Claude Skills by aibot88

StartupBase platform help — community-driven startup discovery directory with free dofollow backlinks (DR39). Covers submission process (social auth, tech startups only), review queue (2-3 months free, 24-hour premium), selection criteria (custom domain, public product, never previously featured), weekly Spark newsletter, market categories, and comparison with other directories. Use when your startup needs more visibility and early adopter traffic, you want the DR39 dofollow backlink from Sta...

Startup Stash platform help — one of the largest curated startup tool directories (10,000+ tools, 200+ categories, DR65). Helps with submitting a product listing, optimizing your listing for acceptance, understanding backlink value (nofollow), and advertising options. Use when your tool needs visibility in a high-authority directory (DR65), your Startup Stash listing isn't getting approved, or you're unsure if Startup Stash is worth it for SEO given nofollow links. Do NOT use for multi-direct...

SurveyMonkey platform help — survey creation, question types, skip logic, advanced branching, email/SMS/web collectors, response analytics, cross-tabulation, AI thematic analysis, SurveyMonkey Audience, REST API v3, OAuth, webhooks. Use when survey response rates are low, skip logic isn't working, can't export survey data, confused by pricing tiers, API calls hitting rate limits, need to set up email collectors, comparing SurveyMonkey vs Typeform vs Google Forms, or figuring out which plan yo...

Tableau platform help — Tableau Desktop, Tableau Cloud, Tableau Server, Tableau Prep, Tableau Pulse, Embedding API, REST API (v3.28, PAT/JWT auth, 300+ endpoints), MCP server, and Tableau+. Use when dashboards are slow with large datasets, LOD expressions or calculated fields aren't working, licensing costs are confusing or spiraling, Tableau won't connect to Salesforce or your data warehouse, embedded analytics aren't rendering, Tableau Prep flows keep failing, or you need help choosing Crea...

Tomba.io platform help — domain search, email finder, email verifier, enrichment, author finder, LinkedIn finder, phone finder, bulk operations, browser extensions, API, integrations. Use when you can't find a prospect's email address in Tomba, Tomba verification results look wrong, your enriched contacts are missing data, the Tomba API isn't returning expected results, a Tomba integration isn't syncing, or your Tomba lead lists are disorganized. Do NOT use for enrichment strategy across tool...

TranscribeMe platform help — human+AI hybrid transcription service with 99% accuracy guarantee on human-reviewed tiers, HIPAA compliance, and REST API. Use when uploading audio for human-edited transcription, choosing between Machine Express and human-reviewed tiers, integrating TranscribeMe API into a transcript pipeline, comparing TranscribeMe vs Rev vs GoTranscript vs Sonix for accuracy-critical transcription, troubleshooting slow turnaround or inconsistent punctuation, setting up HIPAA-co...

trendHERO platform help — Instagram influencer analytics (95M+ profiles, 20+ filters), Account Quality Score (AQS 1-100, fake follower detection), Audience Analysis, Daily Tracking, Ads Database (10M+ posts), Audience Overlap, REST API (Bearer auth, webhooks). Covers discovery search, AQS interpretation, audience vetting, tracking setup, ads database research, API integration, and pricing (Free/Lite/Pro/Advanced). Use when you suspect an influencer has fake followers, trendHERO search results...

Unboxd platform help — AI email secretary that reads every email and extracts action items with deadlines into daily briefings, supports Gmail/Outlook/IMAP ($7.50-41.67/mo). Use when action items keep getting lost in email threads, spending too much time reading and triaging emails, daily briefing is missing important messages, credits are running out before the month ends, emails getting categorized into the wrong bucket, comparing Unboxd to Fyxer or Superhuman or SaneBox or Shortwave for in...

Unroll.me platform help — free newsletter unsubscribe and daily digest tool that consolidates subscriptions into one Rollup email, supports Gmail/Outlook/Yahoo/AOL/iCloud, owned by NielsenIQ. Use when overwhelmed by newsletter and promotional email subscriptions, want to unsubscribe from dozens of mailing lists at once, Rollup digest not arriving or missing newsletters, comparing Unroll.me to Clean Email or SaneBox or Mailstrom for inbox cleanup, worried about Unroll.me privacy and whether it...

Verint Open Platform help — enterprise CX automation with Da Vinci AI bots (Quality Bot 100% QA, Coaching Bot real-time guidance, Wrap Up Bot auto-summaries, CX/EX Scoring, TimeFlex agent scheduling, Exact Transcription 80+ languages), WFM forecasting/scheduling/adherence, knowledge automation, IVA virtual assistants, speech/text analytics, financial compliance, Verint Marketplace 350+ listings. Use when Verint reports loading slowly or showing inconsistent data, Quality Bot not scoring inter...

VoiceToNotes platform help — AI voice-to-text transcription with real-time capture, AI summaries, grammar correction, OCR scanning, custom prompts, HIPAA compliance, web + iOS + Android. Use when setting up VoiceToNotes for a team, choosing between VoiceToNotes free vs Pro, voice notes not transcribing accurately, recordings disappearing or showing 'note without audio', configuring VoiceToNotes AI operations or custom prompts, comparing VoiceToNotes vs Otter vs Notta for personal voice notes,...

Xpoz platform help — social data API and MCP server for AI agents, searching Twitter/X, Instagram, TikTok, Reddit via natural language queries, 1.5B+ indexed posts, OAuth 2.1, TypeScript/Python SDKs, CSV exports. Use when Xpoz MCP server isn't connecting or authenticating, search results are returning irrelevant posts and you need better queries, CSV exports are timing out or returning incomplete data, you want to build a brand monitoring pipeline using the Xpoz SDK, you're hitting the 100K f...

ZeroBounce platform help — email validation, email finder, AI scoring, activity data, inbox placement testing, blacklist monitoring, DMARC, warmup. Use when your email list has too many bounces, catch-all addresses are hurting deliverability, you need to check if your IP is blacklisted, DMARC reports show unauthorized senders, or the ZeroBounce API isn't returning expected validation results. Do NOT use for general deliverability strategy (use /sales-deliverability), enrichment strategy (use ...

Use for org-level Salesforce architecture work — capacity planning, security/sharing review, integration patterns, multi-org strategy, tech-debt assessment.

Perform high-volume data synchronization with Salesforce using the Bulk API 2.0 for CSV-based upsert, delete, and query operations. Handles OAuth 2.0 JWT bearer flow authentication via jsforce.

Implement Salesforce data privacy, GDPR/CCPA compliance, and field-level encryption patterns. Use when handling PII in Salesforce records, implementing data subject access requests, or configuring Salesforce Shield encryption. Trigger with phrases like "salesforce data privacy", "salesforce PII", "salesforce GDPR", "salesforce data retention", "salesforce encryption", "salesforce CCPA".

Deploy Salesforce-connected applications to Heroku, Vercel, and Cloud Run with proper credential management. Use when deploying Salesforce-powered applications to production, configuring platform-specific secrets, or setting up Heroku Connect. Trigger with phrases like "deploy salesforce app", "salesforce Heroku", "salesforce production deploy", "salesforce Cloud Run", "Heroku Connect".

Salesforce ERD and architecture diagram generation: Mermaid/PlantUML data-model diagrams for Sales, Service, FSL, Commerce, Revenue Cloud; OAuth flow diagrams; integration architecture diagrams; object-relationship visualization. NOT for data model design decisions (use data-model-design-patterns). NOT for UI wireframing (use lightning-experience-design).

Install and configure Salesforce SDK/CLI authentication with jsforce or Salesforce CLI. Use when setting up a new Salesforce integration, configuring OAuth flows, or initializing Salesforce connectivity in your project. Trigger with phrases like "install salesforce", "setup salesforce", "salesforce auth", "configure salesforce", "jsforce setup", "sf cli login".

Implement Salesforce lint rules, SOQL injection prevention, and API usage guardrails. Use when enforcing Salesforce integration code quality, preventing SOQL injection, or configuring CI policy checks for Salesforce best practices. Trigger with phrases like "salesforce policy", "salesforce lint", "salesforce guardrails", "SOQL injection", "salesforce eslint", "salesforce code review".

Apply Salesforce security best practices for Connected Apps, OAuth, and field-level security. Use when securing API credentials, implementing least privilege access, or auditing Salesforce security configuration. Trigger with phrases like "salesforce security", "salesforce secrets", "secure salesforce", "salesforce connected app security", "salesforce FLS".

Salesforce Shield as an architectural choice — Platform Encryption + Event Monitoring + Field Audit Trail as three SEPARATELY-LICENSED components, none of which ship in any standard edition. Covers BYOK vs Cache-Only Key Service (CCKM) tradeoffs, probabilistic vs deterministic encryption schemes, the field-type encryption blocklist (Formula, Roll-Up Summary, indexed External ID), Field Audit Trail's 10-year retention model, and why every Shield design starts with a license confirmation. NOT f...

Set up CI/CD pipelines for SalesLoft integrations with GitHub Actions. Use when automating SalesLoft integration tests, validating OAuth tokens, or running cadence sync validation in CI. Trigger: "salesloft CI", "salesloft GitHub Actions", "salesloft automated tests".

Diagnose and fix SalesLoft API errors: 401, 403, 422, 429, and 5xx. Use when encountering SalesLoft errors, debugging failed requests, or troubleshooting OAuth token issues. Trigger: "salesloft error", "fix salesloft", "salesloft not working", "salesloft 429".

Deploy SalesLoft integrations to Vercel, Fly.io, and Cloud Run. Use when deploying SalesLoft-powered apps to production, configuring platform secrets, or setting up webhook endpoints. Trigger: "deploy salesloft", "salesloft Vercel", "salesloft Cloud Run".

Set up SalesLoft API authentication with OAuth 2.0 or API key. Use when configuring a new SalesLoft integration, setting up OAuth flows, or initializing API access to the SalesLoft REST API v2. Trigger: "install salesloft", "setup salesloft", "salesloft auth", "salesloft API key".

Secure SalesLoft OAuth tokens, API keys, and webhook signatures. Use when implementing token rotation, securing webhook endpoints, or auditing SalesLoft API access controls. Trigger: "salesloft security", "salesloft secrets", "secure salesloft", "salesloft token rotation".

Migrate between SalesLoft API versions and handle breaking changes. Use when SalesLoft announces API deprecations, upgrading OAuth flows, or transitioning from legacy endpoints. Trigger: "upgrade salesloft", "salesloft migration", "salesloft API version".

Strukturierte Checkliste fuer den jaehrlichen Sammelantrag (Mehrfachantrag) Direktzahlungen und ELER nach GAP-Strategieplan. Antragsfrist 15. Mai (jeweilige laenderspezifische Verlaengerung pruefen). Erfasst Hektar Flaechen-Identifikator FID Kulturarten Konditionalitaet GLOEZ-Standards Oekoregelungen Junglandwirts-Foerderung Cross Compliance Greening-Aenderungen 2023. Antrags-Korrektur bis 31. Mai Anpassung bis 30. September. Sanktionen bei Versaeumnis und bei Verstoss Cross Compliance. Vor-O...

ระบบความรู้ครบวงจรสำหรับโปรเจกต์ Sangwijit ERP Web Portal — ระบบ Frontend Portal เชื่อมต่อกับ Dynamics 365 Business Central ครอบคลุม: สถาปัตยกรรมระบบ, 8+ Core Modules, Shared Components SC1-SC9, UI Design Pattern, BC365 API Integration, RBAC, Thailand Compliance ใช้ Skill นี้ทุกครั้งที่: - ถามหรือออกแบบ Module ใด ๆ ใน Sangwijit Portal (Sales, WH, Purchase, Finance, Service, Promotion, Master, Claims) - ออกแบบหน้าจอใหม่หรือ Flow ใหม่ตาม ERP Transaction Form Standard - เขียน Spec, Data Diction...

Pruefraster fuer EU-Sanktionen US-OFAC UK-HMT UN-Sicherheitsrat. EU-Verordnungen zu Russland Belarus Iran Nordkorea Syrien Venezuela Cuba und gelistete Personen Unternehmen. Anwendungsbereich EU-Unionsbuerger und Unternehmen mit Sitz EU. Personenbezogene Sanktionen Asset-Freeze. Sektorale Sanktionen Embargos Importverbote Exportverbote spezielle Dienstleistungen. Pruefung Re-Export Klauseln. Pruefung AWG AWV Bundesausfuhrkontrollamt BAFA. Strafbarkeit § 18 § 19 AWG. Sanctions screening tools ...

This skill handles SAP BC (Basis Component) tasks from the Korean consulting field perspective. Use when the user mentions BC, 베이시스, Solution Manager Korea, HANA locale, 한국 세금계산서, e-Document, 망분리, KISA, 공인인증서, 전자서명, 한국 특수 STMS, PFCG 한국 권한, SM50/SM66 한국어 환경, 한국어 SAPGUI, Unicode 변환, 한국 고객지원 OSS, 한국 SAP BTP 리전, local 코드 페이지, NLS 설정, SAP 한국법인 SAPNet. Covers classic Basis topics (STMS, PFCG, SM50, ST22, SM21, SM36, performance, authorization, transports) with Korean enterprise specifics layered on...

Full-repo SAP CC Go compliance audit against review standards.

Runs static application security testing using Semgrep rules and CodeQL queries against pull request diffs. Supports SARIF output format and integrates with GitHub Advanced Security for findings management.

Compiles and validates custom Semgrep SAST rules using the semgrep-core engine. Tests pattern matching against sample codebases and generates rule performance benchmarks with p/ci rulesets.

Static application security testing (SAST) for changed source files — Vulnetix''s built-in rule set plus optional Semgrep augmentation when `.semgrep` config is present. Use when reviewing a PR for code-level vulnerabilities, scanning a feature branch before merge, gating CI on critical findings, or running rule-specific checks for a known weakness class.

Source code vulnerability hunting (SAST). Decomposes analysis into specialized passes: map entry points, map dangerous ops, trace flows, find gaps, adversarial validation, exploit. Usage: /sast <repo_path> [--lang c|cpp|rust|java|python|go|php] [--min-score 4] [--max-files 30] [--skip-static] [--best-of N]

الخدمات القانونية السعودية — Saudi legal services via Najiz & Wathq APIs for courts, deeds, and power of attorney

Generate CycloneDX 1.7 and/or SPDX 2.3 SBOMs for the repo, optionally cosign-signed, optionally cross-validated against syft output. Use when producing an SBOM for compliance, attaching to a release artefact, integrating with an SBOM registry, or satisfying a customer attestation request.

Generates Software Bill of Materials using Syft for container images and matches components against the NVD CVE database via OSV.dev API. Outputs CycloneDX and SPDX formats for supply chain compliance.

Generates Software Bill of Materials in CycloneDX 1.5 format using cdxgen and syft. Enriches component data with license detection from clearlydefined.io and vulnerability cross-referencing via OSV.dev.

Generates Software Bill of Materials using Syft and scans for CVEs with Grype. Cross-references findings against the NVD and OSV databases for comprehensive vulnerability detection.

Generate a Software Bill of Materials (SBOM) from your AWS environment and scan for vulnerable/compromised packages.

REST, GraphQL, and gRPC API security audit — authentication, authorization, data exposure, and configuration

Authentication flaw detection — weak passwords, broken auth, credential stuffing, and bypass vectors

Authorization flaw detection — IDOR, broken access control, horizontal and vertical privilege issues

CI/CD pipeline security — GitHub Actions injection, secret exposure, untrusted actions, and artifact poisoning

Clickjacking and UI redressing detection — missing frame protection headers and CSP frame-ancestors

OS Command Injection detection in shell execution, subprocess calls, and process spawning

Cryptography misuse detection — weak algorithms, ECB mode, static IVs, weak PRNG, and key management flaws