AI Skills
Installable SKILL.md packages that extend AI coding agents with reliable workflows and domain-specific judgment — ranked by installs, sourced from skills.sh.
ios-pentesting-tricks
iOS pentesting playbook for keychain extraction, URL scheme hijacking, Universal Links exploitation, and runtime manipulation.
imprint
Extract and enforce UI visual patterns automatically after each component build.
sessions
Agents window architecture reference for VS Code — layers, layout, session management, and development guidelines.
avkit
Create system-standard video players with AVKit for iOS—supports Picture-in-Picture, AirPlay, subtitles, and SwiftUI integration.
conducting-user-interviews
Run better user interviews using techniques from 43 product leaders to extract real insights.
monetization-strategy
Brainstorm 3-5 monetization strategies with audience fit, risks, and validation experiments.
openclaw-history-ingest
Mine your OpenClaw agent history and distill it into an Obsidian wiki.
request-smuggling
HTTP request smuggling and desynchronization testing for proxy/origin framing disagreements.
open-redirect
Exploit open redirects via parameter injection, filter bypass, and chaining with phishing, OAuth token theft, and SSRF.
crlf-injection
CRLF injection attack playbook for HTTP response splitting, header injection, and cache poisoning.
aiconfig-custom-metrics
DEPRECATED: Use custom-metrics skill instead
manim-composer
Plan educational animations scene-by-scene before coding—transforms vague video ideas into detailed Manim implementation specs.
37signals-way
Build lean, opinionated products using the 37signals philosophy: fix time, flex scope, say no by default.
insecure-source-code-management
Detect and recover exposed version control metadata (.git, .svn, .hg) and backup artifacts during authorized security testing.
football-data
Soccer data across 13 leagues—standings, schedules, match stats, xG, transfers, player profiles. Zero config.
odoo-development
Expert guidance for Odoo ERP development with Python ORM, XML views, and module architecture
python-best-practices
Type-first Python patterns: immutable models, discriminated unions, and structured error handling.
mintlify
Comprehensive reference for building and configuring Mintlify documentation sites.
pdfkit
Display, navigate, and annotate PDF documents in iOS with PDFKit.
heygen
[DEPRECATED] AI avatar video creation—use create-video or avatar-video skills instead.
senior-frontend
Comprehensive frontend toolkit for React, Next.js, and TypeScript with component scaffolding, bundle analysis, and performance optimization.
academic-cv-builder
Format CVs for academic positions with publications, grants, and teaching experience.
chatgpt-apps
Build ChatGPT Apps SDK applications with MCP servers and widget UIs using a docs-first workflow.
llm-prompt-injection
Test AI/LLM applications for prompt injection, indirect injection, tool abuse, and defense bypass techniques.
sentiment-analysis
Analyze user feedback at scale to identify sentiment segments, satisfaction drivers, and product improvement opportunities.
race-condition
Test race conditions and TOCTOU vulnerabilities in web apps via synchronized parallel requests.
expression-language-injection
Expert playbook for Java EL injection attacks across Spring, Struts2, Confluence, and JSP/JSF frameworks.
notion-meeting-intelligence
Prep meetings by pulling Notion context and drafting tailored agendas with Codex research.
kernel-exploitation
Linux kernel exploitation techniques for UAF, OOB, race conditions, and privilege escalation via ROP and commit_creds.
active-research
Deep research and analysis tool generating comprehensive HTML reports with advanced browser automation.