This skill should be used when the user asks to "convert this PDF to markdown", "convert this image to quarto", "turn my diagram into mermaid", "transcribe my notes", "sketch to text", "scribble to quarto", "turn this sketch into a document", "process my Boox export", or provides a JPEG/PNG/PDF file path and wants it converted to structured text. Converts handwritten notes and diagrams (from Onyx Boox or any source) into Quarto (.qmd) or Markdown with Mermaid diagrams.

End-to-end GitHub issue fix workflow using gh, local code changes, builds/tests, and git push. Use when asked to take an issue number, inspect the issue via gh, implement a fix, run XcodeBuildMCP builds/tests, commit with a closing message, and push.

Gong API for searching calls, transcripts, and conversation intelligence. Use when working with Gong call recordings, sales conversations, transcripts, meeting data, or conversation analytics. Supports listing calls, fetching transcripts, user management, and activity stats.

Builds iOS/macOS/watchOS/tvOS applications, implements SwiftUI views and state management, designs protocol-oriented architectures, handles async/await concurrency, implements actors for thread safety, and debugs Swift-specific issues. Use when building iOS/macOS applications with Swift 5.9+, SwiftUI, or async/await concurrency. Invoke for protocol-oriented programming, SwiftUI state management, actors, server-side Swift, UIKit integration, Combine, or Vapor.

Manage stickies as markdown files — create new, read, list, or delete. Use when the user mentions "sticky", "stickies", or wants to take a quick note or save a reminder.

Implement OAuth 2.0 authentication with GitHub and Microsoft Entra (Azure AD) in Cloudflare Workers and other edge environments. Covers provider-specific quirks, required headers, scope requirements, and token handling without MSAL. Use when: implementing GitHub OAuth, Microsoft/Azure AD authentication, handling OAuth callbacks, or troubleshooting 403 errors in OAuth flows.

Analyzes code diffs and files to identify bugs, security vulnerabilities (SQL injection, XSS, insecure deserialization), code smells, N+1 queries, naming issues, and architectural concerns, then produces a structured review report with prioritized, actionable feedback. Use when reviewing pull requests, conducting code quality audits, identifying refactoring opportunities, or checking for security issues. Invoke for PR reviews, code quality checks, refactoring suggestions, review code, code quality. Complements specialized skills (security-reviewer, test-master) by providing broad-scope review across correctness, performance, maintainability, and test coverage in a single pass.

Generate website images with Gemini 3 Native Image Generation. Covers hero banners, service cards, infographics with legible text, and multi-turn editing. Includes Australian-specific imagery patterns. Use when stock photos don't fit, need text in images, or require consistent style across assets. Prevents 5 documented errors.

Create new skills, modify and improve existing skills, and measure skill performance. Use when users want to create a skill from scratch, edit, or optimize an existing skill, run evals to test a skill, benchmark skill performance with variance analysis, or optimize a skill's description for better triggering accuracy.

Implements Manus-style file-based planning for complex tasks. Creates task_plan.md, findings.md, and progress.md. Use when starting complex multi-step tasks, research projects, or any task requiring >5 tool calls.

Implements Manus-style file-based planning for complex tasks. Creates task_plan.md, findings.md, and progress.md. Use when starting complex multi-step tasks, research projects, or any task requiring >5 tool calls. Now with automatic session recovery after /clear.

Implements Manus-style file-based planning for complex tasks. Creates task_plan.md, findings.md, and progress.md. Use when starting complex multi-step tasks, research projects, or any task requiring >5 tool calls.

Review real software repositories for likely security issues using the local OWASP Top 10:2025 category set, official OWASP-mapped CWE lists, and canonical MITRE CWE records. Use when auditing source code, configuration, IaC, pipelines, dependencies, auth flows, crypto, logging, or error handling, and when the goal is evidence-based findings mapped to both CWE and OWASP 2025 with confidence levels and coverage gaps.

Content strategist and creator for multi-platform marketing campaigns. Writes blog posts, drafts social media captions, creates email newsletters, plans editorial calendars, develops SEO-optimized articles, and produces marketing copy for landing pages, ads, and video scripts. Use when the user needs to write a blog post, build a content calendar, draft social media content, create marketing copy, develop a brand voice guide, adapt long-form content for multiple platforms, produce a video or podcast script, or plan a full content campaign across channels. Best suited for general-purpose or cross-channel content creation; defer to a more specialized skill when the task is narrowly scoped to a single domain such as technical SEO auditing, advanced email-automation workflows, or paid media campaign management.

Reads a site feature specification file and converts it into a structured, actionable development task list saved to the project memory bank. Use when you need to break down requirements into developer tasks, plan project work from a PRD or spec, convert feature specifications into tickets with acceptance criteria, or create a task breakdown from site-setup documentation. Produces per-task acceptance criteria, file references, and technical stack notes drawn exclusively from the specification — no scope creep or unspecified features added.

Analyzes, redesigns, and automates business workflows to eliminate bottlenecks and improve efficiency. Creates process flow diagrams, identifies root-cause inefficiencies, writes standard operating procedures (SOPs), designs automation sequences, and produces implementation roadmaps with ROI estimates. Use when the user asks to map a business process, audit a workflow for inefficiencies, identify bottlenecks or handoff failures, create SOPs or checklists, design automation for repetitive tasks, apply Lean or Six Sigma techniques, or build a phased process improvement plan.

Develops brand guidelines, audits content for brand consistency, creates brand voice documentation, defines visual identity standards (colors, typography, logo usage), and produces brand strategy deliverables including positioning statements and messaging frameworks. Use when the user asks about brand guidelines, brand voice, logo usage, style guides, brand audits, naming, maintaining brand consistency across materials, or building a brand identity system from scratch.

Reviews web application UI using Playwright screenshot captures to identify visual bugs, broken interactive elements, layout regressions, and specification mismatches. Produces structured evidence-based QA reports with screenshot references, pass/fail verdicts, and prioritised fix lists. Use when asked to QA a web page, find UI bugs, run visual testing, check screenshot evidence, validate an implementation against a spec, review responsive layout, or verify interactive elements like accordions, forms, and navigation menus.

Sends HTTP requests to REST and GraphQL API endpoints, validates response codes, headers, and payloads, measures response times against SLA thresholds, generates structured test suites, and produces test reports covering functional, security, and performance scenarios. Use when the user asks about testing APIs, validating endpoints, checking HTTP status codes or response bodies, load testing, stress testing, debugging REST or GraphQL services, testing authentication flows, checking rate limiting, detecting SQL injection or OWASP API vulnerabilities, or integrating API tests into CI/CD pipelines.

Sends HTTP requests to REST and GraphQL API endpoints, validates response codes, headers, and payloads, measures response times against SLA thresholds, generates structured test suites, and produces test reports covering functional, security, and performance scenarios. Use when the user asks about testing APIs, validating endpoints, checking HTTP status codes or response bodies, load testing, stress testing, debugging REST or GraphQL services, testing authentication flows, checking rate limiting, detecting SQL injection or OWASP API vulnerabilities, or integrating API tests into CI/CD pipelines.