DAVID TB
Community@tbdavid2019 · Taiwan
總想做點什麼讓世界更美好
Agent Skills by DAVID TB
Showing 7 vetted skills indexed across 2 GitHub repositories.
openspec-sync-specs
Merge delta spec changes into main OpenSpec capability specifications.
security-audit
Audits Next.js and AI application codebases for vulnerabilities, secrets, and dependency CVEs.
openclaw-docs
Guide OpenClaw installation, configuration, and troubleshooting workflows.
openspec-apply-change
Implement tasks from an OpenSpec change using the openspec CLI.
openspec-explore
Explore ideas and investigate codebases before creating OpenSpec change proposals.
openspec-archive-change
Archives completed OpenSpec changes after verifying artifacts, tasks, and spec sync state.
openspec-propose
Generates complete OpenSpec change proposals with specs, design, and tasks artifacts.
Frequently Asked Questions About DAVID TB
FAQPage SchemaWhat tasks can I perform with DAVID TB's OpenSpec skills?▼
You can propose new changes with full design and task artifacts, explore codebases and compare design options, implement change tasks step by step, sync delta specs into main specs, and validate then archive completed changes into dated storage.
Who should use these OpenSpec and security-audit skills?▼
Software engineers practicing spec-driven development who need structured change proposals, task tracking, and spec synchronization, plus developers maintaining Next.js or AI applications who require full-codebase security audits and vulnerability assessments.
What are the prerequisites for running these skills?▼
The five OpenSpec skills require the openspec CLI to be installed, as they invoke Bash(openspec:*) commands. The security-audit skill has no stated CLI dependency and targets Next.js and AI application codebases directly.
Are these skills open source and free to use?▼
Yes. All six skills in the manifest are released under the MIT license, permitting free use, modification, and distribution. The OpenSpec skills are authored by openspec (version 1.0) and the security-audit skill by stockbot.
What does the security-audit skill check in a codebase?▼
It performs comprehensive full-codebase security audits including vulnerability assessments, secret detection, API and SSRF inspection, prompt injection defense review, and dependency vulnerability scans, specifically oriented toward Next.js and AI applications.