Everything below was published by this GitHub account. Launch7 indexes it and links to the source; it has not executed, installed or audited any of it, and it is not affiliated with the account.
Categories
Skills
- ai-slop
Operational rubric that turns "don't make AI slop" into observable properties, severity levels, evidence requirements, and repair actions…
- code-explorer
Deeply analyze an existing codebase feature by tracing execution paths, mapping architecture layers, understanding patterns and abstractions, and…
- code-quality
Agents should invoke this skill for code reviews, linting/formatting setup, maintainability checks, complexity concerns, warning cleanup,…
- codeql
Run CodeQL database creation and security queries, add data-extension models, or process CodeQL SARIF.
- feature-dev
Guide a feature implementation through a structured seven-phase workflow with deep codebase understanding, clarifying questions, parallel architecture…
- fp-check
"Is this bug real?" or "is this a true positive?" - "Is this a false positive?" or "verify this finding" - "Check if this vulnerability is…
- hf-cloud-python-env-setup
Create an isolated Python environment with a compatible Python version and boto3 for SageMaker or AWS automation.
- hf-cloud-sagemaker-deployment-planner
Plan and coordinate a model deployment to Amazon SageMaker, including serving stack and real-time versus async inference.
- hf-cloud-sagemaker-iam-preflight
Verify or select a SageMaker execution role before creating models, endpoints, or training jobs.
- hf-cloud-sagemaker-production-defaults
Implement a production SageMaker endpoint with autoscaling, CloudWatch alarms, and tags.
- hf-cloud-serving-image-selection
Select and verify the current region-specific serving container URI for a SageMaker model deployment.
- huggingface-datasets
Use this skill for Hugging Face Dataset Viewer API workflows that fetch subset/split metadata, paginate rows, search text, apply filters,…
- insecure-defaults
Detects fail-open insecure defaults (hardcoded secrets, weak auth, permissive security) that allow apps to run insecurely in production.
- paper-summarizer
Agents should invoke this skill for academic or technical papers, arXiv/PubMed/IEEE/ACM links, PDFs, methodology review, limitations,…
- sarif-parsing
Parses and processes SARIF files from static analysis tools like CodeQL, Semgrep, or other scanners.
- semgrep
Run Semgrep static analysis across a codebase, optionally using Semgrep Pro for cross-file taint analysis.
- sharp-edges
Identify error-prone APIs, dangerous configuration, and footgun designs that enable security mistakes.
- vuln-report
Turn one confirmed security finding into a disclosure-ready GitHub advisory with root cause, proof of concept, impact, and source evidence.