LLM Mart Basic
@llm-mart · Joined Jun 2026
Use when reducing C/C++ compilation times with ccache, sccache, distcc, unity builds, precompiled headers, split DWARF, IWYU, or link time reduction.
Use when asked to analyze a Burp Suite .burp project for audit items, request/response metadata, or captured traffic. Modes: parsed (default) and stream. Not for source or remote-system changes.
Use when product copy needs buyer-objection evidence collected through approved, consented outreach. Not for unsolicited outreach or survey design.
Use when the user wants the current jargon weather of a domain described without advocacy. Not for choosing a positioning move: use buzzword-hijack.
Use when a user wants to choose and execute a bounded positioning move that rides a jargon wave. Not for describing the jargon weather of a domain: use buzzword-analysis.
Use when C code is written or audited and needs a pure-C baseline: standard, undefined behavior, integer and buffer safety, sanitizers, fuzzing, build flags. Not for C++: use modern-cpp-practices.
Use when the user requests a userspace C or C++ security review with a threat model and severity filter and wants validated findings. Not for kernel or bare-metal code: use kernel-security.
Use when the user asks "where to help", "contribution opportunities", or "find a good first issue". Returns data-backed first steps. Not for PR review queues: use gh-review-requests.
Use when the learner is ready to apply cleared concepts in a real project. Not for exercises or quizzes: use drill.
Use when evaluating Carbon for a C++ code base, running the carbon toolchain from a nightly or Bazel build, or comparing Carbon with staying on C++. Not for C++ modules: use cpp-modules.
Use when initializing, running, measuring coverage, or triaging a cargo-fuzz target in a Rust crate. Not for remote, credential, publish, deploy, or irreversible changes.
Use when managing Cargo workspaces, feature flags, build scripts, CI caching, dependency auditing, or Cargo.lock with Rust.
Use when prompt-doctrine is duplicated, drifted, or conflicting across output-style embeds and external harness AGENTS files. Not for editing the canonical baseline itself.
Use when the human returns after a gap, cannot follow the project, asks what happened, or wants a visual HTML recap page. Not for onboarding: use onboard. Not for handoff: use handoff.
Use when an Algorand, Cairo, Cosmos SDK, Solana, Substrate, or TON codebase needs vulnerability scanning with reachability-backed findings. Not for non-chain review: use security-review.
Use when a release or a since-tag window needs user-facing release notes drafted. Not for publishing the release.
Use when a human explicitly asks for a full repository agent-compatibility pass returning a scored report with prioritized fixes. Not for tasks that require source or remote-system changes.
Use when the user asks to cherry-pick, backport, or apply a hotfix to a release branch. Not for merging feature branches or cutting new release branches.
Use when the user explicitly asks to build, modify, or publish a Manifest V3 Chrome extension. Not for store submission without human-gated credentials.
Use when setting up or modifying CI/CD pipelines, quality gates, test runners, or deployment pipeline configuration through workflow files. Not for triggering a deployment.
Fourteen posts of being wrong in production, compressed to checkboxes
Healthy nodes, a quiet network, 300 restarts in three days, and a latency budget measured in milliseconds
Discovery worked. Ping worked. Every TCP connection timed out, and later the tunnel only worked when someone had a terminal open.
Every VM came back. The cluster did not. Declarative systems converge on config, and the datapath isn't config.
A surprising share of AI-in-the-terminal failures aren't the AI. They're zsh, and a version of bash from 2006.
A Claude Code plugin turns standalone project configuration into a namespaced, installable extension that teams and communities can update as one unit.
None of the safety came from the model. It came from six boring habits.
Skills package instructions and references. Subagents run work in a separate context and return results. They solve different problems and can be composed deliberately.
Six hours in, one step left, everything green, and the incident that didn't happen
CLAUDE.md carries persistent project context. Skills load reusable procedures when relevant. Separating stable facts from task-specific workflows keeps both easier to maintain.
Twenty minutes recovering secrets that never existed, and the one sentence from a human that ended it
An API request routing a model's tool call through an approval gate to a remote MCP server
31 config keys, two audits, and why the first one was wrong in both directions
The official MCP Registry stores standardized server metadata rather than package code. Publishers verify a namespace, describe installation or remote access, and submit immutable versions.
Everyone looks at the Dockerfile. The file that actually leaked the key was the project file.
Remote MCP authorization uses established OAuth standards, but secure integration still requires issuer validation, least-privilege scopes, protected token handling, and server-side enforcement.
"Copy it over and switch the reference" is two steps, and the outage lives in the one nobody checks
stdio fits local processes and prototypes. Streamable HTTP fits hosted services and shared integrations. The right choice follows where the capability runs and who must reach it.
The most important rule wasn't about what I could change. It was about what I was allowed to display.
Tools perform operations, resources expose readable context, and prompts provide reusable templates. Choosing the correct primitive makes an MCP server easier to understand and govern.
/liongard-environment-summary
Liongard environment summary
Generate a detailed summary of a Liongard environment
/liongard-health-check
Liongard health check
Check Liongard connectivity and return system health summary
/check-mfa-status
Check mfa status
Audit MFA enrollment across all M365 users, highlighting accounts with no MFA
/get-user
Get user
Look up a Microsoft 365 user by name or email, showing account status, licenses, MFA, and last sign-in
/list-licenses
List licenses
Show Microsoft 365 license inventory - available SKUs, consumed seats, and optimization opportunities
/offboard-user
Offboard user
Run the complete M365 offboarding workflow for a departing user - revoke access, handle mailbox, transfer data
/block-sender
Block sender
Create a Mailprotector block rule for a sender address or domain at a chosen scope
/check-quarantine
Check quarantine
Review the Mailprotector quarantine at any scope and summarize held messages
/onboard-customer
Onboard customer
Onboard a new customer onto Mailprotector - customer, domain, user group, services, users
/release-message
Release message
Release one or more quarantined Mailprotector messages to their recipients
/meraki-find-device
Meraki find device
Locate a Meraki device by serial, name, or MAC across an organization's networks
/meraki-firewall-review
Meraki firewall review
Pull and summarize a Meraki network's L3 firewall rules and flag overly-permissive (any/any allow) rules
/meraki-network-health
Meraki network health
Sweep an organization's networks, devices, and appliance VPN status for a site-health overview
/entra-audit
Entra audit
Run a read-only Microsoft Entra identity hygiene audit via the Graph Enterprise MCP — inactive user accounts, admins without MFA registered, unassigned/wasted licenses, and a guest user inventory
/entra-report
Entra report
Conversational Microsoft Entra directory reporting via the Graph Enterprise MCP — license usage, user and group counts, application inventory, and directory composition, formatted for client check-ins and QBRs
/check-queue
Check queue
Check Mimecast email delivery queue status and identify stuck or deferred messages
/review-threats
Review threats
Review Mimecast TTP threat logs for URL clicks, malicious attachments, and impersonation attempts
/trace-message
Trace message
Trace an email through Mimecast by sender, recipient, subject, or date range
/device-inventory
Device inventory
Inventory devices for an N-central customer or site with class, warranty, and monitor-health breakdown
/issue-sweep
Issue sweep
Sweep active issues across N-central customers, grouped by severity and probable root cause
A systematic AI Agent development tutorial covering LLM agents, RAG, tool use, memory systems, multi-agent systems, LangChain, LangGraph, MCP, and agentic RL.|从…
11 views 0 likesConvert Files / Folders / GitHub Repos Into AI / LLM-ready Files
15 views 0 likesOpen-source, local-first conversational AI video editor with a professional multi-track timeline, Agent Skills, MCP integration, and Remotion rendering.
22 views 0 likesMaintainer-governed agent for evidence-backed open-source contribution proposals
12 views 0 likesA Claude Code skill by Hao (駱君昊) that learns your Facebook voice and auto-posts to FB / IG / Threads / X with a 14-day content calendar. Mega-viral validated: 8…
23 views 0 likesLocal-first AI agent workspace for coding, writing, design, research, and automation — one runtime for desktop GUI and TUI.
11 views 0 likesOpen-source AI Agent platform for teams. Your agents don't just chat — they read files, run code, call APIs, and deliver results.
12 views 0 likesGive your AI agent eyes for PDFs — structured text, tables, OCR, visual evidence, and page-level citations via MCP. Native Rust, local-first.
11 views 0 likesReal-world AI penetration testing engineer for authorized assessments — built-in cloud module covering AWS/Azure/GCP + Aliyun/Tencent/Huawei clouds. Built on Cl…
12 views 0 likesOpenGUI is an Android GUI agent framework for phone-use AI that can see, plan, and operate real mobile apps through the GUI.
11 views 0 likesTinybot is a lightweight personal AI Agent that is constantly evolving
15 views 0 likesGoink 桌面 AI 小说创作助手,对话式写作 + 自动状态追踪 + 本地语义搜索。跨平台开箱即用。AI Agent Novel Generator.
13 views 0 likesPluggable DeepSeek-colored TUI for DeepSeek Harness
7 views 0 likesEntity-level git merge driver. Resolves false conflicts git invents when independent agents edit the same file. ~95% reduction vs. line-based merge.
16 views 0 likesPercho: Minimalist desktop GUI for the Pi coding agent — the same engine as the Pi CLI, in a clean visual interface. Multi-session chat, visual tool approvals,…
12 views 0 likesRun Claude Code, Codex & Gemini in parallel on Windows & macOS — git worktree fan-out with atomic hunk adoption, approval gates, reboot-surviving sessions
23 views 0 likesA hierarchical memory framework for personalized presentation agents. Try it at memslides.com.
17 views 0 likesReal-time multimodal desktop agent evolving toward a persistent AI OS interface (0.1 α).
16 views 0 likesclawdcursor compiles whatever's on screen into one UI map — accessibility tree and OCR fused into stable, addressable elements, with a screenshot only when need…
18 views 0 likesRepeatable agentic engineering. The workflow layer that turns AI coding agents into a disciplined factory: durable specs, fresh-context workers, adversarial cro…
23 views 0 likes