qwen-coder-epic

Use when querying Jira issues, searching Confluence pages, creating tickets, updating documentation, or integrating Atlassian tools via MCP protocol.

Use when building PHP applications with modern PHP 8.3+ features, Laravel, or Symfony frameworks. Invoke for strict typing, PHPStan level 9, async patterns with Swoole, PSR standards.

Structured security event logging with JSON format, 90-day retention, log rotation, and querying for SOC 2 and ISO 27001 compliance.

Root-level credential inheritance for agent delegation chains with access logging and permission validation. Use for multi-level agent workflows.

OAuth 2.0 Authorization Code Flow with PKCE for Atlassian, GitHub, and Google providers. Handles token exchange and secure storage. Use PROACTIVELY for OAuth flows.

Performance optimization for token usage (15% reduction), latency (P95 <500ms), memory (<10% growth), and context compression (75%+) with comprehensive benchmarking. Use for optimizing system performance.

AES-256-GCM credential encryption with PBKDF2 key derivation (100k iterations) and OS keyring integration. Use for secure storage of secrets, API keys, and tokens.

Comprehensive security control scanning for encryption (AES-256-GCM), key derivation (PBKDF2 100k), session management (8h TTL, 30m idle), OAuth PKCE, and audit retention (90 days). Use for security audits and compliance checks.

User session lifecycle management with 8-hour TTL, 30-minute idle timeout, and thread-safe operations. Use for session creation, tracking, and cleanup.

OAuth token lifecycle management with automatic refresh before expiry, 15-minute buffer, and refresh token rotation. Use for maintaining valid OAuth tokens.

Bug fix workflow with 5 phases from triage to deployment. Use for systematic bug resolution.

Code review workflow with 4 parallel reviews and consolidation. Use PROACTIVELY before merging significant changes.

Feature development workflow with 4 phases from planning to deployment. Use for structured feature implementation.

Fix all code quality issues including black formatting, isort imports, flake8 linting, and mypy type checking. Use when preparing code for commit or improving code quality.

Use when reviewing pull requests, conducting code quality audits, or identifying security vulnerabilities. Invoke for PR reviews, code quality checks, refactoring suggestions.

Create well-formatted commits with conventional commit messages and emoji. Use when committing code changes, preparing commits for review, or splitting large changes into logical commits.

Use when investigating errors, analyzing stack traces, or finding root causes of unexpected behavior. Invoke for error investigation, troubleshooting, log analysis, root cause analysis.

Use when setting up CI/CD pipelines, containerizing applications, or managing infrastructure as code. Invoke for pipelines, Docker, Kubernetes, Terraform, GitHub Actions, GitOps.

Use when defining new features, gathering requirements, or writing specifications. Invoke for feature definition, requirements gathering, user stories, EARS format specs.

Coordinate comprehensive PR reviews with 6 specialized roles (Product Manager, Developer, QA, Security, DevOps, UI/UX). Use PROACTIVELY for all pull request reviews before merging.

Manage project todos in todos.md file including add, complete, remove, list, and due date tracking. Use when managing project tasks, tracking action items, or organizing work.

Use when building Python 3.11+ applications requiring type safety, async programming, or production-grade patterns. Invoke for type hints, pytest, async/await, dataclasses, mypy configuration.

Use when building React 18+ applications requiring component architecture, hooks patterns, or state management. Invoke for Server Components, performance optimization, Suspense boundaries, React 19 features.

Use when conducting security audits, reviewing code for vulnerabilities, or analyzing infrastructure security. Invoke for SAST scans, penetration testing, DevSecOps practices, cloud security reviews.

Use when writing tests, creating test strategies, or building automation frameworks. Invoke for unit tests, integration tests, E2E, coverage analysis, performance testing, security testing.

UI/UX design intelligence with 67 styles, 96 color palettes, 57 font pairings, 25 chart types, and 13 tech stack guidelines. Use for UI design, UX optimization, color selection, typography pairing, landing page creation, and design system generation.

Creating algorithmic art using p5.js with seeded randomness and interactive parameter exploration. Use this skill when users request creating art using code, generative art, algorithmic art, flow fields, or particle systems.

Applies Anthropic's official brand colors and typography to any artifact that may benefit from having Anthropic's look-and-feel. Use when brand colors, style guidelines, or company design standards apply.

Create beautiful visual art in .png and .pdf documents using design philosophy. Use when the user asks to create a poster, piece of art, design, or other static piece.

Guide users through a structured workflow for co-authoring documentation. Use when user wants to write documentation, proposals, technical specs, decision docs, or similar structured content.

Use this skill whenever the user wants to create, read, edit, or manipulate Word documents (.docx files). Triggers include: any mention of "Word doc", "word document", ".docx", or requests to produce professional documents with formatting like tables of contents, headings, page numbers, or letterheads.

Create distinctive, production-grade frontend interfaces with high design quality. Use when building web components, pages, artifacts, dashboards, React components, HTML/CSS layouts, or styling any web UI.

A set of resources to help write all kinds of internal communications. Use when asked to write status reports, leadership updates, 3P updates, company newsletters, FAQs, incident reports, project updates, etc.

Guide for creating high-quality MCP (Model Context Protocol) servers that enable LLMs to interact with external services through well-designed tools. Use when building MCP servers to integrate external APIs or services.

Use this skill whenever the user wants to do anything with PDF files. This includes reading or extracting text/tables from PDFs, combining or merging multiple PDFs into one, splitting PDFs apart, rotating pages, adding watermarks, creating new PDFs, filling PDF forms, encrypting/decrypting PDFs, extracting images, and OCR on scanned PDFs to make them searchable. If the user mentions a .pdf file or asks to produce one, use this skill.

Use this skill any time a .pptx file is involved in any way — as input, output, or both. This includes: creating slide decks, pitch decks, or presentations; reading, parsing, or extracting text from any .pptx file; editing, modifying, or updating existing presentations; combining or splitting slide files; working with templates, layouts, speaker notes, or comments.

Guide for creating effective skills. Use when users want to create a new skill (or update an existing skill) that extends Qwen Code's capabilities.

Knowledge and utilities for creating animated GIFs optimized for Slack. Provides constraints, validation tools, and animation concepts. Use when users request animated GIFs for Slack.

Toolkit for styling artifacts with a theme. These artifacts can be slides, docs, HTML pages, etc. There are 10 pre-set themes with colors/fonts.

Suite of tools for creating elaborate, multi-component HTML artifacts using modern frontend web technologies (React, Tailwind CSS, shadcn/ui). Use for complex artifacts requiring state management, routing, or shadcn/ui components.