Menú
Skills en este repositorio
SkillsMP ha recopilado 1313 skills de jeffreytse/grimoire-core. Abre una skill para revisar su origen y sus detalles.
jeffreytse/grimoire-coreMostrando 40 de 1313 skills recopiladas.
Use when building a mobile app that collects, processes, or transmits user data — implementing data minimization, purpose limitation, consent management, and user data controls required by app store policies and privacy regulations.
Idioma del texto original: inglés
Use when writing copy for push notifications or designing a push notification permission and delivery strategy
Idioma del texto original: inglés
Use when assessing network security posture before a production launch, after a security incident, during compliance assessment, or on a periodic security review cycle
Idioma del texto original: inglés
Use when designing network architecture for systems that handle sensitive data, require regulatory compliance, or need to contain blast radius from breaches
Idioma del texto original: inglés
Use when users report slow response times, when SLO latency budgets are breached, or when investigating the network layer as a performance bottleneck
Idioma del texto original: inglés
Use when investigating JavaScript bundle size, slow Time to Interactive, or preparing a performance budget for a web application
Idioma del texto original: inglés
Use when a system is slow, latency has regressed, CPU or memory usage is unexpectedly high, or before optimizing any code — to measure first, identify real bottlenecks, and prioritize fixes by impact.
Idioma del texto original: inglés
Use when provisioning infrastructure for a new system, preparing for anticipated traffic growth, or ensuring headroom before a major product launch
Idioma del texto original: inglés
Use when designing or auditing HTTP caching, CDN configuration, or application-level cache policies for a web service
Idioma del texto original: inglés
Use when a process shows continuously growing memory usage that doesn't stabilize, when OOM kills are occurring in production, or when heap dumps are needed to identify object accumulation
Idioma del texto original: inglés
Use when diagnosing web performance problems or preparing a performance audit for a website or web application
Idioma del texto original: inglés
Use when validating system performance before a launch, during capacity planning, after significant code or infrastructure changes, or when investigating SLO latency budget breaches
Idioma del texto original: inglés
Use when designing an A/B test or online controlled experiment to evaluate a product change
Idioma del texto original: inglés
Use when a new feature, product, or significant change needs to be defined before engineering begins — including greenfield features, major redesigns, API changes, or cross-team initiatives. Trigger when a problem or opportunity is validated and stakeholders…
Idioma del texto original: inglés
Use when writing user-facing release notes for a software product release
Idioma del texto original: inglés
Use when writing user stories, acceptance criteria, or backlog items for product features
Idioma del texto original: inglés
Use when starting a new sprint — to review the backlog, set the sprint goal, select stories, estimate capacity, and assign work before the team begins execution.
Idioma del texto original: inglés
Use when investigating the root cause of a defect, incident, or recurring failure and need to move beyond symptoms to the underlying systemic cause.
Idioma del texto original: inglés
Use when reviewing error budget consumption, setting burn rate alerts, or making reliability investment decisions based on budget status
Idioma del texto original: inglés
Use when defining or reviewing service reliability targets, error budgets, or SLI/SLO/SLA structures for a service
Idioma del texto original: inglés
Use when establishing reliability targets for services, defining error budgets for engineering teams, or negotiating service commitments with customers
Idioma del texto original: inglés
Use when validating incident response capabilities, onboarding new engineers to on-call, preparing for a major launch, or after significant architecture changes
Idioma del texto original: inglés
Use when your application consumes external or third-party APIs — configuring HTTP clients, validating TLS certificates, handling secrets, and sanitizing responses from upstream services.
Idioma del texto original: inglés
Use when building any API endpoint — especially authentication endpoints, resource-creation endpoints, and any operation with a per-user or per-tenant cost — to protect against abuse, brute force, and resource exhaustion.
Idioma del texto original: inglés
Use when implementing access control decisions — determining which users can perform which actions on which resources — in any API, web application, or service.
Idioma del texto original: inglés
Use when deploying a web application that serves HTML — especially one with user-generated content, third-party scripts, or inline JavaScript — to restrict what resources the browser may load or execute.
Idioma del texto original: inglés
Use when building an API or web service that needs to be called from browser JavaScript on a different origin — including public APIs, microservices accessed from SPAs, and third-party integrations.
Idioma del texto original: inglés
Use when storing sensitive data at rest — PII, health records, financial data, cryptographic keys, or any data that must remain confidential if storage media is compromised.
Idioma del texto original: inglés
Use when building or securing a GraphQL API — limiting query depth and complexity, disabling introspection in production, enforcing field-level authorization, and preventing batching abuse.
Idioma del texto original: inglés
Use when implementing JWT-based authentication or authorization — covering token generation, algorithm selection, validation, expiry, and revocation for stateless APIs.
Idioma del texto original: inglés
Use when designing encryption key lifecycle — generating, storing, rotating, and retiring cryptographic keys for application secrets, database encryption, and API signing keys.
Idioma del texto original: inglés
Use when building microservices that communicate with each other — implementing service-to-service mTLS, JWT propagation for user identity, and API gateway authentication to prevent lateral movement between services.
Idioma del texto original: inglés
Use when storing user passwords or credentials in a database — covers algorithm selection, work factor configuration, and migration from legacy hashing schemes.
Idioma del texto original: inglés
Use when configuring a new application, framework, or service — ensuring security is enabled out of the box by setting restrictive defaults for cookies, headers, database connections, and framework security features.
Idioma del texto original: inglés
Use when configuring any web server or application that serves HTTP responses to browsers — covers the full set of security response headers that harden against common attacks.
Idioma del texto original: inglés
Use when configuring HTTPS on a web server, API gateway, or load balancer — covers cipher suites, TLS version enforcement, certificate management, and HSTS.
Idioma del texto original: inglés
Use when you need to verify that a CORS policy is actually enforced correctly — after configuring CORS, before shipping an API, or during a security review. Tests origin reflection, null origin, subdomain bypass, wildcard-with-credentials, and preflight…
Idioma del texto original: inglés
Use when auditing third-party dependencies for known vulnerabilities, license issues, or supply chain risks
Idioma del texto original: inglés
Use when building an OAuth 2.0 authorization server or configuring CORS on OAuth endpoints — token, userinfo, revocation, and introspection endpoints each have different CORS requirements that differ from ordinary API CORS.
Idioma del texto original: inglés
Use when designing or reviewing authentication and authorization flows for web, mobile, or API systems
Idioma del texto original: inglés