All authors
Claude Skills by nuroctane
github.com/nuroctane628 skills2 installs1,111 views
- QuieterTone down visual noise — lowers variance and motion, simplifies layout and color weight, keeps hierarchy clear. Use when the UI feels loud, busy, or over-designed, or when the user says \"quieter\", \"more restrained\", \"simpler\", or \"tone it down\". Invoke when the user asks for quieter on their UI, or mentions 'quieter' alongside design / UI / frontend work.Votes: 0GitHub stars: 3
- React Best PracticesReact best-practices reviewer for TSX files. Triggers after editing multiple TSX components to run a condensed quality checklist covering component structure, hooks usage, accessibility, performance, and TypeScript patterns.Votes: 0GitHub stars: 3
- RedesignRedesign an existing site or app without losing what already works — audits the current surface first, classifies what to preserve (brand, IA, SEO, content), picks a refresh/reskin/rebuild scope, then modernizes deliberately. Use when the user says \"redesign\", \"modernize this site\", \"refresh the UI\", \"make this look current\", or points at an existing page/URL they want improved rather than rebuilt from scratch. Invoke when the user asks for redesign on their UI, or mentions 'redesign'...Votes: 0GitHub stars: 3
- RefinedCarefully curated, modern minimal style with elegant serif typography and understated, sophisticated palettes.Votes: 0GitHub stars: 3
- ReleaseRelease vercel-plugin — run gates, bump version, generate artifacts, commit, and push. Use when asked to "release", "ship", "bump and push", or "cut a release".Votes: 0GitHub stars: 3
- RememberRecord a learned design constraint from a correction into the project brief. Invoke when the user asks for remember on their UI, or mentions 'remember' alongside design / UI / frontend work.Votes: 0GitHub stars: 3
- Retrieving Developer KnowledgeSearches, retrieves, and synthesizes official Google developer documentation across Google Cloud, AI/Gemini, Android, Chrome, Web, Flutter, Go, Firebase, and other Google developer platforms. Integrates with the Developer Knowledge MCP server (search_documents, get_documents, answer_query) or the Developer Knowledge REST API fallback. Use when searching for gcloud CLI commands, API syntax, IAM permissions, official documentation, architectural comparisons, or product choice overviews. Don't u...Votes: 0GitHub stars: 3
- Review SkillReview a proposed Agent Skill for structural validity and content quality before publishing. Runs the skill-validator CLI to check for structural issues, scores the skill with an LLM judge, and interprets results to advise SMEs on what to address. Use when a user wants to review, validate, or quality-check an Agent Skill.Votes: 0GitHub stars: 3
- RewindRetrieve recent local Clips Rewind context when the user says "Look at Rewind," asks what just happened, or refers to something they recently said or saw.Votes: 0GitHub stars: 3
- RisoA playful, joyful, two-color risograph print aesthetic built on a single warm off-white paper surface running through every sectionVotes: 0GitHub stars: 3
- RokuApp dashboard with purple-themed aesthetic, top-bar navigation, card-based layouts, and developer-first workflows.Votes: 0GitHub stars: 3
- Routing MiddlewareVercel Routing Middleware guidance — request interception before cache, rewrites, redirects, personalization. Works with any framework. Supports Edge, Node.js, and Bun runtimes. Use when intercepting requests at the platform level.Votes: 0GitHub stars: 3
- RufloAgent meta-harness: vector memory, swarm coordination, hive-mind, hooks. Use for multi-agent orchestration patterns, semantic memory search, and self-learning trajectories.Votes: 0GitHub stars: 3
- ScanAnalyze this repository and publish a shareable "codebase scan" map to foglamp.dev — architecture, AI usage, tools, and flows. You produce only a small JSON object; a fixed renderer draws the map.Votes: 0GitHub stars: 3
- SddesignFull spec-driven pipeline — walks brief → tokens → shape (spec) → craft (build) → converge → ship in one guided run. Writes `.ui-craft/spec.md`. Run when starting a net-new surface from scratch. Invoke when the user asks for sddesign on their UI, or mentions 'sddesign' alongside design / UI / frontend work.Votes: 0GitHub stars: 3
- SdfSDFormat/SDF model and world authoring, validation, and simulator handoff. Use for `.sdf` files, SDFormat XML, models, worlds, links, joints, poses, frames, inertials, visual/collision geometry, mesh URIs, sensors, lights, physics, plugins, includes, Gazebo, static SDF review, or simulator-specific metadata. Do not use for signed-distance-field geometry. Open and visually review existing SDF files in CAD Viewer.Votes: 0GitHub stars: 3
- Agentic Defense Game TheoryRouter for deception-based active defense against AI-agent attackers of DeFi protocols: game theory of honeypots, the agentic attack loop and where to intercept it, lawful bounds of sabotage-by-misdirection, and pointers to the play libraries (contract honeypots, recon-surface poisoning, attacker identification). Use for 'how do I defend my protocol against rogue agents', deception program design, or tripwire strategy. Load one reference slice. Lawful/defender-owned surfaces only.Votes: 0GitHub stars: 3
- Auditing Blockchain ClientsAudit blockchain node clients (Go, Rust, C/C++) for P2P, consensus, RPC, and memory-safety issues. Use for client contest repos (Firedancer-class) and node source. Prefer DarkNavy client-auditor when installed.Votes: 0GitHub stars: 3
- Auditing Foundry Smart Contract SecurityPre-deployment security audit of Solidity Foundry projects (Slither, Aderyn, Mythril, forge fuzz/invariants, key hygiene). Use when writing, reviewing, testing, or deploying Solidity/Foundry contracts or DeFi/Web3 code.Votes: 0GitHub stars: 3
- Battlechain Safe Harbor WhitehatCyfrin BattleChain and Safe Harbor whitehat flow: deploy to the pre-mainnet L2, request attack mode, read on-chain bounty terms. Use with Cyfrin/solskill. Lawful attack-mode only on contracts that opted in.Votes: 0GitHub stars: 3
- Contest And Bounty ReportingWrite in-scope smart-contract contest and Immunefi bounty reports: severity, impact, root cause, local Foundry test, fix. Use for Code4rena, Sherlock, Cantina, Hats, Immunefi. No live exploits.Votes: 0GitHub stars: 3
- Defi Security Trends StandardsCurrent-year smart-contract security briefing: what loss classes dominate right now, OWASP Smart Contract Top 10 mapping, audit tooling status, and new attack surfaces (EIP-7702 drainers, DVN/verifier bridge configs, intents, RWA rails). Use for 'what should I check in 2026', scoping a review to current trends, or refreshing stale checklists. Lawful/in-scope only. Load one reference slice.Votes: 0GitHub stars: 3
- Deploying Contract HoneypotsOnchain deception primitives and per-attack-vector deception plays for defending DeFi protocols against AI-agent attackers: decoy functions and tripwire storage, anti-simulation fork traps, bait funds and canaries, plus concrete play tables for every vulnerability class (T01-T40 EVM, S/M/C/K non-EVM, OPS ops-layer) and per-chain adaptations. Use to design tripwires for a protocol under active agentic recon. Lawful/defender-owned only. Load one reference slice.Votes: 0GitHub stars: 3
- Formal Verification Halmos Certora KontrolFormal/symbolic properties on Solidity with Halmos, solc SMTChecker, Certora CVL, and Kontrol. Use when fuzzing is not enough for a conservation law. Slow path, like Mythril.Votes: 0GitHub stars: 3
- Fuzzing With Echidna And MedusaProperty-based fuzzing of Solidity with Echidna (Trail of Bits) and Medusa (Crytic) as a complement to Foundry invariants. Use when forge invariant handlers are not enough or the repo already has Echidna properties.Votes: 0GitHub stars: 3
- Historical Smart Contract VulnsHistorical smart-contract vulnerability library across EVM L1/L2, Solana, Move, Cosmos/IBC, Cairo, Bitcoin-adjacent, other VMs, plus zachxbt/tayvano ops vs code. Use for bounty-class mapping, public incident lookup, and in-scope review seeds. Lawful/whitehat only. Load one reference slice, never the whole pack.Votes: 0GitHub stars: 3
- Hunting X Linked BountiesRoute Immunefi/X-linked paid writeups to the matching protocol playbook. Use for bounty intel, whitehat payouts, Immunefi bugfix reviews, and X-announced crits. Lawful/in-scope only. Load one reference slice, never the whole pack.Votes: 0GitHub stars: 3
- Identifying Agentic AttackersTurn deception-program tripwires into identified attackers and lawful outcomes: tripwire event schemas and telemetry, attribution and evidence-pack standards (zachxbt-class dossier discipline, exchange/FBI/SEAL handoff), and the graduated response ladder from observe to freeze-to-handoff. Use when a honeypot, canary, or bait fires, or to design the response side of a deception program. Lawful handoff only - no hack-back.Votes: 0GitHub stars: 3
- Onchain Read ReconRead-only on-chain recon for verified Solidity: cast, Sourcify, storage layout, public transaction traces. Use before an in-scope audit or to reconstruct an already-mined incident. Never broadcast, never unlock wallets.Votes: 0GitHub stars: 3
- Poisoning Agent Recon SurfacesOffchain deception for AI-agent attackers of DeFi protocols: landing-surface design (decoy docs, bait search results, fake internal runbooks, robots.txt lures, decoy repos and RPCs), per-channel watermarking so exploits reveal their source, and planner-poisoning ops (misleading layouts, ABIs, addresses). Pairs with deploying-contract-honeypots. Lawful/defender-owned surfaces only. Load one reference slice.Votes: 0GitHub stars: 3
- Reconstructing Public PostmortemsTurn already-public DeFi incidents (rekt, DeFiHackLabs, BlockSec) into Foundry regression tests. Use for learning and for pinning a similar pattern on in-scope code. Never replay against live funds.Votes: 0GitHub stars: 3
- Researcher Gym And CurriculumTraining path for a whitehat smart-contract researcher: Ethernaut, Damn Vulnerable DeFi, Cyfrin Updraft, Secureum, RareSkills, Paradigm CTF, then in-scope contests. Always as Foundry tests.Votes: 0GitHub stars: 3
- Reviewing Access Control And AuthReview Solidity access control: missing modifiers, tx.origin, initialize front-run, role rugging, default-public, and two-step ownership. Use on every admin, mint, upgrade, and withdraw path.Votes: 0GitHub stars: 3
- Reviewing Amm And Cl PoolsReview AMM and concentrated-liquidity pools: k-invariant, callbacks, fee-on-transfer, empty pool, tick math, and spoofed swap callbacks. Use for Uniswap-style, stableswap, and custom AMMs.Votes: 0GitHub stars: 3
- Reviewing Bitcoin AdjacentReview Bitcoin Script, Lightning HTLCs, Stacks Clarity, BitVM/Babylon challenge games, and EVM-on-Bitcoin sidechains. Use when the VM is not Solidity. Lawful/in-scope only.Votes: 0GitHub stars: 3
- Reviewing Bridges And MessagingReview token bridges and cross-chain messages: replay, decoder, finality, aliasing, amount inflation, and unauthorized mint. Use for lock/mint, burn/mint, LayerZero, Optimism messenger, zk bridges.Votes: 0GitHub stars: 3
- Reviewing Cairo And StarknetReview Cairo/Starknet contracts: u256 rounding, felt vs u256, account/session keys, L1-L2 messages. Use for Starknet DeFi (e.g. Vesu-class rounding). Lawful/in-scope only.Votes: 0GitHub stars: 3
- Reviewing Cosmos And IbcReview Cosmos SDK modules, IBC (ICS-20/23), ibc-hooks, CosmWasm submessages, Authz, Ante/fees. Use for appchains and IBC-connected DeFi. Lawful/in-scope only.Votes: 0GitHub stars: 3
- Reviewing Cross Function And ComposerReview compositions of otherwise-safe functions in one transaction: deposit+borrow, harvest+redeem, vote+queue. Use when unit tests pass but invariants fail on sequences. The handler skill is the test harness.Votes: 0GitHub stars: 3
- Reviewing Erc4626 And VaultsReview ERC-4626 and vault share math for inflation, donation, first-depositor, rounding, and fee-on-transfer. Use for yield vaults, tokenized strategies, and convertToShares/convertToAssets paths.Votes: 0GitHub stars: 3
- Reviewing Frontend And Ops SurfacesReview wallets, Safe modules, Permit2, EIP-712 UIs, and signer runbooks for phishing-class bugs (Bybit Safe UI, drainers, leftover approvals). Use when the loss class is ops/frontend, not vault math. Lawful/in-scope only.Votes: 0GitHub stars: 3
- Reviewing Governance And TimelocksReview Governor, timelock, and upgrade-via-governance: delay bypass, proposal hijack, snapshot vs flashloan votes, queue/execute hash mismatch. Use for OZ Governor, custom DAOs, and admin multisigs.Votes: 0GitHub stars: 3
- Reviewing L2 Sequencer And FinalityReview L2 assumptions: sequencer downtime, Chainlink sequencer uptime, address aliasing, delayed inbox, custom gas tokens, and optimistic finality windows. Use for OP/Arbitrum/Base/zk and any protocol that reads L1 state from L2.Votes: 0GitHub stars: 3
- Reviewing Lending And LiquidationsReview lending markets, CDPs, and liquidations: LTV, oracle, interest index, liquidation bonus, bad debt, and self-liquidation. Use for money markets and isolated pools.Votes: 0GitHub stars: 3
- Reviewing Major Chain SurfacesChain-specific audit surfaces for every major chain by current volume and TVL: Ethereum mainnet, Base, Arbitrum One + Orbit (incl. Robinhood Chain), OP Mainnet + Superchain, Hyperliquid HyperCore/HyperEVM, Solana, BNB Chain, Linea, Scroll, zkSync Era, Sonic, Berachain, Monad, Plasma, Sui, Aptos, TON, TRON, and more. Use when reviewing or deploying code on a named chain, checking precompile / fee / oracle / bridge deltas, or asking what is different about auditing there. Load one reference slice.Votes: 0GitHub stars: 3
- Reviewing Mev Ordering And SlippageReview MEV, ordering, and slippage: missing minOut/deadline, approve races, auction sniping, commit-reveal skips. Use for AMMs, launches, Dutch auctions, and any tx-order-sensitive value path. Analysis only - no sandwiching.Votes: 0GitHub stars: 3
- Reviewing Move ModulesReview Aptos/Sui/Movement Move modules: borrow_global address, shared-object ACL, abilities, capabilities, PTB composition, halt/DoS. Use for Move programs. Lawful/in-scope only.Votes: 0GitHub stars: 3
- Reviewing Nft And MarketplaceReview NFT and marketplace contracts: safeTransfer callbacks, royalty bypass, listing signature replay, payment token weirdness, and enumeration grief. Use for ERC-721/1155 markets and launchpads.Votes: 0GitHub stars: 3
- Reviewing Oracles And PricingReview DeFi price oracles and share/rate math for flash-loan, staleness, sequencer, and first-depositor manipulation. Use for vaults, lending, liquidations, and any contract that reads a spot price.Votes: 0GitHub stars: 3
- Reviewing Reentrancy And CallbacksReview reentrancy and token/AMM callbacks: classic, cross-function, read-only, ERC-777/721/1155 hooks, Uniswap callbacks, failed-call DoS. Use on any value-moving Solidity that makes external calls.Votes: 0GitHub stars: 3