LLM Mart Basic
@llm-mart · Joined Jun 2026
You are a security expert specializing in dependency vulnerability analysis, SBOM generation, and supply chain security. Scan project dependencies across multiple ecosystems to identify vulnerabilities, assess risks, and provide automated remediation strategies.
Complete toolkit for senior architect with modern tools and best practices.
Frontend development skill for React, Next.js, TypeScript, and Tailwind CSS applications. Use when building React components, optimizing Next.js performance, analyzing bundle sizes, scaffolding frontend projects, implementing accessibility, or reviewing frontend code quality.
Complete toolkit for senior fullstack with modern tools and best practices.
Pre-install security scanner for AI agent skills. 7.5% of 14,706 skills are malicious. Audit before you trust.
Validate Claude Code skills against the agentskills specification. Catches structural, semantic, and naming issues before users do.
To create new CLI skills following Anthropic's official best practices with zero manual configuration. This skill automates brainstorming, template application, validation, and installation processes while maintaining progressive disclosure patterns and writing style standards.
Guide for quality focused software architecture. This skill should be used when users want to write code, design architecture, analyze code, in any case that relates to software development.
Use when implementing any feature or bugfix, before writing implementation code
Complete WordPress development workflow covering theme development, plugin creation, WooCommerce integration, performance optimization, and security hardening. Includes WordPress 7.0 features: Real-Time Collaboration, AI Connectors, Abilities API, DataViews, and PHP-only blocks.
Generate clean, human-sounding, SEO-optimized WordPress blog posts with optional Yoast metadata, JSON-LD schema markup, and image SEO planning. Supports modular batch output.
Assess WordPress installations for common vulnerabilities and WordPress 7.0 attack surfaces.
WordPress plugin development workflow covering plugin architecture, hooks, admin interfaces, REST API, security best practices, and WordPress 7.0 features: Real-Time Collaboration, AI Connectors, Abilities API, DataViews, and PHP-only blocks.
WordPress theme development workflow covering theme architecture, template hierarchy, custom post types, block editor support, responsive design, and WordPress 7.0 features: DataViews, Pattern Editing, Navigation Overlays, and admin refresh.
WooCommerce store development workflow covering store setup, payment integration, shipping configuration, customization, and WordPress 7.0 features: AI connectors, DataViews, and collaboration tools.
Workflow automation is the infrastructure that makes AI agents
Use this skill when implementing tasks according to Conductor's TDD workflow, handling phase checkpoints, managing git commits for tasks, or understanding the verification protocol.
Trigger for: explaining current FAR, DFARS, or agency-supplement text; determining documented acquisition-policy status for an agency and FAR part; comparing codified text, RFO model text, and agency deviations; tracing acquisition rulemaking; finding procurement comment periods;
Trigger for: finding federal opportunities; capture and bid screening; competitor or incumbent intelligence; recompete pipelines; teaming partner research; agency, customer, or market intelligence; federal labor-rate or pricing context; or refreshing prior GovCon research. Always
Trigger for: cost-reimbursement IGCE, CR cost estimate, CPFF, CPAF, CPIF, cost-plus estimate, BAA estimate, fixed-fee analysis, award-fee analysis, incentive-fee analysis, proposed CR rate validation, cost-pool buildup, share-ratio scenario, price-reasonableness memo, or fair-and
Fourteen posts of being wrong in production, compressed to checkboxes
Healthy nodes, a quiet network, 300 restarts in three days, and a latency budget measured in milliseconds
Discovery worked. Ping worked. Every TCP connection timed out, and later the tunnel only worked when someone had a terminal open.
Every VM came back. The cluster did not. Declarative systems converge on config, and the datapath isn't config.
A surprising share of AI-in-the-terminal failures aren't the AI. They're zsh, and a version of bash from 2006.
A Claude Code plugin turns standalone project configuration into a namespaced, installable extension that teams and communities can update as one unit.
None of the safety came from the model. It came from six boring habits.
Skills package instructions and references. Subagents run work in a separate context and return results. They solve different problems and can be composed deliberately.
Six hours in, one step left, everything green, and the incident that didn't happen
CLAUDE.md carries persistent project context. Skills load reusable procedures when relevant. Separating stable facts from task-specific workflows keeps both easier to maintain.
Twenty minutes recovering secrets that never existed, and the one sentence from a human that ended it
An API request routing a model's tool call through an approval gate to a remote MCP server
31 config keys, two audits, and why the first one was wrong in both directions
The official MCP Registry stores standardized server metadata rather than package code. Publishers verify a namespace, describe installation or remote access, and submit immutable versions.
Everyone looks at the Dockerfile. The file that actually leaked the key was the project file.
Remote MCP authorization uses established OAuth standards, but secure integration still requires issuer validation, least-privilege scopes, protected token handling, and server-side enforcement.
"Copy it over and switch the reference" is two steps, and the outage lives in the one nobody checks
stdio fits local processes and prototypes. Streamable HTTP fits hosted services and shared integrations. The right choice follows where the capability runs and who must reach it.
The most important rule wasn't about what I could change. It was about what I was allowed to display.
Tools perform operations, resources expose readable context, and prompts provide reusable templates. Choosing the correct primitive makes an MCP server easier to understand and govern.
/bloat-scan
bloat-scan
Scan for codebase bloat using 3-tier progressive analysis: dead code, duplication, God classes, and documentation waste.
/elegant-code-review
elegant-code-review
Review the current working diff against the elegant-code decision ladder and propose deletions, honoring the negligence floor.
/filter-log
filter-log
Suggest tier-1 filter commands for a log file before any compression or paste. Anchors on the log-debugging-hygiene module.
/optimize-context
optimize-context
Analyze and optimize context window usage using MECW principles
/unbloat
unbloat
Remove dead code, duplicate files, and unused dependencies with user approval at each step. Backs up before deleting.
/dismiss
dismiss
The ONLY way to stop the egregore. Human-initiated graceful shutdown that saves all state.
/install-watchdog
install-watchdog
Install the egregore watchdog daemon for automatic session relaunching
/status
status
Show current egregore state and progress
/summon
summon
Summon the egregore to autonomously process work items through the full development lifecycle. Runs indefinitely by default until dismissed.
/uninstall-watchdog
uninstall-watchdog
Remove the egregore watchdog daemon and clean up files
/gauntlet-curate
Gauntlet curate
Add or edit a knowledge annotation
/gauntlet-extract
Gauntlet extract
Rebuild the knowledge base from the current codebase
/gauntlet-graph
gauntlet-graph
Build, search, and query the code knowledge graph
/gauntlet-onboard
Gauntlet onboard
Start or resume a guided onboarding path
/gauntlet-progress
Gauntlet progress
Show challenge accuracy stats, weak areas, and streak
/gauntlet
Gauntlet
Run an ad-hoc gauntlet challenge session (5 questions, random scope)
/configure
configure
Interactive interface to enable/disable rules
/from-hook
from-hook
Convert Python SDK hooks to declarative rules
/help
help
Display help and documentation
/hookify
hookify
Create behavioral rules to prevent unwanted actions
Unofficial KakaoTalk CLI and native MCP server for macOS — read, watch, and send messages via Accessibility automation.
3 views 0 likesLocal-first AI action assistant for operators: memory, skills, tools, and permission gates to turn work into controlled action.
3 views 0 likesAgent-driven media library for your cloud drives (Quark 夸克 / 115 / 光鸭 GuangYa / 123网盘 / 天翼 Tianyi)
4 views 0 likesAn open-source desktop AI agent built around Cyrene’s persona and powered by the self-developed Cyrene_Harness framework. It combines immersive character chat w…
3 views 0 likes在 Android 上运行的 AI 编程 Agent,内置 Linux 终端与代码编辑器,支持 MCP 协议扩展。
4 views 0 likesTencentDB Agent Memory is a team-level memory hub for AI Agents — turning conversations, docs, and code into four reusable memory assets (Chat Memory, Skill, LL…
4 views 0 likesFloe — a native iOS/iPadOS AI agent workspace for iPhone and iPad, built for private bring-your-own-key workflows.
4 views 0 likesSpring Boot AI Agent — an out-of-the-box solution that makes your app converse, remember, think, and act.
4 views 0 likesGive your AI agent eyes for PDFs — structured text, tables, OCR, visual evidence, and page-level citations via MCP. Native Rust, local-first.
5 views 0 likesA tiny Claude Code skill that keeps your prompt cache warm during idle sessions, so your next message reads from cache instead of paying full price.
5 views 0 likesMonet — Multi-engine mission control for coding agents (Claude Code and Codex today). Browse, search, and drive your agent sessions from a native desktop app.
3 views 0 likesA DottedSign MCP server that enables AI assistants (Claude, ChatGPT) to manage signing tasks, templates, and document status via natural language.
1 views 0 likesКурируемый handbook по Claude Code на русском: hooks, skills, CLAUDE.md шаблоны, MCP-серверы, кейсы.
3 views 0 likes👾 Open Computer Use – Open-Source Alternative to Codex Computer Use
2 views 0 likesAn open-source AI companion that actually remembers you — runs entirely on your own Mac or server. Desktop pet · long-term memory · proactive companionship · mu…
3 views 0 likesGraphical management tool for Kubernetes on desktop and mobile.
4 views 0 likesOpen-source desktop app for content creation, with an agent runtime and standalone CLI.
3 views 0 likesConnect Claude and ChatGPT to KDAN PDF — upload, edit, compress, protect, redact, and compare PDFs in chat.
3 views 0 likesEkko Studio is a local-first AI workspace for multi-agent chat, coding, and visual workflows, available on desktop and the web.
3 views 0 likesOpen-source native iPhone/iPad client for OpenAI Codex CLI and Claude Code — review diffs, approve actions, steer sessions, and manage Git remotely.
4 views 0 likes