Claude Skills by aibot88

Framework for assessing IT service providers, technology vendors, and third-party partners. Creates structured risk assessments across financial, operational, compliance, security, and reputational dimensions with regulatory checklists (GDPR, DORA, NIS2, SOX). Use when: (1) Evaluating new vendors or technology providers, (2) Conducting third-party risk assessments for procurement, (3) Performing critical vendor due diligence for regulatory compliance, (4) Creating vendor onboarding documentat...

Analyze vendor management systems for performance scorecards, third-party risk assessment, SLA enforcement, vendor rationalization, and relationship governance. Evaluates vendor tiering strategies, risk taxonomy (financial, cyber, compliance, geopolitical), continuous monitoring with BitSight/SecurityScorecard, ITIL supplier management alignment, diversity program tracking, and lifecycle management from onboarding through offboarding following OCC, FFIEC, and GDPR frameworks.

Paste a vendor's domain. Get a security risk assessment in 60 seconds.

Venue-specific LaTeX templates, formatting requirements, and submission guidelines for journals, conferences, posters, and grants—use when a target venue imposes strict layout, page limits, anonymization, or agency compliance rules.

Manage Python virtual environments in a consistent, organized way. Use when a skill needs Python packages installed, or when the user wants to create a venv following standard conventions. Provides the authoritative convention for venv location and naming that other skills should follow.

End-to-end applied statistical research pipeline. Takes a research question and dataset, runs literature review, statistical analysis with parallel method tracks, and produces a complete manuscript (Markdown + LaTeX/PDF). Use when user says "application pipeline", "applied analysis", "analyze my data and write paper", "end-to-end analysis", or wants to go from raw data to manuscript. Covers all outcome types: continuous, binary, ordinal, nominal, count, survival, repeated measures, time serie...

Server-side extension that completes the full analysis pipeline for binary outcome variables after vera-stat-binary-testing has run. Adds remaining association tests (chi-square/Fisher's for additional predictors, point-biserial for continuous predictors), stratified odds ratio analysis with Breslow-Day test and forest plot, full modeling (logistic regression with OR and 95% CI, Hosmer-Lemeshow GOF, pseudo-R2, ROC curve with AUC, classification table, tree-based classification with CART/RF/GB...

Runs class balance diagnostics and primary association tests for binary outcome variables (0/1, yes/no, survived/died, pass/fail). Produces proportion tables, class balance check with rare-event warning, descriptives by outcome level, chi-square test of independence with Cramer's V, Fisher's exact test when cell counts are small, odds ratio with 95% CI, and a mosaic or grouped bar chart. Outputs .R and .py scripts with 2 publication-quality plots. Triggered when user has a binary/dichotomous ...

Runs distribution diagnostics and primary hypothesis tests for continuous outcome variables. Produces Shapiro-Wilk normality check, skewness, kurtosis, Q-Q plot, and one fully interpreted group comparison (Welch's t for 2 groups or ANOVA with Tukey HSD for 3+ groups) with effect sizes and nonparametric confirmation. Ends with a recommendation block listing Outputs .R and .py scripts with 2 publication-quality plots. Triggered when user has a continuous/numeric outcome and says "analyze contin...

Runs distribution diagnostics and primary hypothesis tests for count outcome variables (non-negative integers with no upper bound). Produces frequency table, overdispersion assessment, zero-inflation check, bar chart of count distribution with Poisson overlay, and one fully interpreted group comparison (Poisson/NB rate test for 2 groups or Poisson/NB regression with likelihood ratio test for 3+ groups) with incidence rate ratios and nonparametric confirmation. Detects whether data are raw eve...

Runs class distribution diagnostics and primary association tests for nominal (unordered multi-class) outcome variables. Produces class frequency table, proportions, rare-class warnings, bar chart of class distribution, and one fully interpreted association test (Chi-square/Cramer's V for categorical predictors, or ANOVA/Kruskal-Wallis for continuous predictors) with effect sizes. Ends with a recommendation block listing additional analyses available. Outputs .R and .py scripts with 2 publica...

Runs distribution diagnostics and primary hypothesis tests for ordinal outcome variables. Produces frequency tables, cumulative proportions, ordinal bar chart, and one fully interpreted nonparametric group comparison (Mann-Whitney U for 2 groups or Kruskal-Wallis for 3+ groups) with effect sizes (rank-biserial r or Cliff's delta) and Jonckheere-Terpstra trend test. Ends with a recommendation block listing additional analyses available. Outputs .R and .py scripts with 2 publication-quality plo...

Trajectory diagnostics and primary hypothesis tests for repeated measures / longitudinal designs with a continuous outcome. Produces spaghetti plots with group mean ribbons, ICC, descriptives per time point, attrition check, and one interpreted test: paired t-test for 2 time points, repeated measures ANOVA for 3+ time points in one group, or mixed ANOVA (time x group) for 3+ time points with 2+ groups, including Mauchly sphericity and Greenhouse-Geisser correction. Ends with a recommendation ...

Runs survival diagnostics and primary hypothesis tests for right-censored time-to-event outcome variables. Produces follow-up time summary, censoring rate assessment, Kaplan-Meier survival curves with number-at-risk tables, log-rank test for group comparison with median survival times and landmark survival rates, and hazard ratio preview from univariate Cox regression. Ends with a recommendation block listing additional analyses available via the full analysis pipeline. Outputs .R and .py scr...

Audit a data pipeline for Veracity and Value. Dispatches data-scientist, compliance-auditor, and data-engineer agents with project context injected at dispatch time. All source paths are supplied via flags — no defaults, no project assumptions. Subcommands: audit (full pipeline walk), score-check (scoring math only), gate-check (gate coverage only), source-trace <label> (single source end-to-end). Invoke when: "audit pipeline", "veracity check", "scoring math correct?", "check gates", "trace ...

Entscheidungsbaum durch alle acht verbotenen Praktiken nach Art. 5 KI-VO: subliminale Techniken Vulnerabilitaetsausnutzung Social Scoring Predictive Policing Untargeted Scraping Emotionserkennung Arbeitsplatz biometrische Kategorisierung Echtzeit-RBI oeffentlicher Raum.

Implement data handling, PII protection, and GDPR/CCPA compliance for Vercel deployments. Use when handling sensitive data in serverless functions, implementing data redaction, or ensuring privacy compliance on Vercel. Trigger with phrases like "vercel data", "vercel PII", "vercel GDPR", "vercel data retention", "vercel privacy", "vercel compliance".

Build and deploy Vercel Edge Functions for ultra-low latency at the edge. Use when creating API routes with minimal latency, geolocation-based routing, A/B testing, or authentication at the edge. Trigger with phrases like "vercel edge function", "vercel edge runtime", "deploy edge function", "vercel middleware", "@vercel/edge".

Install Vercel CLI and configure API token authentication. Use when setting up Vercel for the first time, creating access tokens, or initializing a project with vercel link. Trigger with phrases like "install vercel", "setup vercel", "vercel auth", "configure vercel token", "vercel login".

vercel link、プロジェクト接続、Vercelプロジェクトをリンク、vercel連携、link Vercel project、connect to Vercel project に関連するリクエストで使用。vercel linkコマンドの安全な実行手順と注意事項を提供する。

Configure Vercel across development, preview, and production environments with scoped secrets. Use when setting up per-environment configuration, managing environment-specific variables, or implementing environment isolation on Vercel. Trigger with phrases like "vercel environments", "vercel staging", "vercel dev prod", "vercel environment setup", "vercel env scoping".

Implement lint rules, CI policy checks, and automated guardrails for Vercel projects. Use when setting up code quality rules, preventing secret exposure, or enforcing deployment policies for Vercel applications. Trigger with phrases like "vercel policy", "vercel lint", "vercel guardrails", "vercel best practices check", "vercel secret scan".

Apply Vercel security best practices for secrets, headers, and access control. Use when securing API keys, configuring security headers, or auditing Vercel security configuration. Trigger with phrases like "vercel security", "vercel secrets", "secure vercel", "vercel headers", "vercel CSP".

Verdaccio is a lightweight, zero-config private npm proxy registry that caches packages from npmjs.org and hosts private packages. It supports npm, yarn, and pnpm with authentication, access control, and plugin extensibility for managing internal JavaScript packages.

Canonical verdict-only return schema for adversarial reviewer subagents. Reviewers emit compact ≤30-line verdict block; main loop parses verdict + blockers only. Use when: authoring or updating reviewer agent, building verdict consumer, debugging reviewer report parsing.

Pruefraster fuer Vergabenachpruefungs-Verfahren bei Vergabekammern (oberhalb der EU-Schwellenwerte). Pruefung Rechtsschutz § 155 ff. GWB Antragsbefugnis § 160 Abs. 2 GWB Ruegeobliegenheit § 160 Abs. 3 GWB Antragsfrist § 160 Abs. 2 GWB Auswahlfehler Bekanntmachung Eignung Praequalifikation ungewoehnlich niedriges Angebot § 60 VgV Wertungsfehler Ausschlussgruende fakultativ obligatorisch Submission Aufhebung Zuschlag-Stop § 169 GWB sofortige Beschwerde § 171 GWB OLG Vergabesenat Bietergemeinsch...

Creates explicit validation checkpoints (verification gates) between project phases to catch errors early and ensure quality before proceeding. Use when the user asks about quality gates, milestone checks, phase transitions, approval steps, go/no-go decision points, or preventing cascading errors across a multi-step workflow. Produces acceptance criteria checklists, automated CI gate configurations, manual sign-off requirements, and conditional review rules for scenarios such as security chan...

Verify adoption criterion A2 (Agent-Authored Contributions) in the current project. Reports fulfillment level 0–3.

Post-fix verification — re-scan the repo, gate on `--exploits weaponized --severity high`, recheck the specific CVE against the new installed version, write the verdict to `.vulnetix/memory.yaml`. Use when confirming a fix landed, validating a version bump did not introduce regressions, or producing a clean-scan attestation for compliance.

Self-test the maxvision-orchestration plugin after install. Runs five read-only checks (index, cheatsheets, gh auth, jq+sqlite3 in PATH, sample BM25 query) and reports pass/info/fail. Use immediately after /plugin install, /plugin update, or whenever the orchestrator behaves unexpectedly.

The Reviewer subagent's playbook for checking a finished CRE build. Audit-cell checks, error-value scans, convention compliance, structural integrity. Returns a structured critique.

End-to-end system health verification. Checks all containers, ports, endpoints, and pipelines (logging, email, auth, socket, worker). Proves the system is truly working, not just running.

Inspect and validate Vertex AI Agent Engine deployments including Code Execution Sandbox, Memory Bank, A2A protocol compliance, and security posture. Generates production readiness scores. Use when asked to inspect, validate, or audit an Agent Engine deployment. Trigger with "inspect agent engine", "validate agent engine deployment", "check agent engine config", "audit agent engine security", "agent engine readiness check", "vertex engine health", or "reasoning engine status".

Generate OpenVEX / CycloneDX VEX attestations from `.vulnetix/memory.yaml` triage decisions, optionally sign with cosign, optionally upload to Vulnetix and post to a GitHub PR. Use when documenting triage decisions for supply-chain consumers, attaching VEX to a CycloneDX SBOM, or satisfying customer attestation requests.

Turns AI-generated code into production-grade code a senior engineer would merge. Covers audit, refactor, security review, spec-driven development, and pre-PR review. Works with any stack, any language, any agent. Invoke with: "use vibe-hardener to [audit/refactor/security-review/spec/review]"

Use when a PR is open and CI green - dispatches a fresh subagent for two-stage code review (spec compliance then quality), posts findings to the GitHub PR as review comments with severity classification

Use to diagnose vibekit installation health — skill file integrity, runtime registration parity, `.vibekit/` directory health, `docs/` subdir presence, authoring-contract alignment. Reports verdict only by default; `--fix` auto-repairs safe items. Cross-runtime portable.

Validates a web app or codebase against the VIDIS Prüfkriterien V0.2 (eduCheck digital). Checks all criteria from both Prüfbereiche: Recht & Datenschutz and IT-Sicherheit. Produces a structured compliance report with PASS / FAIL / MANUELL (needs human review) for each criterion. Use when asked to "vidis check", "VIDIS prüfen", "eduCheck prüfen", or "VIDIS-Kriterien".

Detection Engineering agent. Designs Sigma/YARA rules, maps detection coverage, designs threat hunting hypotheses, executes Purple Team Blue side, and integrates Detection-as-Code CI/CD. Use when defensive security verification is needed.

Vikunja görev yönetimi için CLI wrapper skill. Kullanıcı "vikunja task ekle", "görevleri listele", "task'i tamamlandı işaretle", "vikunja proje oluştur", "açık görevleri göster", "vikunja-cli ile görev al", "/vikunja-cli" dediğinde tetiklenir. vikunja-cli Rust binary'sini doğru komutlarla çağırır - task list/get/create/update/delete, project list/get/create, label list, comment list/create, assign/unassign, label set. Her zaman --json kullanıp parse eder.

Use when working with VIPER architecture in iOS/UIKit apps. Triggers on: creating new VIPER modules (View/Interactor/Presenter/Entity/Router); fixing retain cycles between VIPER layers; removing UIKit imports from Presenters; refactoring massive ViewControllers into VIPER layers; migrating VIPER Views to SwiftUI via UIHostingController; handling navigation with VIPER Routers; moving business logic from Presenter into Interactor; wiring module Builders with dependency injection; testing Presen...

Gary Vaynerchuk's content machine approach - producing high-volume, authentic content across all platforms

Check file hashes, URLs, domains, and IP addresses against 70+ antivirus engines and threat intelligence feeds via VirusTotal

Visao 360 de produto - agrega dados de cadastro, estoque, custo, faturamento, carteira e producao em uma consulta unificada.

Visual QA — screenshot comparison before/after, UI consistency check, design system compliance scoring

Scaffold a full-stack Cloudflare app from vite-flare-starter — React 19, Hono, D1+Drizzle, better-auth, Tailwind v4+shadcn/ui, TanStack Query, R2, Workers AI. Run setup.sh to clone, configure, and deploy.

在 Vite dev server 前掛 Cloudflare Named Tunnel，給固定 HTTPS hostname。Use when 跨裝置（手機 / 平板 / 另一台筆電）測 OAuth flow、跨裝置測 webhook callback、行動裝置 debug 需要穩定 HTTPS URL、Vite 加 Cloudflare tunnel、設定 dev HTTPS hostname、改 OAuth callback 不想每次回 provider 後台。對 Workers/Pages 用官方 @cloudflare/vite-plugin 內建 tunnel；對一般 Vite 走第三方 vite-plugin-cloudflare-tunnel。不適用於 prod tunnel（這 skill 只管 dev）、其他 provider（ngrok / localtunnel）、單機開發夠用的情境（用 vendor/snippets/dev-auth/ cookbook 繞 OAuth 更快）、需要 quick tunnel 隨機 hostname 的場景（直接跑 cl...

VitePress is a Vite and Vue powered static site generator focused on documentation, knowledge bases, and project sites. It gives agents a reliable way to scaffold, structure, and maintain docs sites with fast local previews and Markdown-first authoring.

Reviews lyrics and prose for AI-written patterns (abstract noun stacking, over-explained metaphors, cliche escalation, missing idiosyncrasy, prose AI tells). Advisory Warning/Info severity — flags issues, does not block or rewrite. Use when reviewing lyrics for authenticity or before generation to catch AI-sounding language.

Extract and document someone's authentic writing voice from samples. Use when someone needs a "voice guide," wants to capture their writing DNA, or needs to train AI to write in their style. Also useful for ghostwriting, brand voice documentation, or onboarding writers.