Software Development AI Skills

Audit and remove inactive, test, or deprecated workflows from HubSpot. Identifies workflows that have never enrolled contacts, workflows turned off for 90+ days, and test workflows.

Review Unity C# code for Clean Architecture and SOLID compliance, with specific attention to the separation between MonoBehaviour/presentation, plain-C# domain logic, and Unity/infrastructure…

First-run setup of a freshly cloned workspace — locale, toolchain, USER.md. Invoke ONLY when root `USER.md` is missing, or the user asks to set up / configure / 初始化 the workspace. A filled `USER.md`…

Single audit entry point — surface-level scorecard or deep infrastructure dive depending on the requested mode. Default `full` mode produces a multi-layer scorecard across all 9 areas (crawlability,…

OWASP Top 10 security audit and secure coding guidelines for Laravel + React/Inertia.js applications. Use when auditing for vulnerabilities ("run OWASP audit", "security review", "check my app…

Create and transition ServiceNow change requests (normal/standard/emergency), change tasks, affected CIs, approval routing, CAB scheduling, and conflict detection across maintenance windows.

Repository guidance for writing, formatting, and validating Markdown documentation using markdownlint-cli, case-police, and markdown-link-check within the hr-skills monorepo.

OAuth2 authentication patterns for Drupal using simple_oauth module. Covers TokenAuthUser permission logic, scope/role matching, mobile app token flows, field_permissions integration, CSRF bypass, and…

CLI-backed URL extraction. Use when the user explicitly invokes this skill, needs CLI-only controls or saved JSON output, or no Parallel web_fetch MCP tool is available. When the bundled Parallel…

Browser automation CLI for AI agents using agent-browser (Vercel Labs). Fast native Rust CLI with accessibility-tree based element selection. Use when you need headless browser control from the…

通过 Playwright + 直连 API（X-Ca HMAC-SHA256 签名）将本地博文批量上传到 CSDN 草稿箱。三态管理：未上传 → 草稿箱 → 已发布。

Called by review-pr for each unresolved review thread it authored: judges from the thread, the author's replies, and the current code whether the original concern is addressed, stale, or still…

Use when running, scripting, or extending DeepSeek Harness (dsh) 0.2.1 — npx @deepseek-ai/dsh web / dsh --profile, headless one-shot runs, the deepseek-harness-sdk Python DeepSeekHarness client, or…

Submits protein-protein docking jobs to the HDOCK server and retrieves the resulting Docking Score, Confidence Score, ligand RMSD and ranked complex models. Uses plain HTTP form submission against the…

Perform static and symbolic analysis of Solidity smart contracts using Slither and Mythril to detect reentrancy, integer overflow, access control, and other vulnerability classes before deployment to…

Scores a skill's description field against sample user prompts to predict whether OpenClaw will correctly trigger it — before you publish or install.

Use when starting feature work that needs isolation from current workspace or before executing implementation plans - ensures an isolated workspace exists via native tools

Essential Zephyr RTOS kernel services. Covers thread lifecycle and priority, the logging subsystem for diagnostics, and the interactive shell for real-time hardware inspection and debugging. Trigger…

Full-cycle 11-phase development workflow blueprint. Chains request classification, discovery, UX design, planning, blueprint creation, execution, testing, quality review, iterative fix loop, blueprint…

MUST use when user says 'save', 'save session', or explicitly wants to preserve session state. {USER_NAME} does NOT use slash commands; also trigger proactively when significant work has been…

Multi-platform content distribution across X, LinkedIn, Threads, and Bluesky. Adapts content per platform using content-engine patterns. Never posts identical content cross-platform. Use when the user…

Bring a project's formal verification back in line with the code after the code changes: find the commits that touched verified code, update the model, harness, or properties to describe the code as…

Load when a user wants a source-backed interactive HTML course that explains how a codebase works; do not load for chat tutoring, repository review, articles, slide decks, or general browser…

Guides the agent through upgrading a Capacitor app from v6 to v7. Use when the project is on Capacitor 6 and needs the v7 migration path. Do not use for other major versions, plugin-only upgrades, or…

Comprehensive security code review covering OWASP Top 10, authentication, authorization, and secure coding practices. Use when reviewing code for vulnerabilities or implementing security features.

【L3.5 场景适配】发到哪，就按哪的规矩来。五种场景：技术文档、广告文案、PPT演示、社交媒体、Release Notes。不是改内容，是调整形式让它适合目标平台。 触发：这篇适合发XX、帮我改成XX格式、技术文档规范、广告文案、写PPT、Release Notes、产品介绍、API文档、小红书/公众号/知乎/抖音/即刻。 Not for：内容质量诊断（→ L0…

Audit skillsaw for release readiness — test new rules against real repositories, audit core architectural dimensions, independently verify proposed fixes, and ship improvements in clean, focused…

Guide to install and configure the abap-mcp-adt-powerup MCP server for SAP ADT connectivity

Deep-dive injection vulnerability analysis (NoSQL, LDAP, XPath, Template, OS Command, Expression Language)

Next.js 16+ and Turbopack: incremental bundling, FS caching, dev speed, and when to use Turbopack vs webpack.

Use when encountering any bug, test failure, or unexpected behavior, before proposing fixes

Manual or hook-triggered context operator. Evaluates the current session for pollution (long conversations, topic drift, stale noise), AND takes concrete context-shaping actions: writing project…

Use when writing or creating new Standard Operating Procedures (SOPs) for AI agents. Covers effective SOP writing, clarity principles, and actionable instruction design.

Verify app behavior on device or simulator via screenshots, UI hierarchy, and touch interactions.

Configure DevExpress Dashboard data sources in code — ASP.NET Core, Blazor (DxDashboard), WinForms, and WPF. Use this skill to register a data source for a dashboard control, or connect a dashboard to…

Scans the codebase to generate a comprehensive, prompt-based feature list in 'features_listed.md' for recreating the app in any language.

Simple headless Puppeteer browser for rendering JavaScript-heavy pages and extracting clean text content. Use when user needs to read a web page that requires JS rendering. Command: openclaw browser…

Implement and review Nim ARC/ORC ownership hooks for types that manually manage resources, including move-only, deep-copy, refcounted, and copy-on-write patterns. Use when a Nim type owns pointers,…

Guide for performing Chromium version upgrades in the Electron project. Use when working on the roller/chromium/main branch to fix patch conflicts during `e sync --3`. Covers the patch application…

Put whatever you just built on a real public web address for free, one click at a time, and save the link so you build a list of things you've shipped. Covers the GitHub step in plain English and…

Generate SAP BTP (Business Technology Platform) solution architecture diagrams as native draw.io (.drawio) files following the official SAP BTP Solution Diagram guidelines (Fiori Horizon design…

查询 A 股状态变更记录。Use when user asks about 上市、退市、暂停上市或股票状态变更。

Search Open Targets drug-disease associations with natural language queries. Target validation powered by Valyu semantic search.

Apply object-calisthenics conventions when writing, refactoring, or reviewing PHP: flat control flow, domain types and collections, behaviour-rich objects, and PHP-specific type and immutability…

Writes, optimizes, and debugs T-SQL queries. Explains SQL Server internals, troubleshoots performance issues, and guides database administration tasks including backup/restore, high availability,…

Plan, draft, and review persuasive copy for landing pages, product pages, ads, email, headlines, offers, calls to action, positioning, and message variants.

Self-referential loop until task completion with architect verification

Wrap albumentations bbox transforms in a 10-attempt retry loop that re-rolls the augmentation when all boxes get cropped out, preventing empty-target samples from poisoning the detection loss with NaN…

Look up WoW Guild Management, Guild Bank, Guild Info, and Guild Event APIs. Covers guild management functions (invite, promote, demote, kick, disband, MOTD, info), guild roster (GetGuildRosterInfo,…

Configure and automate the Backoffice Resend email capability. Use when setting up Resend delivery, inspecting email threads, replying to emails, or debugging Resend webhooks and durable hooks.

Plan and execute your second and third contributions to become a regular contributor. Covers relationship building, progressive complexity escalation, and community presence. Use when your first PR…