[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"skill:01M6CT3ZPRE723FAPC7WK2YC0F":3,"skill-same:01M6CT3ZPRE723FAPC7WK2YC0F":76},{"skillNo":4,"name":5,"nameZh":6,"description":7,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":16,"categories":17,"keywords":18,"publishedAt":34,"linkOnly":35,"markdownContent":36,"markdownBody":37,"frontMatter":38,"refName":40,"commitSha":41,"skillDirectory":42,"forksCount":43,"repositoryHtmlUrl":44,"repositoryHomepageUrl":44,"ownerHtmlUrl":45,"ownerBlogUrl":6,"ownerDescription":46,"updatedAt":47,"install":48,"resources":61},"01M6CT3ZPRE723FAPC7WK2YC0F","find-bugs",null,"Find bugs, security vulnerabilities, and code quality issues in local branch changes. Use when asked to review changes, find bugs, security review, or audit code on the current branch.","Sam-06060\u002Fjarvis-assistant","Sam-06060","https:\u002F\u002Favatars.githubusercontent.com\u002Fu\u002F208600848?v=4","01M6CRKT7C7FXD21V6HXF293S0","Samson Frank Ganta","01M6CRKTBEKYFD8YX5Z1GT99EE",6,"Apache-2.0","https:\u002F\u002Fgithub.com\u002FSam-06060\u002Fjarvis-assistant\u002Fblob\u002Fmain\u002Fmodules\u002Fagent_skills\u002Fawesome-skills\u002Fplaybooks\u002Ffind-bugs\u002FSKILL.md",[],[19,20,21,22,23,24,25,26,27,28,29,30,31,32,33],"find bugs","find","review","security","vulnerabilities","code quality","security review","code","review changes","issues","audit","quality","branch","use","community","2026-11-10 10:12:30",false,"---\nname: find-bugs\ndescription: Find bugs, security vulnerabilities, and code quality issues in local branch changes. Use when asked to review changes, find bugs, security review, or audit code on the current branch.\nrisk: unknown\nsource: community\n---\n\n# Find Bugs\n\nReview changes on this branch for bugs, security vulnerabilities, and code quality issues.\n\n## When to Use\n\n- You need a review focused on bugs, security issues, or risky code changes.\n- The task involves auditing the current branch diff rather than implementing new behavior.\n- You want a structured review process with checklist-driven verification against changed files.\n\n## Phase 1: Complete Input Gathering\n\n1. Get the FULL diff: `git diff $(gh repo view --json defaultBranchRef --jq '.defaultBranchRef.name')...HEAD`\n2. If output is truncated, read each changed file individually until you have seen every changed line\n3. List all files modified in this branch before proceeding\n\n## Phase 2: Attack Surface Mapping\n\nFor each changed file, identify and list:\n\n* All user inputs (request params, headers, body, URL components)\n* All database queries\n* All authentication\u002Fauthorization checks\n* All session\u002Fstate operations\n* All external calls\n* All cryptographic operations\n\n## Phase 3: Security Checklist (check EVERY item for EVERY file)\n\n* [ ] **Injection**: SQL, command, template, header injection\n* [ ] **XSS**: All outputs in templates properly escaped?\n* [ ] **Authentication**: Auth checks on all protected operations?\n* [ ] **Authorization\u002FIDOR**: Access control verified, not just auth?\n* [ ] **CSRF**: State-changing operations protected?\n* [ ] **Race conditions**: TOCTOU in any read-then-write patterns?\n* [ ] **Session**: Fixation, expiration, secure flags?\n* [ ] **Cryptography**: Secure random, proper algorithms, no secrets in logs?\n* [ ] **Information disclosure**: Error messages, logs, timing attacks?\n* [ ] **DoS**: Unbounded operations, missing rate limits, resource exhaustion?\n* [ ] **Business logic**: Edge cases, state machine violations, numeric overflow?\n\n## Phase 4: Verification\n\nFor each potential issue:\n\n* Check if it's already handled elsewhere in the changed code\n* Search for existing tests covering the scenario\n* Read surrounding context to verify the issue is real\n\n## Phase 5: Pre-Conclusion Audit\n\nBefore finalizing, you MUST:\n\n1. List every file you reviewed and confirm you read it completely\n2. List every checklist item and note whether you found issues or confirmed it's clean\n3. List any areas you could NOT fully verify and why\n4. Only then provide your final findings\n\n## Output Format\n\n**Prioritize**: security vulnerabilities > bugs > code quality\n\n**Skip**: stylistic\u002Fformatting issues\n\nFor each issue:\n\n* **File:Line** - Brief description\n* **Severity**: Critical\u002FHigh\u002FMedium\u002FLow\n* **Problem**: What's wrong\n* **Evidence**: Why this is real (not already fixed, no existing test, etc.)\n* **Fix**: Concrete suggestion\n* **References**: OWASP, RFCs, or other standards if applicable\n\nIf you find nothing significant, say so - don't invent issues.\n\nDo not make changes - just report findings. I'll decide what to address.\n","# Find Bugs\n\nReview changes on this branch for bugs, security vulnerabilities, and code quality issues.\n\n## When to Use\n\n- You need a review focused on bugs, security issues, or risky code changes.\n- The task involves auditing the current branch diff rather than implementing new behavior.\n- You want a structured review process with checklist-driven verification against changed files.\n\n## Phase 1: Complete Input Gathering\n\n1. Get the FULL diff: `git diff $(gh repo view --json defaultBranchRef --jq '.defaultBranchRef.name')...HEAD`\n2. If output is truncated, read each changed file individually until you have seen every changed line\n3. List all files modified in this branch before proceeding\n\n## Phase 2: Attack Surface Mapping\n\nFor each changed file, identify and list:\n\n* All user inputs (request params, headers, body, URL components)\n* All database queries\n* All authentication\u002Fauthorization checks\n* All session\u002Fstate operations\n* All external calls\n* All cryptographic operations\n\n## Phase 3: Security Checklist (check EVERY item for EVERY file)\n\n* [ ] **Injection**: SQL, command, template, header injection\n* [ ] **XSS**: All outputs in templates properly escaped?\n* [ ] **Authentication**: Auth checks on all protected operations?\n* [ ] **Authorization\u002FIDOR**: Access control verified, not just auth?\n* [ ] **CSRF**: State-changing operations protected?\n* [ ] **Race conditions**: TOCTOU in any read-then-write patterns?\n* [ ] **Session**: Fixation, expiration, secure flags?\n* [ ] **Cryptography**: Secure random, proper algorithms, no secrets in logs?\n* [ ] **Information disclosure**: Error messages, logs, timing attacks?\n* [ ] **DoS**: Unbounded operations, missing rate limits, resource exhaustion?\n* [ ] **Business logic**: Edge cases, state machine violations, numeric overflow?\n\n## Phase 4: Verification\n\nFor each potential issue:\n\n* Check if it's already handled elsewhere in the changed code\n* Search for existing tests covering the scenario\n* Read surrounding context to verify the issue is real\n\n## Phase 5: Pre-Conclusion Audit\n\nBefore finalizing, you MUST:\n\n1. List every file you reviewed and confirm you read it completely\n2. List every checklist item and note whether you found issues or confirmed it's clean\n3. List any areas you could NOT fully verify and why\n4. Only then provide your final findings\n\n## Output Format\n\n**Prioritize**: security vulnerabilities > bugs > code quality\n\n**Skip**: stylistic\u002Fformatting issues\n\nFor each issue:\n\n* **File:Line** - Brief description\n* **Severity**: Critical\u002FHigh\u002FMedium\u002FLow\n* **Problem**: What's wrong\n* **Evidence**: Why this is real (not already fixed, no existing test, etc.)\n* **Fix**: Concrete suggestion\n* **References**: OWASP, RFCs, or other standards if applicable\n\nIf you find nothing significant, say so - don't invent issues.\n\nDo not make changes - just report findings. I'll decide what to address.\n",{"name":5,"risk":39,"source":33,"description":7},"unknown","main","a50a3aa6b39fb0e1b7db88bef1bfc9c93606e126","modules\u002Fagent_skills\u002Fawesome-skills\u002Fplaybooks\u002Ffind-bugs",0,"https:\u002F\u002Fgithub.com\u002FSam-06060\u002Fjarvis-assistant","https:\u002F\u002Fgithub.com\u002FSam-06060","Mobile Application Developer | Kotlin | Flutter, KMP, Swfit, Android,Swift UI | Building at Saar It Resources | Creator of Jarvis (AI Assistant)","2026-06-23 05:13:38",{"source":8,"skillName":5,"commands":49,"prompt":59,"zipAvailable":60},[50,53,56],{"tool":51,"command":52},"npx","npx skills add Sam-06060\u002Fjarvis-assistant --skill find-bugs",{"tool":54,"command":55},"bunx","bunx skills add Sam-06060\u002Fjarvis-assistant --skill find-bugs",{"tool":57,"command":58},"pnpm","pnpm dlx skills add Sam-06060\u002Fjarvis-assistant --skill find-bugs","安装技能，技能地址：https:\u002F\u002Fgithub.com\u002FSam-06060\u002Fjarvis-assistant\u002Fblob\u002Fmain\u002Fmodules\u002Fagent_skills\u002Fawesome-skills\u002Fplaybooks\u002Ffind-bugs\u002FSKILL.md",true,[62,68,72],{"path":63,"resourceType":64,"resourceTypeDesc":65,"sizeBytes":66,"sourceHtmlUrl":67},"evals\u002Fevals.json","REFERENCE","参考文档",862,"https:\u002F\u002Fgithub.com\u002Fevent4u-app\u002Fagent-config\u002Fblob\u002Fmain\u002Fsrc\u002Fskills\u002Ftypography-system\u002Fevals\u002Fevals.json",{"path":69,"resourceType":64,"resourceTypeDesc":65,"sizeBytes":70,"sourceHtmlUrl":71},"evals\u002Ftriggers.json",1796,"https:\u002F\u002Fgithub.com\u002Fevent4u-app\u002Fagent-config\u002Fblob\u002Fmain\u002Fsrc\u002Fskills\u002Ftypography-system\u002Fevals\u002Ftriggers.json",{"path":73,"resourceType":64,"resourceTypeDesc":65,"sizeBytes":74,"sourceHtmlUrl":75},"references\u002Fworked-scales.md",5643,"https:\u002F\u002Fgithub.com\u002Fevent4u-app\u002Fagent-config\u002Fblob\u002Fmain\u002Fsrc\u002Fskills\u002Ftypography-system\u002Freferences\u002Fworked-scales.md",[77,90,106,133,152,179],{"skillNo":78,"name":79,"nameZh":6,"description":6,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":80,"categories":81,"keywords":87,"publishedAt":34},"01M6GDRVS6FXX3ESH0C9DW01C0","test_skill","https:\u002F\u002Fgithub.com\u002FSam-06060\u002Fjarvis-assistant\u002Fblob\u002Fmain\u002Fscratch\u002Ftest_skill\u002FSKILL.md",[82],{"categoryNo":83,"categoryName":84,"taxonomyType":85,"taxonomyTypeDesc":86},"01JBSEEDCAT000000000000008","测试与质量","SCENARIO","使用场景",[88,89],"Test Skill","test",{"skillNo":91,"name":92,"nameZh":6,"description":93,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":94,"categories":95,"keywords":96,"publishedAt":34},"01M6GDRQ40HX22MA6XWC31RHHK","zustand-store-ts","Create Zustand stores following established patterns with proper TypeScript types and middleware.","https:\u002F\u002Fgithub.com\u002FSam-06060\u002Fjarvis-assistant\u002Fblob\u002Fmain\u002Fmodules\u002Fagent_skills\u002Fawesome-skills\u002Fplaybooks\u002Fzustand-store-ts\u002FSKILL.md",[],[97,98,99,100,101,102,103,33,104,105],"zustand store ts","zustand","store","with","types","middleware","patterns","create","typescript",{"skillNo":107,"name":108,"nameZh":6,"description":109,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":110,"categories":111,"keywords":115,"publishedAt":34},"01M6GDRKEA0WE670SPFWX5GKCN","zoom-automation","Automate Zoom meeting creation, management, recordings, webinars, and participant tracking via Rube MCP (Composio). Always search tools first for current schemas.","https:\u002F\u002Fgithub.com\u002FSam-06060\u002Fjarvis-assistant\u002Fblob\u002Fmain\u002Fmodules\u002Fagent_skills\u002Fawesome-skills\u002Fplaybooks\u002Fzoom-automation\u002FSKILL.md",[112],{"categoryNo":113,"categoryName":114,"taxonomyType":85,"taxonomyTypeDesc":86},"01JBSEEDCAT000000000000023","Skill与智能体开发",[116,117,118,119,120,121,122,123,124,125,126,127,128,129,33,130,131,132],"automation","zoom automation","zoom","first","Tools","search","MCP","via","meeting","automate","critical","creation","webinars","composio","recordings","management","tracking",{"skillNo":134,"name":135,"nameZh":6,"description":136,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":137,"categories":138,"keywords":140,"publishedAt":34},"01M6GDRFS1452PC71JQ38S24HR","zoho-crm-automation","Automate Zoho CRM tasks via Rube MCP (Composio): create\u002Fupdate records, search contacts, manage leads, and convert leads. Always search tools first for current schemas.","https:\u002F\u002Fgithub.com\u002FSam-06060\u002Fjarvis-assistant\u002Fblob\u002Fmain\u002Fmodules\u002Fagent_skills\u002Fawesome-skills\u002Fplaybooks\u002Fzoho-crm-automation\u002FSKILL.md",[139],{"categoryNo":113,"categoryName":114,"taxonomyType":85,"taxonomyTypeDesc":86},[141,116,142,143,144,145,146,33,121,147,129,148,126,125,120,149,104,150,122,151],"crm automation","zoho crm","crm","zoho crm automation","zoho","leads","contacts","records","update","tasks","manage",{"skillNo":153,"name":154,"nameZh":6,"description":155,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":156,"categories":157,"keywords":161,"publishedAt":34},"01M6GDRCKQBAVTGHX5XBH26KPZ","zod-validation-expert","Expert in Zod — TypeScript-first schema validation. Covers parsing, custom errors, refinements, type inference, and integration with React Hook Form, Next.js, and tRPC.","https:\u002F\u002Fgithub.com\u002FSam-06060\u002Fjarvis-assistant\u002Fblob\u002Fmain\u002Fmodules\u002Fagent_skills\u002Fawesome-skills\u002Fplaybooks\u002Fzod-validation-expert\u002FSKILL.md",[158],{"categoryNo":159,"categoryName":160,"taxonomyType":85,"taxonomyTypeDesc":86},"01JBSEEDCAT000000000000009","前端开发",[162,163,164,165,166,105,167,168,169,170,171,172,100,173,174,175,176,33,177,178],"expert","zod","zod validation expert","validation","react","safe","parsing","errors","schema validation","react hook form","hook","trpc","form","type","next","schema","Next.js",{"skillNo":180,"name":181,"nameZh":6,"description":182,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":183,"categories":184,"keywords":186,"publishedAt":34},"01M6GDR658B08K4MY0RWD4A6EH","zeroize-audit","Detects missing zeroization of sensitive data in source code and identifies zeroization removed by compiler optimizations, with assembly-level analysis, and control-flow verification. Use for auditing C\u002FC++\u002FRust code handling secrets, keys, passwords, or other sensitive data.","https:\u002F\u002Fgithub.com\u002FSam-06060\u002Fjarvis-assistant\u002Fblob\u002Fmain\u002Fmodules\u002Fagent_skills\u002Fawesome-skills\u002Fplaybooks\u002Fzeroize-audit\u002FSKILL.md",[185],{"categoryNo":113,"categoryName":114,"taxonomyType":85,"taxonomyTypeDesc":86},[187,29,188,189,190,191,192,193,33,194,195,196,197,198,199,200,201,26,202,122],"zeroize audit","write","passwords","get","project","c++","activate","assembly","read","Bash","secrets","analysis","data","flow","verification","rust"]