Browse Skills

Security review for any codebase, PR, or architecture. OWASP Top 10, API Security Top 10, CWE Top 25, SAST (Semgrep, CodeQL, Bandit), dependency scanning (Trivy, Snyk), secret detection (Gitleaks, TruffleHog), IaC scanning (Checkov, tfsec), threat modeling (STRIDE, PASTA), language vulnerability patterns, and remediation. Triggers: security review, OWASP, vulnerability, CVE, CWE, Semgrep, CodeQL, Trivy, Gitleaks, threat model, STRIDE, XSS, SQL injection, SSRF, Checkov, security scanning, SBOM.

Improve AI agents with adversarial coaching, contradiction checks, evidence demands, and verification loops. Covers skeptical review, ReAct and Reflexion retries, multi-agent critique, and eval-first prompt optimization. Triggers: gaslight ai, gaslighting ai agents, make ai work better, challenge my agent, adversarial critique, pressure test prompt, red team the answer, contradiction check, prove it, verify output, agent self-critique, agent reliability.

Migrate Next.js applications to TanStack Start — escape Vercel lock-in with a client-first, type-safe, deploy-anywhere React framework. Covers routing, data fetching, components, auth, deployment, and migration strategy.

Frontend craft for polished, distinctive apps. Micro-interactions, perceived performance, premium components, visual polish, design foundations (typography, OKLCH color, spatial design), responsive, interaction patterns, UX writing, AI slop detection, shadcn registry search (11K+ components). Triggers: animation, skeleton, framer motion, shadcn, aceternity, UI polish, premium feel, typography, OKLCH, dark mode, responsive, interaction design, UX writing, AI slop, design looks generic.

Create complete characters — AI-generated visual sheets (turnarounds, expressions, poses) plus written character bibles. Discovery interview, archetype-to-visual mapping, AI generation via Flux Kontext and GPT-Image-1. Any style: anime, realistic, pixel art, cartoon, vector. Triggers: character design, character sheet, create a character, expression sheet, character bible, OC design, game character, NPC design, villain design, pose sheet, model sheet.

Create complete brand identities — logo, colors, typography, guidelines — in minutes. Archetype selection, color psychology, font pairing, AI logo generation (QuiverAI Arrow, Recraft V4), brand guideline output (JSON, CSS tokens, HTML). Triggers: brand identity, create a brand, logo design, color palette, brand guidelines, brand style guide, font pairing, brand archetype, visual identity, brand kit, rebrand, color scheme, logo concept.

Tailscale mesh VPN configuration, administration, and troubleshooting.

Monorepo architecture, tooling, and operations for any language or scale. Covers orchestrator selection (Nx, Turborepo, Bazel, Rush, Moon, Pants, Buck2), workspace managers (pnpm, Cargo, Go, uv, Gradle), polyglot patterns, CI/CD optimization, scaling, migration, and versioning. Triggers: monorepo, Nx, Turborepo, Bazel, Rush, Moon, Pants, pnpm workspaces, cargo workspaces, go.work, polyglot monorepo, affected builds, remote cache, changesets, monorepo CI, monorepo migration, sparse checkout.

Git worktree lifecycle — create, work, resolve, clean up. All subcommands (add, list, remove, prune, lock, unlock, move, repair), workflows (hotfix, PR review, parallel dev, AI agents), bare repo patterns, proactive cleanup. Triggers: git worktree, worktree, worktrees, parallel branches, hotfix while on feature, review PR, branch already checked out, clean up worktrees, bare repo worktrees, context switch without stash.

Diagnose and fix browser compatibility issues in Next.js apps. Covers Safari/iOS Safari JS polyfills, CSS workarounds, Next.js polyfill config (App Router + Pages Router), browserslist, feature detection, and safe polyfill delivery. Triggers: polyfill, Safari broken, works in Chrome not Safari, iOS Safari bug, browserslist, cross-browser, caniuse, requestIdleCallback, 100vh Safari, input zoom iOS, backdrop-filter Safari, Safari date parsing, polyfill.io alternative.

Ghostty terminal config, themes, keybindings, shell integration. 500+ themes with light/dark switching, custom theme authoring, full keybind catalog (splits, tabs, search, quick terminal, key tables), shell integration for zsh/bash/fish, SSH/sudo wrapping, macOS vs Linux differences, migration from iTerm2/kitty/alacritty/WezTerm. Triggers: ghostty config, ghostty theme, ghostty keybind, ghostty split, ghostty font, ghostty quick terminal, configure ghostty, ghostty ssh, migrate to ghostty

macOS system configuration via CLI. Covers defaults write, networksetup, pmset, systemsetup, scutil, hidutil, and PlistBuddy for keyboard, trackpad, Dock, Finder, network (DNS, proxy, Wi-Fi), power, display, sound, security, and per-app settings. Generates idempotent setup scripts. Companion to @tank/macos-cleanup and @tank/macos-maintenance. Triggers: configure mac, mac setup, macos defaults, key repeat, dock settings, change dns, dark mode, hot corners, caps lock remap, dotfiles.

Compress any file on macOS/Linux. Images (JPEG, PNG, WebP, AVIF, GIF), video (H.264/H.265/AV1), audio (MP3/AAC/Opus/FLAC), PDFs (Ghostscript), archives (zip, tar.gz, 7z, zstd, brotli). Auto-detects tools, guides installation, batch operations. Triggers: compress, shrink, optimize, reduce file size, image compression, video compression, compress PDF, archive, convert to WebP, ffmpeg compress, optimize images, batch compress, pngquant, oxipng, cwebp, avifenc, ghostscript, zstd, brotli.

Intercom frontend integration. Covers Messenger JS SDK, React/Next.js/Angular/Vue patterns, custom launchers, calling workarounds, tours, surveys, checklists, identity verification (JWT/HMAC), trackEvent, and performance. Triggers: intercom, intercom messenger, intercom SDK, react-use-intercom, intercom boot, custom launcher, startTour, startSurvey, identity verification, trackEvent, intercom phone call, intercom Angular, intercom Next.js, intercom Vue, showNewMessage, showSpace, intercom JWT.

Windows 10/11 health checks, security audit, and maintenance. Diagnoses disk SMART, sfc/DISM integrity, Defender, firewall, BitLocker, UAC, Secure Boot, TPM, battery, memory, updates, event log errors, driver health. Scored checkup script. Triggers: windows health check, system checkup, is my pc ok, windows maintenance, pc running slow, sfc scannow, DISM repair, check Defender, BitLocker, firewall status, BSOD, blue screen, startup programs, event log errors, windows update.

Windows 10/11 disk space recovery for developers. Cleans temp files, Windows Update cache, WinSxS, browser caches, stale node_modules, Docker WSL2, NuGet/npm/pip/Cargo caches, hibernation file, Recycle Bin. Risk-aware PowerShell workflows. Triggers: disk cleanup, free disk space, clean up windows, disk full, clear cache, ccleaner, windows cleanup, temp files, cleanmgr, WinSxS, node_modules cleanup, docker disk, npm cache, pip cache, NuGet cache, reclaim space, hiberfil.sys.

macOS health checks, security audit, and maintenance. Diagnoses disk SMART, battery, memory pressure, security (SIP, Gatekeeper, FileVault, firewall), updates, Time Machine, network, launch daemons. Scored checkup script. Triggers: mac health check, system checkup, is my mac ok, mac maintenance, mac running slow, battery health, SMART status, memory pressure, security audit, firewall status, periodic maintenance, flush DNS, rebuild spotlight, Wi-Fi issues, mac slow, fan loud.

macOS disk space recovery and cleanup for developers. Scans and cleans caches, Xcode DerivedData, Docker, stale node_modules, Homebrew, npm/pip/cargo caches, logs, iOS backups. Risk-aware with dry-run analysis. Triggers: disk cleanup, free disk space, clean up my mac, disk full, running out of space, clear cache, ccleaner, node_modules cleanup, docker disk space, xcode cleanup, DerivedData, brew cleanup, npm cache, pip cache, cargo clean, reclaim space, system data large, purge caches.

Build Discord bots in Go with discordgo, arikawa, or disgo. Covers slash commands, handler patterns, components, embeds, intents, events, state, database (pgx, entgo), voice (dgvoice, dca), goroutine safety, sharding, deployment. Triggers: discord bot go, discordgo, arikawa, disgo, golang discord bot, slash command go, discord gateway go, discord voice go, discord embed go, discord button go, discord modal go, discord bot docker go, dgvoice, discord sharding go.

Build custom linters with auto-fix, write codemods, and run large-scale code migrations using ts-morph, jscodeshift, ESLint custom rules, ast-grep, and Babel plugins. Covers Fixer API, Collection API, YAML rules, fixture testing, migration strategies, formatting preservation. Triggers: codemod, linter, custom lint rule, ESLint rule, auto-fix, ts-morph, jscodeshift, ast-grep, AST, code migration, Fixer API, RuleTester, babel plugin, recast, API rename, typed linting.