Agent Skills Hub

requesting-code-review

Enforces code quality by dispatching a dedicated subagent to review work against project plans, requirements, and git commit history before tasks are completed or merged.

build-iphone-apps

CLI-only iOS development agent for Swift, SwiftUI, and UIKit. Handles the full lifecycle: build, debug, test, and release without Xcode.

tzurot-council-mcp

Multi-perspective AI consultation for technical architecture, complex refactoring, and structured debugging.

toh-framework

Security-first auditing framework for AI-generated code. Provides multi-level protection including hardcoded secret detection, dangerous pattern identification, and comprehensive vulnerability audits for modern web applications.

temporal

Automate the migration of Netflix Conductor workflows to Temporal Python, including server orchestration, worker management, and workflow troubleshooting.

clean-code

Pragmatic AI-assisted coding standards focused on clean code, simplicity, and maintainability. Enforces best practices like SRP, DRY, and KISS to prevent over-engineering.

exploratory-testing-advanced

Advanced exploratory testing with SBTM, RST heuristics, and test tours. Use for investigating bugs, discovering unknown risks, and structured manual exploration.

market-debrief-cn

A deep analysis tool for A-share markets generating interactive, FT-style HTML daily reports using multi-agent parallel architecture, AkShare data, and Tavily news.

github-code-review

Deploy specialized AI swarms to perform comprehensive, multi-domain GitHub pull request reviews covering security, performance, architecture, and style.

codeql

Perform deep security analysis on codebases using CodeQL for interprocedural data flow, taint tracking, and automated vulnerability detection across multiple languages.

refactor

A specialized skill for surgical code refactoring. Improves maintainability, reduces technical debt, and applies design patterns without altering external behavior.

Global Validation

Implement robust server-side and client-side input validation using sanitization and allowlists to prevent injection attacks and ensure data integrity.