Use when starting feature work that needs isolation from current workspace or before executing implementation plans - ensures an isolated workspace exists via native tools or git worktree fallback
ISO 27001 ISMS implementation and cybersecurity governance for HealthTech and MedTech companies. Use for ISMS design, security risk assessment, control implementation, ISO 27001 certification, security audits, incident response, and compliance verification. Covers ISO 27001, ISO 27002, healthcare security, and medical device cybersecurity.
Takes an approved plan from docs/plans/ and drives it to an open PR. Implements it by milestones, commits per milestone in the repo's style, and opens the PR against the repo's base branch. Use whenever the user approves a plan, says "ship it", "go", "start", "implement it", "do it", or asks to open a PR for already-planned work — or in Spanish "dale", "arrancá", "implementalo", "hacelo".
Access files and directories from mounted local filesystems. Use this skill when the user requests file operations such as "Read this file", "Write to that file", "List directory contents", or "Check if file exists".
Semantic search, similar content discovery, and structured research using Exa API. Use when you need semantic/embeddings-based search, finding similar content, or searching by category (company, people, research papers, etc.).
Analyze raw prompts, identify intent and gaps, match ECC components (skills/commands/agents/hooks), and output a ready-to-paste optimized prompt. Advisory role only — never executes the task itself. TRIGGER when: user says "optimize prompt", "improve my prompt", "how to write a prompt for", "help me prompt", "rewrite this prompt", or explicitly asks to enhance prompt quality. Also triggers on Chinese equivalents: "优化prompt", "改进prompt", "怎么写prompt", "帮我优化这个指令". DO NOT TRIGGER when: user wants the task executed directly, or says "just do it" / "直接做". DO NOT TRIGGER when user says "优化代码", "优化性能", "optimize performance", "optimize this code" — those are refactoring/performance tasks, not prompt optimization.
Manages deprecation and migration. Use when removing old systems, APIs, or features. Use when migrating users from one implementation to another. Use when deciding whether to maintain or sunset existing code.
This is main documentation for the AgentStack skill, which provides instructions and guidelines for how to use this skill effectively in various scenarios.
Shotgun metagenomics workflow with host-depletion-aware QC, taxonomic profiling, functional profiling, AMR follow-up, and reproducible community output tables.
Drug-Drug Interaction Checker - Check interactions between multiple drugs using FDA interaction data, PubChem compound info, and ChEMBL target overlap analysis. Use this skill for clinical pharmacology tasks involving get drug interactions by drug name get compound by name get target by name. Combines 3 tools from 3 SCP server(s).
Generate narrative chronicles of developer work from git history, session transcripts, and memory files. Use when the user asks "what did I do today/this week", wants a work summary, daily/weekly chronicle, standup notes, or portfolio narrative. Also triggers on "chronicle", "dev diary", "work story", "recap", or "standup".
Bridge THIS Claude Code or Codex session to Telegram, Discord, Feishu/Lark, QQ, or WeChat so the
user can chat with Claude from their phone. Use for: setting up, starting, stopping,
or diagnosing the claude-to-im bridge daemon; forwarding Claude replies to a messaging
app; any phrase like "claude-to-im", "bridge", "消息推送", "消息转发", "桥接",
"连上飞书", "手机上看claude", "启动后台服务", "诊断", "查看日志", "配置".
Subcommands: setup, start, stop, status, logs, reconfigure, doctor.
Do NOT use for: building standalone bots, webhook integrations, or coding with IM
platform SDKs — those are regular programming tasks.
Relentlessly interviews you one question at a time to extract what's in your head into a durable, searchable capture file. Activates on "grill me", "grill me about <X>", "stress-test this plan", "pressure-test my thinking on <X>", "interview me about <X>", "drill me on <X>", "get this out of my head", "discovery session on <X>", "I need to think through <X> properly", or any request to externalize a process, plan, decision, or mental model. Walks each branch of the decision tree, gives a recommended answer with every question, and CHECKPOINTS every answer to a markdown file on disk so nothing is lost as the context window fills. NOT a content generator — it extracts, it doesn't write deliverables.
Wenn es um Geldwaesche: Verhandlung, Vergleich und Eskalation in Geldwäscheprävention, AML und KYC geht: entwickelt Verhandlungsziel, Vergleichskorridor und Eskalationspfad; liefert eine Verhandlungs- oder Eskalationslinie mit Optionen.
Genera la BASE DE IMPORTACIÓN a la AEAT del Impuesto sobre Sociedades desde la contabilidad, Balance/PyG formulado o carpeta de expediente: el fichero BOE `.200` (conforme al DR200 de ancho fijo que importa Sociedades WEB) y el XML mod200 validado contra el XSD oficial. Úsala cuando el usuario quiera "picar/exportar la declaración", "generar la base de importación AEAT", "el DR200", "el XML del 200", correr un expediente por carpeta o procesar **muchas declaraciones en lote** para dejar de teclearlas a mano. Consume el motor por servicio (`/exportar-aeat`, ADR-001); el número lo firma el motor (fail-closed).
When you finish a task that changed files and you did not commit, queue the uncommitted changes in Historia's CMDR list with a short note, and show the historia-cmdr command so the user can rerun it. Use at the end of any task that left uncommitted code changes.
Detect Insecure Direct Object Reference (IDOR) vulnerabilities in a codebase using a three-phase approach: recon (find candidates), batched verify (check authorization in parallel subagents, 3 candidates each), and merge (consolidate batch results). Checks endpoints for missing ownership or authorization checks on user-supplied identifiers. Requires sast/architecture.md (run sast-analysis first). Outputs findings to sast/idor-results.md. Use when asked to find IDOR or authorization bypass bugs.