安全
安全审查、认证、权限和风险检查
Skills 列表
entra-app-registration
指导 Microsoft Entra ID 应用注册、OAuth 2.0 身份验证和 MSAL 集成。用途：创建应用注册、注册 Azure AD 应用、配置 OAuth、设置身份验证、添加 API 权限、生成服务主体、MSAL 示例、控制台应用身份验证、Entra ID 设置、Azure AD 身份验证。不适用于：Azure RBAC 或角色分配（使用 azure-rbac）、Key Vault 机密（使用 azure-keyvault-expiration-audit）、一般 Azure 资源安全指导。
microsoftazure-rbac
帮助用户为标识找到具有最低权限的合适 Azure RBAC 角色，然后生成 CLI 命令和 Bicep 代码来分配该角色。同时提供分配角色所需的权限指导。适用场景：bicep 用于角色分配、我应该分配什么角色、最低权限角色、RBAC 角色、读取 blob 的角色、托管标识的角色、自定义角色定义、为标识分配角色、我需要什么角色来授予访问权限、分配角色的权限。
microsoftazure-kusto
使用KQL查询和分析Azure Data Explorer（Kusto/ADX）中的数据，适用于日志分析、遥测和时间序列分析。适用场景：KQL查询、Kusto数据库查询、Azure Data Explorer、ADX集群、日志分析、时间序列数据、IoT遥测、异常检测。
microsoftazure-compliance
使用 azqr 和 Key Vault 过期检查运行 Azure 合规性与安全审计。涵盖最佳实践评估、资源审查、策略/合规性验证以及安全态势检查。适用场景：合规性扫描、安全审计、运行 azqr（合规性 CLI 工具）之前、Azure 最佳实践、Key Vault 过期检查、过期证书、即将过期的机密、孤立资源、合规性评估。
microsoft
musickit
Integrate Apple Music playback, catalog search, and Now Playing metadata using MusicKit and MediaPlayer. Use when adding music search, Apple Music subscription flows, queue management, playback controls, remote command handling, or Now Playing info to iOS apps.
dpearson2699cryptokit
Use Apple CryptoKit for Swift cryptographic primitives. Use when hashing with SHA-2 or SHA-3, generating HMACs, encrypting with AES-GCM or ChaChaPoly, signing with P256/P384/P521/Curve25519 or ML-DSA keys, performing ECDH, HPKE, ML-KEM, or X-Wing key exchange, using Secure Enclave CryptoKit keys, or migrating CommonCrypto code to CryptoKit.
dpearson2699eventkit
Create, read, and manage calendar events and reminders using EventKit and EventKitUI. Use when adding events to the user's calendar, creating reminders, setting recurrence rules, requesting calendar or reminders access, presenting event editors, choosing calendars, handling alarms, observing calendar changes, or working with EKEventStore, EKEvent, EKReminder, EKCalendar, EKRecurrenceRule, EKEventEditViewController, EKCalendarChooser, or EventKitUI views.
dpearson2699accessorysetupkit
Discover and configure Bluetooth and Wi-Fi accessories using AccessorySetupKit. Use when presenting a privacy-preserving accessory picker, defining discovery descriptors for BLE or Wi-Fi devices, handling accessory session events, migrating from CoreBluetooth permission-based scanning, or setting up accessories without requiring broad Bluetooth permissions.
dpearson2699scenekit
Maintain and extend existing SceneKit 3D scenes and visualizations. Use when working with SCNView, SCNScene, SCNNode scene graphs, SceneKit geometry/materials/lights/cameras, SCNAction animation, SCNPhysicsBody physics, SCNParticleSystem effects, .scn/.dae/.abc SceneKit assets, shader modifiers, or SwiftUI SceneView. SceneKit is soft-deprecated and in maintenance mode; route new apps, significant updates, USD/USDZ pipelines, and migration planning toward RealityKit.
dpearson2699cryptotokenkit
Access security tokens and smart cards using CryptoTokenKit. Use when building TKTokenDriver or TKSmartCardTokenDriver extensions, communicating with smart cards via TKSmartCard/TKSmartCardSlotManager, using iOS 26+ NFC smart-card sessions, registering smart cards, querying token-backed keychain items with kSecAttrTokenID, monitoring TKTokenWatcher, or configuring certificate-based smart-card authentication.
dpearson2699relevancekit
Increase widget visibility on Apple Watch using RelevanceKit. Use when providing contextual relevance signals for watchOS widgets, declaring time-based or location-based relevance, combining multiple relevance providers, helping the system surface the right widget at the right time on watchOS 26, or routing mixed RelevanceKit/WidgetKit/HealthKit/MapKit Smart Stack scope.
dpearson2699realitykit
Build iOS augmented reality and 3D experiences with RealityKit and ARKit. Use when adding RealityView content, loading entities or USDZ models, anchoring objects to planes or world positions, distinguishing entity hit tests from ARKit real-world raycasts, handling AR camera availability, world tracking, scene updates, or RealityKit entity gestures and interactions.
dpearson2699photokit
Implement, review, or improve photo picking, camera capture, and media handling in iOS apps using PhotoKit and AVFoundation. Use when working with PhotosPicker, PHPickerViewController, camera capture sessions (AVCaptureSession), photo library access, image loading and display, video recording, or media permissions. Also use when selecting photos from the library, taking pictures, recording video, processing images, or handling photo/camera privacy permissions in Swift apps.
dpearson2699
asc-signing-setup
Set up bundle IDs, capabilities, signing certificates, provisioning profiles, and encrypted signing sync with the asc cli. Use when onboarding a new app, rotating signing assets, or sharing them across a team.
rorkaiasc-revenuecat-catalog-sync
Reconcile App Store Connect subscriptions and in-app purchases with RevenueCat products, entitlements, offerings, and packages using asc and RevenueCat MCP. Use when setting up or syncing subscription catalogs across ASC and RevenueCat.
rorkaiasc-workflow
Define, validate, run, resume, and audit repo-local multi-step automations with current `asc workflow` and `.asc/workflow.json`, including step outputs and safe release/TestFlight workflows.
rorkai
asc-notarization
Archive, export, and notarize macOS apps using xcodebuild and asc. Use when you need to prepare a macOS app for distribution outside the App Store with Developer ID signing and Apple notarization.
rudrankriyamasc-notarization
Archive, export, and notarize macOS apps using xcodebuild and asc. Use when you need to prepare a macOS app for distribution outside the App Store with Developer ID signing and Apple notarization.
rorkai
binance-agentic-wallet
当用户提及连接/断开钱包、登录/登出、Web3钱包、钱包地址、查询余额、我持有多少加密货币、发送BNB/USDT/加密货币、转账代币、兑换代币、买入/卖出代币、DEX交易、限价单、市价单、取消订单、获取报价、交易历史、钱包设置、每日限额、滑点、MEV保护、支持的链、可用网络、预测市场、predict.fun、是/否市场、下预测单、赎回奖金、领取赔付、预测组合、预测盈亏、x402支付、HTTP 402 Payment Required、支付已知的x402 API、检查授权、查看代币授权、撤销授权、管理授权、钱包授权、授权管理、代币授权、DeFi协议、DeFi仓位、DeFi组合、质押、流动性池、LP、收益耕作、健康因子、APY、TVL、DeFi投资、DeFi存款、DeFi赎回、DeFi质押、DeFi解除质押、添加流动性、移除流动性、领取奖励、领取费用、加速交易、取消交易、取消待处理交易、待处理交易、卡住交易、替换交易或任何链上钱包操作时使用。
binanceasc-signing-setup
Set up bundle IDs, capabilities, signing certificates, provisioning profiles, and encrypted signing sync with the asc cli. Use when onboarding a new app, rotating signing assets, or sharing them across a team.
rudrankriyamcore-bluetooth
使用 Core Bluetooth 构建直接的蓝牙低功耗工作流。适用于实现 BLE 中心或外围 GATT 通信、使用 CBCentralManager 扫描或连接、发现服务和特征、使用 CBPeripheral 读取/写入/订阅、使用 CBPeripheralManager 发布本地服务、处理蓝牙授权、后台 BLE 模式、状态恢复、写入流控制或基于 CBUUID 的工作流。对于隐私保护的配件设置/选择流程，请先使用 accessorysetupkit，然后返回此处进行设置后的 GATT 通信。
dpearson2699speech-recognition
使用 Apple Speech 框架将语音转录为文本。适用于使用 AVAudioEngine 实现实时麦克风转录、识别录制的音频文件、处理语音和麦克风授权、选择设备端或服务器端 SFSpeechRecognizer 行为，或在 iOS 26+ 上采用 SpeechAnalyzer、SpeechTranscriber、DictationTranscriber、AssetInventory 和异步结果流。
dpearson2699core-motion
访问 Core Motion 加速度计、陀螺仪、磁力计、设备运动、计步器、活动识别、海拔高度、耳机运动、批量高频锻炼运动以及水下浸没/深度数据。适用于读取设备传感器、计步、检测步行/跑步/驾驶/骑行、跟踪海拔高度、构建运动交互、处理 AirPods 头部跟踪或实现 watchOS 潜水/深度功能。
dpearson2699healthkit
使用 HealthKit 读取、写入和查询 Apple 健康数据。涵盖 HKHealthStore 授权、样本查询、统计查询、用于图表的统计集合查询、保存 HKQuantitySample 数据、后台投递、使用 HKWorkoutSession 和 HKLiveWorkoutBuilder 的锻炼会话、HKUnit 以及 HKQuantityTypeIdentifier 值。在集成 Apple 健康、显示健康指标、记录锻炼或启用后台健康数据投递时使用。
dpearson2699