LLM Mart Basic

卧室装修避坑指南专用 Skill。覆盖卧室布局、床与床垫、衣柜、窗帘、隔音、灯光、飘窗、榻榻米、衣帽间、儿童房、适童化、梳妆台、床头细节等全流程，倒序整合西安装修课堂知识库精华，帮用户装出好睡的卧室。

小户型装修避坑指南专用 Skill。覆盖显大技巧、收纳与空间利用、布局与隔断改造、迷你公寓与开间、小户型综合等全流程，倒序整合西安装修课堂会员版知识库精华，帮用户装出更省心、不踩坑的小户型装修避坑。

玄关与书房装修指南专用 Skill。覆盖玄关鞋柜、换鞋区、入户收纳、玄关背景与形式、隔断屏风、书房书桌书柜、学习办公区、儿童学习区、灯光采光、隔音等全流程，倒序整合西安装修课堂知识库精华，帮用户把进门第一眼和居家办公、学习空间一次装对。由西安装修课堂出品

阳台避坑指南专用 Skill。覆盖洗衣晾晒区、阳台打通与封窗、阳台收纳与柜、休闲与功能改造、防水保温与施工、无阳台与补救、阳台改造综合等全流程，倒序整合西安装修课堂会员版知识库精华，帮用户装出更省心、不踩坑的阳台避坑。

装修采光技巧专用 Skill。覆盖通风与暗间、朝向与户型、玻璃与室内窗、配色与反光、采光改善技巧等全流程，倒序整合西安装修课堂会员版知识库精华，帮用户装出更省心、不踩坑的装修采光技巧。

装修风格选择与搭配指南专用 Skill。覆盖风格怎么选、主流风格（北欧/现代简约/新中式/日式/法式/美式/奶油/原木/侘寂/轻奢/中古/欧式等）怎么装不踩坑、风格配色与软装搭配、风格与预算省钱做法，倒序整合西安装修课堂20年精华知识库，帮用户选对风格、装出想要的效果。

装修建材选购专用 Skill。覆盖瓷砖、木地板、涂料乳胶漆、板材、门窗玻璃、五金管件、防水材料、美缝填缝、石材岩板、踢脚线等主材辅材的选购避坑，整合西安装修课堂装修知识库精华，帮用户把钱花在刀刃上，材料不踩坑。

装修设计技巧大全专用 Skill。覆盖布局与动线、收纳设计、风格与配色、空间设计技巧、免费设计与避坑、设计综合等全流程，倒序整合西安装修课堂会员版知识库精华，帮用户装出更省心、不踩坑的装修设计技巧。

装修省钱指南专用 Skill。覆盖不值得花钱、值得花钱、砍价与报价、省钱技巧、预算规划与分配等全流程，倒序整合西安装修课堂会员版知识库精华，帮用户装出更省心、不踩坑的装修省钱。

装修施工手册专用 Skill。覆盖拆改交底、水电施工、瓦工贴砖、木工吊顶、油漆墙面、防水闭水、隐蔽工程、工序工期、验收监工等全流程施工避坑，整合西安装修课堂装修知识库精华，帮用户看懂工地、盯住关键节点，施工不返工。

装修五金选购指南专用 Skill。覆盖地漏与下水、龙头花洒与水槽、铰链滑轨与家具五金、门锁与挂件、选购原则与避坑、五金综合等全流程，倒序整合西安装修课堂会员版知识库精华，帮用户装出更省心、不踩坑的装修五金选购。

装修验收指南专用 Skill。覆盖水电隐蔽工程、瓦工木工验收、竣工验收与收房、验收工具与清单等全流程，倒序整合西安装修课堂会员版知识库精华，帮用户装出更省心、不踩坑的装修验收。

【全屋定制业主必看】你正在做全屋定制吗？不知道板材怎么选、怕被套餐套路、担心增项加钱、不知道怎么验收？这个Skill内置装修课堂知识库，直接回答你的问题——问板材、问计价、问套餐、问商家选择、问安装验收，全部覆盖。适合正在做全屋定制功课、准备签约或已经下定的业主。

【收纳储物必看】装修前不会规划收纳，入住半年家变仓库？这个 Skill 内置装修课堂会员版「📦家居收纳储物方法」152篇原创知识库，专门讲收纳储物——收纳是家的骨架、柜子不是越多越好、收纳本质是把东西藏起来、收纳加勤快缺一不可。问玄关鞋柜怎么装、问厨房9个收纳位置、问衣柜衣帽间怎么做、问小户型怎么榨干每1平米、问收纳避坑和鸡肋神器，全部覆盖。适合正在装修、准备收纳规划、家里东西多总是乱、想做满墙柜/通顶柜/800库的业主。

【老房改造业主必看】你家的房子是老房、旧房、二手房吗？担心拆除被坑、水电要不要全换、承重墙不敢动、费用比新房贵太多？这个Skill内置装修课堂知识库，直接回答你的问题——问拆除、问水电、问费用、问结构安全、问厨卫翻新、问精装房怎么改，全部覆盖。适合正在考虑老房翻新、二手房装修、精装房改造的业主。

【选装修公司必看】你正在找装修公司吗？不知道怎么选、怕被坑、担心中途加钱、想提前排查风险？这个Skill内置专业装修知识体系（5篇核心参考文献），直接教你筛选方法——问怎么选公司、问哪些公司不能选、问报价单怎么看、问合同怎么签、问中途加钱怎么办，全部覆盖。适合正在选装修公司、拿到报价单不知怎么看、担心被坑的业主。

本Skill内置从学到装｜装修课堂知识库，专门帮业主审核装修合同、识别预算陷阱、防范定金套路、避免增项偷项、看懂报价单、判断售后保障。适合准备签装修合同、拿到报价单不知怎么看、被要求交定金、遇到中途加钱的等场景使用。触发场景包括"装修合同怎么签""报价单怎么看""定金能退吗""套餐能签吗""装修增项怎么办""怎么选装修公司"等涉及装修合同审核的所有问题。

【装修最怕加钱必看】你担心装修中途不断加钱吗？报价单看不懂、增项防不住、水电开工后翻倍、拆除冒出各种刺客？这个Skill专治各种加钱套路——问增项、问加钱、问报价单、问隐形消费、问偷项漏项、问预算超了，全部覆盖。适合拿到报价单、准备签合同、担心中途被加价的业主。

【拿到报价单必看】你拿到装修报价单了吗？看不懂、怕被坑、不知道价格合不合理？这个Skill内置装修课堂知识库，直接帮你审核报价单——问报价单怎么看、问预算陷阱、问单价猫腻、问隐形消费、问水电估价、问半包全包区别、问厨卫费用，全部覆盖。适合拿到报价单不知怎么看、比较多家报价不知怎么选、被低价吸引担心有坑的业主。

【装修方案拿不准必看】你的装修方案合理吗？不知道布局对不对、收纳够不够、风格怎么选、户型能不能改？这个Skill内置装修课堂381篇文章，直接诊断你的方案——问设计布局、问户型改造、问收纳规划、问风格搭配、问翻车避坑、问设计师怎么选，全部覆盖。适合正在确认方案、担心布局不合理、想优化空间利用的业主。

Fourteen posts of being wrong in production, compressed to checkboxes

Healthy nodes, a quiet network, 300 restarts in three days, and a latency budget measured in milliseconds

Discovery worked. Ping worked. Every TCP connection timed out, and later the tunnel only worked when someone had a terminal open.

Every VM came back. The cluster did not. Declarative systems converge on config, and the datapath isn't config.

A surprising share of AI-in-the-terminal failures aren't the AI. They're zsh, and a version of bash from 2006.

A Claude Code plugin turns standalone project configuration into a namespaced, installable extension that teams and communities can update as one unit.

None of the safety came from the model. It came from six boring habits.

Skills package instructions and references. Subagents run work in a separate context and return results. They solve different problems and can be composed deliberately.

Six hours in, one step left, everything green, and the incident that didn't happen

CLAUDE.md carries persistent project context. Skills load reusable procedures when relevant. Separating stable facts from task-specific workflows keeps both easier to maintain.

Twenty minutes recovering secrets that never existed, and the one sentence from a human that ended it

An API request routing a model's tool call through an approval gate to a remote MCP server

31 config keys, two audits, and why the first one was wrong in both directions

The official MCP Registry stores standardized server metadata rather than package code. Publishers verify a namespace, describe installation or remote access, and submit immutable versions.

Everyone looks at the Dockerfile. The file that actually leaked the key was the project file.

Remote MCP authorization uses established OAuth standards, but secure integration still requires issuer validation, least-privilege scopes, protected token handling, and server-side enforcement.

"Copy it over and switch the reference" is two steps, and the outage lives in the one nobody checks

stdio fits local processes and prototypes. Streamable HTTP fits hosted services and shared integrations. The right choice follows where the capability runs and who must reach it.

The most important rule wasn't about what I could change. It was about what I was allowed to display.

Tools perform operations, resources expose readable context, and prompts provide reusable templates. Choosing the correct primitive makes an MCP server easier to understand and govern.

Instrument services with structured logging, Prometheus metrics, and OpenTelemetry tracing. Build Grafana dashboards, write Prometheus alerting rules, run k6 load tests, and plan infrastructure capacity.

Generate, test, validate, explain, and debug OPA (Open Policy Agent) Rego policies and Conftest configurations. Covers deny/warn/violation rules, unit tests, regal linting, conftest fmt, namespace design, input shape analysis, and GitHub Actions integration. Use when asked to "write a policy", "test a rego file", "validate policies", "explain this rego", or "why is my policy not firing".

OpenShift SCC diagnosis and hardening, Route TLS patterns, OpenShift GitOps app delivery, and cluster upgrade validation.

Comprehensive PR review across six dimensions — cost impact, environment drift, ownership gaps, SOC 2 compliance, deprecated API / version hygiene, and rollback feasibility. Each mode inspects the diff and current file state, reports findings with severity, and recommends concrete fixes. Use when preparing a PR for merge, conducting a pre-deployment readiness check, or performing a post-merge risk assessment.

Production-readiness preflight check for a directory, repo, or single file. Auto-detects file types (Kubernetes manifests, Terraform, GitHub Actions workflows, Helm values/charts, Flux Kustomizations/HelmReleases, Dockerfiles, shell scripts) and applies type-specific checks across the whole scope. Returns a per-file summary table and aggregated verdict. Use before deploying, merging, or applying a folder of config. For PR diffs spanning multiple files use /platform-skills:pr-review instead. For deep Helm chart work use /platform-skills:helmchart instead.

Apply product thinking to platform work — DevEx audits, friction analysis, RFC/ADR drafting, incident communication, post-mortems, capacity planning, cost optimisation, and platform health review.

Generate renovate.json covering all dependency file types used in a repo, emit a GitHub Actions workflow that validates renovate.json on every PR, or generate a pre-commit hook for local validation.

Detect and respond to in-container threats at the syscall level using Falco (eBPF-based, CNCF, open-source, no license cost). Covers Falco installation on EKS/GKE with eBPF driver, custom rule authoring, alert routing via Falcosidekick, rule debugging, and bridging Falco runtime signals to Kyverno admission enforcement. Use when asked to "detect privilege escalation in containers", "set up runtime threat detection", "write a Falco rule", "route Falco alerts to Slack", or "debug why my Falco rule is not firing".

Secrets strategy, External Secrets Operator scaffolding, Sealed Secrets seal/rotate/backup, rotation runbooks, and Kubernetes-side secrets audit.

Bootstrap and operate a self-improving agent workspace. Scaffolds .learnings/ and memory/ directories, captures errors and learnings during a session, detects recurring patterns, recalls verified lessons, and promotes stable entries to scoped rule files (.claude/rules/ or ~/.claude/rules/). Also implements the Proactive Agent pillars — WAL protocol, working buffer, SESSION-STATE, daily notes, VBR, VFM scoring, ADL decision logic, heartbeat, and reverse prompting. Use when asked to "remember this lesson", "set up agent memory", "log that error", "what did we learn about X", "promote learnings", "revoke that rule", "capture session state", or "enable proactive mode".

Scaffold a multi-agent AI setup for any repo. Scans the codebase, interviews the developer, generates agent configs for whichever AI tools the repo uses (Copilot, Claude Code, Cursor, Codex, Windsurf). Use when asked to "set up agents", "scaffold Copilot agents", or "create an AGENTS.md".

Secure the software supply chain from source to running container. Covers Cosign keyless image signing (Sigstore/Rekor), SBOM generation and attestation (Syft), vulnerability scanning with severity gates (Trivy/Grype), SLSA Level 2 provenance, and Kyverno/OPA admission enforcement. All open-source, no license cost. Use when asked to "sign my image", "generate an SBOM", "scan for CVEs", "attest build provenance", "enforce image signatures in Kubernetes", or "implement SLSA".

Runs through the full Terraform validation pipeline — fmt, validate, tflint, security scan — and reviews a module or plan for blast radius, IAM risk, and state impact.

Triages a PR comment — from a bot (Copilot, CI) or a human reviewer. Routes to the `triage_helper.py` helper for identity checks, thread snapshotting, isolated-worktree fixes, and publish/reply/resolve mechanics; you classify the finding and apply a justified fix. `--dry-run` is fully read-only (investigation and a printed plan, zero mutations). `--no-resolve` runs the full fix/reply workflow but never resolves a thread. Run from inside the repo.

Scan container images, filesystems, git repos, and existing SBOMs for CVEs, secrets, and license violations using Trivy. Covers local CLI, CI severity gates with SARIF upload, and continuous monitoring via Trivy Operator (Flux HelmRelease). Use when asked to "scan my image", "check for CVEs", "scan this repo for secrets", "scan an SBOM", or "set up continuous cluster vulnerability monitoring". IaC misconfig → /platform-skills:checkov. Admission posture → /platform-skills:kyverno. Image signing/SBOM generation → /platform-skills:supply-chain.

Audit GitHub Actions workflows, composite actions, Dependabot configs, and pre-commit configs for security findings using zizmor — template injection, credential persistence, unpinned uses, over-broad permissions, impostor commits. Covers local CLI, auto-fix, zizmor.yml policy, severity-based CI gates, SARIF upload, and pre-commit. Use when asked to "audit my workflows", "run zizmor", "is this workflow safe", "check for template injection", "pin my actions", or "set up a zizmor CI gate". Workflow syntax and shell errors → /platform-skills:github-actions (actionlint). IaC misconfig → /platform-skills:checkov. Image and dependency CVEs → /platform-skills:trivy. Keeping SHA pins fresh → /platform-skills:renovate.

반복 작업을 `/이름` 으로 호출. 파일명 = 커맨드 이름(`fix-issue.md` → `/fix-issue`).

이슈 #$ARGUMENTS 를 처리한다(이슈 우선 워크플로):

AGENTS.md 생태계(rules·memory·agents·skills·commands·workflows)의 연결 구조를

이슈/기획서 기준 SDLC 한 사이클(이슈→개발→테스트→검증→PR/MR)을 사람 개입 없이 자동 실행.

Persistent session memory for AI coding agents — local-first, with on-device inference, associative recall, and drift detection. Works with Claude Code, Cursor,…

Run Hermes Agent and OpenClaw on the same WeChat account

An AI co-scientist running on your desktop. Claude Science but better.

Emotion Ball 是一套面向 AI 助手的表情引擎:32 种状态表情全部由纯 SVG 与原生 JavaScript 实时驱动,零框架、零图片资源。AI 侧只需输出一个 emotionId,小球即可切换到对应表情,可直接用作聊天机器人、桌面宠物、悬浮助手的情绪表达层。

Agent communication SDK. The open-source agent communication layer for AI agents — email, WhatsApp, Slack, Discord, Telegram, SMS. Python & TypeScript.

The micro-VM for AI agents — light enough to embed on your laptop, elastic enough to power an agentic cloud.

Give each AI agent its own isolated machine with root, Docker, and systemd. Active defense detects and stops threats automatically.

Webhook integration skills for AI coding agents (Claude Code, Cursor, Copilot). Step-by-step guidance for setting up webhook receivers, signature verification,…

Token burn reducer and focus keeper for Claude Code, Codex, Copilot, Gemini CLI, and more: surgical read hints, PDF/Office/CSV/markdown file interception, 160+…

RuvNet Brain — a downloadable, source-grounded brain for Claude Code over Reuven Cohen's (rUv's) RuvNet stack: RuVector/RVF, Ruflo, AgentDB, RuLake, SPARC + 21…

💼 One MCP server to search job boards and company career sites

C++ MCP SDK - build Model Context Protocol (MCP) servers and clients in C++ / CPP. Enterprise-grade security, observability, connectivity. Stdio, HTTP+SSE, Stre…

Open-Source AI Presentation Generator and API (Gamma, Canva, Beautiful AI, Decktopus, Presentations AI Alternative)

Secure, Fast, and Extensible Sandbox runtime for AI agents.

Give your AI agent eyes to see the entire internet. Read & search Twitter, Reddit, YouTube, GitHub, Bilibili, XiaoHongShu — one CLI, zero API fees.

Browser Harness | Self-healing harness that enables LLMs to complete any task.

The World's First Agentic IDE. Visual dashboard: live sessions, task management, code editor, terminal. Epic Swarm parallel workflows. Auto-proceed rules. Autom…

Agenta is a workspace where you and your team build agents and automations.

Terminal Director. One lightweight app, eight features, your whole dev workflow in a single window.

AI turns documents or topics into real, native PowerPoint decks—with native shapes, transitions and animations, data-backed charts and tables on demand, audio n…