AI Skills
Installable SKILL.md packages that extend AI coding agents with reliable workflows and domain-specific judgment — ranked by installs, sourced from skills.sh.
spring-boot-testing
Expert Spring Boot 4 testing specialist selecting optimal techniques with JUnit 6 and AssertJ.
resume-quantifier
Transform vague resume bullets into credible achievements by discovering and estimating quantifiable metrics.
portfolio-case-study-writer
Transform resume bullets into detailed portfolio case studies that showcase your thinking process and impact.
path-traversal-lfi
Expert path traversal and LFI attack playbook with encoding bypass, log poisoning, and PHP wrapper exploitation.
observability-logs-search
Search and filter Observability logs with ES|QL to investigate incidents, errors, and anomalies.
browsing-with-playwright
Browser automation via Playwright MCP—navigate, fill forms, click elements, extract data.
longbridge
Live market data, news, filings, fundamentals, and portfolio analysis across US, HK, CN, SG, and crypto markets.
triage-nda
Rapidly classify incoming NDAs as GREEN (approve), YELLOW (counsel review), or RED (full legal review).
ios-application-dev
UIKit, SnapKit, and SwiftUI guide for building accessible, compliant iOS apps.
signature-request
Prepare and route documents for e-signature with pre-flight checks and signing order configuration.
day1-onboarding
AI Native Camp Day 1 onboarding: learn Claude Code through guided conversation and hands-on exercises.
paper-audit
Reviewer-style audit and submission gate for academic papers in .tex, .typ, or .pdf.
writing-specs-designs
Write effective specs and design documents using frameworks from 7 product leaders.
aiconfig-migrate
DEPRECATED — use 'migrate' skill instead
file-access-vuln
Router for file access vulnerabilities: path traversal, LFI, and upload workflow testing.
graphql-and-hidden-parameters
Discover hidden GraphQL fields, introspection gaps, and batching vulnerabilities to expose authorization flaws.
backend-development
Build production-ready backend systems with modern technologies, security best practices, and proven scalability patterns.
metal-kernel
Write Metal/MPS kernels for PyTorch operators on Apple Silicon.
ssti-server-side-template-injection
Expert SSTI detection, fingerprinting, and RCE exploitation across Jinja2, FreeMarker, Twig, Velocity, ERB, and more.
format-string-exploitation
Exploit format string vulnerabilities to leak memory, overwrite GOT/hooks, and achieve RCE via printf-family functions.
cmdi-command-injection
Expert command injection attack playbook for shell metacharacters, blind detection, and OOB exfiltration.
spritekit
Build 2D games and animations with SpriteKit for iOS using scenes, sprites, physics, and SwiftUI integration.
mapkit
Build map and location features in iOS/macOS apps with MapKit and CoreLocation async APIs.
aiconfig-ai-metrics
DEPRECATED: Use built-in-metrics instead.
product-strategy
Create a comprehensive product strategy using the 9-section Product Strategy Canvas.
prioritization-advisor
Choose the right prioritization framework for your product stage, team, and decision-making needs.
deserialization-insecure
Expert attack playbook for insecure deserialization in Java, PHP, and Python applications.
realitykit
Build iOS AR and 3D experiences with RealityKit and ARKit integration.
http-parameter-pollution
Exploit HTTP Parameter Pollution to bypass WAFs, SSRF checks, and business logic by leveraging parser disagreements across request hops.
xxe-xml-external-entity
Expert XXE injection playbook covering SOAP, Office files, SVG, OOB exfiltration, and SSRF chains.