代码审查 / GitHub MCP 推荐

Build or update a professional-grade design system in Figma from a codebase. Use when the user wants to create variables/tokens, build component libraries, create individual components with proper variant sets and variable bindings, set up theming (light/dark modes), document foundations, or reconcile gaps between code and Figma. Also use when the user asks to create or generate any component in Figma — even a single one — since components require proper variable foundations, variant states, and design token bindings to be production-quality. This skill teaches WHAT to build and in WHAT ORDER — it complements the `figma-use` skill which teaches HOW to call the Plugin API. Both skills should be loaded together.

Use this skill alongside figma-use when the task involves translating an application page, view, or multi-section layout into Figma. Triggers: 'write to Figma', 'create in Figma from code', 'push page to Figma', 'take this app/page and build it in Figma', 'create a screen', 'build a landing page in Figma', 'update the Figma screen to match code', 'convert this modal/dialog/drawer/panel to Figma'. This is the preferred workflow skill whenever the user wants to build or update a full page, modal, dialog, drawer, sidebar, panel, or any composed multi-section view in Figma from code or a description. Discovers design system components, variables, and styles from Code Connect files, existing screens, and library search, then imports them and assembles views incrementally section-by-section using design system tokens instead of hardcoded values.

以运动本身传递信息的短设计型 motion graphic——动态字体、数字滚动、图表/数据可视化呈现、logo 片头/品牌定格、下三分之一字幕条/浮层/社媒 overlay、动画地图（区域高亮、地点连线、缩放到某地）、推文/新闻文章/标题动画、网页/UI 动画（滚动、光标、callout），或将真实图片的几何结构融入图表。通常 10 秒以内（最长约 30 秒），无旁白与真人实拍；渲染为 MP4 或透明 overlay。更长的/有旁白的/多场景的用 /general-video；不明确的用 /hyperframes。

Add captions or subtitles to an existing single-subject talking-head video without editing the footage. Use for plain verbatim captions, cinematic captions embedded behind the subject, VFX captions, “炸/特效/酷炫字幕,” or a named identity from the 35-style catalog. Route by visual identity, not by backend engine. The quiet `anchor` rail is the default; embed every word only when the user explicitly wants a fully cinematic treatment. The workflow runs locally end to end, including transcription and subject matting; split multi-shot footage before applying it.

面向落地页、作品集与重设计的反模板化（anti-slop）前端技能。代理读取需求、推断正确的设计方向，交付看起来不像模板的界面。适用时使用真实设计系统，重设计先做审查，并执行严格的发布前检查。

Use for Zustand stores: state shapes and type sources, state-only stores with xActions classes, replica-backed list/detail data (@lobechat/replica), selectors, optimistic writes, and legacy slice/internal_* action composition.

Use when designing, implementing, or reviewing responsive client layouts, text truncation, title wrapping, icon-only controls, mobile hover, tooltips and keyboard behavior, and focus during width changes in DeepSeek Harness.

Design and review DeepSeek Harness client UI changes — visual token discipline, reuse-before-adding, feedback surfaces (toast vs in-place notice vs empty state), overlay and menu safety, platform window adaptation, loading states, and error copy placement. Use when adding or changing product-user-visible GUI behavior in packages/client, or when reviewing such a PR.

如何把 career-ops 求职跟踪表同步到 Notion 数据库，并把记录读回作为职位线索。

Use during code review of DeepSeek Harness Cordis plugins and helpers reachable from their entrypoints, including pull requests, and during focused lifecycle audits. Checks singleton state, unreversed side effects, and cleanup dependencies released before consumers finish; reports substantiated P0 findings with ownership evidence and deterministic verification.

VS Code 的设计理念——一套用于以设计语言而非原始像素来思考 UI 的共享价值观→原则→手法词汇。在设计、构建、评审任何可视化界或给出反馈，决定圆角、间距、字级角色、图标尺寸、边框、颜色或动效，或把感觉不对的观察转化为具体、有原则的修改时使用。

可视化 skill、规则和代理定义是否真的被遵循——自动生成 3 个提示词严格度档位的场景、运行代理、对行为序列分类，并给出附带完整工具调用时间线的遵循率报告。在核查代理是否真的遵循了交给它的 skill、规则与定义（而不是默认它会遵循）时使用。

Old v2 (experimental) of taste-skill, the single-file dial-driven version, preserved for projects depending on its exact behavior. The current default is `design-taste-frontend` (v2). Use this install name only if you need the earlier behavior. Anti-slop frontend rules for landing pages, portfolios, and redesigns, with real design systems when applicable, audit-first redesigns and a strict pre-flight check.

Use after completing any non-trivial task. The agent self-rates its output on 5 axes — accuracy, completeness, clarity, actionability, conciseness — with concrete evidence per criterion. Produces a structured 1-5 scorecard with specific improvement suggestions.

最初的 v1 taste-skill，为依赖其确切行为的项目保留。当前默认版本是 `design-taste-frontend`（v2 实验版），是一次大幅重写。仅在需要完全向后兼容时使用此 v1 安装名。

当 HyperFrames 合成中已放置的音频需要混音时使用：淡入/淡出、crossfade、轨道增益或音量、音量自动化、ducking、与旁白冲突的音乐垫（voiceover carve）、对轨道施加效果（EQ、压缩、限制、门限、饱和、延迟、混响、合唱、移相、bitcrush）、在轨道音量或任意效果参数上绘制自动化包络，或用一个 submix 总线承载链路、用 `<hf-audio-group>` 让一个推子和一个自动化时钟同时控制多条轨道。不用于音频获取或生成——找 BGM、音效或制作旁白属于 `/media-use`。不用于片段时序或轨道布局，那属于 `/hyperframes-core`。

为当前编码 agent 配置 gbrain：安装 CLI、初始化本地 PGLite 或 Supabase brain、注册 MCP、逐远端记录信任策略。（gstack）

通过 Aside 驱动真实浏览器：打开页面、阅读内容、点击走完流程、截图、检查 console 错误。（gstack）

Docker and Docker Compose patterns for local development, hardened CLI installer harnesses, container security, networking, volumes, and multi-service orchestration. Use when creating or reviewing Dockerfiles and Compose services, testing installers across Linux distributions, or planning accurate native macOS and Windows validation.

PreToolUse fact-forcing gate that denies the first Edit/Write/Bash (including MultiEdit and NotebookEdit) attempt until the agent presents concrete facts (importers, data schemas, verbatim user instruction), then allows retry; A/B-tested at +2.25 quality points. Use when enabling or configuring the GateGuard hook, exempting paths via env vars, or handling first-touch denials.

合入并部署的工作流。（gstack）

为 /land-and-deploy 配置部署相关设置。

Atlas Kubernetes Operator setup and operations: Helm install and values, AtlasSchema (declarative) and AtlasMigration (versioned) resources, Atlas Cloud bot tokens and the registry, database credentials and URL scope, the dev database in the cluster, lint and review policies, pre-approved and ad-hoc plans, down migrations, drift detection (policy.drift and AtlasDriftCheck), security scans (AtlasSecurityScan), custom atlas.hcl config and IAM auth, GitOps with Argo CD, Argo Rollouts, Flux, and Octopus Deploy, and troubleshooting from status conditions and events. Use with the atlas skill whenever Atlas runs in Kubernetes, or the user asks to deploy schema changes with the operator.

使用 Ruflo 安全工具对代码库执行完整安全扫描。评审 PR 的安全回退、审计认证/输入处理代码、生产部署前，或用户要求按 quick/standard/deep 深度做安全检查时使用。

编排固件灰度发布：canary 部署与异常检测门控的推进流程。

仅在用户明确提出要使用 Computer Use 时使用：通过内置引擎，从 cmux 智能体会话中驱动真实的 macOS 应用（无障碍树加截图，支持点击、输入、滚动、拖拽，并带可辨识的光标），或向用户说明其由用户授权的权限设置。阅读或发现本技能不构成同意。

对两次录制会话在匹配轨迹步骤 ID 处做视觉 + DOM 差异比较;用于视觉回归与重放验证。

v0.2.0 起弃用——请改用 browser-extract;本技能仅为向后兼容的薄壳,将在 v0.3.0 移除。

针对相同 URL 或变体重放已录制的会话轨迹;利用 browser-selectors 的嵌入相似度从 DOM 漂移中恢复。

打开一个具名、带追踪的浏览器会话并写入 RVF 认知容器,由 ruvector 记录每个操作的轨迹。

驱动认证流程一次,经 AIDefence 净化 Cookie,并在 browser-cookies 中保存可复用的 Cookie 句柄供后续会话使用。

通过已存储的 browser-templates 模板或一次性 DOM 查询提取结构化数据;在内容送入模型前强制执行 AIDefence 的 PII 与提示注入过滤。

探测站点的认证流程,查找重定向泄漏、缺失 CSRF、弱会话 Cookie 和 OAuth 配置错误;输出 auth findings.md 报告。

Keep web animations inside the frame budget — animate composite-only properties, keep motion off the main thread when the page is busy, and find the cause when an animation drops frames. Covers the layout/paint/composite pipeline, cheaper property swaps, CSS vs WAAPI vs requestAnimationFrame, Framer Motion's hardware-accelerated path, React re-rendering per frame, inherited CSS variable recalculation, blur cost, and when `will-change` actually helps. Use when an animation is janky, choppy, stutters, or drops frames; when choosing which property to animate; when deciding between CSS and JS animation on performance grounds; or when reaching for `will-change` or GPU layers. For choosing easing, duration, or whether to animate at all use animate; for reviewing motion as a whole use review-animations.

SRS 与 Oryx 代码库以及 SRS Docker 镜像工具链的开发、修改、调试、评审、维护与讲解。用于对下一代 SRS Go 代理、SRS 浏览器播放器、ossrs/dev-docker 镜像，以及 Oryx 的 Go 后端、React 控制台、一体化运行时、打包、安装器、发布与测试做计划性改动；也包括缺陷维护、issue 与 PR 分诊、PR 评审以及 Learn Code 提问。C++ 版 SRS 服务器已进入维护模式，基于 Go 的新版源站与边缘节点的规划性开发尚不支持。不适用于终端用户支持、使用提问或配置咨询——这些请使用 srs-support。

Generate local speech with saved or designed voices, transcribe audio, and automate dubbing or narration workflows through VoiceStudio's REST API or MCP server. Use when the user wants to work with VoiceStudio audio or connect it to an agent or automation.

在 Shade 或 admin 应用中不要为颜色写 dark: Tailwind 变体——语义令牌在暗色模式下自动切换。在编辑使用 Shade 的应用的 TSX 时触发。

UI 装饰一律使用 Shade 语义令牌(bg-background、text-foreground、border-border-default、bg-surface-elevated)——绝不使用 hex、hsl() 或 bg-gray-200 之类的原始调色板工具类。在编辑使用 Shade 的应用的 TSX/CSS 时触发。

审核 Claude Code 的上下文窗口在代理、skill、MCP 服务器和规则上的消耗，识别膨胀与冗余组件，并给出按优先级排序的省 token 建议。当上下文窗口填充过快、需要找出是哪些代理、skill、MCP 服务器或规则在占用时使用。

以红-绿-重构循环用测试驱动开发。在实现任何逻辑、修复任何 bug 或改变任何行为时使用；在需要证明代码可用、收到 bug 报告或即将修改现有功能时使用。

Inventory and govern a project's test assets. Connect requirements, business rules, risks, bugs, and cross-boundary contracts to stable TEST-IDs and executable evidence in the repository's existing test registry or TESTS.md. Use for test inventory, test gap analysis, unit/integration/contract/E2E/smoke classification, bug-to-test regression protection, consumer/provider contract testing, test-necessity review, and pre-delivery evidence review.

Inventory and govern a project's test assets. Connect requirements, business rules, risks, bugs, and cross-boundary contracts to stable TEST-IDs and executable evidence in the repository's existing test registry or TESTS.md. Use for test inventory, test gap analysis, unit/integration/contract/E2E/smoke classification, bug-to-test regression protection, consumer/provider contract testing, test-necessity review, and pre-delivery evidence review.

首席安全官（CSO）模式。（gstack）

跨前端、后端、查询与数据库优化应用性能。在存在性能指标要求、怀疑性能回归、需要改善 Core Web Vitals 或加载时间、需要修复 N+1 查询模式，或剖析暴露瓶颈时使用。

把 SRS 与 Oryx 的代码任务路由到最小相关的可信代码库地图与验证指引。只要支持、开发、调试、评审或维护工作需要定位、选择、阅读、修改、测试或验证 SRS/Oryx 代码时使用。覆盖第一代 C++ 源站与边缘媒体服务器及其 State Threads 依赖、下一代 Go 服务器、浏览器推流与播放、SRS Docker 镜像工具链、SRS 测试，以及 Oryx 的 Go 后端、React 控制台、一体化运行时、打包、安装器、发布与测试。作为父级支持与发展技能的代码导航依赖；面向用户的工作流程与结果仍由父技能负责。

Fix browser/API/CLI/job/worker/webhook bugs. (gstack)

通过 Aside 浏览器从网页拉取数据——使用你真实的、已登录的会话。（gstack）

让远程 AI agent 与你的浏览器配对使用。（gstack）