代码审查 / GitHub MCP 推荐

引导开发者下载、配置并安装官方开源的 Google Ads MCP 服务器。当用户想把其 AI 助手（如 Gemini、Claude Code 或 Cursor）连接到 Google Ads 账户，以自然语言查询广告系列或获取报告指标时使用。

在对缺陷负有归属权的仓库中创建高信息量的 bug issue 或 PR。当用户要求报告、提交、开启或分类 LazyCodex、lazycodex-ai、omo-codex、Codex 插件或上游 Codex CLI 的 bug 时使用，尤其是需要源码支撑的根因、复现步骤、修复建议与 GitHub 路由时。

在一次性的 Docker Compose 沙箱（runner 容器 + 通过 supabase start 启动的本地 Supabase 栈）里执行文档中可运行的代码片段与示例。在 Draft 之后或 Self-review 期间，被要求测试文档、对 CLI/SQL/代码样例做事实核查或为文档 PR 产出验证报告时使用。作为 review-the-docs 的 lint/build 检查的补充而非替代。

基于文档化的架构、构建流水线与 review 模式回答关于 Supabase docs 应用（apps/docs）的问题，并在提议或评审改动时套用功能设计原则（代码库复用、极简编码）。当用户问“docs 应用里 X 是怎么工作的”“Y 在哪里”“这个方案在 docs 应用里合适吗”，或在 apps/docs/ 下做非平凡改动前使用——特别是涉及 MDX 流水线、markdown 生成、内容组件、联邦文档、贡献者写作模式的场景。必要时可用 Mermaid 图回答架构问题。

在 v4 与 v5 发布线仍共享代码期间实施或审查 Remotion 5 的破坏性变更。适用于 main 分支上必须保持 v4 行为与公共类型兼容,但切换中央 v5 开关后应启用新运行时行为、默认值或 TypeScript API 的情况。

依据真实生产问题提炼的缺陷模式，审查 Sentry React 与 TypeScript 改动。在审查前端 diff 或 PR、核对 Warden 发现、审计当前分支、复核生产错误模式，或在 `static/` 中查找常见回归时使用。

根据 bug 报告中提供的信息复现并分诊 Playwright issue。当被要求分诊、复现或验证 GitHub issue（新的 bug 报告，或已有报告的新评论）时使用。

Deploy applications and websites to Vercel. Use this skill when the user requests deployment actions such as "Deploy my app", "Deploy this to production", "Create a preview deployment", "Deploy and give me the link", or "Push this live". No authentication required - returns preview URL and claimable deployment link.

把逆向工程、漏洞利用、渗透测试、恶意软件、移动端、固件、浏览器自动化、文档与安全类任务路由到合适的专项技能。当任务横跨多个模块、或不确定该用哪个 reverse-skill 入口时使用。

Cross-references C# Web API controllers/DTOs against their TypeScript/JavaScript consumers (React, Angular, Vue, Svelte, Node.js, or hand-written/auto-generated HTTP clients like Fetch, Axios, NSwag) to catch contract drift in both directions: backend changes that break client applications (renamed/removed JSON keys, new required parameters, status code shifts) and frontend code sending fields the backend no longer reads. Works directly against source code, not exported OpenAPI spec files. Use when the user asks to check for breaking API changes, verify frontend/backend contract sync, or audit a DTO/controller change against its TypeScript/JS consumers before merging. Not for generating new API code from a spec (see openapi-to-application-code) or scaffolding new endpoints (see aspnet-minimal-api-openapi).

把本周 tldraw.com(dotcom)版本要发布内容的通俗总结发到营销团队的 Discord 频道。适用于准备每周 dotcom 版本、被要求面向非工程受众说明本周发布内容,或定时的 release-marketing 自动化运行时。检查 production...main 提交范围,把面向用户的变更翻译成营销能理解的价值点,并通过 Discord webhook 发布简洁总结。

Automate security workflows and remediation. Build security pipelines, automate compliance checks, and implement SOAR capabilities. Use when scaling security operations or implementing DevSecOps.

Expo's official example projects — the expo/examples repo of ~70 `with-*` integrations (Stripe, Clerk, Supabase, OpenAI, maps, Reanimated, SQLite, Skia, NativeWind, and more).

Hunting skill for sqli vulnerabilities.

A modern dark-themed React UI system using Tailwind CSS and Framer Motion. Designed for dashboards, admin panels, and data-rich applications with glassmorphism effects and tasteful animations.

Build and operate apps on Firebase using Auth, Firestore, Cloud Functions, and Hosting. Use when building mobile/web backends with managed services, real-time data sync, or serverless APIs.

Mobile game development principles. Touch input, battery, performance, app stores.

Build reactive backends with Convex functions, schema validation, auth integration, and deployment workflows. Use when building real-time apps with type-safe server functions and automatic caching.

Create, manage, and deploy Helm charts for Kubernetes package management.

Auto-scale LLM inference clusters on Kubernetes using KEDA, custom GPU metrics, and horizontal pod autoscaling.

Deploy and manage Azure Kubernetes Service clusters. Configure node pools, networking, and integrations. Use when running Kubernetes workloads on Azure.

Deploy and manage Google Kubernetes Engine clusters. Configure node pools, networking, and workload identity. Use when running Kubernetes on GCP.

Customize Kubernetes manifests without templating using Kustomize.

Operate GPU-backed Kubernetes clusters for AI inference and training with scheduling, autoscaling, node health, MIG partitioning, and cost controls.

Deploy, scale, and manage Kubernetes workloads.

Implement Kubernetes security contexts, Pod Security Standards, and network policies.

Build, deploy, and maintain applications on Hugging Face Spaces — Gradio / Docker / Static SDKs, ZeroGPU and dedicated hardware, model loading, debugging, buckets, inference providers, community grants.

Manage container registries including ECR, ACR, GCR, and Docker Hub.

Design and implement CI/CD pipelines, Docker configurations, deployment strategies, and infrastructure automation with production-ready patterns.

Hunt Kubernetes & Docker

Secure Docker images and container runtime configurations.

Build, optimize, and troubleshoot Docker containers and images.

Secure AI coding agents (Claude Code, Cursor, Codex, Copilot) with permission boundaries, secret protection, code review gates, and safe sandbox configurations for team environments.

Firebase gives you a complete backend in minutes - auth, database, storage, functions, hosting. But the ease of setup hides real complexity. Security rules are your last line of defense, and they're often wrong.

Provision Cloud SQL and Spanner databases. Configure high availability, backups, and security. Use when deploying managed databases on GCP.

Maintain IT asset inventory and configuration management database. Track hardware, software, and cloud resources. Use when managing IT assets.

Administer PostgreSQL databases. Configure replication, backups, and performance tuning. Use when managing PostgreSQL deployments.

Administer MongoDB databases. Configure replica sets, sharding, and backups. Use when managing MongoDB deployments.

Operate MySQL-compatible databases on PlanetScale with branching workflows, safe migrations, and production rollouts.

Provision and manage RDS databases. Configure backups, replication, and security. Use when deploying managed relational databases on AWS.

Provision Azure SQL Database and Cosmos DB. Configure security, backups, and replication. Use when deploying managed databases on Azure.

Deploy, manage, and optimize vector databases for AI applications.

Implement database backup strategies. Configure automated backups, retention, and recovery testing. Use when designing backup and recovery procedures.

Deploy and manage the ELK Stack (Elasticsearch, Logstash, Kibana) for log aggregation and analysis.

Deploy ML models on Kubernetes with KServe (formerly KFServing) and NVIDIA Triton Inference Server.

Deploy Azure resources with ARM templates and Bicep. Create modular deployments and manage dependencies. Use when deploying Azure-native IaC.

Configure zero-downtime deployment strategies including blue-green, canary, and rolling deployments.

Secure OpenClaw deployments with preflight hardening checks, CI/CD guardrails, container runtime restrictions, and post-deploy verification.