skm

Comprehensive health check of Claude Code skill ecosystem — cross-check registry.yaml, disk, symlinks, INDEX.md, and frontmatter validation. Use after skill restructuring or periodically.

Audit Claude Code settings.json for security vulnerabilities — detect allow-bypasses-deny, missing sensitive file denies, and overly broad permissions. Use after any settings.json change.

Use this skill whenever the user wants to do anything with PDF files. This includes reading or extracting text/tables from PDFs, combining or merging multiple PDFs into one, splitting PDFs apart, rotating pages, adding watermarks, creating new PDFs, filling PDF forms, encrypting/decrypting PDFs, extracting images, and OCR on scanned PDFs to make them searchable. If the user mentions a .pdf file or asks to produce one, use this skill.

UI/UX design intelligence. 50 styles, 21 palettes, 50 font pairings, 20 charts, 9 stacks (React, Next.js, Vue, Svelte, SwiftUI, React Native, Flutter, Tailwind, shadcn/ui). Actions: plan, build, create, design, implement, review, fix, improve, optimize, enhance, refactor, check UI/UX code. Projects: website, landing page, dashboard, admin panel, e-commerce, SaaS, portfolio, blog, mobile app, .html, .tsx, .vue, .svelte. Elements: button, modal, navbar, sidebar, card, table, form, chart. Styles: glassmorphism, claymorphism, minimalism, brutalism, neumorphism, bento grid, dark mode, responsive, skeuomorphism, flat design. Topics: color palette, accessibility, animation, layout, typography, font pairing, spacing, hover, shadow, gradient. Integrations: shadcn/ui MCP for component search and examples.

Toggle peon-ping sound notifications on/off. Use when user wants to mute, unmute, pause, or resume peon sounds during a Claude Code session.

Use when installing packages, adding dependencies, or running package manager commands. Triggers on npm install, npm add, package installation, dependency management.

Expert quantitative analyst for financial modeling, algorithmic trading, and risk analytics. Use when developing trading strategies, backtesting, risk analysis, or quantitative research. Triggers on "strategy", "backtest", "Sharpe", "VaR", "quant", "alpha", "pandas", "numpy", "quantlib", "zipline", "backtrader", "ta-lib", "yfinance", "ccxt".

React and Next.js performance optimization guidelines from Vercel Engineering. This skill should be used when writing, reviewing, or refactoring React/Next.js code to ensure optimal performance patterns. Triggers on tasks involving React components, Next.js pages, data fetching, bundle optimization, or performance improvements.

Mid-session structured reflection — analyze patterns, compare against infrastructure (skills, memory, knowledge docs), produce actionable growth suggestions. Use mid-session to capture insights and reorient. Triggers on "/reflect", "回顧一下", "整理一下", "reflect".

Use when a bug involves platform/OS behavior, third-party service quirks, or any issue where the root cause is outside your codebase. Also use when 3+ fix attempts have failed without understanding why. Triggers on fullscreen, window level, permissions, sandbox, codesign, notarization, OS-specific behavior, Linux window manager behavior, Windows API quirks, Electron/Tauri platform APIs, browser compatibility issues, or any "works on my machine" cross-OS scenario.

RSS feed discovery, preview, and RSSHub management. Use when user mentions RSS, feed, RSSHub, subscribing to blogs, or discovering feeds. Triggers on "rss", "feed", "訂閱", "RSS", "RSSHub", "rss-discover".

Rust + Tauri 2 best practices — auto-applied when writing Rust/Tauri code. Use when writing, reviewing, or modifying Rust or Tauri code. Triggers on ".rs", "Cargo.toml", "tauri", "rust", "Rust".

Create new skills, modify and improve existing skills, and measure skill performance. Use when users want to create a skill from scratch, update or optimize an existing skill, run evals to test a skill, benchmark skill performance with variance analysis, or optimize a skill's description for better triggering accuracy. Triggers on "create skill", "build skill", "improve skill", "test skill", "optimize description".

Guide to negotiating technology services agreements, professional services contracts, and commercial B2B transactions. Provides three-position frameworks (provider-favorable, balanced, client-favorable), deal-size tactics, objection handling templates, and concession roadmaps. Use when: (1) Developing negotiation strategies for SaaS, cloud, or managed services agreements, (2) Preparing position papers and fallback positions, (3) Responding to counterparty objections and demands, (4) Creating concession roadmaps that protect critical interests, (5) Assessing tactics based on deal value and leverage, or (6) Structuring balanced outcomes for liability, IP, payment, SLA, or warranty provisions.

Scan and report technical debt in the codebase. Use after completing a feature or at session end.

Framework for assessing IT service providers, technology vendors, and third-party partners. Creates structured risk assessments across financial, operational, compliance, security, and reputational dimensions with regulatory checklists (GDPR, DORA, NIS2, SOX). Use when: (1) Evaluating new vendors or technology providers, (2) Conducting third-party risk assessments for procurement, (3) Performing critical vendor due diligence for regulatory compliance, (4) Creating vendor onboarding documentation, (5) Establishing ongoing vendor monitoring processes, (6) Assessing vendor concentration risk, or (7) Generating executive-level vendor risk reports.

Checklist-driven manual smoke test for Midnight Wallet extension. Use when finishing a feature branch, before PR, or after major UI changes. Generates test checklist from current screens, guides user through each flow, collects pass/fail screenshots, outputs test report. Triggers on "smoke test", "test the wallet", "QA check", "manual test".

Review UI code for Web Interface Guidelines compliance. Use when asked to "review my UI", "check accessibility", "audit design", "review UX", or "check my site against best practices".

Auto-analyze git changes and generate Conventional Commits messages. Use when need to commit changes with proper commit messages. Triggers on "提交", "commit", "gh-commit", "/gh-commit", "自動 commit".

Create GitHub Issue with structured description. Use when creating issue, reporting bug, requesting feature. Triggers on "/gh-issue", "create issue", "建立 issue", "報 bug", "feature request".

Create Pull Request with structured description. Use when creating PR, opening pull request. Triggers on "/gh-pr", "create pr", "建立 PR", "開 PR".

Push local commits to remote. Use when need to push commits to remote. Triggers on "推送", "push", "gh-push", "/gh-push", "推上去".

Create GitHub Release with auto-generated release notes. Use when creating GitHub releases. Triggers on "release", "發布", "gh-release", "/gh-release", "建立 release".

Create git tag. Use when creating version tags. Triggers on "tag", "打 tag", "gh-tag", "/gh-tag", "標記版本".

When the user wants to apply psychological principles, mental models, or behavioral science to marketing. Also use when the user mentions 'psychology,' 'mental models,' 'cognitive bias,' 'persuasion,' 'behavioral science,' 'why people buy,' 'decision-making,' or 'consumer behavior.' This skill provides 70+ mental models organized for marketing application.

Write Midnight Compact smart contracts with correct syntax and patterns. Use when writing, reviewing, or debugging .compact files, implementing AMM/DEX/token contracts, or asking about Compact language features. Covers type system, ledger ADTs, circuits, witnesses, privacy model, token standards, math workarounds, and known bugs.

Review incoming one-way (unilateral) commercial NDAs, producing a clause-by-clause issue log with preferred redlines, fallbacks, rationales, owners, and deadlines. Use when reviewing NDAs, confidentiality agreements, or non-disclosure terms. Triggers on "NDA", "review NDA", "confidentiality agreement", "non-disclosure".

Fast browser automation CLI optimized for AI agents with semantic element references and accessibility tree. Use when needing AI-friendly web scraping, element interaction with minimal context, or structured data extraction. Triggers on "agent browser", "semantic web scraping", "AI browser automation", "accessibility tree", "web data extraction".

Generate a working CLI from any API, then wrap it in a Claude Code skill. Point it at API docs, a live URL, or a peek-api capture and get a dual-mode Commander.js CLI (human + agent output) plus a ready-to-use skill folder. Use when user wants to wrap an API in a CLI, generate a CLI from API docs, turn an API into a command-line tool, scaffold a CLI from discovered endpoints, or create a skill for an API.

Create SEO-optimized marketing content with consistent brand voice. Includes brand voice analyzer, SEO optimizer, content frameworks, and social media templates. Use when writing blog posts, creating social media content, analyzing brand voice, optimizing SEO, planning content calendars, or when user mentions content creation, brand voice, SEO optimization, social media marketing, or content strategy.

Review legal contracts, NDAs, employment agreements, SaaS terms, and M&A documents. Identifies unfavorable terms, suggests redlines, and compares to market standards. Use for contract analysis, due diligence, or negotiation prep.

Analyze GitHub repos and auto-generate documentation with Mermaid architecture diagrams. Use when generating documentation for repos. Triggers on "/deepwiki", "生成文件", "repo documentation", "分析 repo".

UX/Product design process reference with Pencil MCP integration. Covers Develop→Validate stages where Claude can execute directly. Earlier stages (Discover/Define) handled as input gates. Use when designing screens, apps, or websites, reviewing design deliverables, or needing guidance on design methodology. Triggers on design process, UX flow, wireframe, mockup, design review, information architecture, user journey, design deliverables, design phase.

Build and deploy Midnight DApps with TypeScript SDK, wallet integration, and proof servers. Use when deploying contracts, integrating Lace wallet, setting up providers, debugging transaction errors, configuring proof servers, or building Next.js frontends for Midnight. Covers midnight-js, DApp Connector API, headless wallet SDK, indexer GraphQL, and deployment pipeline.

Summarize or extract text/transcripts from URLs, podcasts, and local files (great fallback for “transcribe this YouTube/video”).

Interact with Shiftee workforce management platform using browser automation. Use when approving leave requests, checking leave balances, viewing attendance, managing schedules, or handling employee requests on Shiftee. Triggers include "請假", "休假", "審核", "approve leave", "shiftee", "leave balance", "出勤", "排班".

Interact with Swingvy HR platform using browser automation. Use when submitting expense claims, checking claim status, approving claims, or managing expense reports on Swingvy. Triggers include "報帳", "請款", "expense claim", "swingvy", "submit expense", "approve claim".

Session wrap-up — save context, summarize, persist memory, growth suggestions. Use at the end of any coding or agent session. Triggers on "/done", "收工", "session done", "session cleanup", "結束", "清理", "wrap up", "存 session", "記錄這次 session".

OpenSpec smart router — auto-detect project state and guide to the correct next step. Use when working with OpenSpec, starting spec-driven development, or needing to know next steps. Triggers on "openspec", "spec-driven", "using openspec", "opsx".

OpenSpec multi-agent parallel implementation — read tasks.md, analyze dependencies, auto-create team for parallel execution. Use when implementing OpenSpec changes with parallel agents. Triggers on "team apply", "parallel apply", "opsx team", "opsx:team-apply".