
Use when the user asks how to build with OpenAI products or APIs and needs up-to-date official documentation with citations, help choosing the latest model for a use case, or explicit GPT-5.4 upgrade and prompt-upgrade guidance; prioritize OpenAI docs MCP tools, use bundled references only as helper context, and restrict any fallback browsing to official OpenAI domains.
Install Codex skills into $CODEX_HOME/skills from a curated list or a GitHub repo path. Use when a user asks to list installable skills, install a curated skill, or install a skill from another repo (including private repos).
Deploy applications and infrastructure to Cloudflare using Workers, Pages, and related platform services. Use when the user asks to deploy, host, publish, or set up a project on Cloudflare.
Generate a Product Requirements Document (PRD) for a new feature. Use when planning a feature, starting a new project, or when asked to create a PRD. Triggers on: create a prd, write prd for, plan this feature, requirements for, spec out.
Guide for creating effective skills. This skill should be used when users want to create a new skill (or update an existing skill) that extends Codex's capabilities with specialized knowledge, workflows, or tool integrations.
Browser automation CLI for AI agents. Use when the user needs to interact with websites, including navigating pages, filling forms, clicking buttons, taking screenshots, extracting data, testing web apps, or automating any browser task. Triggers include requests to "open a website", "fill out a form", "click a button", "take a screenshot", "scrape data from a page", "test this web app", "login to a site", "automate browser actions", or any task requiring programmatic web interaction.
After working on the code, ensure the branch contains only the minimal, idiomatic changes by removing AI-generated slop introduced on this branch.
Design principles for REST and GraphQL APIs in 2025. Enforces OpenAPI-first, versioning strategies, and standardized error responses.
CI/CD security hardening for supply chain, secrets, runners, and artifacts. Triggers on "CI/CD security", "pipeline hardening", "supply chain security", "secure CI", "runner isolation".
Infrastructure as Code (IaC) mastery using Terraform/OpenTofu. Focuses on modularity, state management, and least-privilege security.
Use the Figma MCP server to fetch design context, screenshots, variables, and assets from Figma, and to translate Figma nodes into production code. Trigger when a task involves Figma URLs, node IDs, design-to-code implementation, or Figma MCP setup and troubleshooting.
MUST USE for ANY git operations. Atomic commits, rebase/squash, history search (blame, bisect, log -S). Triggers: 'commit', 'rebase', 'squash', 'who wrote', 'when was X added', 'find the commit that'.
Expert guidance for Next.js 15+ App Router applications. Enforces security for Server Actions, proper Data Access Layer (DAL) separation, and React Server Component (RSC) best practices.
Toggle peon-ping sound notifications on/off. Use when user wants to mute, unmute, pause, or resume peon sounds during a Claude Code session. Also handles config changes like volume, pack rotation, categories — any peon-ping setting.
Expert setup and configuration for Pangolin (Fossorial), the self-hosted tunneled reverse proxy. Handles Identity, Access Control, and WireGuard tunnels.
Setup and integration of Pocket-ID, the passkey-first OIDC provider. Handles simple, secure identity for homelabs.
Autonomous feature development - setup and execution. Triggers on: ralph, set up ralph, run ralph, run the loop, implement tasks. Two phases: (1) Setup - chat through feature, create tasks with dependencies (2) Loop - pick ready tasks, implement, commit, repeat until done.
React and Next.js performance optimization guidelines from Vercel Engineering. This skill should be used when writing, reviewing, or refactoring React/Next.js code to ensure optimal performance patterns. Triggers on tasks involving React components, Next.js pages, data fetching, bundle optimization, or performance improvements.
Translate Figma nodes into production-ready code with 1:1 visual fidelity using the Figma MCP workflow (design context, screenshots, assets, and project-convention translation). Trigger when the user provides Figma URLs or node IDs, or asks to implement designs or components that must match Figma specs. Requires a working Figma MCP server connection.
ONLY USE THIS SKILL IS EXPLICITLY TOLD TO CALL `find-skills`.Helps users discover and install agent skills when they ask questions like "how do I do X", "find a skill for X", "is there a skill that can...", or express interest in extending capabilities. This skill should be used when the user is looking for functionality that might exist as an installable skill.
Quality gates, code review standards, static analysis policy, and merge criteria enforcement.
Production-grade Docker/OCI image creation. Enforces security (non-root, SBOM), minimalism (multi-stage), and reproducibility (pinned versions).
Designer-turned-developer who crafts stunning UI/UX even without design mockups
Configuration for Gerbil (Fossorial), the WireGuard interface manager. Manages peers and interfaces via API.
Official GitHub CLI (gh) automation for PRs, Issues, Actions, and Repos.
--- name: incident-management description: Incident response/management for outages: severity triage, comms, mitigation, postmortems. Triggers: "incident response", "outage", "on-call", "postmortem", "major incident". license: MIT --- # Incident Management Agent Concise, structured incident response guidance with clear triage, communication, mitigation, and postmortem flow. --- ## PHASE 0: Context Gathering (MANDATORY) <context_gathering> **Execute these commands IN PARALLEL to establish gr
--- name: linux-hardening description: Linux operations hardening (patching, least privilege, backups, monitoring, baseline security). Triggers: "linux hardening", "linux patching", "server hardening", "secure linux", "linux ops". license: MIT --- # Linux Hardening Agent Concise, standards-aligned guidance for hardening Linux operations with safe, repeatable steps. --- ## PHASE 0: Context Gathering (MANDATORY) <context_gathering> **Execute these commands IN PARALLEL to establish ground trut
Architecting Retrieval-Augmented Generation (RAG) systems in 2025. Focuses on evaluation, advanced retrieval (HyDE/Adaptive), and prompt security.
--- name: macos-hardening description: macOS administration hardening for baselines, compliance, patching, and configuration management. Triggers on: "macOS hardening", "macOS security baseline", "mSCP", "macOS compliance", "macOS admin". license: MIT --- # macOS Hardening Agent Specialized agent for macOS security baselines, compliance mapping, patching strategy, and configuration management workflows (MDM-driven). --- ## PHASE 0: Context Gathering (MANDATORY) <context_gathering> **Execute
Build, run, and debug Maestro UI automation for Android, iOS, and Web. Use when Codex needs to install or verify Maestro, create or refactor Maestro flow YAML files, organize a `.maestro` workspace, record flows, run tests locally or in CI, configure tags/hooks/workspace config, or diagnose flaky Maestro selectors and flow logic.
Clean editorial-style interfaces. Warm monochrome palette, typographic contrast, flat bento grids, muted pastels. No gradients, no heavy shadows.
Expert in OpenTelemetry (OTel), structured logging, and distributed tracing. Enforces "Observability Driven Development" (ODD).
Expert guidance for building Terminal User Interfaces (TUIs) using OpenTUI (React). Handles setup, component structure, rendering, and common TUI pitfalls.
Overrides default LLM truncation behavior. Enforces complete code generation, bans placeholder patterns, and handles token-limit splits cleanly. Apply to any task requiring exhaustive, unabridged output.
Update peon-ping configuration — volume, pack rotation, categories, active pack, and other settings. Use when user wants to change peon-ping settings like volume, enable round-robin, add packs to rotation, toggle sound categories, or adjust any config.
Senior DB Engineer skills for PostgreSQL. Focuses on performance (indexing, analysis), modern schema design (UUIDv7), and safe migration patterns.
Enforces the 2025 Python stack. Replaces legacy tools (pip, flake8, isort) with modern, fast equivalents (uv, ruff). Mandates strict type hints.
Interact with Up Bank (api.up.com.au) to retrieve account balances, transactions, and financial data in real-time. Use when the user asks about their Up bank account, balance, spending, transactions, or wants to check their finances. Triggers on: 'Up bank', 'my balance', 'check transactions', 'what did I spend', 'recent transactions', 'Up account'.
Create and render OpenSCAD 3D models. Generate preview images from multiple angles, extract customizable parameters, validate syntax, and export STL files for 3D printing platforms like MakerWorld.
Expert configuration for Newt (Fossorial), the connector agent for Pangolin. Bridges private networks to the Pangolin server.
Expert guidance for creating secure, scalable, and efficient GitHub Actions workflows. Enforces security best practices and enterprise-grade patterns.
--- name: deliver-baseline description: Always-on delivery baseline for SWE/DevOps work (code review, quality gates, testing, CI/CD security, release discipline). Triggers: "baseline", "delivery baseline", "quality standard", "engineering standard", "devops standard". license: MIT --- # Delivery Baseline Agent Sets the 2026 engineering-quality floor for software delivery by enforcing code review standards, quality gates, testing strategy, CI/CD security, and release discipline. --- ## PHASE