Agent Skills
A collection of custom skills for Claude Code, Anthropic's official CLI for Claude. These skills extend Claude Code's capabilities with specialized, domain-specific functionality.
What are Agent Skills?
Agent skills are modular extensions that provide Claude Code with specialized knowledge and tools for specific tasks. Each skill includes:
- SKILL.md - Skill definition with instructions and procedures
- References - Domain knowledge and pattern libraries
- Scripts - Automation tools and utilities
- Assets - Templates and supporting files
Available Skills
Next.js Security Scan
A comprehensive security vulnerability scanner for Next.js and TypeScript/JavaScript projects.
Features:
- OWASP Top 10:2025 vulnerability detection
- XSS and injection flaw identification
- Authentication and authorization issue detection
- Hardcoded secrets and credentials scanning
- Next.js-specific vulnerability checks
- Dependency audit for known CVEs
- Actionable security reports
Scan Types:
- Quick Scan - Fast scan for critical vulnerabilities
- Full Scan - Comprehensive security assessment
- Targeted Scan - Focus on specific vulnerability categories (XSS, injection, auth, secrets, deps, nextjs)
Usage:
/nextjs-security-scan
Python Security Scan
A comprehensive security vulnerability scanner for Python projects including Flask, Django, and FastAPI applications.
Features:
- OWASP Top 10:2025 vulnerability detection
- Python-specific vulnerabilities (eval, exec, pickle, etc.)
- Framework auto-detection and framework-specific checks
- SQL/NoSQL/Command injection detection
- Insecure deserialization patterns
- Hardcoded secrets and credentials scanning
- Dependency audit via pip-audit/safety
- Actionable security reports with CWE references
Supported Frameworks:
- Flask - Template injection, session security, debug mode, CORS
- Django - ORM injection, CSRF, settings security, middleware
- FastAPI - Input validation, authentication, CORS, Pydantic security
Scan Types:
- Quick Scan - Critical vulnerabilities (secrets, dangerous functions, known CVEs)
- Full Scan - Comprehensive security assessment
- Targeted Scan - Focus on specific categories (injection, deserialization, auth, secrets, deps, crypto, flask, django, fastapi)
Usage:
/python-security-scan
Subtitle Correction
Corrects speech recognition errors in subtitle files (.srt) while preserving exact timeline information.
Features:
- Chinese and English subtitle support
- Phonetic error correction (同音字/谐音)
- Technical term recognition (AI/ML, programming)
- English-Chinese mixed content handling
- Code identifier formatting (snake_case, camelCase)
- Interactive terminology collection workflow
- Validation script for structural integrity
Workflow:
- Collects domain-specific terminology from user
- Identifies speech recognition error patterns
- Applies corrections while preserving timestamps
- Validates output maintains structural integrity
Usage:
/subtitle-correction
Diagram to Image
Converts Mermaid diagrams and Markdown tables to images (PNG/SVG) for platforms like X/Twitter that don't support rich formatting.
Features:
- Mermaid diagram to PNG/SVG conversion
- Markdown table to PNG conversion
- Smart output location detection (auto-finds
images/, assets/, etc.)
- Intelligent filename generation based on content analysis
- Context-aware placement based on conversation
Supported Content:
- Mermaid - flowchart, sequence, class, state, ER, gantt, pie, mindmap, timeline, etc.
- Markdown Tables - with or without headers
Smart Behavior:
- Detects existing image directories in your project
- Generates descriptive filenames (e.g.,
auth-flow.png, model-comparison.png)
- Places images near related files when context is available
Usage:
"Convert this diagram to an image"
"Make this table a PNG for X"
"Export this flowchart as PNG"
Publish X Article
Publish Markdown articles to X (Twitter) Articles editor with proper formatting. Automatically handles X Premium limitations by converting unsupported elements to images.
Credits: This skill is inspired by and based on wshuyi/x-article-publisher-skill.
Features:
- Subscription-aware formatting (Premium vs Premium+)
- Cover image upload
- Markdown to rich text conversion
- Auto-converts unsupported elements (tables, mermaid diagrams, deep headers) to images
- Divider insertion via X's native menu
- Draft-only mode (never auto-publishes)
Supported Formatting:
- H2 headers, bold, italic, links
- Ordered and unordered lists
- Blockquotes
- Images (inline and cover)
- Dividers (via menu insertion)
Usage:
/publish-x-article
China Stock Analysis (A股分析)
基于价值投资理论的中国A股分析工具，面向低频交易的普通投资者。使用 akshare 获取公开财务数据。