AI skills, ranked by what actually works in production.

Manage credentials in OS keychains across Windows, macOS, and Linux

Generate system tray and context menu configurations with platform-specific icons, menu templates, and event handling

Turn what you know about an existing customer into a strategic account plan — a relationship/org map with each contact's stance and the coverage gaps, whitespace laid out by product line (owned vs. open), one reasoned expansion thesis, the top account-specific risks, and exactly three next plays each with a named owner. Use when planning how to grow or defend an existing account. Do NOT use for structuring one discovery call (that is discovery-meddic-capture), scoring an inbound lead (lead-qualification), or writing a QBR recap (qbr-summary).

Use when reviewing HTTP response headers on any site that serves content over HTTPS.

Runs a weekly data-quality and hygiene check on the BLOG on-chain bookkeeping ledger. Reads the ledger account's recent transactions, flags missing references, anomalies, and gaps, and writes a findings report to Notion for finance review.

Designs an evaluation for a retrieval-augmented (RAG) system — scoring the retriever separately from the generator, requiring a groundedness check, and building a labeled golden set with hard negatives. Use when someone wants to test, benchmark, or set up an eval for a system that looks up documents/passages and then writes an answer from them. Do NOT use for general eval or rubric authoring on non-retrieval tasks (that is eval-writer / prompt-eval-rubric-writer), or for making an agent answer-from-sources at runtime (that is rag-grounding-and-citation).

Guides privacy law change monitoring and impact assessment for multi-jurisdiction organisations. Covers regulatory tracking sources, change classification, impact scoring methodology, and implementation prioritisation. Keywords: law monitoring, regulatory tracking, change management, impact assessment, implementation priority.

Multimedia handling with the Mediabunny library

[omh] Hermes content operator workflow: scope publish-ready writing, rewriting, summarization, translation, release-note, newsletter, customer-copy, social-copy, README-copy, and email-draft work with audience, tone, style, source, review, and hallucination gates. Use when the user says: content-operator, content operator, content workflow, writing workflow, publish-ready writing, publish ready writing, release notes, release note draft.

Fetch brand SVG logos and cloud architecture icons (AWS, Azure, GCP) from theSVG. Use when the user asks for a brand logo, company icon, framework mark, service icon, or any "icon/logo for X" where X is a real brand or cloud service. Returns ready-to-use CDN URLs or raw SVG markup.

Use when writing the alt attribute for images in marketing pages, blog posts, emails, or social — hero shots, product photos, infographics, icons, decorative flourishes. Writes a short text alternative that names what the image shows or does under 125 characters, drops the "image of" / "photo of" lead-in, and uses an empty alt for purely decorative graphics instead of keyword-stuffing or leaving it blank. Do NOT use for on-page body copy, headlines, or figure captions the reader can see.

Use when reviewing CI coverage, automated checks, or test strategy related to Maintain test coverage thresholds. Focus on whether the rule is continuously verified, not just documented.

Use when reviewing the indemnity and limitation-of-liability terms of a commercial contract (MSA, SaaS agreement, order form) — checks the cap for mutuality and a market-standard basis, verifies the conventional uncapped and super-cap carve-outs are present and sit outside the general cap, and confirms indirect/consequential damages are mutually excluded without swallowing the carve-outs. Do NOT use for extracting clauses into a taxonomy (contract-extraction-schema) or drafting a clause from scratch.

Audit and improve web accessibility following WCAG 2.1 guidelines. Use when asked to "improve accessibility", "a11y audit", "WCAG compliance", "screen reader support", "keyboard navigation", or "make accessible". Do NOT use for SEO (use seo), performance (use core-web-vitals), or comprehensive site audits covering multiple areas (use web-quality-audit).

Reviews error-handling control flow for failures that get swallowed — an empty catch or bare pass, a broad catch that continues as if nothing happened, and log-and-swallow where the caller still needs to know it failed. For each, says whether to re-raise, catch a narrower type and handle it, or wrap with context. Use when someone asks you to review error handling, try/catch, or exception flow. Do NOT use for designing an error-type hierarchy, for general style review, or for reproducing a specific reported bug.

Infrastructure as Code security scanning and policy enforcement for Terraform, CloudFormation, Kubernetes, and Pulumi

Standardizes a free-form postal address into one canonical mailing form — uppercased, punctuation stripped, USPS-approved street-suffix and directional abbreviations, secondary-unit designators, two-letter state, ZIP+4, one element per line. Use when normalizing, deduplicating, or cleaning mailing addresses for storage, matching, or bulk import. Do NOT use for geocoding an address to coordinates, verifying an address is deliverable, or parsing an address into typed fields without reformatting.

Firebase gives you a complete backend in minutes - auth, database, storage, functions, hosting. But the ease of setup hides real complexity. Security rules are your last line of defense, and they're often wrong. Firestore queries are limited, and you learn this after you've designed your data model. This skill covers Firebase Authentication, Firestore, Realtime Database, Cloud Functions, Cloud Storage, and Firebase Hosting. Key insight: Firebase is optimized for read-heavy, denormalized data. I

Supply Chain Bottleneck Analyzer for Shopify/DTC stores. Diagnose cash flow, inventory, shipping costs, and customer acquisition efficiency. Includes CAC/LTV analysis, 3PL cost optimization, and ad spend benchmarks. No API key required for basic analysis.

Automate Blender compositing and post-processing with Python. Use when the user wants to set up compositor nodes, add post-processing effects, color correct renders, combine render passes, apply blur or glare, key green screens, create node-based VFX pipelines, or script the Blender compositor.