Guidelines to create/update a new mode for PostHog AI agent. Modes are a way to limit what tools, prompts, and prompt injections are applied and under what conditions.
Guidelines to create/update a new mode for PostHog AI agent. Modes are a way to limit what tools, prompts, and prompt injections are applied and under what conditions.
Implements new Agent Skills for the project. Identifies the AI coding tool (Cursor, Claude Code, Gemini CLI), ensures specification compliance, and provides specialized templates.
Implements strategies to reduce SOC alert fatigue by tuning detection rules, consolidating duplicate alerts,
Implements application whitelisting using Windows AppLocker to restrict unauthorized software execution on endpoints,
Phylax Credible Layer assertions implementation. Implements phylax/credible layer assertion contracts using cheatcodes, triggers, and event/state inspection.
Implement one Spec Kit `tasks.md` PR-stack block end-to-end — TDD + review + draft PR + CI fix loop.
Implement role-based (RBAC) and attribute-based (ABAC) access control in Go using Casbin. Covers model configuration, GORM adapters, Chi/gRPC middleware, and production patterns.
Implementing Cloud Data Loss Prevention (DLP) using Amazon Macie, Azure Information Protection, and Google Cloud
Implements code changes and creates commits. Triggered when: implementation tasks, code changes, feature additions, bug fixes. — from dralgorhythm/claude-agentic-framework
Implements code changes and creates commits. Triggered when: implementation tasks, code changes, feature additions, bug fixes. — from majiayu000/claude-skill-registry
Teaches code splitting with lazy() and Suspense in React 19 for reducing initial bundle size. Use when implementing lazy loading, route-based splitting, or optimizing performance.
Use when building Cmd+K command palettes in React - covers keyboard navigation with arrow keys, keeping selected items in view with scrollIntoView, filtering with shortcut…
Implements C++17 desktop GUI code with wxWidgets, GTK3, or Qt framework patterns and CMake build system.
Implements data loss prevention policies using Microsoft Purview to protect sensitive information across Exchange
Deploy and monitor Canary Tokens via the Thinkst Canary API for deception-based breach detection using web bug
Implementing device posture assessment as a zero trust access control by integrating endpoint health signals
Ed25519 is a high-performance digital signature algorithm using the Edwards curve Curve25519. It provides 128-bit
Implements document indexing with heading-boundary chunking, embedding, FAISS vector store, and PageIndex-style hybrid retrieval.
Implements endpoint Data Loss Prevention (DLP) controls to detect and prevent sensitive data exfiltration through
Implements Figma designs 1:1 using OneKey component library. Use when implementing UI from Figma, converting designs to code, or building pages/components from design specs.
Implements ESP-IDF or PlatformIO firmware with mandatory requirement docstring tags and MISRA-C linting.
Use when creating form request validation classes, connecting domain validation rules to HTTP requests, building filter or search requests, or setting up criteria-based querying…
Implements functions following project conventions. Applies data-first parameter order, currying patterns with *On and *With variants, and consistent universal operation names.
Use when implementing skill data generation from HTML sources for game build planners - guides the parser-factory-generation pattern for extracting level-scaling values for active…
The General Data Protection Regulation (EU) 2016/679 (GDPR) is the EU's comprehensive data protection law governing
Automates GDPR Data Subject Access Request (DSAR) workflows including identity verification, PII discovery across
Implements concise, streamlined Go code matching exact architect specifications. Use when writing Go code, creating packages, or when the user asks to implement features in Go.
Configure SAML 2.0 single sign-on for Google Workspace with a third-party identity provider, enabling centralized
Deploy SailPoint IdentityNow or IdentityIQ for identity governance and administration. Covers identity lifecycle
Sign and verify container image provenance using Sigstore Cosign with keyless OIDC-based signing, attestations,
Implements high-performance streaming using System.IO.Pipelines in .NET. Use when building network protocols, parsing binary data, or processing large streams efficiently.
Implement Just-In-Time (JIT) access provisioning to eliminate standing privileges by granting temporary, time-bound
JSON Web Tokens (JWT) defined in RFC 7519 are compact, URL-safe tokens used for authentication and authorization
Guide an AI coding agent through the full Merge Link implementation flow — context loading, database setup, backend API endpoints, and frontend UI.
Configure Fluentd and Fluent Bit for centralized log aggregation, routing, filtering, and enrichment across distributed
Build an append-only log integrity chain using SHA-256 hash chaining for tamper detection. Each log entry is
Implements memory protection mechanisms including DEP (Data Execution Prevention), ASLR (Address Space Layout
Implementing microsegmentation using Akamai Guardicore Segmentation to map application dependencies, create
Implements Mobile Application Management (MAM) policies to protect enterprise data on managed and unmanaged
Implements 802.1X port-based network access control using RADIUS authentication, PacketFence NAC, and switch
Deploy Cisco Identity Services Engine for 802.1X wired and wireless authentication, MAC Authentication Bypass,
Deploy and manage network honeypots using OpenCanary, T-Pot, or Cowrie to detect unauthorized access, lateral
Deploy and query Arkime (formerly Moloch) for full packet capture network traffic analysis. Uses the Arkime API
Monitoring, logging, and tracing implementation using OpenTelemetry as the unified standard. Use when building production systems requiring visibility into performance, errors,…
Teaches useOptimistic hook for immediate UI updates during async operations in React 19. Use when implementing optimistic UI patterns, instant feedback, or reducing perceived…
Develop and implement OT-specific incident response playbooks aligned with SANS PICERL framework, IEC 62443,
Deploy Nozomi Networks Guardian sensors for passive OT network traffic analysis to achieve comprehensive asset
Teach parallel routes and slot patterns in Next.js 16. Use when implementing parallel routes, working with @slot syntax, or encountering missing default.tsx errors.
Guide an AI coding agent through the full post-connection experience — settings page, sync status visibility, relinking, integration configuration, custom fields, and…
Design and implement Privileged Access Workstations (PAWs) with device hardening, just-in-time access, and integration
Implements privileged session monitoring and recording using Privileged Access Management (PAM) solutions, focusing
Implement cursor-based or offset pagination for Prisma queries. Use for datasets 100k+, APIs with page navigation, or infinite scroll/pagination mentions.
Set up RAG pipelines with document chunking, embedding generation, and retrieval strategies using LlamaIndex.
Implement Real User Monitoring (RUM) to capture actual user performance data including Core Web Vitals and page load times.
Implements the Repository pattern with Service Layer for data access abstraction in .NET. Use when separating data access logic from business logic or building testable data…
Implements concise, streamlined Rust code matching exact architect specifications. Use when writing Rust code, creating modules, or when the user asks to implement features in…
Guides Java developers integrating Scalekit OIDC authentication into Spring Boot 3.x apps. Use when the developer mentions Scalekit, enterprise SSO, OIDC login, OAuth2 client…
Implement automated user provisioning and deprovisioning using SCIM 2.0 protocol with Okta as the identity provider.
Logic for constructing Appwrite queries to filter tours. Use when building the search sidebar or search bar.