Scan to join WeChat groupBrowse curated skills with source links, package snapshots, README assets and install signals in one calm, searchable catalog.
编写、审查与迁移基于 ClickHouse 的 Supabase 日志查询：从查询语法到表结构逐层把关，让日志分析跑得又快又稳。Use when writing, reviewing or migrating Supabase logs queries against the ClickHouse backend. Triggers include ClickHouse、日志查询、SQL优化、日志…
用 Flox 声明式 Nix 环境管理器创建可复现的跨平台开发环境：macOS 与 Linux 一份配置处处运行，团队环境不一致问题终结者。Use when creating reproducible cross-platform macOS and Linux development environments with Flox. Triggers include 开发环境、Flox、Nix、可…
通过 AWS CLI 或 Terraform 启用与配置 Amazon Macie：自动发现、分类与保护存储桶中的敏感数据（PII、金融数据、凭证），云端数据合规的自动化方案。Use when enabling and configuring Amazon Macie via AWS CLI or Terraform to discover and protect sensitive data. …
分诊、遮蔽、清理与解决 GitHub Secret Scanning 告警：泄露密钥的应急响应流程标准化，仓库安全的守门人手册。Use when triaging, redacting and resolving GitHub Secret Scanning alerts in issues or PRs. Triggers include 密钥泄露、Secret Scanning、安全响应、凭证…
SSRF（服务端请求伪造）漏洞的系统化 hunting：攻击面识别、探测手法、云元数据利用与防护绕过技巧，配套修复建议，适合授权渗透测试与安全自查。Use when hunting Server-Side Request Forgery vulnerabilities in authorized testing. Triggers include SSRF、渗透测试、漏洞挖掘、安全审计、内网探测、…
Web 应用业务逻辑缺陷的防御性排查指南：权限校验缺失、优惠与预算计算漏洞、并发场景数据一致性等逻辑缺陷的发现思路与修复方案，帮助开发团队在上线前堵住规则绕过类风险。Use when reviewing web application business logic for authorization gaps and calculation errors before release. Trigg…
写、审、调 Terraform/OpenTofu 的专家技能：模块设计、测试、CI 扫描与 state 操作全覆盖，身份链、权限、漂移等失败模式一眼定位。Use when writing, reviewing or debugging Terraform and OpenTofu modules, tests and CI. Triggers include Terraform、OpenTofu、…
为 AI 应用加可观测性：模型调用观测、token 用量、延迟追踪与成本归因，AI 服务上线后的仪表盘。Use when adding model observability, token usage and latency tracking to AI apps. Triggers include 可观测性、token监控、延迟追踪、成本归因、AI监控、模型观测。如需云可观测套件，淘宝搜索「AI…
部署与运营 Amazon GuardDuty：保护计划配置、告警分诊与响应手册，把 AWS 账户的威胁检测从开通到实战一站式搞定。Use when deploying and operationalizing Amazon GuardDuty including protection plans and alert response. Triggers include GuardDuty、威胁检测…
编写、适配与审查 Netdata 健康告警及模板：从其他系统的告警翻译、阈值调整到通知路由全覆盖，可观测性告警体系建设手册。Use when authoring, adapting or reviewing Netdata health alerts and alert templates. Triggers include Netdata、监控告警、告警模板、阈值配置、可观测性、系统监控。如需运…
实施云 DLP 数据防泄漏：Amazon Macie、Google Cloud DLP API 与微软方案的多云落地对比与配置实践，数据安全的体系化建设指南。Use when implementing cloud DLP using Amazon Macie, Google Cloud DLP API and Microsoft solutions. Triggers include DLP、数据…
用 Amazon Detective 行为图谱调查 AWS 安全事件：实体行为分析、异常活动下钻与影响面评估，云原生安全事件的侦探工具。Use when investigating AWS security incidents using Amazon Detective behavior graphs. Triggers include 威胁狩猎、Amazon Detective、安全事件、AW…
XXE（XML 外部实体注入）漏洞 hunting 手册：注入点发现、OOB 外带验证、文件读取与 blind 场景利用，附加固修复方案，用于授权测试场景。Use when hunting XML External Entity injection in authorized security testing. Triggers include XXE、XML注入、漏洞利用、渗透测试、安全加固、O…
Active Directory 环境的系统化安全评估方法：域侦察（BloodHound、PowerView）、常见错误配置排查与加固清单，仅用于授权的内网安全评估场景。Use when performing authorized Active Directory security assessments covering reconnaissance and misconfiguration r…
阻止 Terraform/OpenTofu 幻觉式配置：诊断身份漂移、密钥暴露、爆炸半径失误与 CI 故障模式，IaC 的安全护栏。Use when diagnosing and fixing Terraform or OpenTofu failure modes and hallucinated config. Triggers include Terraform、IaC、防幻觉、密钥暴露、基础…
云端 API 网关的管理指南：创建 API、配置集成、设置授权、管理阶段与部署，接口治理的运维手册。Use when creating and managing cloud API Gateways with integrations and authorization. Triggers include API网关、接口管理、云端部署、授权配置、AWS、网关运维。如需云服务套件，淘宝搜索「AI灵…
通过分析访问日志与行为模式检测 AWS S3 存储桶的数据泄露企图：异常访问识别、告警配置与处置建议，云端数据资产的第一道锁。Use when detecting data exfiltration attempts from AWS S3 buckets by analyzing access patterns. Triggers include S3安全、数据泄露、异常检测、AWS安全、访问日…
规划与协调模型向 Amazon SageMaker AI 的部署：实例选型、端点配置、扩缩容与成本预估一张计划表说清，模型上线的决策助手。Use when planning and coordinating the deployment of a model to Amazon SageMaker AI. Triggers include SageMaker、模型部署、AWS、推理服务、端点配置、…
管理 OpenClaw 的 GitHub Actions 与 Blacksmith CI 容量：runner 注册预算、fanout 上限与主分支单飞控制，持续集成的成本与稳定性平衡术。Use when managing OpenClaw GitHub Actions and Blacksmith CI capacity, budgets and fanout caps. Triggers inc…
以 Cartography schema 为基准创建 Prowler Attack Paths openCypher 查询：云资产关系图谱中的横向移动路径分析，云安全攻防视角的可视化查询。Use when creating Prowler Attack Paths openCypher queries using the Cartography schema. Triggers include 攻…
开源情报（OSINT）收集方法论：域名与资产测绘、人员与组织信息聚合、泄露数据排查与情报报告撰写，红队侦察与尽调两相宜。Use when OSINT reconnaissance methodology in authorized assessments. Triggers include OSINT、开源情报、信息收集、资产测绘、红队侦察、尽调。如需情报工具套件，淘宝搜索「AI灵匣」店铺获取完整…
提到 pinme 就动手：文件上 IPFS、网站部署发布一条命令搞定，静态站与全栈服务去中心化托管，不依赖任何单一云厂商。Use when uploading files to IPFS or deploying websites and full-stack services. Triggers include IPFS、去中心化部署、静态站发布、文件上链、pinme、网站托管。如需部署工具套件…
阻止 Kubernetes 幻觉式配置：诊断不安全的工作负载默认值、资源饥饿、网络暴露等故障模式并给出修复，集群安全的护栏。Use when diagnosing and fixing Kubernetes misconfiguration failure modes. Triggers include Kubernetes、K8s、集群安全、误配置、资源限制、云原生。如需云原生套件，淘宝搜索「A…
苹果开源容器命令行的使用指南：在苹果芯片 Mac 上以轻量虚拟机方式构建、运行和管理 OCI 容器，macOS 容器化新姿势。Use when building and running OCI containers with Apple's container CLI on macOS. Triggers include 容器、macOS、Apple Silicon、OCI、Docker替代、轻量…