多语言歌词和段落标记、5 秒到 4 分钟立体声输出、每秒 $0.0002–0.0003(比 ElevenLabs Music 便宜约 27 倍)。四个端点:ACE Step 文本转音频(默认)、ACE Step 1.5 文本转音频(50+ 语言歌词、改进的结构化歌词处理)、ACE Step 音频修补(在现有曲目内重新生成时间范围)、ACE Step 音频扩展(在现有曲目前后扩展)。触发词包括 "ace step"、"ace-step"、"acestep"、"ACE music"、"open music model"、"cheap AI music"、"inpaint audio"、"audio inpaint"、"extend music"、"audio outpaint"、"lengthen track"、"music with tags" 或任何明确要求使用 ACE Step 生成或编辑音乐的请求。

runcomfy-com avatarruncomfy-com
获取
find-the-original-image

find-the-original-image

2writing-content

Reverse image search across Yandex, Google Lens, Bing Visual Search, TinEye and Baidu to find where a picture came from and who published it first. Use when reverse image searching, identifying a photo, face, logo, product, uniform or building, tracing a profile picture or avatar, finding the oldest copy of an image, checking whether a photo is stock or a repost, or reverse-searching a video by keyframes. Applies to romance and investment scam investigation, fake-profile and synthetic-identity detection, disinformation and media verification, counterfeit and brand-infringement work, and insurance claim review. Reference at useosint.com/skills/find-the-original-image.

useosint avataruseosint
获取
is-this-photo-real

is-this-photo-real

2testing-qa

Verify whether an image or video is authentic, original and correctly captioned — provenance checks, error level analysis, noise and JPEG compression analysis, clone and copy-move detection, lighting and shadow consistency, C2PA Content Credentials, deepfake and AI-generation tells, and the honest limits of AI-detector tools. Use when fact-checking a photo or video, checking for a deepfake or AI-generated image, spotting manipulation, or testing whether footage is recycled or miscaptioned. Applies to KYC and onboarding fraud, insurance claim review, disinformation analysis, and evidence admissibility. Reference at useosint.com/skills/is-this-photo-real.

useosint avataruseosint
获取
what-leaked-about-you

what-leaked-about-you

2backend-api

Check and interpret data-breach exposure for an email, username, phone or name using Have I Been Pwned, the Pwned Passwords k-anonymity range API, DeHashed, IntelX and Snusbase. Use when checking breach or leak exposure, finding which services an account was registered with, interpreting a combolist or credential dump, assessing credential compromise, or auditing your own leaked personal data. Applies to incident response and account-takeover triage, executive and VIP protection, pre-employment and vendor risk screening, and personal privacy audits. Reference at useosint.com/skills/what-leaked-about-you.

useosint avataruseosint
获取
investigate-without-getting-made

investigate-without-getting-made

2security

Investigator OPSEC — threat-model who might notice you, control your attribution surface across IP, ASN, browser and TLS fingerprint, timing and logged-in accounts, separate research identity from real identity, build and age a sockpuppet research persona, and choose between VPN, residential proxy and Tor. Use when setting up a research account, avoiding tipping off a subject, worrying about LinkedIn profile-view leakage, needing a burner phone or email, or hardening a research VM or browser profile. Applies to covert due diligence, insider-threat investigation, source protection in journalism, and law-enforcement online work. Reference at useosint.com/skills/investigate-without-getting-made.

useosint avataruseosint
获取
limrun-xcode-bazel

limrun-xcode-bazel

1security

Build a Bazel-based iOS / macOS / Apple app on Limrun's remote build execution (RBE) instead of a local Mac, and install it on a remote iOS simulator. Use when the project is a Bazel workspace (MODULE.bazel / WORKSPACE) building rules_apple / rules_swift targets and the user wants to `bazel build` it or run it on a simulator, or when a `--config=limrun` build or install misbehaves. To then tap, type, screenshot, or otherwise interact with the running app, use limrun-ios-simulator. For non-Bazel (plain xcodebuild) projects use limrun-xcode instead.

limrun-inc avatarlimrun-inc
获取
agentix-ceo

agentix-ceo

0security

管理你的团队——创建角色、分配任务、启动工作进程并监控进度

agentix-cloud avataragentix-cloud
获取