AI Skills
Installable SKILL.md packages that extend AI coding agents with reliable workflows and domain-specific judgment — ranked by installs, sourced from skills.sh.
dependency-confusion
Identify and test supply-chain dependency confusion vulnerabilities across npm, pip, Ruby, Maven, Composer, and Docker.
figma-create-design-system-rules
Generate custom design system rules to guide AI agents in implementing Figma designs consistently with your project's conventions.
web-cache-deception
Exploit CDN and reverse proxy cache behavior to steal authenticated data or inject malicious content.
spring-boot-rest-api-standards
REST API design standards and best practices for Spring Boot projects
sox-testing
Generate SOX 404 sample selections, testing workpapers, and control assessments for internal controls audits.
csv-formula-injection
Detect and test formula injection in CSV exports and spreadsheet imports.
seo-sxo
Analyze SERP backwards to detect page-type mismatches and score pages against search intent.
seo-drift
Capture SEO baselines, detect regressions, and track on-page changes over time.
threejs-webgl
Industry-standard JavaScript library for creating interactive 3D graphics and WebGL/WebGPU web experiences.
browser-exploitation-v8
V8 and Chrome browser exploitation: JIT type confusion, sandbox bypass, and renderer RCE techniques.
hygiene
Enforce VS Code's code quality standards: unicode, quotes, headers, indentation, formatting, and linting.
elasticsearch-authn
Authenticate to Elasticsearch using native, API key, LDAP, SAML, OIDC, Kerberos, JWT, or certificate realms.
saml-sso-assertion-attacks
Test SAML SSO assertion signature validation, binding, and trust boundary flaws in enterprise authentication.
createos
Deploy any code to production on CreateOS—AI agents, APIs, bots, frontends, and more.
metrickit
Collect production performance metrics and crash diagnostics from iOS/macOS devices using MetricKit.
docx
Create, edit, and analyze .docx files with tracked changes, comments, and formatting preservation.
seo-audit
Diagnose SEO issues using live web data and SERP checks via Bright Data CLI.
taleb-perspective
Nassim Taleb's thinking framework: identify tail risks, question consensus, and apply antifragility to decisions.
blog-post
Write and structure long-form blog posts with SEO optimization and auto-generated cover images.
critical-thinking-logical-reasoning
Analyse written arguments and claims using structured critical thinking and logical reasoning.
document-writer
Writing guide for Nuxt blog posts and documentation with style standards, content patterns, and MDC component usage.
musickit
Integrate Apple Music playback, catalog search, and Now Playing metadata into iOS apps.
ethskills
Production Ethereum knowledge for AI agents—gas costs, L2s, standards, security, and DeFi integrations.
pyrefly-type-coverage
Migrate Python files to strict Pyrefly type checking with full function, class, and attribute annotations.
binary-protection-bypass
Identify and bypass ASLR, PIE, NX, canary, RELRO, FORTIFY_SOURCE, CET, and MTE protections in ELF binaries.
clickjacking
Test and exploit clickjacking vulnerabilities by framing target pages and bypassing frame-busting protections.
jndi-injection
JNDI injection attack playbook covering Log4Shell, RMI/LDAP vectors, JDK bypasses, and tooling.
triaging-issues
Triage PyTorch GitHub issues by routing to oncall teams, applying labels, and closing questions.
publish-to-pages
Publish presentations and web content to GitHub Pages with automatic format conversion.
gtm-strategy
Create a comprehensive go-to-market strategy with channels, messaging, metrics, and launch timeline.