Security

Install and use Tavily CLI (tvly) for web search/extract/crawl.

Free, no-auth multi-chain DEX pair data — prices, volume, liquidity, transactions, and token profiles

GitHub auth setup: HTTPS tokens, SSH keys, gh CLI login.

(💛) Use when configuring, auditing, hardening, or open-sourcing projects that use Google Cloud Platform (GCP) resources — especially Google Cloud Storage…

Create production-ready Grafana dashboards with reusable panels, template variables, annotations, and provisioning for version-controlled dashboard deployment.

识别组件后先查本机近5年CVE语料（zvec），无命中或需在野/分析长文再联网。 Use when a framework/component/version is identified; local corpus first, then public search.

Deploy the Web/functions Cloud Functions AI proxy (OpenAI/Replicate), store API keys in Google Cloud Secret Manager, set CLOUD_FUNCTIONS_URL, and call it from…

Audit trending repos for real security vulnerabilities and disclose responsibly - scan and route findings (PVR / dependency PR), re-submit queued advisories…

Supply chain investigation, evidence recovery, and forensic analysis for GitHub repositories.

Spencer's house style for UIs.

Provision Microsoft Entra Agent Identity Blueprints, BlueprintPrincipals, and per-instance Agent Identities via Microsoft Graph, and configure OAuth 2.0 token…

Guide users through installing and configuring the DocumentDB MCP server for Azure DocumentDB.

SENTINEL — a comprehensive security audit skill for Claude Skills.

Set up GitHub authentication for the agent using git (universally available) or the gh CLI.

Produce source-grounded scientific narrative reviews, or audit the claims and references of a supplied draft, using live literature discovery, verified…

Use when the user wants to evaluate a GitHub repository before installing, running, forking, or depending on it.

Builds remote MCP (Model Context Protocol) servers on Cloudflare Workers with tools, OAuth authentication, and production deployment.

Use this skill when building with Deno — TypeScript runtime, Deno Deploy, Fresh framework, Deno std library.

Manage AI coding CLI accounts with sub-100ms switching.

Generate marketplace product image cards through Higgsfield: compliant main image, secondary product images, and A+ style content modules.

Guides dotfile management with chezmoi when the user says "set up dotfiles", "manage my dotfiles", "bootstrap a new machine", "chezmoi", "encrypt my SSH key…

Run a structured security audit on any WordPress site — core integrity, plugin/theme CVE cross-check, wp-config and file-permission hardening…

Manage Linear issues, projects, and teams via the GraphQL API.

Skill curator (买家秀 — "buyer show": hands-on QA notes, as opposed to the author's own 卖家秀 "seller show" claims).