skills

API security best practices, OWASP API Security Top 10 2023, authentication, authorization, rate limiting, and API gateway security. Use when securing REST APIs, GraphQL, OAuth 2.0 implementations, or API gateway configurations.

Cloud security best practices for AWS, GCP, and Azure. Use when securing cloud infrastructure, configuring IAM, hardening S3 buckets, setting up VPC security, compliance (SOC2, ISO 27001), or auditing cloud resources for misconfigurations.

Container and Kubernetes security hardening, image scanning, runtime protection, and supply chain security. Use when securing Docker containers, Kubernetes clusters, scanning images for vulnerabilities, or implementing runtime security controls.

Central dispatcher for the kinhluan skills ecosystem. Use when the user says "dùng skill phù hợp", "use right skill", "kinhluan skills", or when multiple skills could apply. Detects workflow stage, artifact existence, and intent to route to the correct skill.

Offensive security, penetration testing, and vulnerability exploitation. Use when conducting security assessments, red team exercises, web application pentesting, network exploitation, or learning ethical hacking techniques. Covers PTES methodology, reconnaissance, exploitation, post-exploitation, and reporting.

Security threat modeling and risk assessment using STRIDE, Attack Trees, and DREAD scoring. Use when designing secure architecture, conducting security design reviews, assessing risks, or creating threat models for applications, systems, or cloud infrastructure.

Generate scientific figures, diagrams, and illustrations using AI image models (DALL-E, Midjourney, Stable Diffusion) from research content. Use when creating visuals for slides, papers, or posters. Converts technical concepts into publication-ready imagery through structured prompts.

Generate scientific figures, diagrams, and illustrations using AI image models (DALL-E, Midjourney, Stable Diffusion) from research content. Use when creating visuals for slides, papers, or posters. Converts technical concepts into publication-ready imagery through structured prompts.

Track, log, compare, and reproduce experiments. Use when running experiments, recording results, comparing baselines, debugging poor performance, analyzing results, or preparing results tables for a paper.

Self-review a paper or thesis chapter before sharing with advisor or submitting. Simulates tough reviewer feedback to identify weaknesses before external review. Use when finishing a draft, preparing for advisor meeting, or doing pre-submission sanity check.

Audit a research paper against its public codebase to detect mismatches between claims and implementation. Use when reviewing papers with code, verifying reproducibility, or checking for implementation gaps. Inspired by Feynman's /audit workflow.

Audit a research paper against its public codebase to detect mismatches between claims and implementation. Use when reviewing papers with code, verifying reproducibility, or checking for implementation gaps. Inspired by Feynman's /audit workflow.

Monitor a research topic for new papers, trends, and breakthroughs. Set up recurring watches on arXiv, Semantic Scholar, or specific authors/venues. Use when tracking a fast-moving field, waiting for follow-up work, or maintaining a living literature review. Inspired by Feynman's /watch workflow.

Monitor a research topic for new papers, trends, and breakthroughs. Set up recurring watches on arXiv, Semantic Scholar, or specific authors/venues. Use when tracking a fast-moving field, waiting for follow-up work, or maintaining a living literature review. Inspired by Feynman's /watch workflow.

Generate presentation slides from research content (paper, thesis, markdown) using Python (python-pptx), LaTeX Beamer, Marp, or reveal.js. Use when converting written research into presentation decks, automating figure insertion, or creating reproducible slide templates.

Generate presentation slides from research content (paper, thesis, markdown) using Python (python-pptx), LaTeX Beamer, Marp, or reveal.js. Use when converting written research into presentation decks, automating figure insertion, or creating reproducible slide templates.

Survey State-of-the-Art literature on a research topic. Use when asked to find papers, survey a field, map the research landscape, identify gaps, or build a literature matrix. First step in any research workflow.

Define the Expertise Protocol for all agents in the kinhluan skills ecosystem. Use when setting up agent behavior, defining agent roles, or clarifying the boundary between agent recommendation and user decision. Ensures agents act as domain experts while respecting user sovereignty.

Define the Expertise Protocol for all agents in the kinhluan skills ecosystem. Use when setting up agent behavior, defining agent roles, or clarifying the boundary between agent recommendation and user decision. Ensures agents act as domain experts while respecting user sovereignty.

Use before any major initiative, architecture decision, or competitive strategy choice. Triggers on "should we build this?", "how do we compete?", "is the timing right?", or when evaluating resource allocation. Scores five parallel factors (Tao/Heaven/Earth/Command/Method) → go/caution/stop verdict.

Strategic frameworks for Product/Business Owners. Use this skill for Product Market Research, defining Jobs-To-Be-Done (JTBD), understanding Diffusion of Innovations, planning MVPs, separating deployment (Ship) from business launch (Release), product metrics, A/B testing, pricing, and go-to-market strategy.

Professional C4 model architecture hub for "Design-to-Code Sync". Use this skill to navigate the C4 hierarchy, map diagrams to stakeholders, avoid architectural anti-patterns, and choose the right level for designing or documenting existing codebases.

Apply Clean Architecture principles (Dependency Rule, layers, boundaries) to design maintainable, testable systems. Use when structuring code, defining component boundaries, or choosing between layered/hexagonal/onion architectures. Maps to C4 Model L3 Components and DDD Tactical patterns.

Apply Clean Architecture principles (Dependency Rule, layers, boundaries) to design maintainable, testable systems. Use when structuring code, defining component boundaries, or choosing between layered/hexagonal/onion architectures. Maps to C4 Model L3 Components and DDD Tactical patterns.

Docker containerization best practices and patterns for production deployment. Multi-stage builds, security scanning, health checks, compose, BuildKit, and distroless images.

Federated learning with Deep Q-Networks for privacy-preserving optimization. Domain-specific skill — only route when user explicitly mentions federated learning, FL, DQN, or privacy-preserving distributed RL.

Modern Go (Golang) development best practices (2024-2025). Use for project setup, modules, generics, concurrency, testing, HTTP/gRPC services, databases, CLI, linting, Docker, and production deployment.

Modern JavaScript and TypeScript development best practices (2024-2025). Use for frontend, backend, full-stack, React/Next.js, Node.js, testing, linting, and production deployment.

Use when validating that a real-world problem exists before defining JTBD or writing code. Triggers on "is there demand for this?", "how do I validate this idea?", "should we build this?", or before any MVP scope decision. Combines multiple signal sources to produce a Problem Statement with confidence level.

Product analytics and experimentation frameworks. Use for defining metrics, designing A/B tests, analyzing funnels and cohorts, measuring feature impact, and setting up analytics infrastructure.

User research methods for product teams. Use for creating personas, journey mapping, usability testing, card sorting, and heuristic evaluation to build user-centered products.

Modern Python development best practices (2024-2025). Use this skill for project setup, dependency management, typing, testing, linting, async patterns, FastAPI, SQLAlchemy, Pydantic, and production deployment.

Job scheduling algorithms for parallel, distributed, and real-time systems. Use for OS scheduling, cloud resource allocation, workflow optimization, and research on heuristic/metaheuristic/ML-based approaches.

Systematically extract lessons from tasks, compress them into reusable rules, and store them in the appropriate memory tier (Local, Global, or Private). Use this skill at the end of every major mission or experiment to build your 'Second Brain'.

Establish the strategic rationale for a product or feature before building. Use this skill when evaluating a new product idea, justifying an initiative to stakeholders, validating whether a feature is worth building, or preparing a pitch document. Combines Value Proposition Canvas (structured analysis) with Amazon's Working Backwards PR/FAQ (narrative synthesis) in a 2-phase workflow.

Polish paper for Q1 journal submission (ISI/Scopus). Use after paper draft is complete — handles notation sync with thesis, De-AI/De-translation protocol, and Q1 results table standards.

Write conference papers (4-6 pages), poster abstracts, and prepare oral/poster presentations. Use when targeting conferences like NeurIPS, ICML, CVPR, ACL, IEEE venues, or preparing conference presentations.

Write research progress reports for advisors, committee meetings, and funding agencies. Use when preparing monthly/quarterly reports, meeting notes with advisor, or annual progress summaries.

Prepare for PhD/Master's proposal defense — slide structure, committee Q&A simulation, proposal presentation, and defense logistics. Use when preparing to defend your research proposal before the committee.

Write technical reports — experiment reports, system design documents, code documentation, and internal research memos. Use when documenting technical work that doesn't fit paper format.