Development

Use when discovering, writing, or pressure-testing brand or company core values, replacing generic values with differentiating ones, or turning values into observable behaviors. Keywords - core values, Lencioni four categories, permission-to-play values, opposite test, antivalue, fire someone test, Brene Brown values process, operationalizing values.

Use when choosing brand typefaces, pairing fonts, building a type hierarchy or modular scale, or writing typography guidelines and design tokens. Keywords - brand typography, font selection, font pairing, serif vs sans-serif, type scale, typeface licensing, web font performance, WCAG typography and readability.

Use when defining how a brand is positioned against competitors, writing a positioning or onliness statement, mapping a market to find an open position, or deciding which category to own. Keywords - brand positioning, onliness statement, positioning map, 22 Immutable Laws, Ries and Trout, Neumeier ZAG, ladder concept, cherchez le creneau, trueline.

Use when building a messaging framework, writing a value proposition, defining brand pillars or key messages, or organizing a messaging hierarchy across audiences. Keywords - messaging house, message layers, value proposition canvas, positioning template, Peep Laja, Osterwalder, Geoffrey Moore, April Dunford, StoryBrand, Andy Raskin strategic narrative, MECLABS.

Use when selecting or evaluating brand colors, building a palette with primary, secondary, neutral, and accent roles, differentiating from competitor colors, or checking color contrast and accessibility. Keywords - color psychology, color palette, 60-30-10 rule, color harmony, archetype colors, cultural color meaning, WCAG contrast, hex and CMYK specifications.

Use when choosing or evaluating a brand archetype, defining brand personality or emotional positioning, or combining a primary and secondary archetype. Keywords - Jungian archetypes, 12 archetypes, Hero, Outlaw, Magician, Creator, Lover, Jester, Everyman, Caregiver, Ruler, Sage, Explorer, Innocent, 70/30 rule, Mark and Pearson.

Use when adding or changing a screen, route, loader, server function or data read in apps/web or apps/admin. Covers which half of the application a piece of work belongs to, hydration versus seeding an atom, why every server function is a GET, the one boundary at the root, createServerOnlyFn, and the trap where a control looks live and does nothing.

The four-phase product development workflow this repository is built for — discover, prototype, build, ship — what each phase produces, and the gates between them. Use when planning or running product work, when asked how long something will take, when deciding what to cut, or when a phase's slash command needs the method behind it.

「钢笔淡彩」——用 Python 手搓钢笔线稿 + 水彩淡彩的静物/小景（细钢笔线抖着走、暗部排线、几块水彩故意不贴线、米色纸留白）。不是滤镜、不是生图。触发词：钢笔淡彩、淡彩、钢笔水彩、pen and wash、排线、画成那种线稿上色的、手绘静物

「蜡笔」——用 Python 手搓油画棒/蜡笔风格的画（一笔一笔撒颗粒，不是滤镜、不是生图）。触发词：蜡笔、油画棒、crayon、画成蜡笔、蜡笔风、蜡笔地图、手帐蜡笔

Generate ERD (entity-relationship), C4 (context/container/component), API endpoint catalogue, and lifecycle/state-machine diagrams as a validated JSON spec plus a standalone interactive HTML viewer. Imports OpenAPI, GraphQL SDL, and Prisma schemas directly; when no spec file exists, reads the code (NestJS controllers/resolvers, TypeORM/Prisma entities) and authors the JSON by hand. Use when the user asks for a database diagram, ERD, data model, table relationships, C4 diagram, system context,...

Use when the user wants to design, redesign, shape, critique, audit, polish, clarify, distill, harden, optimize, adapt, animate, colorize, extract, or otherwise improve a frontend interface. Covers websites, landing pages, dashboards, product UI, app shells, components, forms, settings, onboarding, and empty states. Handles UX review, visual hierarchy, information architecture, cognitive load, accessibility, performance, responsive behavior, theming, anti-patterns, typography, fonts, spacing,...

Orchestrates the full Falcon Fusion workflow lifecycle from discovery through deployment and execution. TRIGGER when user asks to "create a Fusion workflow", "build a Fusion playbook", "automate CrowdStrike actions", or mentions Fusion workflows without specifying a sub-task. DO NOT TRIGGER when user is working in a Foundry app context, mentions manifest.yml, or asks to "build a Foundry app" — use foundry-skills instead.

Manage Falcon Next-Gen SIEM lookup files (CSV/JSON/TXT) for CQL match() queries. TRIGGER when user asks to create, list, update, or delete lookup files, or needs help with CQL match() function. DO NOT TRIGGER for Fusion workflows, action discovery, or workflow deployment — use the workflows/authoring/deployment skills.

Use when a coding agent needs a bounded, receipt-bound completion rail — a cached fast gate for session-scoped deterministic checks, plus repair/review/full/boundary commands that produce exact machine-readable receipts before a commit, PR, or release is called done.

_What a session does when it runs this skill — the instruction, in markdown. Tag the knowledge it needs (`kind:slug`); `takes:` and `writes:` on the card say which kind it runs on and which it produces._

Restore and continue a Wye agent session by id — /wye-restore <session-id> [--product <p>]. Loads the session's instruction, referenced context, log and result, then continues the work from where the previous agent stopped, logging progress back to the same session.

Build the product context graph for one module — requirements, entities, state machines, ops, pages/actions, rules with sources, gates, tests, drift — as data/products/<product>/projects/<project>/docs/<module>.md, then build/check it with wye and publish the phone viewer. Use when asked to "describe module X", "graph the Y feature", "add Z to the context graph", or to repeat the inventory pilot for another area.

The read/write contract between a coding agent and the product context graph (docs/context-graph). Use BEFORE implementing or changing any feature in a repo that has a context graph — query the graph with wye instead of exploring the codebase, describe the change as a delta before coding, and run wye check before claiming done. Also use when asked "what does the system say about X", "what depends on Y", or "is Z already a requirement".

How an agent works with Wye through the wye CLI — resolve a Wye link (http://…/<product>/<project>/d/<doc>#…) or node id to its text, read and write documents and nodes, search product knowledge, and report progress on a session. Use whenever a message, task or prompt contains a Wye link, a node id like req:x / task:y / goal:z, a session id, or asks to update the PRD, plan, tech design or knowledge of a product kept in Wye.

拋棄式 HTML mockup 比稿：產出 2 到 3 個設計立場不同的變體（密度 / 版式 / 強調軸，不是換色），各附取捨說明，最後給有立場的對比結論。適用：「畫個草圖」「比較 A 版 B 版」「先看方向再做」「給我看幾種做法」。要 production 元件或設計已定案時不適用。

用外部掃描工具對 repo 做相依漏洞、機密外洩、SAST 三層檢查，並把結果對回 OWASP Top 10:2025 分類。適用：面試或對外發布前的作品體檢、接手不熟的 repo、想確認自己的修正經得起獨立工具驗證。不適用：判斷認證邏輯對不對、權限有沒有寫錯這類要讀懂程式意圖的問題，那要人或 agent 讀碼。

安全漏洞檢測與修復專家。在撰寫處理用戶輸入、認證、API 端點、敏感資料或 AI agent/MCP 工具的程式碼後主動使用。檢測機密資料外洩、SSRF、注入攻擊、不安全加密，對照 OWASP Top 10:2025、OWASP Top 10 for Agentic Applications 2026 與 OWASP GenAI LLM Top 10 2026。

資安套件情報雷達。每日掃描並精選「有效、熱門、自身安全」的資安套件/工具，聚焦 Nuxt 3 / Vue 3 / TypeScript（npm）、Go、Python (FastAPI) 技術棧。查詢已收錄套件的評估結論、安全狀態與選型建議時使用。