القائمة
Skills في هذا المستودع
جمع SkillsMP عدد ١٬٣١٣ من skills من jeffreytse/grimoire-core. افتح أي skill لمراجعة مصدره وتفاصيله.
jeffreytse/grimoire-coreعرض ٤٠ من أصل ١٬٣١٣ skills مجمعة.
Use when writing Solidity contracts that need randomness — NFT mints, lotteries, games — replacing insecure block variable entropy with Chainlink VRF or commit-reveal to prevent miner manipulation.
لغة النص الأصلي: الإنجليزية
Use when writing DeFi smart contracts that rely on price feeds, randomness, or external data — preventing oracle manipulation via TWAP, multiple oracle sources, and circuit breakers.
لغة النص الأصلي: الإنجليزية
Use when writing DeFi smart contracts with user-submitted transactions — implementing commit-reveal, slippage tolerance, and MEV-resistant patterns to prevent front-running and sandwich attacks.
لغة النص الأصلي: الإنجليزية
Use when writing Solidity smart contracts that transfer ETH or call external contracts — applying the Checks-Effects-Interactions pattern and ReentrancyGuard to prevent reentrancy attacks.
لغة النص الأصلي: الإنجليزية
Use when auditing a Solidity smart contract or reviewing a protocol before deployment — systematically checking all 10 OWASP Smart Contract Top 10 vulnerability classes with Slither/Foundry test procedures.
لغة النص الأصلي: الإنجليزية
Use when running workloads in cloud environments — enabling GuardDuty, Security Command Center, or Microsoft Defender, and deploying Falco for Kubernetes runtime threat detection.
لغة النص الأصلي: الإنجليزية
Use when writing serverless functions (AWS Lambda, Google Cloud Functions, Azure Functions) — validating event data from all trigger sources, preventing execution flow manipulation, and securing error handling.
لغة النص الأصلي: الإنجليزية
Use when writing serverless functions — assigning per-function IAM execution roles with minimal permissions, disabling unused triggers, and securing function URLs and API authentication.
لغة النص الأصلي: الإنجليزية
Use when managing secrets in serverless functions — replacing environment variable credentials with Secrets Manager or Parameter Store, auditing third-party Lambda layers, and preventing secret leakage in logs.
لغة النص الأصلي: الإنجليزية
Use when building or refactoring cloud-native applications to ensure portability, scalability, and operability across environments
لغة النص الأصلي: الإنجليزية
Use when estimating, forecasting, or auditing cloud infrastructure costs before provisioning, during architecture review, or at budget planning time
لغة النص الأصلي: الإنجليزية
Use when designing cloud network architecture — structuring VPCs with public/private subnets, using VPC endpoints for AWS service access, and implementing security groups as stateful firewalls to contain blast radius.
لغة النص الأصلي: الإنجليزية
Use when Kubernetes pods or cloud services need to access cloud APIs — replacing long-lived IAM keys with IRSA (AWS), Workload Identity (GCP), or Managed Identity (Azure) to eliminate credential leakage risks.
لغة النص الأصلي: الإنجليزية
Use when establishing or auditing business continuity for cloud systems that must recover from catastrophic failures, data loss, or prolonged outages
لغة النص الأصلي: الإنجليزية
Use when designing systems that must survive regional outages, minimize global latency, or meet geographic data residency requirements
لغة النص الأصلي: الإنجليزية
Use when deploying serverless functions at scale — setting reserved concurrency, SQS visibility timeouts, recursion detection, and budget alerts to prevent denial-of-service via financial resource exhaustion.
لغة النص الأصلي: الإنجليزية
Use when operating serverless functions in production — implementing structured logging, distributed tracing, anomaly-based alerting, and cold start monitoring to detect security incidents and performance degradation.
لغة النص الأصلي: الإنجليزية
Use when cloud costs are growing faster than usage, when preparing for budget reviews, or when seeking to reduce infrastructure spend without degrading performance
لغة النص الأصلي: الإنجليزية
Use when auditing a cloud-native application or infrastructure — systematically checking all 10 OWASP Cloud-Native Application Security Top 10 vulnerability classes with AWS CLI, kubectl, and Terraform commands.
لغة النص الأصلي: الإنجليزية
Use when designing a data governance policy covering data ownership, classification, access control, lifecycle management, and regulatory compliance
لغة النص الأصلي: الإنجليزية
Use when designing a new relational database schema, adding entities to an existing system, reviewing a schema for normalization issues, or planning migrations — before writing DDL or ORM models.
لغة النص الأصلي: الإنجليزية
Use when designing, building, or reviewing a data pipeline for ingestion, transformation, or analytics
لغة النص الأصلي: الإنجليزية
Use when designing a systematic data quality framework covering completeness, accuracy, consistency, timeliness, validity, and uniqueness across data pipelines and data warehouses
لغة النص الأصلي: الإنجليزية
Use when writing, reviewing, or optimizing SQL queries for correctness, performance, and maintainability
لغة النص الأصلي: الإنجليزية
Use when replacing a large or deeply integrated component of a system incrementally without creating a long-lived feature branch, by introducing an abstraction layer that allows old and new implementations to coexist.
لغة النص الأصلي: الإنجليزية
Use when a monorepo contains multiple independently versioned packages and each package needs its own changelog updated only when that package has actual changes.
لغة النص الأصلي: الإنجليزية
Use when designing a project structure, framework, or tooling setup and deciding how much explicit configuration to require from developers.
لغة النص الأصلي: الإنجليزية
Use when writing constructors, setters, or methods that accept or return mutable objects — to prevent callers from silently mutating internal state through shared object references.
لغة النص الأصلي: الإنجليزية
Use when you notice duplicated code, logic, data, or knowledge across a codebase and need to decide whether and how to consolidate it.
لغة النص الأصلي: الإنجليزية
Use when writing functions, modules, or services to assert internal assumptions — preconditions, postconditions, invariants — so that violated assumptions produce an immediate, loud error at the point of violation rather than propagating corrupt state…
لغة النص الأصلي: الإنجليزية
Use when contributing to a repository you cannot push to directly — to fork the repo, develop on your fork, keep it in sync with upstream, and submit changes via pull request without requiring write access to the canonical repository.
لغة النص الأصلي: الإنجليزية
Use when a team has scheduled releases, maintains multiple supported versions simultaneously, or operates in a regulated environment requiring formal release approval gates.
لغة النص الأصلي: الإنجليزية
Use when a team deploys continuously from a single mainline — to keep `main` always deployable, use short-lived feature branches, and ship via PR without release branches or long-lived parallel branches.
لغة النص الأصلي: الإنجليزية
Use when deploying to multiple environments (staging, pre-production, production) and needing a branch-per-environment promotion model that is simpler than GitFlow but more structured than GitHub Flow.
لغة النص الأصلي: الإنجليزية
Use when writing or reviewing code in a specific language or ecosystem — especially when contributors from different language backgrounds write in conflicting styles, or when code compiles but feels foreign to native speakers of the language.
لغة النص الأصلي: الإنجليزية
Use when reviewing or writing code that feels unnecessarily complex, clever, or hard to follow — to simplify implementation without losing correctness.
لغة النص الأصلي: الإنجليزية
Use when onboarding new engineers, tackling high-complexity problems, debugging subtle issues, or when code quality and knowledge sharing are priorities over individual throughput
لغة النص الأصلي: الإنجليزية
Use when evolving a public API, shared interface, or data schema in a way that must remain backward-compatible with existing consumers during the migration period.
لغة النص الأصلي: الإنجليزية
Use when writing or reviewing functions and modules — especially when callers encounter surprising side effects, error handling is inconsistent, or debugging requires tracing hidden state changes.
لغة النص الأصلي: الإنجليزية
Use when deciding how to handle a change in a code review workflow — to categorize each change as Ship (merge without review), Show (merge then notify), or Ask (open for discussion before merging), reducing review bottlenecks without eliminating oversight.
لغة النص الأصلي: الإنجليزية