Security

Use when the work spans several files or replaces a framework, language, auth, storage, or API layer (rewrites and migrations included), and the user wants it…

Image optimization analysis for SEO and performance.

Audit local SEO, including Google Business Profile, NAP consistency, citations, reviews, local schema, location pages, and multi-location structure.

Maps intelligence for local SEO: geo-grid rank tracking, GBP profile auditing via API, review intelligence across Google/Tripadvisor/Trustpilot…

Review how the lean-ctx ctx_* MCP tools performed in the current session and file upstream issues for confirmed problems.

Install and use gstack in Capy and Claude Code.

When the user wants to audit or optimize an App Store or Google Play listing.

When the user wants to research, profile, or analyze competitors from their URLs.

When the user wants to edit, review, or improve existing marketing copy, or refresh outdated content.

When the user wants to run influencer, creator, or ambassador partnerships to promote their product — finding and vetting partners, structuring deals…

When the user needs a comprehensive marketing plan for a client, a company they advise, or their own product.

When the user wants help with pricing decisions, packaging, or monetization strategy.

When the user wants to add, fix, or optimize schema markup and structured data on their site.

When the user wants to audit, review, or diagnose SEO issues on their site.

Plan, draft, audit, and publish LinkedIn posts and comments.

Validate and fix Plano config fundamentals.

Apply Plano deployment and production security practices.

Optimize Plano model routing and selection.

Detect hardcoded secrets in code or configuration accessible to the target agent.

OWASP Top 10 for Agentic Applications 2026 (ASI) classification framework.

初始访问/钓鱼/社工:凭据喷洒,AiTM,设备码,OAuth同意钓鱼,载荷,vishing。Use when needing initial access, phishing, AiTM, device code, or social engineering.

输出规范:中文分析,思维链,漏洞报告模板,负结果,黑板状态总览,改动台账,死锁突破。 Use when reporting findings, maintaining change ledger, or formatting pentest output.

验证铁律:搜索≠漏洞,confirmed Fact须证据,tentative表线索,禁止空泛推测,负结果也落库, 想象力拉满+单步验证零容忍。Use when writing project facts, validating findings, or avoiding hallucination.

源码狩猎:.git泄露,危险函数grep,JS RC4解混淆,semgrep/CodeQL,trufflehog,patch diff,供应链/CI。Use when hunting source leaks, secrets, JS deobfuscation, or supply-chain issues.