Browse Skills

A systematic four-phase debugging framework (root cause investigation, pattern analysis, hypothesis testing, and implementation) for when you encounter any bug, test failure, or unexpected behavior, ensuring you understand the issue before attempting fixes.

Follow a disciplined test-driven development cycle: write a failing test first, implement minimal code to pass, then refactor. Use for any feature or bugfix to ensure tests genuinely verify behavior.

Prevents testing mock behavior, production pollution with test-only methods, and mocking without understanding dependencies. Use when writing or changing tests, adding mocks, or tempted to add test-only methods to production code.

Checkout Credential Review helps review code that performs git or gh operations against repository checkouts, ensuring the right credentials are available at the right time and that sparseness, shallowness, and credential-free factors are considered.

Copilot Agent Tips and Tricks provides practical guidance for finding, reviewing, and managing pull requests created by Copilot coding agents, including gh CLI commands, search patterns, and best practices for reviewing AI-generated code.

Copilot Review instructs Copilot to collect, filter, bucket, and respond to pull request review feedback from trusted reviewers and automation. Use it when addressing review comments or summaries on a pull request.

Developer Code Organization provides patterns for organizing Go code, including file structure, file size guidelines, test organization, and string sanitization/normalization conventions. Use this reference when working in the gh-aw codebase to keep files small and maintainable.

Developer Security provides security guidelines for gh-aw workflows and Go code, covering template injection prevention, shell script security, supply chain hardening, and static analysis integration.

Error Pattern Safety provides rules for writing safe regular expressions that prevent JavaScript infinite loops in agentic engines.

GH-AW Developer provides core rules and coding conventions for making changes to gh-aw, including validation checkpoints, capitalization rules, and lazy-loading sub-skills.

Academic Paper Reviewer simulates academic peer review across Originality, Methodology, Results, and Writing, providing Major and Minor Revision recommendations with actionable feedback. Use it when asked to review a paper or simulate peer review.

API Fuzzing for Bug Bounty provides techniques for testing REST, SOAP, and GraphQL APIs during bug bounty hunting and penetration testing. Use it to discover vulnerabilities like IDOR, authentication bypass, SQL injection, SSRF, and GraphQL-specific issues.