Skills in this repository
SkillsMP has collected 73 skills from codewhale-hq/Codewhale. Open a skill to review its source and details.
codewhale-hq/CodewhaleShowing 33 of 73 collected skills.
Review a change, module, or surface for exploitable defects — trust boundaries, authn/authz, injection, secret exposure, filesystem and network reach, dependency risk. Use when the user asks for a security review, audit, or vulnerability check of concrete…
Create or improve codewhale skills. Use when the user wants a new skill, wants to update an existing skill, or needs guidance on when a skill should be a skill versus MCP, hooks, tools, or a plugin scaffold.
Write a compact, decision-ready handoff so the next session (or the user) can continue without reconstructing the current one. Use when the session is ending, context is running low, the user asks for a handoff / 'pass the baton' / 'hand off', or a…
Use when managing, triaging, restarting, escalating, or summarizing Codewhale fleet runs and workers.
Install, update, trust, or inspect Codewhale skills from GitHub or local skill folders. Use when the user asks for available skills or wants a community skill installed.
Find and start a zero-environment local MCP server when the session lacks a capability that no available tool, project script, or ordinary local code can cover.
Greet the user when they explicitly try the hello-codewhale example.
Turn a sufficiently understood task into an ordered implementation plan with dependencies and verification. Orchestrate Codewhale’s native plan state; do not build a parallel planner.
Work with Feishu or Lark bots, docs, sheets, bitables, approval flows, and OpenAPI/MCP setup without hardcoding credentials.
Design, build, configure, or debug Model Context Protocol servers for codewhale, including stdio and HTTP/SSE transports.
Help a new contributor get productive on this checkout - inspect sync state against main, build, run the repository's exact verification gate, and produce a local what's-new digest. Never fetches, pulls, or modifies a dirty tree on its own. Explicit-only.
Exercise the real app/API/CLI and collect observable evidence; tests alone do not count as end-to-end verification.
Break a large, parallelizable goal into bounded work units, coordinate existing agent/worktree machinery, integrate, and verify. Explicit-only.
Choose and produce an appropriate chart/dashboard/visual explanation from data, with legible encodings and source/assumption notes.
Reproduce, minimize, localize, identify root cause, and distinguish diagnosis from an authorized fix. Prefer root-cause over symptom patches.
Read release notes/changelogs, update a defined dependency scope, handle breaking changes, and verify. Explicit-only; no broad update-everything by inference.
Write or update repository/product documentation: README, user guides, API docs, architecture, migration notes, and changelog material. This is not the Word-document artifact skill.
Compatibility alias for the docx skill. Prefer loading docx.
Create/edit/inspect Word documents using available managed or host capabilities.
Produce intentional, responsive, accessible UI work and perform visual QA instead of generic component assembly.
Carry an authorized, defined request or approved plan through scoped edits and proportionate verification. Skill loading is not write authorization by itself.
Ask one useful structured question at a time only when material product/implementation choices are genuinely missing; remember answers and produce a brief/spec. Discoverable facts should be investigated instead of asked.
Create/edit/inspect/verify slide decks and PPTX presentations.
Compatibility alias for the pptx skill. Prefer loading pptx.
Prepare a named version: preflight, version consistency, build/package, smoke test, checksums/notes, and release readiness. Publishing/tagging/deploy need separate authorization. Explicit-only.
Current external research using available web tools, primary sources where possible, links/citations, date awareness, synthesis, and unresolved uncertainty.
Improve clarity and reduce needless complexity after behavior is understood; preserve behavior and keep cleanup separate from correctness fixes.
Compatibility alias for the xlsx skill. Prefer loading xlsx.
Detect the project’s test stack, run the narrowest useful tests, create tests when authorized, and report coverage/gaps honestly.
Start/reuse a local app, wait for readiness, inspect rendered state/console/network, act from observed selectors, and verify with evidence.
Create/edit/analyze/verify spreadsheet workbooks including XLSX/CSV/TSV.
Run cargo check on the current Rust project to find compile errors
Use when working with deepseek-v4-pro or deepseek-v4-flash in thinking mode on multi-step or plan-driven tasks. Provides rules to prevent stale references, unverified plan assumptions, and vague plan output.