
golang-pro
compozy/skeeper
Implements concurrent Go patterns using goroutines and channels, designs and builds microservices with gRPC or REST, optimizes Go application performance with pprof, and enforces idiomatic Go with generics, interfaces, and robust error handling. Use when building Go applications requiring concurrent programming, microservices architecture, or high-performance systems. Invoke for goroutines, channels, Go generics, gRPC integration, CLI tools, benchmarks, or table-driven testing.

language-ruby
lugassawan/swe-workbench
Ruby idioms — Ruby 3.x pattern matching, blocks, procs, lambdas, Enumerable, Comparable, frozen string literals, error handling, and testing. Auto-load when working with .rb files, Gemfile, Rakefile, gemspecs, or when the user mentions Ruby, Bundler, RSpec, minitest, blocks, procs, lambdas, or pattern matching.
Writes, debugs, and reviews PHP: type juggling, arrays, OOP, Composer, PDO, sessions, PHP-FPM, OPcache, PHP 8 features. Use when PHP returns a blank white page or a 500 with no message, when "headers already sent", "Allowed memory size exhausted", "Maximum execution time exceeded", "Class not found" after a Composer install, or an undefined array key warning appears; when `==` compares wrong, `strpos` or `preg_match` returns a falsy match, accents turn into mojibake, `DateTime` shifts by a day or an hour, `json_encode` returns false, PDO refuses to bind a parameter or emulates prepares, sessions serialize parallel AJAX requests, nginx answers 502 or 504 in front of PHP-FPM, OPcache keeps serving old code, or a version upgrade breaks on deprecations. Also for escaping output, hashing passwords, sizing FPM workers, writing PHPUnit tests, and clearing PHPStan errors. Not for framework internals — `laravel` covers Eloquent, queues, and Laravel auth.

edge-patterns
marvinrichter/clarc
Edge Computing patterns: Cloudflare Workers (Durable Objects, KV, D1, R2, Wrangler), Vercel Edge Middleware (geo-routing, A/B testing, Edge Config), Deno Deploy, edge runtime constraints (no fs/child_process, bundle limits), streaming responses, edge caching (Cache API, stale-while-revalidate), and testing with Miniflare.

django-new-api
criscandv/cdv-skills
Scaffold a brand-new Django + DRF REST API project from scratch, with the full house baseline already wired — settings split, custom user, UUID/soft-delete abstract models, request-context middleware, domain exceptions + global handler, custom pagination, the standard response renderer, dual JWT + API-key auth, drf-spectacular docs, ruff + pre-commit + pytest. Use this skill when the user asks to start, bootstrap, create or initialise a new Django/DRF backend or API project. Trigger on phrases like "new Django project", "start a Django API", "bootstrap a backend", "monta un proyecto Django desde cero". This is a slash-invoked action; for editing an existing project's conventions use django-normalize, and for adding a feature to an existing project use django-feature.

spring-testing-router
spring-ai-community/spring-testing-skills
Use this skill proactively before writing any Spring test code — even without an explicit request. Triggers: about to create test files for a Spring Boot project, writing a JUnit test suite, implementing test coverage for a Spring application, or whenever the user mentions writing Spring tests. Do not wait for the user to name a specific slice annotation. Routes to: spring-jpa-testing (JPA repositories, org.springframework.boot.data.jpa.test.autoconfigure.DataJpaTest, org.springframework.data.jpa.repository.JpaRepository), spring-mvc-testing (org.springframework.boot.webmvc.test.autoconfigure.WebMvcTest, org.springframework.test.web.servlet.MockMvc, REST controllers), spring-security-testing (org.springframework.security.test.context.support.WithMockUser, CSRF, JWT, OAuth2), spring-webflux-testing (org.springframework.boot.webflux.test.autoconfigure.WebFluxTest, org.springframework.test.web.reactive.server.WebTestClient, reactor.test.StepVerifier), spring-websocket-testing (STOMP, SockJS, WebSocket messaging), spring-testing-fundamentals (org.assertj.core.api.Assertions, org.mockito.BDDMockito, testing pyramid, context caching).

ansible-validator
gitjfmd/ansible-skills
Comprehensive toolkit for validating, linting, testing, and automating Ansible playbooks, roles, and collections. Use this skill when working with Ansible files (.yml, .yaml playbooks, roles, inventories), validating automation code, debugging playbook execution, performing dry-run testing with check mode, or working with custom modules and collections.

netlify-functions
practicalswan/agent-skills
Write, configure, and deploy Netlify serverless functions in TypeScript, JavaScript, or Go. Use this when adding an API endpoint or backend route, adding a contact form handler, wiring auth or Identity signup/login hooks, building streaming or AI-proxy responses, scheduling cron jobs, running long background jobs (batch processing/scraping), reacting to deploy or form events, setting up rate limiting or region/memory config, or reading environment variables and secrets inside a function. Covers file locations, the Request/Context/Response handler shape, path routing, config options, and local testing with netlify dev.

netlify-edge-functions
practicalswan/agent-skills
Write, configure, and deploy Netlify Edge Functions (Deno runtime at the network edge) in TypeScript/JavaScript. Use when adding request/response manipulation at the edge — auth middleware, geolocation redirects, A/B testing and personalization, content localization, redirects/rewrites, SSR at the edge, or transforming responses — or when configuring path routing, response caching, or edge error handling. Triggers on tasks like \"add auth middleware\", \"geo-based redirect\", \"A/B testing at the edge\", \"rewrite requests\", or editing files in netlify/edge-functions.

bilibili-video-evidence
rookiecuzz/codex-bilibili-skills
Collect evidence artifacts from a Bilibili video URL. Fetch native subtitles, save `sectioned.md`, write normalized `subtitles.json`, capture `frames/*.png`, optionally validate a repo-local screenshot endpoint with `smoke-report.json`, and fall back to a local `ffmpeg` + ASR workflow when a page exposes no usable subtitle track. Use when Codex needs a Bilibili evidence bundle from `videoUrl`, direct frame capture by timestamp, subtitle download, transcript sectioning, local subtitle generation as `.srt`, Chinese subtitle translation that preserves technical keywords, screenshot endpoint smoke testing, or login-gated subtitle handling.

redis-pentesting
abelrguezr/hacktricks-skills
Pentest Redis instances (port 6379) for enumeration, authentication bypass, data exfiltration, and RCE. Use this skill whenever the user mentions Redis, port 6379, key-value stores, in-memory databases, or needs to test Redis security. This includes checking for authentication, dumping databases, exploiting misconfigurations, and testing for known CVEs like CVE-2025-49844, CVE-2025-46817, CVE-2025-46818.

spring-kafka-event-integration
amritmalla/claude-full-stack-2.0
Use when adding, reviewing, or hardening Kafka producers, consumers, or event-driven flows in a Spring Boot service after backend architecture has defined the event contracts. Produces Spring Kafka producer and consumer configuration, serialization and schema-registry posture, idempotency and exactly-once delivery decisions, retry and dead-letter topology, transactional outbox wiring, consumer group and rebalance behavior, error and poison-pill handling, observability for event flows, and integration test scaffolding with embedded or Testcontainers Kafka. Do not use for event contract design, broker provisioning, non-Kafka brokers (RabbitMQ, Pulsar, SQS), or general async/scheduled work; use backend-architecture, infrastructure-platform, or spring-boot-service-scaffold instead.

develop-and-test
onedro1d/dark-factory
Autonomous development and integration testing from a requirements doc. Implements everything — database changes, contracts, handlers, configuration — then tests against real infrastructure (dev DB, dev RabbitMQ). Verifies by emitting events, checking DB state, reading logs, and checking error tables. Triggers on "develop this", "implement this", "build from requirements", "start development", "execute the plan", "build and test".

oauth-pentest
abelrguezr/hacktricks-skills
Security testing for OAuth 2.0 and OIDC implementations. Use this skill whenever the user mentions OAuth, authentication flows, account takeover, identity providers, SSO, login flows, authorization codes, access tokens, or any security testing related to third-party authentication. This skill helps identify vulnerabilities like open redirect_uri, CSRF state issues, token leakage, client secret exposure, and other OAuth misconfigurations that lead to account compromise.

github-actions-dataops
ivanshamaev/de-agent-skills
Use when building or reviewing GitHub Actions CI/CD pipelines for data engineering — covering dbt slim CI (state:modified+, --defer, manifest.json), SQLFluff SQL linting with PR annotations, Airflow DAG integrity tests (pytest/DagBag), Great Expectations and Soda data quality gates, multi-stage Docker image builds for Spark/dbt/Airflow pushed to ghcr.io, secrets management with OIDC for AWS/GCP (no static keys), environment-scoped secrets, reusable workflows (workflow_call), matrix builds, composite actions, and full end-to-end dbt project CI/CD workflows.

android-kotlin-expert
trancee/meshlink
Expert help for Android app development in Kotlin, including app architecture, ViewModel/state, coroutines and Flow, Jetpack Compose, Gradle/AGP/Kotlin compatibility, testing, and Java-to-Kotlin migration. Use this skill whenever the user asks to write, debug, review, refactor, explain, or set up Android Kotlin code or Android build tooling, even if they mention only Compose, ViewModel, Flow, lifecycle, `build.gradle.kts`, Android Studio, AGP, coroutines, Room, or tests rather than explicitly saying 'Kotlin' or 'Android architecture'.

agent-browser
rivet-dev/sandbox-agent
Browser automation CLI for AI agents. Use when the user needs to interact with websites, including navigating pages, filling forms, clicking buttons, taking screenshots, extracting data, testing web apps, or automating any browser task. Triggers include requests to "open a website", "fill out a form", "click a button", "take a screenshot", "scrape data from a page", "test this web app", "login to a site", "automate browser actions", or any task requiring programmatic web interaction.

kafka-strimzi-operator
lurodrisilva/personal-skills
MUST USE when authoring, reviewing, deploying, sizing, tuning, or **performance-testing** anything involving **Apache Kafka on Kubernetes via the Strimzi operator** — including Strimzi Cluster Operator, Topic Operator, User Operator, Drain Cleaner, the `Kafka` / `KafkaNodePool` / `KafkaTopic` / `KafkaUser` / `KafkaConnect` / `KafkaConnector` / `KafkaMirrorMaker2` / `KafkaBridge` / `KafkaRebalance` / `StrimziPodSet` custom resources; KRaft-only deployments (controllers + brokers as separate node pools, ZooKeeper is removed in Kafka 4.0+); listener types (`internal`, `cluster-ip`, `nodeport`, `loadbalancer`, `ingress`, `route`); broker storage choices (`ephemeral`, `persistent-claim`, `jbod`) and `storageClass` selection (Premium SSD v2, gp3, hyperdisk); JVM tuning (`spec.jvmOptions.-Xms/-Xmx`, GC); resource requests/limits and how they MUST line up with `cruiseControl.brokerCapacity.cpu` / `inboundNetwork` / `outboundNetwork`; the **exact `BrokerCapacity` schema** (`cpu` matching `^[0-9]+([.][0-9]{0,3}|[m]?)$`, `inboundNetwork`/`outboundNetwork` matching `^[0-9]+([KMG]i?)?B/s$`, plus per-broker `overrides` carrying `brokers` as `List<Integer>`); Cruise Control optimisation goals, anomaly detectors, and `KafkaRebalance` modes (`full`, `add-brokers`, `remove-brokers`, `rebalance-disks`); FeatureGates including `KafkaNodePools` (default true 0.46+) and unidirectional Topic Operator; rack awareness via `spec.rack.topologyKey`; pod placement (`affinity`, `tolerations`, `topologySpreadConstraints`); the canonical `entityOperator` block carrying `topicOperator` and `userOperator`; PodDisruptionBudgets and `Drain Cleaner` for safe rolling updates; metrics via `kafka-metrics` ConfigMap, JMX exporter on port 9404, the Strimzi Metrics Reporter, and `KafkaUser` quotas (`producerByteRate`, `consumerByteRate`, `requestPercentage`, `controllerMutationRate`); install via `install/cluster-operator/*.yaml`, the `oci://quay.io/strimzi-helm/strimzi-kafka-operator` Helm chart, OperatorHub/OLM, or the Strimzi Kafka CLI; namespace scoping via `STRIMZI_NAMESPACE` (single, comma-list, or empty for all-namespaces); and **load testing** Kafka deployed by Strimzi from .NET / JVM / Go / Node clients including `Hex.Scaffold` Kafka inbound (`Adapters.Inbound` consumer `BackgroundService`) and outbound (`Adapters.Outbound` producer via `Confluent.Kafka`). Triggers on phrases — "deploy strimzi", "install strimzi", "kafka on kubernetes", "kraft mode", "kafka node pool", "broker capacity", "cruise control", "kafka rebalance", "kafka quotas", "strimzi listeners", "kafka load test", "kafka perf test", "kafka throughput", "kafka p99 latency", "size kafka brokers", "tune broker network", "kafka inbound outbound", "hex-scaffold kafka", "Confluent.Kafka producer", "background service consumer". Triggers on file patterns — `**/Kafka.yaml`, `**/KafkaNodePool.yaml`, `**/KafkaTopic.yaml`, `**/KafkaUser.yaml`, `**/KafkaConnect*.yaml`, `**/KafkaMirrorMaker2.yaml`, `**/KafkaBridge.yaml`, `**/KafkaRebalance.yaml`, `**/cruise-control*.yaml`, `**/strimzi-cluster-operator*.yaml`, `helm-charts/strimzi-*/`, `addon_charts/kafka/`, `tests/loadtest/**/kafka*`, `**/values-kafka-*.yaml`. Authored by a distinguished Kubernetes Platform Engineer — emphasises **explicit role separation, per-resource capacity contracts that match what Cruise Control sees, KRaft-only minds, in-cluster low-overhead listeners during perf tests, and the saturation-band sizing methodology applied to Kafka's four limiting resources (CPU, network-in, network-out, log disk)**. Used to rank perf-test bottlenecks against PostgreSQL Platinum+ baselines already established in `hex-scaffold` and to design Kafka tier ladders that scale predictably under k6.