所有 Skills
找到 8165 个 Skills
Skills 列表
cybersecurity-analyst
Analyzes events through cybersecurity lens using threat modeling, attack surface analysis, defense-in-depth, zero-trust architecture, and risk-based frameworks (CIA triad, STRIDE, MITRE ATT&CK). Provides insights on vulnerabilities, attack vectors, defense strategies, incident response, and security posture. Use when: Security incidents, vulnerability assessments, threat analysis, security architecture, compliance. Evaluates: Confidentiality, integrity, availability, threat actors, attack patterns, controls, residual risk.
rysweet
planning-with-files
Uses persistent markdown files for general planning, progress tracking, and knowledge storage (Manus-style workflow). Use for multi-step tasks, research projects, or general organization WITHOUT mentioning PRD. For PRD-specific work, use prd-planner skill instead.
zhaono1
mapbox-location-grounding
Compose Mapbox MCP tools to produce grounded, cited location-aware responses from live data instead of training data
mapbox
cloudrun-development
CloudBase Run backend development rules (Function mode/Container mode). Use this skill when deploying backend services that require long connections, multi-language support, custom environments, AI agent development, or migrating existing/GitHub apps that need VPC access to MySQL/PostgreSQL/Redis. Also use when diagnosing CloudRun container deploy failures (deploy_failed, readiness/probe failed, image won't start, docker.io pull loops) or a deploy stuck behind a running deploy task. For stateless HTTP services, prefer HTTP cloud functions.
tencentcloudbasehttp-api-cloudbase
CloudBase official HTTP API client guide. This skill should be used when backends, scripts, or non-SDK clients must call CloudBase platform APIs over raw HTTP instead of using a platform SDK or MCP management tool.
tencentcloudbaseauth-nodejs-cloudbase
CloudBase Node SDK auth guide for server-side identity, user lookup, and custom login tickets. This skill should be used when Node.js code must read caller identity, inspect end users, or bridge an existing user system into CloudBase; not when configuring providers or building client login UI.
tencentcloudbaserelational-database-mcp-cloudbase
[Deprecated] This is the required documentation for agents operating on the CloudBase Relational Database through MCP. It defines the canonical SQL management flow with `queryMysqlDatabase`, `manageMysqlDatabase`, `queryPermissions`, and `managePermissions`, including MySQL provisioning, destroy flow, async status checks, safe query execution, schema initialization, and permission updates. New environments should use PostgreSQL — see postgresql-development skill instead.
tencentcloudbaseauth-web-cloudbase
CloudBase Web Authentication Quick Guide for frontend integration after auth-tool has already been checked. Provides concise and practical Web authentication solutions with multiple login methods and complete user management.
tencentcloudbasecloudbase-document-database-web-sdk
Use CloudBase document database Web SDK only for confirmed NoSQL collection work. Query, create, update, and delete document data; if the task mentions PostgreSQL / CloudBase PG / app.rdb(), route to postgresql-development instead.
tencentcloudbase
ci-cd-security
扫描 GitHub Actions 工作流文件中的安全漏洞，通过直接读取 YAML 并报告发现结果——无需外部工具、无需安装、无需执行 shell 命令。当用户分享 `.github/workflows/` 文件、粘贴工作流 YAML、请求 CI/CD 安全审查、提及 `pull_request_target`、`workflow_run`、操作固定、`GITHUB_TOKEN` 权限、pwn 请求、模板注入、缓存投毒、秘密泄露、供应链风险或任何 GitHub Actions 加固主题时，使用此技能。当用户正在加固开源仓库、进行 CI/CD 红队评估、评估供应链扫描目标或公开撰写 CI/CD 安全相关内容时，也触发此技能。倾向于触发此技能而非凭记忆回答——CI/CD 安全默认值几乎在所有地方都是错误的，且规则不直观。
superagent-aiskill-security
在安装或信任AI智能体技能之前，审计其安全风险。运行确定性扫描器（正则模式、Python AST分析、源到汇污点追踪和YARA签名），然后推理意图——捕获提示注入、凭证窃取、持久化、内存投毒、恶意代码、供应链风险以及描述与行为不匹配。确保在用户想要扫描、审计、审查或检查技能、插件、SKILL.md或智能体工具的安全性时使用此技能——无论是本地文件夹、zip/.skill文件还是克隆的仓库——以及当有人问“这个技能安装安全吗？”时。
superagent-ai
goframe-v2
GoFrame v2 开发技能。仅当目标 Go 项目使用或明确采用 GoFrame v2 时使用：最近的 go.mod 要求 github.com/gogf/gf/v2，现有 Go 文件导入 github.com/gogf/gf/v2 或任何 github.com/gogf/gf/v2/... 组件包，或者用户要求使用 GoFrame 搭建、迁移或构建。触发于基于 GoFrame 的 Go 工作，例如 API/控制器/服务、中间件、路由/配置、ORM/DAO/DO/实体/数据库操作、gf CLI/代码生成、HTTP/gRPC 服务以及微服务约定。不要触发于没有 GoFrame 证据的通用 Go 项目、纯前端工作、shell 脚本或不相关的基础设施任务。
gogfmapbox-maplibre-migration
Guide for migrating from MapLibre GL JS to Mapbox GL JS, covering API compatibility, token setup, style configuration, and the benefits of Mapbox's official support and ecosystem
mapboxai-model-wechat
Use this skill for WeChat Mini Program AI via wx.cloud.extend.AI (小程序, wx.cloud apps). Covers generateText and streamText with callbacks (onText, onEvent, onFinish); streamText needs a data wrapper, generateText returns the raw response. Models via wx.cloud.extend.AI.createModel with groups hunyuan-exp (小程序成长计划), cloudbase (main managed), or custom-*; model id goes in the data wrapper `model` field. MUST run two-step preflight before code — see body. NOT for browser/Web (use ai-model-web), Node.js backend (use ai-model-nodejs), or image generation (use ai-model-nodejs).
tencentcloudbasecloudbase-platform
CloudBase platform overview and routing guide. This skill should be used when users need high-level capability selection, platform concepts, console navigation, or cross-platform best practices before choosing a more specific implementation skill.
tencentcloudbasedata-model-creation
[Deprecated] Optional advanced tool for complex data modeling. For simple MySQL table creation, use relational-database-tool directly; for PostgreSQL / CloudBase PG schema work, use postgresql-development. New environments should use PostgreSQL DDL via queryPgDatabase/managePgDatabase — see postgresql-development skill instead.
tencentcloudbaseauth-tool-cloudbase
CloudBase auth provider configuration and login-readiness guide. This skill should be used when users need to inspect, enable, disable, or configure auth providers, publishable-key prerequisites, login methods, SMS/email sender setup, or other provider-side readiness before implementing a client or backend auth flow.
tencentcloudbasecloud-storage-web
Complete guide for CloudBase cloud storage using Web SDK (@cloudbase/js-sdk) - upload, download, temporary URLs, file management, and best practices.
tencentcloudbaseai-model-nodejs
Use this skill for Node.js backend AI via @cloudbase/node-sdk (>=3.16.0) — cloud functions, CloudRun, Express/Koa/NestJS, serverless APIs, scheduled jobs, LLM proxies, agent orchestration. The only SDK supporting image generation (ai.createImageModel + generateImage). Text via ai.createModel with groups cloudbase, hunyuan-exp, or custom-*; model ids (e.g. deepseek-v4-flash, glm-5, kimi-k2.6) go in the `model` field of generateText/streamText. MUST run two-step preflight before code — see body. NOT for browser/Web (use ai-model-web) or Mini Program (use ai-model-wechat).
tencentcloudbase
hackernews
Hacker News API for stories and comments. Use when user mentions "Hacker
okou-aihackernews
Hacker News API for stories and comments. Use when user mentions "Hacker
okou-aiui-design
Use when users need visual direction, interface hierarchy, layout decisions, design specifications, or prototypes before implementing a Web or mini program UI.
tencentcloudbasecloudbase-document-database-in-wechat-miniprogram
Use CloudBase document database WeChat MiniProgram SDK to query, create, update, and delete data. Supports complex queries, pagination, aggregation, and geolocation queries.
tencentcloudbasemapbox-mcp-devkit-patterns
Integration patterns for Mapbox MCP DevKit Server in AI coding assistants. Covers setup, style management, token management, validation workflows, and documentation access through MCP. Use when building Mapbox applications with AI coding assistance.
mapbox