productivity▌

Implement proven methodologies and tool workflows from top security researchers for effective reconnaissance, vulnerability discovery, and bug bounty hunting. Automate common tasks while maintaining thorough coverage of attack surfaces.

Static analysis security scanner that identifies OWASP vulnerabilities across backend, frontend, mobile, and library code. \n \n Scans for SQL injection, XSS, BOLA, BFLA, SSRF, prototype pollution, unsafe deserialization, ReDoS, path traversal, and zip slip vulnerabilities \n Three scan depths available: quick (default), balanced, and full, with token usage warnings for comprehensive scans \n Automated workflow: plans vulnerability vectors per project type, nominates candidate files, analyzes fi

Discover, analyze, and fix production issues using Sentry's full debugging capabilities. \n \n Integrates with Sentry MCP to search issues, retrieve stack traces, breadcrumbs, traces, and AI-generated root cause analysis across your project \n Follows a structured seven-phase workflow: discovery, deep analysis, hypothesis formation, code investigation, implementation, verification, and reporting \n Treats all Sentry event data as untrusted external input; enforces security constraints against em

Validates skills against agentskills.io spec and Claude Code best practices. \n \n Checks skill metadata compliance including name format, description length, and optional fields like license and compatibility \n Enforces Claude Code best practices: third-person descriptions, body length limits, single-level references, and markdown link formatting \n Provides structured validation reports flagging spec violations and authoring guideline deviations \n Designed for use via /validate-skills comman

Create consistent, credible investor materials aligned to a single source of truth. \n \n Covers pitch decks, one-pagers, investor memos, financial models, accelerator applications, and use-of-funds tables \n Enforces cross-document consistency by establishing canonical facts (traction, pricing, raise size, team, milestones) before drafting \n Includes structured guidance for each asset type, from pitch deck slide order to financial model assumptions and sensitivity analysis \n Flags common red

Single-threaded by default with explicit background offloading via @concurrent and isolated protocol conformances. \n \n Async functions stay on the calling actor by default, eliminating implicit background offloading that caused data-race errors in Swift 6.1 and earlier \n Isolated conformances allow MainActor types to safely conform to non-isolated protocols without unsafe workarounds \n @concurrent attribute explicitly offloads CPU-intensive work to background threads; requires nonisolated ty

Build cross-platform CLI tools with argument parsing, interactive prompts, and shell completions. \n \n Covers Node.js (commander, yargs), Python (click, typer), and Go (cobra, viper) frameworks with design patterns for subcommands, flags, and configuration \n Includes UX patterns for progress bars, spinners, color output with TTY detection, and graceful signal handling \n Requires startup time under 50ms, consistent flag naming, non-interactive fallbacks for CI/CD, and shell completion generati

Create Python-based interactive notebooks with marimo's reactive cell architecture. \n \n Notebooks are pure Python files with @app.cell decorated functions representing cells; dependencies and inputs/outputs are automatically managed through function parameters \n Supports three execution modes: script mode (non-interactive testing), interactive browser editing, and CLI execution via uv run marimo \n Use mo.app_meta().mode == \"script\" to detect execution context and adapt data sources without

WeChat Mini Program authentication with CloudBase using automatic user identity injection in cloud functions. \n \n Automatic authentication: user identity (openid, appid, unionid) is seamlessly injected by WeChat when cloud functions are called, with no explicit login APIs required \n Initialize CloudBase once in Mini Program entry point with wx.cloud.init() , then retrieve verified user context in cloud functions using cloud.getWXContext() \n Three user identifiers available: openid (unique pe

Complete artist workspace scaffold with directories, context files, memory system, and environment setup. \n \n Creates a standardized folder structure including context, memory, songs, releases, content, config, library, and apps directories with README guides for each \n Initializes context files (artist identity, audience insights, era metadata) and a scoped memory system that distinguishes between permanent, era-specific, and session-level knowledge \n Sets up environment and services config