Claude Skills by seaworld008

Prepare software releases with version selection, changelogs, artifacts, validation, and release verification from the repository''s current state.

Deploy applications to Render by analyzing codebases, generating render.yaml Blueprints, and providing Dashboard deeplinks. Use when the user wants to deploy, host, publish, or set up their application on Render''s cloud platform.

Scan for hardcoded credentials, report redacted findings, and block repomix packaging when risks are found. Use when packaging code for distribution, creating reference packages, or checking credentials before sharing a codebase.

Use when completing tasks, implementing major features, or before merging to verify work meets requirements

User research specialist. Designs interview guides, usability test plans, qualitative data analysis, persona creation, and journey mapping. Complements Echo''s UI validation. Use when user research design or analysis is needed.

变更前影响分析，评估依赖链和一致性风险。

Write or review operational runbooks for deployment, rollback, incidents, recovery, and maintenance using concrete commands and verification evidence.

Use when writing or reviewing Rust code, designing safe APIs, debugging ownership and lifetimes, choosing async patterns, or improving systems-level performance.

SaaS financial health advisor. Use when a user shares revenue or customer numbers, or mentions ARR, MRR, churn, LTV, CAC, NRR, or asks how their SaaS business is doing.

Build a SaaS application or vertical slice from a validated brief, covering authentication, tenancy, persistence, billing, deployment, and acceptance checks.

云基础设施、环境配置和本地开发部署脚手架。

数据库模式设计、迁移规划、索引策略和关系建模。

缺陷调查、复现步骤、根因分析和影响评估。

Use when the user explicitly asks for a desktop or system screenshot (full screen, specific app or window, or a pixel region), or when tool-specific capture capabilities are unavailable and an OS-level capture is needed.

Use when reviewing SEC filings, extracting material risk disclosures, scanning 10-K or 10-Q sections, or building a follow-up checklist from filing language.

Harden authentication, input handling, storage, and integrations when implementing security controls or remediating concrete vulnerabilities.

Audit codebases for exploitable security vulnerabilities with concrete attack paths, impact, and source evidence.

Security audit workflow for AI-generated application code, APIs, infrastructure changes, dependencies, secrets, auth flows, and pull requests before they ship.

Use when checking language or framework security best practices, producing security review reports, identifying insecure defaults, and recommending secure-by-default improvements.

用于基于 Git 历史分析安全所有权、敏感代码归属、bus factor、CODEOWNERS 现实差距和风险热点。

Perform authorized security assessments, vulnerability scans, and penetration tests with explicit targets, scope, evidence, and remediation guidance.

Review code changes for injection, XSS, authentication, authorization, cryptography, and other security defects with evidence-based severity.

Use when creating threat models from codebases, architectures, assets, trust boundaries, attacker capabilities, abuse paths, and mitigation plans.

Use when building or operating agents that should learn from prior runs, capture durable feedback, update behavior safely, and improve task performance across iterations.

用于通过 Semgrep 执行应用安全 SAST、源码扫描、自定义规则、密钥流程和供应链依赖分析。

Design or review system architecture, technical tradeoffs, dependencies, and scalability; produce diagrams and decision records grounded in requirements.

Design and operate CI/CD, infrastructure as code, containers, and cloud deployments with observable, reversible release procedures.

用于只读查询 Sentry issues、events 和服务健康数据，汇总线上错误并辅助生产问题排查。

Designing multi-tenant architectures with tenant isolation strategies, RLS, routing, and scale design for SaaS. Use when designing multi-tenant SaaS systems or tenant isolation.

把复杂任务拆成短步骤，控制漂移并推进交付。

Prepares production launches. Use when preparing to deploy to production. Use when you need a pre-launch checklist, when setting up monitoring, when planning a staged rollout, or when you need a rollback strategy.

根据项目代码自动生成贴合仓库约定的技能。

Generating AI image-generation code using the Gemini API. Handles text-to-image generation, image editing, and prompt optimization. Use when image generation code is needed.

Create or improve agent skills, trigger descriptions, and evaluation cases; use when packaging a workflow or measuring skill behavior.

Review and improve agent skills for clear triggers, actionable instructions, progressive disclosure, reliable resources, and evidence-backed validation.

Audit external agent skills before installation for malicious instructions, unsafe scripts, excessive permissions, dependency risks, and data exfiltration.

Validate skill structure, bundled scripts and expected outputs against the target repository and agent host requirements.

Demonstrate skill packaging with word counts, character statistics and text transformations in text or JSON output.

Use before installing or trusting an external skill to inspect instructions, scripts, permissions, dependencies, provenance, and suspicious behavior for security and reliability risks.

Knowledge and utilities for creating animated GIFs optimized for Slack. Provides constraints, validation tools, and animation concepts. Use when users request animated GIFs for Slack like "make me a GIF of X doing Y for Slack."

Analyze social campaign engagement, ROI, audience behavior, and platform comparisons from supplied or retrieved performance data.

Generate, remix, inspect, download, or delete Sora videos through the bundled API CLI when the user requests a Sora video workflow.

Verify implementation against official documentation when the task requests source-backed changes or depends on unfamiliar or changing framework APIs.

Specify new features or substantial behavior changes when goals, boundaries, and acceptance criteria need agreement before implementation.

Create text-to-speech narration, voiceovers, or batch audio with OpenAI''s Audio API and the bundled text_to_speech.py CLI.

演示文稿生成、叙事节奏设计和会议演讲优化。

Use when building a stock screen, filtering a universe by valuation, growth, quality, or momentum rules, or creating a repeatable shortlist for deeper research.

Use when executing implementation plans with independent tasks in the current session

Use when writing or reviewing Postgres schemas, queries, indexes, RLS policies, connection settings, or migrations with Supabase guidance; applicable to Postgres on any hosting platform.

Build or troubleshoot Supabase Database, Auth, Storage, Realtime, Edge Functions, and client/SSR integrations; use current platform documentation.