Full security audit and hardening workflow covering OWASP Top 10, dependency scanning, secrets management, and infrastructure security. Use when auditing security, hardening an application, or responding to vulnerability reports. Triggers on: security, harden, vulnerability, OWASP, audit, CVE, penetration.
The HyperFrames composition contract — build one renderable project. Use for composition structure, the `data-*` timing attributes, `class="clip"`, tracks, sub-compositions, variables, framework-owned media playback, deterministic-render rules, and validation. Read before writing composition HTML.
Fetch a YouTube video's transcript, summarize it, or answer questions about its content with timestamped links. Use when the user shares a YouTube video or asks about one.
Creating interactive data visualisations using d3.js. This skill should be used when creating custom charts, graphs, network diagrams, geographic visualisations, or any complex SVG-based data visualisation that requires fine-grained control over visual elements, transitions, or interactions. Use this for bespoke visualisations beyond standard charting libraries, whether in React, Vue, Svelte, vanilla JavaScript, or any other environment.
Trae a este proyecto las mejoras que la plantilla de origen recibió después de la instanciación — lee .template-origin, calcula el diff del tooling (skills, hooks, scripts, workflows) contra la plantilla actual y propone aplicarlo. Úsalo cuando la persona quiera actualizar/sincronizar el proyecto con la plantilla (p. ej. "actualiza la plantilla", "trae las mejoras nuevas del template").
When implementation intent is clear — deliver the authorized outcome with a small correct diff, meaningful tests, and an uncommitted verification handoff.
Recommend and execute an efficient Astra, Sol, or Luna route with GPT-5.6 compatibility with low-through-max reasoning for Codex project work. Prefer bounded direct tool concurrency, but automatically create or reuse a model-specific leaf agent when route-fit benefit clearly exceeds startup and aggregation overhead; no extra user permission is required. Use for code changes, tests, reviews, routed implementation, model recommendations, usage queries, retuning, and requests to disable, exit, restore, or check this Skill for the current project. Use the legacy strict state machine only when the user explicitly requests strict ledger auditing. Never auto-select Ultra or create a new top-level Codex task.
Sally is the front door for the agent development lifecycle (ADLC) of every skill in this skills repository. She lands changes herself (create, change, rename, retire, check in, drain the queue, package installs) as a branch + PR that the maintainer merges, and hands status and drift questions to the read-only sally-audit skill. Use whenever the maintainer asks to create, change, rename, retire, check in, or install any agent or skill, or says 'Sally'. Works from any surface (desktop app, phone, claude.ai web, cloud/scheduled); when the current session can't write to GitHub she queues the change in a claude.ai Project instead of improvising.
Use when when developing or extending a WPF-based GUI application (such as MsdialGuiApp) that requires declarative, composable handling of user interactions, real-time data binding, and asynchronous event streams.
Access atypica.ai's AI-powered business research capabilities through MCP protocol. Use when users need to conduct consumer research, market analysis, product testing, or generate insights about business questions. Supports creating research sessions, sending messages with AI execution, handling user interactions (question prompts and plan confirmations), retrieving conversation history, checking research status, accessing generated reports/podcasts, and searching AI personas for interviews.
Use whenever you need to understand how this theme works — adding pages, managing content, configuring the site, using partials/components/modules, project architecture, scripts, or styling/theming (Tailwind v4, Bootstrap 5, or a hybrid — verify which). Use for ANY question about the structure, usage, or customization of the template or theme.
Red team engagement planning is the foundational phase that defines scope, objectives, rules of engagement (ROE), threat model selection, and operational timelines before any offensive testing begins.
Detects screenshot submission issues including launch-screen-only assets and cross-platform UI references, enforcing Guideline 2.3.3 which requires screenshots to show the app in actual use.
Orchestrate a comprehensive legacy system modernization using the strangler fig pattern, enabling gradual replacement of outdated components while maintaining continuous business operations through ex
Drafts a reply to an email thread in the user's voice. Use when asked to reply to, answer or follow up on an email or message thread. Don't use it for writing a new email from scratch with no thread to reply to.