Fix Stuck Gza Task Inline
Use this skill when an implementation task is stuck in review/improve churn â the same blockers keep reappearing, or a previous improve/fix pass failed to close them. `fix` is escalation: it **diagnoses why the loop is happening** before making any edits, then applies a bounded repair scoped stric
flutter-architecture-expert
Architecture guidance for Flutter apps using the flutter_it construction set (get_it, watch_it, command_it, listen_it). Covers Pragmatic Flutter Architecture (PFA) with Services/Managers/Views, feature-based project structure, manager pattern, proxy pattern with optimistic updates and override fields, DataRepository with reference counting, scoped services, widget granularity, testing, and best practices. Use when designing app architecture, structuring Flutter projects, implementing managers or proxies, or planning feature organization.
Io.Github.Writbase/Writbase
MCP-native task management for AI agent fleets with scoped permissions and provenance.
AtomicMemory
You have access to persistent memory through three MCP tools: `memory_search`, `memory_ingest`, `memory_package`. Memory survives across sessions and is scoped via `user` / `agent` / `namespace` / `thread`.
cuda-graphs
Validate and use CUDA graph capture in Megatron Bridge, including local full-iteration graphs and Transformer Engine scoped graphs for attention, MLP, and MoE modules.
cycle-plan
Plan Linear cycles using velocity analytics. Suggests scope based on historical capacity, identifies dependency risks, balances workload.
ad-hoc-profile-load
Load an agent profile on demand to adopt a specific role for the current session. Applies the profile's identity, governance scope, boundaries, and initialization declaration without requiring a running mission. Triggers: "act as the architect", "load the reviewer profile", "switch to implementer", "use the researcher persona", "start a session as planner", "adopt the curator role", "initialize profile", "assume the designer identity". Does NOT handle: mission advancement (use runtime-next), constitution interview/generation (use constitution-doctrine), or profile creation (use spec-kitty agent profile create).
Client Relations
Maintain professional relationships with external clients: - Provide timely status updates on task progress - Handle client inquiries and scope change requests - Resolve delivery disputes professionally - Build long-term partnerships for repeat business
agent-estimation
Accurately estimate AI agent work effort using the agent's own operational units (tool-call rounds) instead of human time. Use when asked to estimate, scope, plan, or evaluate how long a coding task will take. Prevents the common failure mode where agents anchor to human developer timelines and massively overestimate. Outputs a structured breakdown with round counts, risk factors, and a final wallclock conversion.
secret-management
Portable credential management for AI agents using age encryption, session-scoped leases, auto-rotation, and killswitch. Use this skill when agents need secure, time-bounded access to API keys, tokens, or credentials without direct exposure to plaintext secrets.
Grant Feishu scopes to a TaroCub bot (console import via browser)
Productizes the manual flow: log into the Feishu developer console, bulk-import a scope group for a bot's app, ç³è¯·å¼é, verify it's live, restart the instance.
azure-naming-research
Research Azure naming constraints and CAF abbreviations for a given resource type. Use when you need to look up the official CAF slug, naming rules (length, scope, valid characters), and derive validation/cleaning regex patterns for an Azure resource. Triggers on: CAF abbreviation lookup, Azure naming rules research, resource naming constraints.
agentic-rules-writer
Interactive tool to generate tailored rules and instruction files for any AI coding agent. Use when the user asks to set up agent rules, configure Claude Code instructions, create Cursor rules, write Windsurf rules, generate Copilot instructions, or establish consistent AI coding standards for a team. Supports 13+ agents (Claude Code, Cursor, Windsurf, Copilot, Gemini, Codex, Cline, OpenCode, Continue, Trae, Roo Code, Amp) with global, team-shared, and dev-specific scopes. Defers to the `using-virtuoso` meta-skill for ecosystem discovery (skills, agents, recommendations) and runs an interactive questionnaire for workflow preferences.
Io.Github.Areso/Safe Ssh Mcp
A secured scoped SSH MCP server for executing safe read-only diagnostic DevOps / SysOps commands
github-awesome-copilot-git-commit
Generate Conventional Commit messages and assist interactive commits following this repository's commit rules. Produces suggested type, scope, and short summary.
Verified Repo Memory
Stale-proof repository memory with citations + just-in-time verification + TTL (repo-scoped).
analyze-python-api
Analyze the Python weather API, tests, endpoint behavior, and migration scope. Use for extracting routes, payloads, and validation points before C# implementation.
ai-coding-workflow
Use when the user wants to work with Codex, Claude Code, or other AI coding agents more efficiently, especially to avoid long-session slowdown, split large tasks into bounded steps, define scope and non-goals, separate diagnosis from implementation, compress context between sessions, or turn a vague coding request into a tighter execution prompt. Also use when the user asks for an AI coding prompt/template, asks why AI coding gets slower later in a task, or wants a repeatable collaboration workflow for medium-to-large codebases.
crafting-rules
Use when creating or modifying OpenCode rules (.md/.mdc files) that customize agent behavior. Trigger when user wants to create a rule, codify repeated instructions, persist guidance across sessions, or scope rules to specific files, prompts, environments, or workflows.
auditing
Use when reviewing a bundle-plugin for structural issues, version drift, skill quality, workflow integration, or security risks â before releasing, after changes, or after adding skills. Auto-detects scope (full project vs skill vs workflow)
wiki-manager
LLM-compiled knowledge base manager for Codex. Use it to initialize, ingest, compile, query, lint, research, and generate outputs from topic-scoped wikis. Activates when the user mentions wiki workflows, knowledge-base management, ingestion, compilation, querying, linting, research, or uses /wiki-style shorthand in a repo with .wiki/, ~/wiki/, or a configured hub path.
Researcher â Autonomous Experimentation Skill
<critical> Non-negotiable rules â every real experiment, no exceptions: 1. Commit before running. Log before resetting. Reset on discard. Each branch holds only keeps. 2. Protect `.lab/` â it is the single source of truth. 3. Work autonomously â only consult the user for scope violations or tr
ham
Set up and maintain Hierarchical Agent Memory (HAM) for Codex using scoped local memory files. Trigger on "go ham", "set up HAM", "ham commands", "ham help", "ham route", "ham remove", "ham update", "ham status", "ham benchmark", "ham baseline start", "ham baseline stop", "ham metrics clear", "HAM savings", "HAM stats", "HAM dashboard", "HAM sandwich", "HAM insights", "HAM carbon", or "HAM audit".
Credential Exfiltration Detection
Determine whether stolen credentials were actually used by attackers after a security incident. This skill walks through a four-phase investigation: scoping what was at risk, checking audit trails, identifying lateral movement, and verifying that rotation was complete.
android-concurrency
Standards for Coroutines, Flow, and Threading. Use when writing suspend functions, choosing coroutine scopes, switching between StateFlow and SharedFlow, injecting Dispatchers for testability, or debugging threading issues in Android. (triggers: **/*ViewModel.kt, **/*UseCase.kt, **/*Repository.kt, suspend, viewModelScope, lifecycleScope, Flow, coroutine, Dispatcher, DispatcherProvider, GlobalScope)
Add Collaborative Setup Skill â Atomic Spec
> **Parent Brief:** `docs/briefs/2026-05-09-collaborative-mode-draft.md` > **Status:** Complete > **Date:** 2026-05-09 > **Estimated scope:** 1 session / 4 files / ~250 lines incl. tests > **Depends on:** `add-migration-module.md`, `update-doc-producing-skills.md`
api-client-development
Creating typed API clients with OpenAPI specs, authentication, and OAuth scopes for SCAPI and similar APIs. Use when adding a new SCAPI client, generating types from an OpenAPI spec, setting up OAuth middleware, or integrating a new Commerce API endpoint.
changeset-pr
Create or update a `.changeset/*.md` file for the current branch or PR in this repository, choose the correct package scope and release type, and verify the result against repo-specific Changesets config. Use when a publishable package changed, when a PR is missing a changeset, when an existing changeset needs correction, or when Codex needs to confirm whether a branch should have a changeset at all.
Design Team Skill
This skill provides **structured design knowledge organized by specialty**. Instead of generic design guidance, it loads the right reference material for each task â the scope adapts based on what you're building.
ccpm
CCPM - spec-driven project management: PRD â Epic â GitHub Issues â parallel agents â shipped code. Use this skill for anything in the software delivery lifecycle: writing a PRD ('write a PRD for X', 'let's plan X', 'scope this out'), parsing a PRD into an epic, decomposing an epic into tasks, syncing to GitHub ('sync the X epic', 'push tasks to github'), starting work on an issue ('start working on issue N', 'let's work on issue N'), analyzing parallel work streams, running standups ('standup', 'run the standup'), checking status ('what's next', 'what's blocked', 'what are we working on'), closing issues, or merging an epic. Use ccpm any time the user is talking about shipping a feature, managing work, or tracking progress â even if they don't say 'ccpm' or 'PRD'. Do NOT use for: debugging code, writing tests, reviewing PRs, or raw GitHub issue/PR operations with no delivery context.
acpx
Use acpx as a headless ACP CLI for agent-to-agent communication, including prompt/exec/sessions workflows, session scoping, queueing, permissions, and output formats.
auto-frame
Bound and de-risk a request into SPEC.md. Use when the objective is clear but scope needs constraining.
SWE-AF Usage Guide
> Autonomous engineering team runtime â one API call spins up coordinated AI agents to scope, build, and ship software.
avoid-feature-creep
Prevent feature creep when building software, apps, and AI-powered products. Use this skill when planning features, reviewing scope, building MVPs, managing backlogs, or when a user says "just one more feature." Helps developers and AI agents stay focused, ship faster, and avoid bloated products.
Cartograph
Repo analysis for coding agents with ranked files, dependency maps, and task-scoped context.
37signals-way
Build lean, opinionated products using the 37signals philosophy from Getting Real, Rework, and Shape Up. Use when the user mentions "Getting Real", "Rework", "Shape Up", "37signals", "Basecamp method", "six-week cycles", "fixed time variable scope", "appetite vs estimates", "betting table", "breadboarding", "fat marker sketch", "build less", "underdo the competition", or "opinionated software". Also trigger when cutting scope to ship faster, running small teams, avoiding long-term roadmaps, or eliminating meetings. Covers shaping, betting, building, and the art of saying no. For MVP validation, see lean-startup. For design sprints, see design-sprint.
Artifact Resurfacing
Open the drift on the table. Surface the buried artifacts â stale citations, missing referenced files, orphan plans, cross-scope memory entries pointing at paths that moved. Polish them in proposal form. Codify the lesson so the next session does not have to re-discover the same drift.
rlmgrep-usage
Default repo search policy: whenever you need to search or read through files or directories, start with rlmgrep. Use rg/grep first only for strict literal/regex exhaustiveness or very large raw scans. Includes scoping and high-signal rlmgrep flag patterns.
offensive-business-logic
Business logic vulnerability testing for web/mobile/API engagements. Covers workflow bypass, state machine violations, multi-step process abuse, price/quantity/discount manipulation, currency confusion, coupon stacking, refund/chargeback abuse, race conditions on logic boundaries, parameter tampering for hidden flows, role/tenant boundary violations, time-of-check vs use, anti-automation defeat, fraud-detection evasion, and subscription/quota abuse. Use when scoping an application after surface-level OWASP Top 10 has been covered, or when the asset is a transactional/marketplace/fintech/e-commerce/SaaS app where logic flaws produce direct financial impact.
agentplane-local-dev-operator
Use when accelerating AgentPlane framework development, selecting targeted local checks, validating branch_pr task scope, using the Turborepo local graph, or triaging dependency bumps before merge or release.
makepad-router
CRITICAL: Use for ALL Makepad/Robius questions including widgets, layout, events, and shaders. Triggers on: makepad, robius, live_design, app_main, Widget, View, Button, Label, Image, TextInput, ScrollView, RoundedView, SolidView, PortalList, Markdown, Html, TextFlow, layout, Flow, Walk, padding, margin, width, height, Fit, Fill, align, spacing, event, action, Hit, FingerDown, FingerUp, KeyDown, handle_event, click, tap, animator, animation, state, transition, hover, pressed, ease, shader, draw_bg, draw_text, Sdf2d, pixel, gradient, glow, shadow, font, text_style, font_size, glyph, typography, tokio, async, spawn, submit_async, SignalToUI, post_action, apply_over, TextOrImage, modal, collapsible, drag drop, AppState, persistence, theme, Scope, deploy, package, APK, IPA, WASM, cargo makepad, makepad widget, makepad ç»ä»¶, makepad æé®, makepad å¸å±, makepad äºä»¶, makepad å¨ç», makepad çè²å¨, å建ç»ä»¶, èªå®ä¹ç»ä»¶, å¼ååºç¨, å± ä¸, 对é½, ç¹å»äºä»¶, æ¬åææ, æ¸å, é´å½±, åä½å¤§å°
spawn-agent
Spawn worker agents (Gemini CLI or Codex CLI) to keep main context clean. Use for implementation, codebase research, context gathering, or any scoped work that would pollute the orchestrator's context.
behavioral-state-analysis
Token-efficient smart contract security auditing via Behavioral State Analysis (BSA). Scopes analysis to contract type, runs only relevant threat engines, and uses tiered output depth. Use for auditing smart contracts, security reviews, or DeFi threat modeling.
mom-project
Bind the current directory to a MOM project so captured memories are scoped to it. Use when the user wants to set up project scoping, bind a repo, declare a project id, rebind a directory, or asks about .mom-project.yaml.