AGENT SKILLS · MISSIONS-AUSRÜSTUNG
Nützliche Agent Skills nach echter Nutzung sortiert
Vergleiche verifizierte Skills aus öffentlichen Repositories nach Aufgabe, Paketinhalt, Installationen und nachvollziehbarer Quelle.
- KATALOGUMFANG
- VERIFIZIERT
- Skills
- 23.248
- Repositories
- 3589
- zuletzt synchronisiert
- 04.11.2026
sushegaadnist-800-53
NIST SP 800-53 Rev 5 compliance advisor — all 20 control families (AC, AT, AU, CA, CM, CP, IA, IR, MA, MP, PE, PL, PM, PS, PT, RA, SA, SC, SI, SR), Low/Moderate/High baseline selection, FIPS 199/200 system categorization, control tailoring and overlays, privacy controls (PT family), supply chain risk management (SR family), assessment procedures (SP 800-53A), OSCAL, RMF integration (SP 800-37), and mapping to FedRAMP, FISMA, CMMC 2.0, and ISO 27001. Use for any federal system security controls,
- Installationen / 1h
- 1
- GitHub Stars
- 876
- Aktualisiert
- 30. Aug.
sushegaadnist-ai-rmf
Expert NIST AI Risk Management Framework (AI RMF 1.0) advisor covering all four functions: GOVERN, MAP, MEASURE, MANAGE. Use this skill whenever a user asks about NIST AI RMF, AI risk management, AI trustworthiness, GOVERN function, MAP function, MEASURE function, MANAGE function, AI RMF Playbook, AI risk profiles, responsible AI, AI bias management, AI transparency, AI explainability, AI reliability, AI safety, NIST AI 100-1, AI risk assessment, AI incident response, or alignment to EU AI Act,
- Installationen / 1h
- 1
- GitHub Stars
- 876
- Aktualisiert
- 30. Aug.
sushegaadnist-csf
Expert NIST Cybersecurity Framework (CSF) advisor covering CSF 2.0 and CSF 1.1. Use this skill whenever a user asks about NIST CSF, cybersecurity risk management, the six CSF functions (Govern, Identify, Protect, Detect, Respond, Recover), CSF profiles, implementation tiers, gap assessments, organizational profiles, community profiles, CSF core subcategories, informative references, or mapping to other frameworks (NIST SP 800-53, ISO 27001, CIS Controls, COBIT). Also trigger for questions like "
- Installationen / 1h
- 1
- GitHub Stars
- 876
- Aktualisiert
- 30. Aug.
sushegaadnzism
Expert New Zealand Information Security Manual (NZISM) advisor for NZ government agencies and their supply chains. Use for NZISM control guidance, gap analysis, agency security obligations, classification framework (Unclassified through Top Secret), security risk management, system certification, and GCSB/NCSC NZ compliance. Triggers on: NZISM controls, NZ government security, GCSB compliance, agency cybersecurity obligations, NZ classification markings, Restricted/Confidential/Secret system sco
- Installationen / 1h
- 1
- GitHub Stars
- 876
- Aktualisiert
- 30. Aug.
sushegaadpci-compliance
Expert PCI DSS compliance advisor covering PCI DSS v4.0.1 (current) and v4.0. Use this skill whenever a user asks about PCI DSS, payment card security, cardholder data protection, CDE scoping, SAQ types (A, A-EP, B, B-IP, C, C-VT, P2PE, D), ROC, AOC, QSA assessments, ASV scans, merchant levels, service provider levels, network segmentation, penetration testing, tokenisation, encryption of PAN data, or any of the 12 PCI DSS requirements. Also trigger for questions like "are we PCI compliant?", "h
- Installationen / 1h
- 1
- GitHub Stars
- 876
- Aktualisiert
- 30. Aug.
sushegaadsaudi-arabia-grc
Saudi Arabia Governance, Risk & Compliance advisor — a compliance router that first determines WHICH Saudi regulations apply (NCA ECC-2:2024, Saudi PDPL, NCA Cloud Cybersecurity Controls, SAMA Cyber Security Framework, CST cloud framework, DCC/OTCC/TCC), then guides framework-specific compliance. Use for any Saudi Arabia / KSA compliance question: NCA Essential Cybersecurity Controls, SDAIA and the Personal Data Protection Law (نظام حماية البيانات الشخصية), PDPL breach notification and data tran
- Installationen / 1h
- 1
- GitHub Stars
- 876
- Aktualisiert
- 30. Aug.
sushegaadtsa-compliance
Expert TSA cybersecurity compliance advisor for critical infrastructure owners and operators. Use this skill whenever a user asks about TSA Security Directives for pipelines, freight railroads, passenger rail, public transit, or bus operators; the TSA Cyber Risk Management Program (CRMP); Cybersecurity Implementation Plan (CIP); Cybersecurity Operational Implementation Plan (COIP); Cybersecurity Assessment Plan (CAP); incident reporting to CISA; designation of a Cybersecurity Coordinator; Critic
- Installationen / 1h
- 1
- GitHub Stars
- 876
- Aktualisiert
- 30. Aug.
sushegaaduae-grc
United Arab Emirates Governance, Risk & Compliance advisor — a jurisdiction-first compliance router. In the UAE, WHERE an organization sits determines its law: mainland (Federal PDPL, Decree-Law 45/2021 — executive regulations still pending), DIFC (DP Law No. 5 of 2020 as amended 2025, with a private right of action), ADGM (DP Regulations 2021), CBUAE-licensed financial institutions (consumer-data residency, outsourcing approvals), healthcare (ICT Health Law data localization), and government/CN
- Installationen / 1h
- 1
- GitHub Stars
- 876
- Aktualisiert
- 30. Aug.
sushegaadwcag
Expert WCAG (Web Content Accessibility Guidelines) advisor covering WCAG 2.0, 2.1, and 2.2 — the W3C international accessibility standards. Use this skill whenever a user asks about WCAG success criteria, conformance levels (A/AA/AAA), accessibility audits, POUR principles, accessibility statements, ARIA patterns, colour contrast, keyboard accessibility, screen reader compatibility, mobile accessibility, cognitive accessibility, WCAG 2.2 new criteria, WCAG 3.0 preview, legal requirements referen
- Installationen / 1h
- 1
- GitHub Stars
- 876
- Aktualisiert
- 30. Aug.
mattpocockdocument-ai-hero-api
Generate or update documentation for the AI Hero API by reading the source code at ~/repos/ai/course-builder. Use when user wants to document, update docs for, or understand the AI Hero API endpoints.
- Installationen / 1h
- 1
- GitHub Stars
- 717
- Aktualisiert
- 4. Sept.
mattpocockimprove-codebase-architecture-project
Survey the codebase, pick ONE high-leverage deepening opportunity (filtering out anything already proposed), and publish it as a PRD-shaped GitHub issue via /to-prd-project. Designed to run unattended in the daily architecture-review workflow.
- Installationen / 1h
- 1
- GitHub Stars
- 717
- Aktualisiert
- 4. Sept.
mattpocockinstall-effect-package
Install @effect/ packages safely. Use whenever adding a new Effect ecosystem dependency.
- Installationen / 1h
- 1
- GitHub Stars
- 717
- Aktualisiert
- 4. Sept.
mattpocockoptimize-loader
"Optimize slow React Router loaders by eliminating redundant DB queries, creating slim query variants, and parallelizing independent fetches. Use proactively when writing or reviewing loader code that calls domain operations services (e.g. CourseOperationsService, VideoOperationsService), or when triaging a slow page load."
- Installationen / 1h
- 1
- GitHub Stars
- 717
- Aktualisiert
- 4. Sept.
posthogassessing-heatmaps
Assesses what a page's heatmap is telling you and recommends concrete changes. Pulls click / rageclick / scroll-depth data for a URL, names the hot elements by cross-referencing autocapture events on the same page, and can create a saved heatmap the user opens in PostHog, then summarizes the behavior and proposes improvements.\nTRIGGER when: user asks what a heatmap shows, why people aren't clicking something, where users rage-click, how far they scroll, what to change on a page based on heatmap
- Installationen / 1h
- 1
- GitHub Stars
- 80
- Aktualisiert
- 4. Sept.
posthogauditing-experiments-flags
Audit PostHog experiments and feature flags for configuration issues, staleness, and best-practice violations. Read when the user asks to audit, health-check, or review experiments or feature flags, check flag hygiene, or verify experiment setup.
- Installationen / 1h
- 1
- GitHub Stars
- 80
- Aktualisiert
- 4. Sept.
posthogbuilding-html-canvases
Author a PostHog canvas with semantic HTML, CSS, and direct browser APIs — documents, articles, generative graphics, 2D canvas and WebGL experiences, and focused experiments where React components add no useful structure. Use after building-canvases has routed a canvas request to a plain-HTML/browser-API implementation. Covers the thin component wrapper the current runtime requires, styling and theming without Quill, drawing surfaces, and animation/cleanup patterns.
- Installationen / 1h
- 1
- GitHub Stars
- 80
- Aktualisiert
- 4. Sept.
posthogbuilding-react-quill-canvases
Author the React + Quill implementation of a PostHog canvas: the single-component contract, the allowed imports, Quill (PostHog's design system) component and composition rules, theme-aware design tokens, loading skeletons, and the in-canvas date picker. Use after building-canvases has routed a canvas request to a React implementation — dashboards, data boards, forms, tools, or any canvas that should look native to PostHog.
- Installationen / 1h
- 1
- GitHub Stars
- 80
- Aktualisiert
- 4. Sept.
posthogconfiguring-experiment-rollout
Configures the rollout shape of a PostHog experiment — the variant split (50/50, 80/20, A/B/C ratios), the overall rollout percentage that gates how many users enter the experiment, and the disambiguation when a percentage like "roll out to 25%" could mean either. Use when the user mentions a rollout percentage, variant split, or traffic distribution; gives a ratio like 60/40, 70/30, or 80/20; asks "who sees the test variant?"; wants to increase, decrease, or change the rollout or split on a dra
- Installationen / 1h
- 1
- GitHub Stars
- 80
- Aktualisiert
- 4. Sept.
posthogcontext-layer-consolidation
Keep the context wiki coherent using the deterministic lint report queue
- Installationen / 1h
- 1
- GitHub Stars
- 80
- Aktualisiert
- 4. Sept.
posthogcontext-layer-health-check
Semantic review of context wiki quality after deterministic consolidation
- Installationen / 1h
- 1
- GitHub Stars
- 80
- Aktualisiert
- 4. Sept.
posthogcreating-replay-vision-scanners
Guides agents through creating and safely sizing a Replay Vision scanner: choosing the scanner type (monitor/classifier/scorer/summarizer), shaping the RecordingsQuery that selects sessions, and — crucially — estimating the credits it will spend and checking the org's remaining budget before creating, so a broad scanner doesn't exhaust the budget on its first scheduled sweep.\nTRIGGER when: user asks to create, set up, or configure a Replay Vision scanner, OR when you are about to call vision-sc
- Installationen / 1h
- 1
- GitHub Stars
- 80
- Aktualisiert
- 4. Sept.
posthogdebugging-signals-pipeline
Debug the signals pipeline locally end-to-end. Covers emitting test signals from fixtures, monitoring Temporal workflows via the REST API, reading sandbox agent logs from object storage, inspecting Docker sandbox containers, and diagnosing common failures (stale ClickHouse embeddings, agentsh network denials, inactivity timeouts). Use when a signal isn't reaching the inbox, a signal-report-summary workflow fails, or a sandbox task run times out.
- Installationen / 1h
- 1
- GitHub Stars
- 80
- Aktualisiert
- 4. Sept.
posthogdiagnosing-endpoint-performance
Diagnose why a PostHog endpoint is slow or expensive and propose a concrete fix — bump the cache TTL, enable materialisation, restructure variables, or rewrite the query. Use when the user says "this endpoint is slow", "my endpoint times out", "we're hitting the cost cap on this one", or asks "should I materialise this?". Focuses on a single named endpoint, not a project-wide audit.
- Installationen / 1h
- 1
- GitHub Stars
- 80
- Aktualisiert
- 4. Sept.
posthogdiagnosing-missing-recordings
Diagnoses why a session recording is missing or was not captured. Use when a user asks why a session has no replay, why recordings aren't appearing, or wants to troubleshoot session replay capture issues for a specific session ID or across their project. Covers SDK diagnostic signals, project settings, sampling, triggers, ad blockers, and quota/billing scenarios.
- Installationen / 1h
- 1
- GitHub Stars
- 80
- Aktualisiert
- 4. Sept.