Triage security findings from Semgrep Pro and Claude security-code-review using IaC files as deployment context (Terraform, Kubernetes, Docker Compose, CloudFormation, Azure Pipelines). Detects whichever IaC files are present, extracts deployment facts, scores each finding with CVSS 4.0 with per-vector justification…
Operate an Open Knowledge Format (OKF v0.1) bundle — a directory of Markdown files with YAML frontmatter that is the AI-maintained "LLM-wiki" for this repo. Use when the user wants to INGEST a source into the knowledge base, ASK/QUERY the wiki, ADD or EDIT a concept, LINT/maintain the wiki, or VALIDATE conformance.…
A teaching aid that explains technical ideas with a small runnable code example and a guided walkthrough. It is meant for learning how something works, not fixing existing code.
Mine chat transcripts for decisions, exec updates, strategy shifts, feedback themes, and user preferences. Write structured entries to memory/, then update AGENTS.md with curated preferences and facts. The ingestion pipeline for the PM-OS context graph.
Design and scaffold a new trapstreet.run task to evaluate a given agent/skill/tool -- the reverse of trapstreet-solution-scaffold (a solution for an existing task). Generates the mechanical parts (traptask.yaml, judge.py/grader.py on the TRAPTASKMANIFEST contract, buildcases.py's validate-then-render pipeline) and…
Route AI assistant browser tasks to Tabrix first. Use when the user needs to control their real Chrome session, reuse existing login state or tabs, operate a remote browser over Streamable HTTP, or troubleshoot Tabrix browser automation. Prefer Tabrix over shell commands, synthetic browser sandboxes, or alternative…
Drive Rnix — the Agent OS — from the command line: spawn AI agents as OS-style processes, orchestrate multi-agent workflows, decompose high-level intents into sub-task DAGs, and inspect, trace, suspend or resume agent processes. Use this whenever you need to run the rnix CLI, launch or manage agents, compose several…
Design and implement a complete responsive webpage that Pantheon can preview directly. Use for landing pages, portfolios, dashboards, prototypes, and HTML UI requests.
Four quality gate checklists for frontend: baseline visual, accessibility, metadata/SEO, and motion performance. Post-implementation quality gates. Trigger: When reviewing UI changes, before merging frontend PRs, during sdd-verify.
A debugging workflow that reproduces a problem with a failing test, collects evidence, finds the underlying cause, applies a fix, and runs regression checks. Regression checks verify that the fix does not break behavior that already worked.
Query what the user did on this computer outside the current conversation — which apps, windows, files, and web pages they used, and when (last 48h, read-only). Reach for it whenever off-conversation context would help - resuming interrupted work, resolving vague references like "that doc I was reading" or "the error…
Agent-directed install of backlog-mcp — detect the host harness, register the MCP server, run the first wakeup, verify git stayed clean and the briefing stayed under budget.
Use when an agent needs live, structured search-engine data through SerpApi (web results, news, shopping, local, jobs, flights, scholar, images, video). Covers picking the right engine for the intent, choosing compact vs complete output, query operators, pagination, deduping and citing results, and when NOT to search.…
Manages shadcn components and projects — adding, searching, fixing, debugging, styling, and composing UI. Provides project context, component docs, and usage examples. Applies when working with shadcn/ui, component registries, presets, --preset codes, or any project with a components.json file. Also triggers for…
Knowledge Kernel — a deterministic, evidence-backed source of truth for AI agents. Stores verified facts, evidence, relationships, and freshness. Use this when an agent needs to know infrastructure, software, endpoints, dependencies, agents, or projects — anything grounded in empirical reality.
Use when opening, reviewing, or merging a pull request. Covers pre-PR checks (linting, tests, branch naming), PR description requirements, and post-merge cleanup. Not for code review commentary or architecture decisions — use the relevant role guidelines for those.
RAIGO × OWASP LLM Top 10 — official OWASP LLM Application Security Top 10 (2025) enforcement rules for Hermes agents. Covers all 10 OWASP LLM risks: prompt injection, insecure output handling, training data poisoning, model denial of service, supply chain vulnerabilities, sensitive information disclosure, insecure…
★not rated 5 5mo agoC120 tokens
At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: