supabase-audit-rpc
List and test exposed PostgreSQL RPC functions for security issues and potential RLS bypass.
supabase-audit-functions
Discover and test Supabase Edge Functions for security vulnerabilities and misconfigurations.
supabase-audit-auth-users
Test for user enumeration vulnerabilities through various authentication endpoints.
supabase-extract-url
Extract the Supabase project URL from client-side JavaScript code, environment variables, and configuration files.
supabase-audit-auth-signup
Test if user signup is open and identify potential abuse vectors in the registration process.
supabase-audit-auth-config
Analyze Supabase authentication configuration for security weaknesses and misconfigurations.
supabase-report-compare
Compare two security audit reports to track remediation progress and identify new vulnerabilities.
supabase-extract-db-string
CRITICAL - Detect exposed PostgreSQL database connection strings in client-side code. Direct DB access is a P0 issue.
supabase-extract-anon-key
Extract the Supabase anon/public API key from client-side code. This key is expected in client apps but important for RLS testing.
supabase-evidence
Initialize and manage the evidence collection directory for professional security audits with documented proof of findings.
supabase-audit-tables-read
Attempt to read data from exposed tables to verify actual data exposure and RLS effectiveness.
supabase-audit-tables-list
List all tables exposed via the Supabase PostgREST API to identify the attack surface.
supabase-audit-buckets-read
Attempt to list and read files from storage buckets to verify access controls.
supabase-help
Quick reference for all Supabase security audit skills with usage examples and command overview.
supabase-pentest
Orchestrate a complete Supabase security audit with guided step-by-step execution and ownership confirmation.
supabase-report
Generate a comprehensive Markdown security audit report with executive summary, findings, and remediation guidance.
supabase-detect
Detect if a web application uses Supabase by analyzing client-side code, network patterns, and API endpoints.
gemini-image-generator
Generate images using Google Gemini with customizable options
skill-creator
Use this skill when building, writing, reviewing, or fixing a SKILL.md file for a new or existing skill. Covers choosing skill names, writing and correcting YAML frontmatter (name and description fields), crafting effective 'Use when' trigger phrases, structuring skill body instructions, improving an existing skill's routing quality with better trigger keywords, and interpreting or evaluating a skill description against an eval set using validate_skill or evaluate_skill.
local-skills-mcp-usage
Operational guide for using Local Skills MCP in day-to-day projects. Use when asked: where skills should live (~/.claude/skills, ./.claude/skills, ./skills, SKILLS_DIR); directory precedence and override rules; how to configure local-skills-mcp in Claude Code mcp.json; fastest way to create a new skill folder and make it discoverable; how to add project skills to git so the team gets them; or how Local Skills MCP hot-reloads skill edits without restarting.
local-skills-mcp-guide
Repository implementation guide for the local-skills-mcp codebase. Use when asked: how src/index.ts and src/skill-loader.ts work together; where MCP tool handlers are defined and registered; how getAllSkillsDirectories priority and override behavior works; how local-skills-mcp discovers skills and merges metadata across directories; where validate_skill and evaluate_skill are implemented in this repository; or how integration tests are structured in this local-skills-mcp project.
Suno Upload
Upload a Suno prompt.md file to suno.com using Chrome automation with NO human intervention required. Parses the prompt file, navigates to Suno's Create interface, fills all form fields including sliders (lyrics, style, title, weirdness, style influence, vocal gender, exclude styles), and submits for song generation. Uses proven coordinate-based slider manipulation for reliable automation. Use this skill when the user asks to "upload to Suno", "create on Suno", "generate with Suno", "submit to Suno", or wants to automatically upload a generated prompt to the Suno website.
Suno Song Creator
This skill should be used when the user asks to "create a Suno prompt", "write a Suno song", "generate music with Suno", "help me with Suno", "make a song prompt", "create lyrics for Suno", "build a music prompt", or mentions Suno AI music generation. Provides comprehensive guidance for creating professional Suno prompts using advanced prompting strategies, structured formatting within 1000 character limit (NO blank lines between sections), parameter optimization, genre-specific techniques, interactive questioning with efficient project name collection, automated artist/song research via sub-agent (web fetching + pattern extraction), automatic file export to organized project directories, AI-slop avoidance for authentic human-centered lyrics, copyright-safe style descriptions that avoid artist/album/song names, character counting utilities for accurate verification, and optional independent quality review via sub-agent for professional assessment.
frontend-design
Create distinctive, production-grade frontend interfaces with high design quality. Use when building or refining web components, pages, or apps (HTML/CSS/JS/React) with bold aesthetics, purposeful layouts, motion, and accessibility. Avoid generic AI-looking output.
delegate
Locks the session into DELEGATOR mode — route all work to subagents and workflows, do no work directly.
consult
Use when you want to learn how experts would think about a design tradeoff, architecture choice, repeated failure, or domain question. Triggers on expert names, "mentor", "panel", "debate", "what would [X] say", "stuck on", style requests.
intent
Turn rough ideas into clear work orders before planning or building. Use when request is vague like "add a button", "make it better", "fix the thing". Triggers on ambiguous or underspecified requests.
freeze
Use when a pipeline stage or the human meets facts that live outside the repo — a service, database, queue, third party, or live logs — and the work depends on their current state. Triggers on "what's the state of", "check prod", "is the service returning", "snapshot the data", external-system dependencies. Repo-local work skips it.
setup
Use when installing, refreshing, or re-tuning sound taste rules in a project. Triggers on "sound setup", "install taste rules", "scaffold .claude/rules", "set up sound here", starting work in a repo with no .claude/rules/, or a taste-not-defined nudge. Also use to re-run after a stack change (new framework, new package in a monorepo).
over
Use as load-bearing work lands, or when the user asks to debrief, hand off recent work, or check what they actually own versus what AI carried. Triggers on "debrief", "what do I own", "hand over", "hand it back", "over", and recently shipping a load-bearing decision the human has not reasoned through.
target
Define how unsupervised work will be judged before it runs. Use when execution is an autonomous loop or a long unbabysat agent run that optimizes toward a metric. Triggers on "autonomous loop", "let it run", "optimize until", "overnight run", "unsupervised", "set a goal".
shape
Resolves technical HOW decisions — architecture choices, technology selection, and design patterns. Use shape when the intent is clear but the technical path is not. Triggers on "shape this", "architecture for X", "how should I build", "which pattern", "technical approach".
ascii-art
Generate creative ASCII art for text banners, logos, and decorative elements using various character patterns and styles.
code-review
Perform thorough code reviews checking for security vulnerabilities, error handling, test coverage, performance issues, and proper logging.
python-style
Apply Python best practices when reviewing or writing code, including PEP 8, type annotations, docstrings, and common anti-patterns to avoid.
unreal-engine
>
test-dev
测试开发专家，基于JUnit 5 + AssertJ + Mockito + JaCoCo。
git-committer
Git提交专家，规范化提交信息和分主题提交。
compiler-dev
编译器后端开发专家，专注于IR、CFG、SSA、数据流分析和优化Pass。
ep-navigator
EP项目导航专家，提供21个EP的依赖路由、快速定位和跨EP对比。
vm-dev
虚拟机开发专家，专注于字节码、指令、栈帧、内存管理和垃圾回收。
antlr4-dev
ANTLR4前端开发专家，专注于词法/语法分析、AST构建、访问者模式。
ecommerce-competitor-analyzer
Multi-platform e-commerce competitor analysis skill that automatically scrapes product data from Amazon, Temu, Shopee and generates comprehensive analysis reports using AI. Use when you need to analyze competitor products, extract product insights, or batch analyze multiple product listings. Supports bulk processing with structured outputs including title, price, rating, reviews, and strategic analysis.
topic-generation
快速生成3-4个文章选题方向，包含标题建议、内容大纲、工作量评估、目标受众分析和优劣势分析。当用户提到"选题"、"写什么"、"内容选题"、"文章方向"、"创作灵感"时使用此技能。
prompt-classifier
自动识别prompt类型并保存到相应分类（技术/内容/教学/产品/通用），支持自动文件命名和索引管理。当用户提到"保存prompt"、"记录prompt"、"管理prompt"、"整理prompt"、"prompt库"时使用此技能。
personal-material-search
快速搜索用户的真实经历、观点和案例素材库（1800+条记录），为内容增加真实性和可信度。当用户提到"真实经历"、"个人案例"、"有根据"、"实际经验"、"素材库"、"找例子"时使用此技能。
info-search-knowledge
针对新产品、新技术进行多渠道信息搜索和验证，并将可靠信息保存到知识库。优先选择权威科技媒体，忽略过时信息源。当用户提到"最新信息"、"新产品"、"新技术"、"搜索资料"、"查资料"、"了解XX"时使用此技能。
image-generation
自动为文章生成配图，支持AI生成图片、公共领域图片、免费图库图片，并上传到ImgBB图床生成Markdown链接。当用户提到"配图"、"插图"、"图片"、"生成图片"、"文章配图"时使用此技能。
article-to-x
将3000-5000字长篇文章转换为200-500字X平台(微博/小红书等)内容，保持真实风格，提供3种开头风格。当用户提到"转微博"、"发小红书"、"社交媒体"、"缩短内容"、"精简"时使用此技能。
ai-proofreading
系统化降低AI检测率至30%以下，通过三遍审校流程（内容、风格、细节）增加人味。当用户提到"AI味太重"、"像AI写的"、"降低AI检测率"、"更像人写的"、"自然一些"、"口语化"时使用此技能。
Page 858 of 1705 · 85212 results
