Entry P1 category router for API security. Use when choosing between API recon, authorization, token abuse, and hidden-parameter workflows before any deeper API topic skill.

Proactively catch common AWS infrastructure mistakes before they happen. Use when creating or modifying AWS components — CloudFormation, CDK, Lambda, API Gateway, IAM, S3, CloudFront, EC2, Secrets Manager, or SSM — to apply hard-won deployment lessons and avoid known pitfalls.

Identifies API latency hotspots and bottlenecks with profiling tools, slow endpoint detection, suspected causes, and fix roadmap. Use for "latency profiling", "performance bottlenecks", "slow APIs", or "backend performance".

Default to using Bun instead of Node.js for all JavaScript/TypeScript operations including running files, testing, building, and package management.

Command-line interface for ChromaDB - A stateless CLI for managing vector database collections, documents, and semantic search. Designed for AI agents and automation via the ChromaDB HTTP API v2.

Use eth2-quickstart to autonomously deploy a hardened Ethereum node, install execution and consensus clients, configure validator metadata, expose RPC safely, and inspect node health with structured JSON output.

Command-line interface for Joplin workflows using the real joplin terminal backend

Command-line interface for Novita AI - An OpenAI-compatible AI API client for DeepSeek, GLM, and other models.

Command-line interface for PM2 - A stateless CLI for Node.js process management via the PM2 CLI. List, start, stop, restart processes, view logs, and manage system configuration.

Create Spring Boot Java Project Skeleton

Make HTTP API requests with curl. Use when calling REST APIs, making HTTP requests, testing endpoints, or working with web services via curl.

Query DeepWiki for repository documentation and structure. Use to understand open source projects, find API docs, and explore codebases.

Query DeepWiki for repository documentation and structure. Use to understand open source projects, find API docs, and explore codebases.

Unified documentation lookup for Bug Hunter agents. Uses Context Hub (chub) as primary source with Context7 API fallback. Provides verified library/framework documentation to prevent false positives and ensure correct fix patterns.

Write and maintain technical documentation. Trigger with "write docs for", "document this", "create a README", "write a runbook", "onboarding guide", or when the user needs help with any form of technical writing — API docs, architecture docs, or operational runbooks.

Auto-generate JSDoc, docstrings, README files, and API documentation.

Analyzes source code to automatically generate technical documentation and architecture diagrams. Use to maintain up-to-date API references and onboarding materials for engineering teams.

Write type-safe Postgres queries with Drizzle ORM (select/insert/update/delete, relations, new tables). Use when querying or mutating the database or adding a Drizzle table.

Fix incorrect SKILL.md files when a skill has wrong instructions or outdated API references

Fix incorrect SKILL.md files when a skill has wrong instructions or outdated API references

Identifies and fixes XSS, SQL injection, and command injection vulnerabilities with validation schemas, sanitization libraries, and safe coding patterns. Use for "input validation", "XSS prevention", "SQL injection", or "sanitization".

Install Flutter SDK via git clone and configure for all platforms

Get best practices for developing applications with Spring Boot.

Kotlin/Spring Boot patterns for Orca service - use when implementing backend features, writing services, repositories, or controllers

Fetches and references LangGraph Python documentation to build stateful agents, create multi-agent workflows, and implement human-in-the-loop patterns. Use when the user asks about LangGraph, graph agents, state machines, agent orchestration, LangGraph API, or needs LangGraph implementation guidance.

Use to set up health monitoring for SiftCoder daemon, memory store, or external dependencies (Ollama, Anthropic API). Pairs with monitors/ directory.

Secret-safe Claude Code sessions via nopeek CLI. Use when user asks about secrets, .env loading, credential safety, or keeping API keys out of conversation context.

Manage Node.js applications with PM2 process manager. Use for deploying, monitoring, and auto-restarting Node apps in production. Covers starting apps, viewing logs, setting up auto-start on boot, and managing multiple processes.

PostgreSQL expert for query optimization, indexing, extensions, and database administration

Authoritative reference for Anthropic products. Use when users ask about product capabilities, access, installation, pricing, limits, or features. Provides source-backed answers to prevent hallucinations about Claude.ai, Claude Code, and Claude API.

Review asynchronous Python code to identify race conditions, deadlocks, and inefficient patterns. Use when working with asyncio, aiohttp, or FastAPI.

Plan and execute upgrades for Python libraries, handling breaking changes. Use when performing major version bumps for frameworks like Django or FastAPI.

Detect common Python vulnerabilities such as SQL injection, unsafe deserialization, and hardcoded secrets. Use as part of a secure SDLC for Python projects.

Pick a random contributor from a GitHub repository using the GitHub API or repository pages (no auth required for public repos).

Redis expert for data structures, caching patterns, Lua scripting, and cluster operations

Use before changing a public function/signature/schema/API to see the blast radius. "If I change X, what else changes". Reads call graph + tests + docs + memory for prior similar changes.

Learn Rust language features and crate updates. Use when user asks about Rust version changelog, what's new in Rust, crate updates, Cargo.toml dependencies, tokio/serde/axum features, or any Rust ecosystem questions.

Capture exceptions, attach user/context, add spans and breadcrumbs, and log via the Sentry SDK. Use when instrumenting errors, performance, or context in app code.

Analyze SQL queries for performance and security issues

Generate SQL queries from natural language

Diagnoses Mem0 connectivity, API key validity, and memory read/write functionality. Use when memory operations fail, searches return empty, or to verify the plugin is working correctly.

Technical writing expert for API docs, READMEs, ADRs, and developer documentation

MUST use when writing MS SQL Server queries.

MUST use when writing Rust scripts.

# API Standards Specialist

API authentication and JWT abuse playbook. Use when testing bearer tokens, API keys, claim trust, header spoofing, rate limits, and API auth boundary weaknesses.

API authorization and BOLA testing playbook. Use when APIs expose object identifiers, nested resources, hidden writable fields, or weak function-level authorization.

API reconnaissance and documentation review playbook. Use when discovering endpoints, schemas, versions, OpenAPI specs, hidden docs, and surface area for API testing.

API testing expert for curl, REST, GraphQL, authentication, and debugging

Build a Zoom meeting bot, recorder, or real-time media workflow. Use when joining meetings programmatically, processing live media or transcripts, or combining Meeting SDK, RTMS, and backend services.

Use Bun instead of Node.js, npm, pnpm, or vite. Provides command mappings, Bun-specific APIs, and development patterns.

Use Bun instead of Node.js, npm, pnpm, or vite. Provides command mappings, Bun-specific APIs, and development patterns.

Command-line interface for n8n workflow automation platform. Manages workflows, executions, credentials, variables, and tags. Based on n8n Public API v1.1.1 (n8n >= 1.0.0).

Check and install prerequisites for Cyrus — Node.js, jq, gh CLI, and the cyrus-ai npm package.

Look up library and framework documentation. Use when the user asks about API docs, library usage, framework features, or mentions specific libraries/packages by name.

Guide and workflow for Gemini 3 API (google-genai) - Usage Notes. Use when you need Gemini 3 API (google-genai) - Usage Notes.

Generate QR codes locally without external APIs using native CLI and runtime libraries in Bash and Node.js.

Interact with GitHub using the `gh` CLI. Use `gh issue`, `gh pr`, `gh run`, and `gh api` for issues, PRs, CI runs, and advanced queries.

Query Google Places API (New) via the goplaces CLI for text search, place details, resolve, and reviews. Use for human-friendly place lookup or JSON output for scripts.

GraphQL and hidden parameter testing playbook. Use when exploring introspection, batching, undocumented fields, hidden parameters, schema abuse, and GraphQL authorization gaps.

Efficiently develop Hono applications using Hono CLI. Supports documentation search, API reference lookup, request testing, and bundle optimization.

Get best practices for JUnit 5 unit testing, including data-driven tests

Web search using Kagi Search API. Use when you need to search the web for current information, facts, or references. Requires KAGI_API_KEY in the environment.

Search and reference Microsoft code samples and SDK documentation

Remove watermarks from a PDF with the Pilio developer API. Use when the user wants PDF watermark removal, editable PDF cleanup, AI PDF page reconstruction, or automated PDF watermark processing through Pilio.

Discover, compare, and run AI models using Replicate's API

Rust programming expert for ownership, lifetimes, async/await, traits, and unsafe code

Build and run Telegram bots in Node.js using Telegraf with practical command patterns.

MUST use when writing GraphQL queries.

MUST use when writing Java scripts.

Web search and content extraction via Brave Search API. Use for searching documentation, facts, or any web content. Lightweight, no browser required.

Zero friction. Full context. Competitive intelligence, M&A due diligence, and OSINT directly from your terminal. Uses Node.js/npx.

Use when auditing Drupal 11 custom modules/themes for security issues such as unsafe input handling, XSS risks, SQL injection, and access control gaps.

Learn the basics of the edgartools library - an SEC EDGAR API wrapper.

Interact with GitHub using the `gh` CLI. Use `gh issue`, `gh pr`, `gh run`, and `gh api` for issues, PRs, CI runs, and advanced queries.

Evidence framework data dashboard with DuckDB. Write SQL in markdown to create visualizations.

Ensure that Java types are documented with Javadoc comments and follow best practices for documentation.

Use API Resources with pagination and conditional fields; keep response shapes stable and cache-friendly

Search for places (restaurants, cafes, etc.) via Google Places API proxy on localhost.

Use when running SQL queries via the agentio CLI.

# API Monitoring

Rust Axum API with Diesel ORM and DDD architecture.

Describes efficient usage of Bun and Bun APIs instead of Node.js (and its APIs)

FastAPI with PostgreSQL, async SQLAlchemy 2.0, Alembic, and Docker.

Go backend with Gin, MongoDB, JWT auth, and Clean Architecture.

Search icons through HTTP API and retrieve SVG strings with curl.

AI agent with tools (search, calculator) using LangGraph and AI SDK.

Read-only Linear issue access via the Linear GraphQL API.

Chat app that lets you ask questions in plain English and query your PostgreSQL database.

Presentation-focused Natural Language to SQL app with PPT-style visualizations.

Notion archive: desktop/API sync, Markdown export, page search, read-only SQL.

Notion API for creating and managing pages, databases, and blocks.

Local speech-to-text with the Whisper CLI (no API key).

Generate and optimize SQL queries for data retrieval and analysis

Manage Trello boards, lists, and cards via the Trello REST API.

Get current weather and forecasts (no API key required).