Directory

Catalog

324,895 skills · 109,090 with SKILL.md · 9,730 ranked on the leaderboard

All skills

#

Skill

Source

8W Activity

Installs

browser-exploitation-v8 >- Browser and V8 exploitation playbook. Use when exploiting JavaScript engine vulnerabilities including JIT type con…

yaklang/hack-skills

prompt-engineering Provides workflows to write, debug, and optimize prompts for LLMs, including few-shot example selection, chain-of-tho…

giuseppe-trisciuoglio/developer-kit

http-parameter-pollution >- HTTP Parameter Pollution (HPP): duplicate query/body keys parsed differently by servers, proxies, WAFs, and app fr…

yaklang/hack-skills

deserialization-insecure >- Insecure deserialization playbook. Use when Java, PHP, or Python applications deserialize untrusted data via Objec…

yaklang/hack-skills

platform-widget-generate Use this skill to author a complete HXL WidgetBundle (UEM body + schema.json + -meta.xml). TRIGGER when: user asks fo…

forcedotcom/sf-skills

authsome Use this to access external services/CLIs/APIs: Gmail/gh/Github/Stripe etc. or when running any bash command, script,…

agentrhq/authsome

risk-assessment Official Identify, assess, and mitigate operational risks. Trigger with "what are the risks", "risk assessment", "risk registe…

anthropics/knowledge-work-plugins

andrej-karpathy-perspective

alchaincyf/karpathy-skill

kernel-exploitation >- Linux kernel exploitation playbook. Use when exploiting kernel vulnerabilities (UAF, OOB, race condition, type con…

yaklang/hack-skills

ssti-server-side-template-injection >- SSTI playbook. Use when template expressions, server-side rendering, preview features, or templating engines may e…

yaklang/hack-skills

elasticsearch-audit Enable, configure, and query Elasticsearch security audit logs. Use when the task involves audit logging setup, event…

elastic/agent-skills

file-access-vuln >- Entry P1 category router for file access and upload workflows. Use when testing download endpoints, file paths, lo…

yaklang/hack-skills

convex-schema-validator Defining and validating database schemas with proper typing, index configuration, optional fields, unions, and migrat…

waynesutton/convexskills

query-metrics Official Runs metrics queries against Axiom MetricsDB via scripts. Discovers available metrics, tags, and tag values. Use when…

graphql-and-hidden-parameters >- GraphQL and hidden parameter testing playbook. Use when exploring introspection, batching, undocumented fields, hi…

yaklang/hack-skills

drawio-logical-diagrams Creates professional logical flow diagrams and logical system architecture diagrams using draw.io XML format (.drawio…

giuseppe-trisciuoglio/developer-kit

elasticsearch-authz Manage Elasticsearch RBAC: native users, roles, role mappings, document- and field-level security. Use when creating …

elastic/agent-skills

logo-creator Create logos using AI image generation. Discuss style/ratio, generate variations, iterate with user feedback, crop, r…

resciencelab/opc-skills

animate Animation patterns and best practices for Next.js/React applications. Use this skill when implementing animations, tr…

delphi-ai/animate-skill

xxe-xml-external-entity >- XXE playbook. Use when XML, SVG, OOXML, SOAP, or parser-driven imports may resolve external entities, files, or in…

yaklang/hack-skills

git-commit-push Commit changes and push to origin without creating a PR

zc277584121/mygitplugin

pay-for-service Official Make a paid API request to an x402 endpoint with automatic USDC payment. Use when you or the user want to call a paid…

coinbase/agentic-wallet-skills

app-observability Get RED metrics + service maps + frontend RUM + AI/LLM monitoring out of Grafana Cloud — Application Observability (`…

format-string-exploitation >- Format string exploitation playbook. Use when printf-family functions receive user-controlled format strings, enab…

yaklang/hack-skills

cmdi-command-injection >- Command injection playbook. Use when user input may reach shell commands, process execution, converters, import pi…

yaklang/hack-skills

user-onboarding Onboarding script for first-time Starchild users: positioning, quick wins, discovery. Use when the user is new or vag…

starchild-ai-agent/official-skills

send-usdc Official Send tokens (USDC, ETH, POL, or SOL) to an address or ENS name on Base, Polygon, or Solana. Use when you or the user …

coinbase/agentic-wallet-skills

handling-sf-data Salesforce data operations with 130-point scoring. Use this skill to create, update, delete, bulk import/export, gene…

forcedotcom/sf-skills

path-traversal-lfi >- Path traversal and LFI playbook. Use when file paths, download endpoints, include operations, archive extraction, …

yaklang/hack-skills

book-study Reading coach: guides users through books systematically with knowledge compilation, mastery testing, spaced repetiti…

sanyuan0704/sanyuan-skills

design-brief Parse a structured design brief written in I-Lang protocol format into a concrete design spec. Eliminates ambiguity f…

nexu-io/open-design

recsys-pipeline-architect Design composable recommendation, ranking, and feed pipelines using the six-stage Source→Hydrator→Filter→Scorer→Selec…

wshobson/agents

anti-debugging-techniques >- Anti-debugging detection and bypass playbook. Use when reversing protected binaries that detect debuggers via ptra…

yaklang/hack-skills

skill-installer Official Install Codex skills into $CODEX_HOME/skills from a curated list or a GitHub repo path. Use when a user asks to list …

wind-alice 调用万得 Alice Agent（A2A 协议，SSE 流式）执行指定 Skill 并获取分析结果的 CLI 工?

wind-information-co-ltd/wind-skills

binary-protection-bypass >- Binary protection bypass playbook. Use when identifying and bypassing ASLR, PIE, NX/DEP, stack canary, RELRO, FORT…

yaklang/hack-skills

security-ownership-map Official Analyze git repositories to build a security ownership topology (people-to-file), compute bus factor and sensitive-co…

observability-llm-obs Answer questions about LLM and agentic-application behavior from data already ingested into Elastic: latency and erro…

elastic/agent-skills

mintlify Install the mintlify skill for your AI agent. Published on mintlify.com.

html Create or redesign self-contained single-file HTML artifacts with a visual direction shaped by the user's brief, proj…

plannotator/effective-html

tailwindcss Tailwind CSS utility-first CSS framework. Use when styling web applications with utility classes, building responsive…

vm-and-bytecode-reverse >- Custom VM and bytecode reverse engineering playbook. Use when CTF challenges or protected software implement custo…

yaklang/hack-skills

autoclaw-cc/xiaohongshu-mcp-skills

aspnet-core Official Build, review, refactor, or architect ASP.NET Core web applications using current official guidance for .NET web deve…

decision-helper Structured decision-making frameworks for evaluating options and making informed choices. Use when: making decisions,…

shubhamsaboo/awesome-llm-apps

llm-prompt-injection >- LLM prompt injection playbook. Use when testing AI/LLM applications for direct injection, indirect injection via R…

yaklang/hack-skills

office-automation 自动化处理 Word 和 Excel 文件。使用 Python 脚本读取、写入、格式化文档和表格。支持批量处理、模板填充、数据提取和格式转…

texiaoyao/office-automation-skill

xiaohongshu-note-analyzer

softbread/xiaohongshu-doctor

competitor-analysis When the user wants to analyze competitors' App Store strategy, find keyword gaps, or understand competitive position…

eronred/aso-skills

effect-ts Use for nontrivial Effect 3 work including services/layers, typed errors, Schema/JSONSchema, Config, runtime/concurre…

paulrberg/agent-skills