sickn33

Firebase 简化了后端开发，但安全规则和数据建模需要专业知识以避免安全漏洞和成本超支。此技能提供 Firebase 最佳实践的专业指导。

此技能通过验证测试通过、提供清晰的合并/PR 选项并安全执行所选工作流，自动化了功能开发的最后步骤。

此技能使用系统化的多阶段方法审查代码变更中的漏洞、安全弱点和问题。它会映射攻击面、运行安全检查清单，并提供按优先级排序的发现结果，附带证据和修复建议。

在不阻塞应用程序或暴露敏感数据的情况下安全地上传文件。此技能提供了预签名 URL、魔术字节验证和安全云存储集成经过验证的模式。

Web applications often have vulnerabilities that allow attackers to read arbitrary files through path traversal attacks. This skill provides comprehensive testing methodologies to identify and document these security gaps during authorized penetration testing.

This skill helps you clean up cluttered directories by analyzing your files, finding duplicates, and proposing logical folder structures. It automates file organization while asking for confirmation before making any changes.

Manual Figma tasks consume hours of repetitive work. This skill automates file extraction, component management, and asset export through Rube MCP integration.

Ffuf (Fast Web Fuzzer) helps security professionals discover hidden web resources. This skill provides patterns and guidance for integrating ffuf into Claude Code workflows for efficient web reconnaissance.

Developers need production-ready FastAPI project structures without starting from scratch. This skill provides complete templates with async patterns, dependency injection, and layered architecture for high-performance APIs.

Building high-performance async APIs requires mastering complex patterns in FastAPI, SQLAlchemy, and Pydantic. This skill provides expert guidance on modern Python async development, from API design to deployment.

Building REST APIs requires consistent router patterns with authentication and proper responses. This skill generates production-ready FastAPI routers following established conventions.

Build complex AI pipelines by chaining multiple models in sequence. Generate structured workflow JSON configurations for fal.ai model orchestration.

Low-resolution media limits professional use. This skill enhances image and video quality using fal.ai's AI upscaling models.

Developers need to integrate with fal.ai platform for AI model operations. This skill provides structured access to model management, pricing lookup, and usage tracking APIs.

This skill enables AI-powered image editing including style transfer and object removal through the fal.ai API. It provides patterns and guidance for integrating computer vision capabilities into Claude workflows.

Creative workflows require fast, high-quality visual content generation. This skill enables seamless integration of fal.ai models to transform text prompts into images and videos.

This skill enables Claude to work with text-to-speech and speech-to-text capabilities using fal.ai audio models, providing patterns and guidance for audio generation and transcription tasks.

Deploying Expo apps to production requires complex build configuration and app store compliance. This skill provides expert guidance for EAS Build, app store submission, and over-the-air updates.

This skill helps Claude Code safely execute implementation plans by breaking work into batches and requiring human review between each batch, preventing costly mistakes and ensuring alignment with goals.

Finding relevant information online is time-consuming with traditional keyword search. This skill enables semantic search using AI embeddings to discover similar content and conduct structured research through the Exa API.

Build audit-ready systems with complete change history. This skill helps architects implement event sourcing, CQRS, and event-driven patterns for systems requiring temporal queries and reliable audit trails.

Building event-sourced systems requires careful event store design decisions. This skill provides proven patterns for PostgreSQL, EventStoreDB, and DynamoDB implementations with optimistic concurrency and subscription support.

Agents require different evaluation approaches than traditional software. This skill provides frameworks to measure agent quality, track improvements, and validate context engineering choices.

安全专业人员需要一种结构化的授权渗透测试方法。本技能提供完整的渗透测试生命周期，从侦察到报告，涵盖认证道德黑客使用的必要工具和技术。