[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"skill:01M6CT62H9XCCBA0DDWH9SH309":3,"skill-same:01M6CT62H9XCCBA0DDWH9SH309":114},{"skillNo":4,"name":5,"nameZh":6,"description":7,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":16,"categories":17,"keywords":18,"publishedAt":33,"linkOnly":34,"markdownContent":35,"markdownBody":36,"frontMatter":37,"refName":38,"commitSha":39,"skillDirectory":40,"forksCount":41,"repositoryHtmlUrl":42,"repositoryHomepageUrl":43,"ownerHtmlUrl":44,"ownerBlogUrl":45,"ownerDescription":46,"updatedAt":47,"install":48,"resources":61},"01M6CT62H9XCCBA0DDWH9SH309","find-bugs",null,"Find bugs, security vulnerabilities, and code quality issues in local branch changes. Use when asked to review changes, find bugs, security review, or audit code on the current branch.","thedaviddias\u002Fai-vs-human","thedaviddias","https:\u002F\u002Favatars.githubusercontent.com\u002Fu\u002F237229?v=4","01M6CT5P9WB8TP86JZM77HECAD","David Dias","01M6CT5PEB7XQME6EREJ33SQDV",8,"MIT","https:\u002F\u002Fgithub.com\u002Fthedaviddias\u002Fai-vs-human\u002Fblob\u002Fmain\u002F.codex\u002Fskills\u002Ffind-bugs\u002FSKILL.md",[],[19,20,21,22,23,24,25,26,27,28,29,30,31,32],"find bugs","find","review","security","vulnerabilities","code quality","security review","code","review changes","issues","audit","quality","branch","use","2026-11-10 10:12:30",false,"---\nname: find-bugs\ndescription: Find bugs, security vulnerabilities, and code quality issues in local branch changes. Use when asked to review changes, find bugs, security review, or audit code on the current branch.\n---\n\n# Find Bugs\n\nReview changes on this branch for bugs, security vulnerabilities, and code quality issues.\n\n## Phase 1: Complete Input Gathering\n\n1. Get the FULL diff: `git diff $(gh repo view --json defaultBranchRef --jq '.defaultBranchRef.name')...HEAD`\n2. If output is truncated, read each changed file individually until you have seen every changed line\n3. List all files modified in this branch before proceeding\n\n## Phase 2: Attack Surface Mapping\n\nFor each changed file, identify and list:\n\n* All user inputs (request params, headers, body, URL components)\n* All database queries\n* All authentication\u002Fauthorization checks\n* All session\u002Fstate operations\n* All external calls\n* All cryptographic operations\n\n## Phase 3: Security Checklist (check EVERY item for EVERY file)\n\n* [ ] **Injection**: SQL, command, template, header injection\n* [ ] **XSS**: All outputs in templates properly escaped?\n* [ ] **Authentication**: Auth checks on all protected operations?\n* [ ] **Authorization\u002FIDOR**: Access control verified, not just auth?\n* [ ] **CSRF**: State-changing operations protected?\n* [ ] **Race conditions**: TOCTOU in any read-then-write patterns?\n* [ ] **Session**: Fixation, expiration, secure flags?\n* [ ] **Cryptography**: Secure random, proper algorithms, no secrets in logs?\n* [ ] **Information disclosure**: Error messages, logs, timing attacks?\n* [ ] **DoS**: Unbounded operations, missing rate limits, resource exhaustion?\n* [ ] **Business logic**: Edge cases, state machine violations, numeric overflow?\n\n## Phase 4: Verification\n\nFor each potential issue:\n\n* Check if it's already handled elsewhere in the changed code\n* Search for existing tests covering the scenario\n* Read surrounding context to verify the issue is real\n\n## Phase 5: Pre-Conclusion Audit\n\nBefore finalizing, you MUST:\n\n1. List every file you reviewed and confirm you read it completely\n2. List every checklist item and note whether you found issues or confirmed it's clean\n3. List any areas you could NOT fully verify and why\n4. Only then provide your final findings\n\n## Output Format\n\n**Prioritize**: security vulnerabilities > bugs > code quality\n\n**Skip**: stylistic\u002Fformatting issues\n\nFor each issue:\n\n* **File:Line** - Brief description\n* **Severity**: Critical\u002FHigh\u002FMedium\u002FLow\n* **Problem**: What's wrong\n* **Evidence**: Why this is real (not already fixed, no existing test, etc.)\n* **Fix**: Concrete suggestion\n* **References**: OWASP, RFCs, or other standards if applicable\n\nIf you find nothing significant, say so - don't invent issues.\n\nDo not make changes - just report findings. I'll decide what to address.\n","# Find Bugs\n\nReview changes on this branch for bugs, security vulnerabilities, and code quality issues.\n\n## Phase 1: Complete Input Gathering\n\n1. Get the FULL diff: `git diff $(gh repo view --json defaultBranchRef --jq '.defaultBranchRef.name')...HEAD`\n2. If output is truncated, read each changed file individually until you have seen every changed line\n3. List all files modified in this branch before proceeding\n\n## Phase 2: Attack Surface Mapping\n\nFor each changed file, identify and list:\n\n* All user inputs (request params, headers, body, URL components)\n* All database queries\n* All authentication\u002Fauthorization checks\n* All session\u002Fstate operations\n* All external calls\n* All cryptographic operations\n\n## Phase 3: Security Checklist (check EVERY item for EVERY file)\n\n* [ ] **Injection**: SQL, command, template, header injection\n* [ ] **XSS**: All outputs in templates properly escaped?\n* [ ] **Authentication**: Auth checks on all protected operations?\n* [ ] **Authorization\u002FIDOR**: Access control verified, not just auth?\n* [ ] **CSRF**: State-changing operations protected?\n* [ ] **Race conditions**: TOCTOU in any read-then-write patterns?\n* [ ] **Session**: Fixation, expiration, secure flags?\n* [ ] **Cryptography**: Secure random, proper algorithms, no secrets in logs?\n* [ ] **Information disclosure**: Error messages, logs, timing attacks?\n* [ ] **DoS**: Unbounded operations, missing rate limits, resource exhaustion?\n* [ ] **Business logic**: Edge cases, state machine violations, numeric overflow?\n\n## Phase 4: Verification\n\nFor each potential issue:\n\n* Check if it's already handled elsewhere in the changed code\n* Search for existing tests covering the scenario\n* Read surrounding context to verify the issue is real\n\n## Phase 5: Pre-Conclusion Audit\n\nBefore finalizing, you MUST:\n\n1. List every file you reviewed and confirm you read it completely\n2. List every checklist item and note whether you found issues or confirmed it's clean\n3. List any areas you could NOT fully verify and why\n4. Only then provide your final findings\n\n## Output Format\n\n**Prioritize**: security vulnerabilities > bugs > code quality\n\n**Skip**: stylistic\u002Fformatting issues\n\nFor each issue:\n\n* **File:Line** - Brief description\n* **Severity**: Critical\u002FHigh\u002FMedium\u002FLow\n* **Problem**: What's wrong\n* **Evidence**: Why this is real (not already fixed, no existing test, etc.)\n* **Fix**: Concrete suggestion\n* **References**: OWASP, RFCs, or other standards if applicable\n\nIf you find nothing significant, say so - don't invent issues.\n\nDo not make changes - just report findings. I'll decide what to address.\n",{"name":5,"description":7},"main","eb192df16e465f9daf3b27c980685cacff9b0db2",".codex\u002Fskills\u002Ffind-bugs",1,"https:\u002F\u002Fgithub.com\u002Fthedaviddias\u002Fai-vs-human","https:\u002F\u002Faivshuman.dev\u002F","https:\u002F\u002Fgithub.com\u002Fthedaviddias","https:\u002F\u002Fthedaviddias.com","Staff Front-End Engineer | Front-End Architecture, Design Systems & Accessibility | Creator of the Front-End Checklist (74K+ ⭐) and serving 100K+ devs","2026-06-02 08:06:36",{"source":8,"skillName":5,"commands":49,"prompt":59,"zipAvailable":60},[50,53,56],{"tool":51,"command":52},"npx","npx skills add thedaviddias\u002Fai-vs-human --skill find-bugs",{"tool":54,"command":55},"bunx","bunx skills add thedaviddias\u002Fai-vs-human --skill find-bugs",{"tool":57,"command":58},"pnpm","pnpm dlx skills add thedaviddias\u002Fai-vs-human --skill find-bugs","安装技能，技能地址：https:\u002F\u002Fgithub.com\u002Fthedaviddias\u002Fai-vs-human\u002Fblob\u002Fmain\u002F.codex\u002Fskills\u002Ffind-bugs\u002FSKILL.md",true,[62,68,72,78,82,86,90,94,98,102,106,110],{"path":63,"resourceType":64,"resourceTypeDesc":65,"sizeBytes":66,"sourceHtmlUrl":67},"Assets\u002Fcreative-writing-template.md","ASSET","资产文件",6466,"https:\u002F\u002Fgithub.com\u002Ffadrienne\u002FMyGitHub\u002Fblob\u002Fmain\u002FPersonal_AI_Infrastructure\u002FPacks\u002FThinking\u002Fsrc\u002FBeCreative\u002FAssets\u002Fcreative-writing-template.md",{"path":69,"resourceType":64,"resourceTypeDesc":65,"sizeBytes":70,"sourceHtmlUrl":71},"Assets\u002Fidea-generation-template.md",6256,"https:\u002F\u002Fgithub.com\u002Ffadrienne\u002FMyGitHub\u002Fblob\u002Fmain\u002FPersonal_AI_Infrastructure\u002FPacks\u002FThinking\u002Fsrc\u002FBeCreative\u002FAssets\u002Fidea-generation-template.md",{"path":73,"resourceType":74,"resourceTypeDesc":75,"sizeBytes":76,"sourceHtmlUrl":77},"Examples.md","REFERENCE","参考文档",2365,"https:\u002F\u002Fgithub.com\u002Ffadrienne\u002FMyGitHub\u002Fblob\u002Fmain\u002FPersonal_AI_Infrastructure\u002FPacks\u002FThinking\u002Fsrc\u002FBeCreative\u002FExamples.md",{"path":79,"resourceType":74,"resourceTypeDesc":75,"sizeBytes":80,"sourceHtmlUrl":81},"Principles.md",1173,"https:\u002F\u002Fgithub.com\u002Ffadrienne\u002FMyGitHub\u002Fblob\u002Fmain\u002FPersonal_AI_Infrastructure\u002FPacks\u002FThinking\u002Fsrc\u002FBeCreative\u002FPrinciples.md",{"path":83,"resourceType":74,"resourceTypeDesc":75,"sizeBytes":84,"sourceHtmlUrl":85},"ResearchFoundation.md",2343,"https:\u002F\u002Fgithub.com\u002Ffadrienne\u002FMyGitHub\u002Fblob\u002Fmain\u002FPersonal_AI_Infrastructure\u002FPacks\u002FThinking\u002Fsrc\u002FBeCreative\u002FResearchFoundation.md",{"path":87,"resourceType":74,"resourceTypeDesc":75,"sizeBytes":88,"sourceHtmlUrl":89},"Templates.md",3214,"https:\u002F\u002Fgithub.com\u002Ffadrienne\u002FMyGitHub\u002Fblob\u002Fmain\u002FPersonal_AI_Infrastructure\u002FPacks\u002FThinking\u002Fsrc\u002FBeCreative\u002FTemplates.md",{"path":91,"resourceType":74,"resourceTypeDesc":75,"sizeBytes":92,"sourceHtmlUrl":93},"Workflows\u002FDomainSpecific.md",1906,"https:\u002F\u002Fgithub.com\u002Ffadrienne\u002FMyGitHub\u002Fblob\u002Fmain\u002FPersonal_AI_Infrastructure\u002FPacks\u002FThinking\u002Fsrc\u002FBeCreative\u002FWorkflows\u002FDomainSpecific.md",{"path":95,"resourceType":74,"resourceTypeDesc":75,"sizeBytes":96,"sourceHtmlUrl":97},"Workflows\u002FIdeaGeneration.md",1547,"https:\u002F\u002Fgithub.com\u002Ffadrienne\u002FMyGitHub\u002Fblob\u002Fmain\u002FPersonal_AI_Infrastructure\u002FPacks\u002FThinking\u002Fsrc\u002FBeCreative\u002FWorkflows\u002FIdeaGeneration.md",{"path":99,"resourceType":74,"resourceTypeDesc":75,"sizeBytes":100,"sourceHtmlUrl":101},"Workflows\u002FMaximumCreativity.md",1623,"https:\u002F\u002Fgithub.com\u002Ffadrienne\u002FMyGitHub\u002Fblob\u002Fmain\u002FPersonal_AI_Infrastructure\u002FPacks\u002FThinking\u002Fsrc\u002FBeCreative\u002FWorkflows\u002FMaximumCreativity.md",{"path":103,"resourceType":74,"resourceTypeDesc":75,"sizeBytes":104,"sourceHtmlUrl":105},"Workflows\u002FStandardCreativity.md",1363,"https:\u002F\u002Fgithub.com\u002Ffadrienne\u002FMyGitHub\u002Fblob\u002Fmain\u002FPersonal_AI_Infrastructure\u002FPacks\u002FThinking\u002Fsrc\u002FBeCreative\u002FWorkflows\u002FStandardCreativity.md",{"path":107,"resourceType":74,"resourceTypeDesc":75,"sizeBytes":108,"sourceHtmlUrl":109},"Workflows\u002FTechnicalCreativityGemini3.md",17916,"https:\u002F\u002Fgithub.com\u002Ffadrienne\u002FMyGitHub\u002Fblob\u002Fmain\u002FPersonal_AI_Infrastructure\u002FPacks\u002FThinking\u002Fsrc\u002FBeCreative\u002FWorkflows\u002FTechnicalCreativityGemini3.md",{"path":111,"resourceType":74,"resourceTypeDesc":75,"sizeBytes":112,"sourceHtmlUrl":113},"Workflows\u002FTreeOfThoughts.md",1867,"https:\u002F\u002Fgithub.com\u002Ffadrienne\u002FMyGitHub\u002Fblob\u002Fmain\u002FPersonal_AI_Infrastructure\u002FPacks\u002FThinking\u002Fsrc\u002FBeCreative\u002FWorkflows\u002FTreeOfThoughts.md",[115,129,152,171,192,210],{"skillNo":116,"name":117,"nameZh":6,"description":118,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":119,"categories":120,"keywords":126,"publishedAt":33},"01M6CT6FQSPB42F03BSD7SHCNA","template-skill","Replace with description of the skill and when Claude should use it.","https:\u002F\u002Fgithub.com\u002Fthedaviddias\u002Fai-vs-human\u002Fblob\u002Fmain\u002F.codex\u002Fskills\u002Ftemplate-skill\u002FSKILL.md",[121],{"categoryNo":122,"categoryName":123,"taxonomyType":124,"taxonomyTypeDesc":125},"01JBSEEDCAT000000000000023","Skill与智能体开发","SCENARIO","使用场景",[127,128,32],"template","template skill",{"skillNo":130,"name":131,"nameZh":6,"description":132,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":133,"categories":134,"keywords":138,"publishedAt":33},"01M6CT6CAHAHN57WV7XXW5TZQZ","tdd-methodoly-expert","Use when implementing features or fixing bugs with strict Test-Driven Development (TDD). Activate for coding tasks that require new functionality, refactoring, or comprehensive test coverage, especially when the user mentions TDD or Test Driven Development.","https:\u002F\u002Fgithub.com\u002Fthedaviddias\u002Fai-vs-human\u002Fblob\u002Fmain\u002F.codex\u002Fskills\u002Ftdd-methodoly-expert\u002FSKILL.md",[135],{"categoryNo":136,"categoryName":137,"taxonomyType":124,"taxonomyTypeDesc":125},"01JBSEEDCAT000000000000008","测试与质量",[139,140,141,142,143,144,145,146,147,148,149,32,150,151],"tdd","expert","tdd methodoly expert","test","test driven development","tasks","development","refactoring","coding","user","coverage","test coverage","activate",{"skillNo":153,"name":154,"nameZh":6,"description":155,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":156,"categories":157,"keywords":158,"publishedAt":33},"01M6CT650P46N57G6329QAG2WJ","github-gh","Interact with GitHub using the `gh` CLI. Use when managing issues, PRs, workflow runs, or advanced API queries via `gh issue`, `gh pr`, `gh run`, and `gh api`.","https:\u002F\u002Fgithub.com\u002Fthedaviddias\u002Fai-vs-human\u002Fblob\u002Fmain\u002F.codex\u002Fskills\u002Fgithub-gh\u002FSKILL.md",[],[159,160,161,162,163,164,165,28,166,167,168,32,169,170],"gh","github gh","github","run","gh pr","api","gh issue","pr","workflow","cli","issue","queries",{"skillNo":172,"name":173,"nameZh":6,"description":174,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":175,"categories":176,"keywords":182,"publishedAt":33},"01M6CT5ZBBQ1NE787YQZR9TYSV","code-simplifier","Simplifies and refines code for clarity, consistency, and maintainability while preserving all functionality. Use when asked to \"simplify code\", \"clean up code\", \"refactor for clarity\", \"improve readability\", or review recently modified code for elegance. Focuses on project-specific best practices.","https:\u002F\u002Fgithub.com\u002Fthedaviddias\u002Fai-vs-human\u002Fblob\u002Fmain\u002F.codex\u002Fskills\u002Fcode-simplifier\u002FSKILL.md",[177],{"categoryNo":178,"categoryName":179,"taxonomyType":180,"taxonomyTypeDesc":181},"01JBSEEDCAT000000000000030","开发工程师","PROFESSION","适用职业",[183,26,184,185,186,187,188,189,190,191,21,32],"code simplifier","improve","simplify code","up","clean","clarity","simplify","refactor","best practices",{"skillNo":193,"name":194,"nameZh":6,"description":195,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":196,"categories":197,"keywords":201,"publishedAt":33},"01M6CT5WC1403XCHV8PS0AND5Z","brainstorming","Use when starting creative work (features, components, functionality, or behavior changes) to clarify user intent, requirements, and design before implementation.","https:\u002F\u002Fgithub.com\u002Fthedaviddias\u002Fai-vs-human\u002Fblob\u002Fmain\u002F.codex\u002Fskills\u002Fbrainstorming\u002FSKILL.md",[198],{"categoryNo":199,"categoryName":200,"taxonomyType":124,"taxonomyTypeDesc":125},"01JBSEEDCAT000000000000015","视觉设计",[194,202,203,204,32,148,205,206,207,208,209],"creative","intent","implementation","behavior","clarify","work","components","design",{"skillNo":211,"name":212,"nameZh":6,"description":213,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":214,"categories":215,"keywords":218,"publishedAt":33},"01M6CT5REKWY6WQ83MBQ3QGBJ5","agent-browser","Browser automation CLI for AI agents. Use when the user needs to interact with websites, including navigating pages, filling forms, clicking buttons, taking screenshots, extracting data, testing web apps, or automating any browser task. Triggers include requests to \"open a website\", \"fill out a form\", \"click a button\", \"take a screenshot\", \"scrape data from a page\", \"test this web app\", \"login to a site\", \"automate browser actions\", or any task requiring programmatic web interaction.","https:\u002F\u002Fgithub.com\u002Fthedaviddias\u002Fai-vs-human\u002Fblob\u002Fmain\u002F.codex\u002Fskills\u002Fagent-browser\u002FSKILL.md",[216,217],{"categoryNo":136,"categoryName":137,"taxonomyType":124,"taxonomyTypeDesc":125},{"categoryNo":122,"categoryName":123,"taxonomyType":124,"taxonomyTypeDesc":125},[219,220,221,51,222,32,223,224,225,226,227,228,229,230,231,232,233,168,234,235],"browser","agent browser","data","take","page","automate","Bash","open","scrape","forms","actions","website","screenshot","ai agents","browser automation","screenshots","testing"]