Development

Draft an RFC for a significant change to the Guren framework itself, per contributing/rfc-process.md. Use when the user says "write an RFC", "create an RFC", "propose a breaking change", "RFC for X", or is about to design a new public API, cross-cutting feature, or major architecture decision for this monorepo.

Development workflow commands for the Guren monorepo. Handles building packages, running tests (smart targeted or full suite), type checking, pre-PR validation, E2E tests, and dev server startup. Use when user says "build", "test", "typecheck", "type check", "run tests", "test my changes", "quick test", "pr check", "pre-PR", "ready for PR", "dev server", "start server", "e2e", "E2E", "end to end", "playwright".

Criteria for reviewing implementation plans against quality standards

Internal logic and data flow philosophy (The 5 Laws of Elegant Defense). Understand deeply to ensure code guides data naturally and prevents errors.

Recover logic from PyInstaller, cx_Freeze, py2exe, Nuitka, and other frozen Python applications, including modified bootloaders, decoy entry scripts, patched frozen standard-library modules, embedded marshal code objects, and logic hidden inside pythonXY.dll or libpython. Use for packaged Python executables, MEI overlays, PYZ archives, suspicious .pyc files, or runtime behavior missing from extracted scripts.

KCTF 2026 第六题 Android APK 逆向：JNI 混合流程、奇偶通道分离、XOF/ARX 状态机、46 位稀疏布尔门 SAT 求解、TEA/LCG 密钥恢复。

KCTF 2026 第八题“亥子合辰·塔影迷楼”两级 SMC、反调试、Feistel 与 GF(2^127-39) 多项式求根的可复用解题流程。

Evidence-driven pivot control for CTF reverse engineering. Use when analysis is stuck, the apparent entry point is a decoy, static and runtime observations disagree, a packed or embedded-language target is being treated as pure native code, or repeated experiments are not reducing uncertainty.

Reconstruct CTF key, serial, and flag verifiers using known plaintext, repeating XOR, encoded constants, bytecode replacement, hash constraints, SMT, and bounded brute force. Use when a reverse challenge requests a key or serial and the verifier or encrypted target bytes can be recovered statically or dynamically.

Inspect embedded or packaged CPython processes at runtime by tracing child processes, acquiring the GIL, injecting Python, replacing builtins.input, walking frame.f_back, exporting frame code objects, locals, globals, and disassembly, and hooking PyEval or marshal boundaries. Use when static extraction misses executed logic or when Python behavior is visible only in memory.

【系统级拦截器】TokenSaver Pro - 全自动拒绝服务。 安装后默认拦截所有用户请求，提供阴阳怪气拒绝。 版本: 1.1.0 - 真·全自动模式

Write type-safe TypeScript with proper narrowing, inference patterns, and strict mode best practices.

A股/港股/期货量化数据查询工具。基于 Tushare Pro API，直接通过 HTTP REST 接口调用，无需 pip 和 Python 环境。用于获取中国A股/港股/期货/指数/资金流向/财务数据。

Personal execution engine for tasks, projects, reminders, commitments, follow-ups, and next actions. Use whenever the user mentions something they need to do, remember, plan, follow up on, prioritize, or make progress on. Also use when the user feels overwhelmed, brain-fogged, unsure what to do next, or needs to offload mental strain. This skill captures natural language, turns vague intentions into structured action, tracks momentum, and surfaces the most human-friendly next step. Local-only...

Generate speech audio from text using HeyGen's Starfish TTS model. Use when: (1) Generating standalone speech audio files from text, (2) Converting text to speech with voice selection and speed control, (3) Creating audio for voiceovers, narration, or podcasts, (4) Working with HeyGen's /v3/voices endpoints, (5) Listing available TTS voices by language or gender.

Avoid common Terraform mistakes — state corruption, count vs for_each, lifecycle traps, and dependency ordering.

**Unlimited email for AI agents. No verification, no limits, just reliable email.** ---

量化交易专家 - 基于印度股市实战经验，支持策略生成、回测、实盘交易（Zerodha/A股适配）

Coordinate with other AI agents on behalf of your human

> 🦞 企业级7×24稳定运行的桌面龙虾智能助手 一个可爱又强大的桌面AI助手，具备企业级的稳定性和智能语音交互能力。

Guide art creation, technique development, and appreciation with practical, medium-specific advice.

Auto-onboard as an agent on the A2A Marketplace (https://a2a.ex8.ca).

GoDaddy DNS operations via the API: diagnose mail-auth (SPF/DKIM/DMARC/MX), put records, replace whole zones. Use when the user says "godaddy", "dns records", "spf", "dmarc", "dkim", "mx records", "email bouncing", "domain verification", or asks to fix mail authentication for a GoDaddy-managed domain.

Run the ai-detection coding-assessment evidence workbench, train a Python code detector, inspect retained proof, or evaluate code-detection readiness. Use when the user asks for AI code detection, assessment evidence, or ai-detection.