mturac
UserGhost personas review your code before it ships. Find edge cases, race conditions, and business logic bugs before production.
Categories
Indexed Skills (15)
simulacra
Interactive code simulation engine that spawns ghost personas to review your code before it ships. Each ghost walks through your code line-by-line from a different failure perspective: The Adversary (race conditions, double-submit, idempotency), The Enterprise Edge (business logic gaps, multi-currency, B2B tax exemptions, locale), Chaos Monkey (timeouts, partial failures, network partitions, OOM). Produces a chaos timeline, structured bug report with severity ratings, and three resolution tiers (quick fix, robust architecture, generated test suite). Use this skill whenever the user mentions code review, PR review, "find bugs", "what could go wrong", "will this break", "is this safe", "stress test", "edge cases", design review, pre-merge check, dry run, chaos test, or wants a second opinion on any code — even if they don't explicitly ask for "ghost personas" or "simulation". Also trigger when someone pastes a code snippet with any question about its correctness or safety.
skill-scorer
Rates any SKILL.md on a 0-100 scale across 10 dimensions with a SHIP / REWORK / SCRAP verdict. Evaluates trigger precision, instruction clarity, output predictability, edge case coverage, anti-hallucination guardrails, developer experience, composability, open-source readiness, wow factor, and real-world utility. No flattery — calibrated against Anthropic's own skill-creator rubric. Use this skill whenever someone says "score this skill", "rate my skill", "is this skill good", "skill review", "skill audit", "roast my SKILL.md", "grade this", "will this skill work", "evaluate my skill", "how good is this", or pastes a SKILL.md and asks for feedback. Also trigger when comparing two skills, benchmarking a skill collection, or asking "what's wrong with this skill" — even without the word "score".
api-sculptor
Designs and implements APIs: REST, GraphQL, gRPC, and WebSocket. Produces OpenAPI 3.1 specs, GraphQL SDL schemas, Protocol Buffer definitions, and working server implementations. Use this skill when the user asks about API design, endpoint structure, schema definition, versioning strategy, pagination, authentication, rate limiting, or any API implementation work. Also triggers on "design an API for," "write an OpenAPI spec," "create a GraphQL schema," "set up gRPC," "REST API best practices," or casual requests like "I need endpoints for my app" or "how should I structure my API."
auth-architect
Designs and implements authentication and identity systems. Covers OAuth2 and OIDC flows including authorization code, PKCE, and client credentials; JWT design including RS256 vs HS256, key rotation, token blacklisting, and refresh token strategy; RBAC and ABAC modeling; SSO with Google, GitHub, and SAML 2.0; session management; magic links; MFA with TOTP, SMS, and hardware keys; and API key management. Use this skill when the user says "implement OAuth2," "JWT refresh token rotation," "set up SSO with Google," "design RBAC for multi-tenant," "implement magic link auth," "is my JWT secure," "add login to my app," "session management strategy," or "API key auth."
db-whisperer
Diagnoses and improves application-layer databases: Postgres, MySQL, SQLite, and MongoDB. Covers EXPLAIN ANALYZE, slow query detection, index strategy, N+1 detection, schema migrations with up/down scripts, connection pooling, replication setup, and vacuum/analyze operations. Use this skill when the user says "this query is slow," "add an index for," "migration for a new column," "N+1 on this ORM," "explain this query plan," "replication lag," "optimize my database," "query is timing out," or "connection pool exhausted."
deploy-ninja
Handles zero-downtime deployments: blue-green, canary releases, rolling updates, and feature flag rollouts. Covers Kubernetes, Docker, Cloudflare Workers, Terraform, and CI/CD pipeline setup. Use this skill when the user wants to deploy an application, set up a deployment pipeline, implement canary releases, configure rolling updates, manage feature flags, or handle any release automation. Also triggers on "deploy to production," "set up CI/CD," "blue-green deployment," "canary release," "rolling update," "zero-downtime deploy," "rollback," or even casual requests like "push this to prod" or "how do I safely release this."
ghost-scraper
Extracts structured data from websites — static HTML, JavaScript-rendered SPAs, paginated listings, and API-backed pages. Handles anti-bot detection awareness, rate limiting, and robots.txt compliance. Use this skill whenever the user wants to scrape a website, extract data from a URL, pull product listings, harvest structured data, reverse-engineer a site's API, or deal with dynamic JS-rendered content. Also triggers on "get me data from this site," "extract prices from," "crawl these pages," or any request involving web data extraction, even casual ones like "can you pull info from this URL."
infra-automation
Manages infrastructure operations: DNS records, SSL certificates, Cloudflare Workers, CDN configuration, and domain provisioning. Use this skill whenever the user mentions Cloudflare, DNS, SSL, Workers, domain setup, CDN config, TLS hardening, zone management, or any infrastructure automation task — even if they just paste a domain name and ask "set this up." Also triggers on requests like "add an A record," "check my SSL," "deploy a Worker," or "audit my domain config."
mcp-conductor
Decomposes complex tasks into subtasks and coordinates multiple tools or agents to execute them. Handles task dependency graphs, parallel execution planning, result merging, and conflict resolution. Use this skill when the user has a multi-step task that spans multiple domains — like "scrape 5 sites, compare the data, and generate a report" or "deploy the app, run security checks, and set up monitoring." Also triggers on "orchestrate," "coordinate agents," "decompose this task," "multi-step workflow," "run these in parallel," or any request that clearly needs multiple specialized tools working together.
obs-guardian
Builds observability, monitoring, alerting, and incident visibility for production systems. Covers OpenTelemetry instrumentation for traces, metrics, and logs; structured logging with JSON, correlation IDs, and sampling; Prometheus and Grafana scrape configs, dashboards, and recording rules; distributed tracing with Jaeger and Tempo; SLO/SLA definition, error budgets, burn-rate alerts; PagerDuty and OpsGenie alerting rules; and on-call runbook templates. Use this skill when the user says "set up monitoring," "instrument with OpenTelemetry," "add structured logging," "set up Grafana dashboards," "define SLOs," "no visibility into my app," "tracing across microservices," "alerting rules," or "production incident with no logs."
pipeline-architect
Designs and implements data pipelines: ETL/ELT, streaming, batch processing, schema migrations, and data warehouse architecture. Covers Kafka, Airflow, dbt, Spark, ClickHouse, BigQuery, Snowflake, Redis Streams, and more. Use this skill when the user asks about data pipelines, ETL jobs, data transformation, streaming setup, data warehouse design, CDC, schema migrations, data quality checks, or anything involving moving data from source to target. Also triggers on "build a pipeline," "migrate data from X to Y," "set up streaming," "design my data warehouse," or "data quality is bad, help me fix it."
prediction-alpha
Analyzes prediction markets: Polymarket, Manifold Markets, Kalshi. Calculates implied probabilities, detects cross-platform arbitrage, computes expected value and Kelly fractions. Use this skill when the user mentions prediction markets, Polymarket, Manifold, Kalshi, odds analysis, arbitrage detection, market probability, event contracts, or asks things like "is there edge on this market," "compare odds across platforms," or "analyze this prediction market." Also triggers on "what are the current odds for," "find arbitrage opportunities," or any question about market-implied probabilities.
prompt-forge
Engineers and optimizes prompts for LLMs: system prompts, few-shot examples, chain-of-thought structures, agent personas, and evaluation frameworks. Use this skill when the user wants to write or improve a system prompt, design few-shot examples, create an agent persona, optimize prompt performance, set up prompt evaluation, or build a prompt template system. Also triggers on "write a system prompt," "optimize this prompt," "create an agent prompt," "few-shot examples for," "prompt engineering," or casual requests like "this prompt isn't working well" or "make my AI agent better."
quantum-debugger
Debugs complex, hard-to-reproduce issues: race conditions, memory leaks, deadlocks, performance regressions, heisenbugs, and crash analysis. Uses scientific debugging methodology with hypothesis generation, systematic testing, and root cause isolation. Use this skill when the user reports intermittent crashes, performance degradation, memory leaks, thread-safety issues, deadlocks, or any bug that's hard to reproduce. Also triggers on "debug this," "why is this crashing," "performance regression," "memory leak," "race condition," "segfault," "service hangs intermittently," or even "this works on my machine but not in production."
security-sentinel
Performs security audits, vulnerability assessments, SSL/TLS hardening, DNSSEC configuration, and compliance checks. Covers OWASP Top 10, CIS Benchmarks, email security (SPF/DKIM/DMARC), and network reconnaissance. Use this skill when the user asks for a security audit, vulnerability scan, penetration test, SSL hardening, DNSSEC setup, compliance check, or security posture assessment. Also triggers on "is my site secure," "check for vulnerabilities," "harden my server," "audit my domain," "set up DNSSEC," or any request involving security assessment — even vague ones like "I'm worried about my site's security."
Bio shown is the top-scored skill's repo description as a fallback — real GitHub bios land in a future update.