Use first for creative work—technical or everyday—when a brief is incomplete or intent is implicit and success depends on taste, voice, feeling, or human experience. Also trigger when literal compliance may lose the point. Do not wait for explicit creative wording. Skip factual lookup, mechanical or exact tasks, and…
Use only when the user invokes $bx-dev or explicitly asks to start/resume an ad-hoc bx-dev development session. Orchestrates Codex subagents for implementation/review on a session branch without an external issue tracker. Do not use for ordinary direct edits.
Use when assessing AI/ML systems for prompt injection, jailbreak vulnerabilities, model inversion risk, data poisoning exposure, or agent tool abuse. Covers MITRE ATLAS technique mapping, injection signature detection, and adversarial robustness scoring.
Use when assessing cloud infrastructure for security misconfigurations, IAM privilege escalation paths, S3 public exposure, open security group rules, or IaC security gaps. Covers AWS, Azure, and GCP posture assessment with MITRE ATT&CK mapping.
The Dependency Auditor is a comprehensive toolkit for analyzing, auditing, and managing dependencies across multi-language software projects. This skill provides deep visibility into your project's dependency ecosystem, enabling teams to identify vulnerabilities, ensure license compliance, optimize dependency trees…
Docker and container development agent skill and plugin for Dockerfile optimization, docker-compose orchestration, multi-stage builds, and container security hardening. Use when: user wants to optimize a Dockerfile, create or improve docker-compose configurations, implement multi-stage builds, audit container…
Expert Kubernetes specialist mastering container orchestration, cluster management, and cloud-native architectures. Specializes in production-grade deployments, security hardening, and performance optimization with focus on scalability and reliability.
Guide for creating high-quality MCP (Model Context Protocol) servers that enable LLMs to interact with external services through well-designed tools. Use when building MCP servers to integrate external APIs or services, whether in Python (FastMCP) or Node/TypeScript (MCP SDK).
Monitoring strategies, distributed tracing, SLI/SLO design, and alerting patterns. Use when designing monitoring infrastructure, defining service level objectives, implementing distributed tracing, creating alert rules, building dashboards, or establishing incident response procedures. Covers the three pillars of…
Implement PCI DSS compliance requirements for secure handling of payment card data and payment systems. Use when securing payment processing, achieving PCI compliance, or implementing payment card security measures.
Use when the user asks to set up secret management infrastructure, integrate HashiCorp Vault, configure cloud secret stores (AWS Secrets Manager, Azure Key Vault, GCP Secret Manager), implement secret rotation, or audit secret access patterns.
Use when hunting for threats in an environment, analyzing IOCs, or detecting behavioral anomalies in telemetry. Covers hypothesis-driven threat hunting, IOC sweep generation, z-score anomaly detection, and MITRE ATT&CK-mapped signal prioritization.
Use when the task is to curate or repair agent context: AGENTS.md/rules, handoff prompts, compact/clear recovery, large workstream switching, or diagnosing off-pattern/hallucinated behavior. Prefer bx-init/bx-init-sync for bx template creation/deep codebase doc sync. Skip for small code edits.
Use for high-stakes or uncertain non-trivial decisions where a confident mistake is costly: architecture, production/security/data changes, irreversible operations, cross-module invariants, or unfamiliar code. Run bounded adversarial review. Do not use for routine edits or active bx-plan review loops.
Use when there is an observed failure: bug, failing test/build, regression, production issue, flaky behavior, performance problem, or unexpected output. Requires reproduction, evidence, and root cause before fixes. Do not use for planned feature work or routine verification.
Use before changing testable production behavior in direct implementation work: features, bugfixes, refactors, or regression guards. Enforces red-green-refactor. Do not use for docs/config/generated/prototype work, or for bx-run/bx-dev Lead orchestration where worker contracts already define testing.
Use as the final gate before saying work is complete/fixed/passing, before commit/PR, or before a handoff. Requires fresh evidence from tests/build/lint/smoke or an explicit unverified-risk note. Do not use at task start or as a substitute for debugging.
Use when requirements/spec/design are already clear and the user wants a detailed implementation plan, not code yet. Produces file-by-file, testable, bite-sized tasks. Prefer bx-plan for full critic-reviewed planning; prefer brainstorming for unclear ideas; skip for quick edits.
WCAG 2.1 AA compliance patterns, screen reader compatibility, keyboard navigation, and ARIA best practices. Use when implementing accessible interfaces, reviewing UI components, or auditing accessibility compliance. Covers semantic HTML, focus management, color contrast, and assistive technology testing.
★not rated 24▲
+1 4mo agoA58 tokens
At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: