🔍代码审查 / GitHub MCP 推荐

Convert React class components to functional components with hooks

Schedule cron jobs and automate recurring tasks

Use when the user wants to create, generate, or set up a GitHub Actions workflow. Handles CI/CD pipelines, testing, deployment, linting, security scanning, release automation, Docker builds, scheduled tasks, and any custom workflow for any language or framework.

TypeScript support for type-safe Regle form validation, rules, and component props.

Validate PDF to Markdown conversion quality using multi-dimensional metrics. Assess table accuracy, style preservation (bold/italic/headings), robustness, and performance with standardized F1-scoring methodology.

Coding practices for backend development in Atomic CRM. Use when deciding whether backend logic is needed, or when creating/modifying database migrations, views, triggers, RLS policies, edge functions, or custom dataProvider methods that call Supabase APIs.

Coding practices for frontend development in Atomic CRM. Use when creating or modifying React components, forms, list pages, detail views, filters, data fetching, or responsive layouts.

Review an open PR like a maintainer — checkout, fix issues, push changes, post a structured verdict comment. You just merge or close.

Review an open PR like a maintainer — checkout, fix issues, push changes, post a structured verdict comment. You just merge or close.

Deploy MimiClaw firmware to an ESP32-S3 board. Covers prerequisites, configuration, build, flash, verification, and troubleshooting.

Mobile game development principles.

Analyze git repositories to build a security ownership topology (people-to-file), compute bus factor and sensitive-code ownership, and export CSV/JSON for graph databases and visualization. Trigger only when the user explicitly wants a security-oriented ownership or bus-factor analysis grounded in git history (for example: orphaned sensitive code, security maintainers, CODEOWNERS reality checks for risk, sensitive hotspots, or ownership clusters). Do not trigger for general maintainer lists or non-security ownership questions.

Repository-grounded threat modeling that enumerates trust boundaries, assets, attacker capabilities, abuse paths, and mitigations, and writes a concise Markdown threat model. Trigger only when the user explicitly asks to threat model a codebase or path, enumerate threats/abuse paths, or perform AppSec threat modeling. Do not trigger for general architecture summaries, code review, or non-security design work.

Perform language and framework specific security best-practice reviews and suggest improvements. Trigger only when the user explicitly requests security best practices guidance, a security review/report, or secure-by-default coding help. Trigger only for supported languages (python, javascript/typescript, go). Do not trigger for general code review, debugging, or non-security tasks.

Deploy applications and websites to Vercel. Use when the user requests deployment actions like "deploy my app", "deploy and give me the link", "push this live", or "create a preview deployment".

Deploy web projects to Netlify using the Netlify CLI (`npx netlify`). Use when the user asks to deploy, host, publish, or link a site/repo on Netlify, including preview and production deploys.

Deploy applications and infrastructure to Cloudflare using Workers, Pages, and related platform services. Use when the user asks to deploy, host, publish, or set up a project on Cloudflare.

Deploy applications to Render by analyzing codebases, generating render.yaml Blueprints, and providing Dashboard deeplinks. Use when the user wants to deploy, host, publish, or set up their application on Render's cloud platform.

Comprehensive security scanning and vulnerability detection. Includes input validation, path traversal prevention, CVE detection, and secure coding pattern enforcement. Use when: authentication implementation, authorization logic, payment processing, user data handling, API endpoint creation, file upload handling, database queries, external API integration. Skip when: read-only operations on public data, internal development tooling, static documentation, styling changes.

Agent skill for workflow - invoke with $agent-workflow

Agent skill for workflow-automation - invoke with $agent-workflow-automation

Agent skill for worker-specialist - invoke with $agent-worker-specialist

Agent skill for v3-security-architect - invoke with $agent-v3-security-architect

Agent skill for v3-queen-coordinator - invoke with $agent-v3-queen-coordinator

Agent skill for v3-memory-specialist - invoke with $agent-v3-memory-specialist

Agent skill for v3-integration-architect - invoke with $agent-v3-integration-architect

Agent skill for user-tools - invoke with $agent-user-tools

Agent skill for test-long-runner - invoke with $agent-test-long-runner

Agent skill for sync-coordinator - invoke with $agent-sync-coordinator

Agent skill for swarm-pr - invoke with $agent-swarm-pr

Agent skill for spec-mobile-react-native - invoke with $agent-spec-mobile-react-native

Agent skill for sparc-coordinator - invoke with $agent-sparc-coordinator

Agent skill for sona-learning-optimizer - invoke with $agent-sona-learning-optimizer

Agent skill for security-manager - invoke with $agent-security-manager

Agent skill for scout-explorer - invoke with $agent-scout-explorer

Agent skill for safla-neural - invoke with $agent-safla-neural

Agent skill for reviewer - invoke with $agent-reviewer

Agent skill for researcher - invoke with $agent-researcher

Agent skill for repo-architect - invoke with $agent-repo-architect

Agent skill for release-swarm - invoke with $agent-release-swarm

Agent skill for refinement - invoke with $agent-refinement

Agent skill for queen-coordinator - invoke with $agent-queen-coordinator

Agent skill for pseudocode - invoke with $agent-pseudocode

Agent skill for project-board-sync - invoke with $agent-project-board-sync

Agent skill for production-validator - invoke with $agent-production-validator

Agent skill for pr-manager - invoke with $agent-pr-manager

Agent skill for planner - invoke with $agent-planner

Agent skill for performance-optimizer - invoke with $agent-performance-optimizer