Search

Find skills by name, source, slug, or description across the full catalog.

Feature your product here Catalog & search unit · reach builders installing agent skills View pricing →

#

Skill

Source

Installs

position-sizer tradermonty/claude-trading-/position-sizer Calculate risk-based position sizes for long stock trades.

tradermonty/claude-trading-

business-logic-vuln yaklang/hack-/business-logic-vuln >- Entry P1 category router for business logic testing. Use when workflow abuse, race conditions, pricing flaws, or m…

csrf-cross-site-request-forgery yaklang/hack-/csrf-cross-site-request-forgery >- CSRF testing playbook. Use when reviewing state-changing web flows, anti-CSRF defenses, SameSite behavior, JSON CS…

heap-exploitation yaklang/hack-/heap-exploitation >- Heap exploitation playbook. Use when targeting ptmalloc2/glibc heap vulnerabilities including UAF, double free, ov…

react-router-framework-mode remix-run/agent-/react-router-framework-mode Build full-stack React applications using React Router's framework mode.

remix-run/agent-

oauth-oidc-misconfiguration yaklang/hack-/oauth-oidc-misconfiguration >- OAuth and OIDC misconfiguration testing playbook. Use when reviewing redirect URI handling, state and nonce valida…

inngest-middleware inngest/inngest-/inngest-middleware Use when adding cross-cutting concerns to durable functions — structured logging or tracing across all functions, err…

inngest/inngest-

traffic-analysis-pcap yaklang/hack-/traffic-analysis-pcap >- Traffic analysis and PCAP forensics playbook. Use when analyzing network captures including Wireshark filters, pro…

infographic markdown-viewer//infographic Create template-based infographics with space-separated key-value syntax (NOT YAML). Best for KPI dashboards, timelin…

markdown-viewer/

contacts-framework dpearson2699/swift-ios-/contacts-framework Read, create, update, and pick contacts using the Contacts and ContactsUI frameworks. Use when fetching contact data,…

dpearson2699/swift-ios-

longbridge-watchlist longbridge//longbridge-watchlist Watchlist group management (list/create/rename/delete/add/remove symbols), price alerts (list/add/delete), and commun…

anti-debugging-techniques yaklang/hack-/anti-debugging-techniques >- Anti-debugging detection and bypass playbook. Use when reversing protected binaries that detect debuggers via ptra…

core-nfc dpearson2699/swift-ios-/core-nfc Read and write NFC tags using CoreNFC. Use when scanning NDEF tags, reading ISO7816/ISO15693/FeliCa/MIFARE tags, writ…

dpearson2699/swift-ios-

doca-flow-perf Official nvidia//doca-flow-perf Use this skill when the user is measuring the host or DPU-CPU control-plane rate of a DOCA Flow pipeline with doca_fl…

path-traversal-lfi yaklang/hack-/path-traversal-lfi >- Path traversal and LFI playbook. Use when file paths, download endpoints, include operations, archive extraction, …

alarmkit dpearson2699/swift-ios-/alarmkit Implement AlarmKit alarms and countdown timers for iOS and iPadOS with Lock Screen, Dynamic Island, StandBy, and pair…

dpearson2699/swift-ios-

binary-protection-bypass yaklang/hack-/binary-protection-bypass >- Binary protection bypass playbook. Use when identifying and bypassing ASLR, PIE, NX/DEP, stack canary, RELRO, FORT…

cmdi-command-injection yaklang/hack-/cmdi-command-injection >- Command injection playbook. Use when user input may reach shell commands, process execution, converters, import pi…

tipkit dpearson2699/swift-ios-/tipkit Implement and review Apple TipKit feature-discovery UI for iOS 17+ apps.

dpearson2699/swift-ios-

ui-ux-pro-max sickn33/agentic-awesome-/ui-ux-pro-max Comprehensive design guide for web and mobile applications. Use when designing new UI components or pages, choosing c…

sickn33/agentic-awesome-

graphql-and-hidden-parameters yaklang/hack-/graphql-and-hidden-parameters >- GraphQL and hidden parameter testing playbook. Use when exploring introspection, batching, undocumented fields, hi…

ssti-server-side-template-injection yaklang/hack-/ssti-server-side-template-injection >- SSTI playbook. Use when template expressions, server-side rendering, preview features, or templating engines may e…

permissionkit dpearson2699/swift-ios-/permissionkit Create child communication safety experiences using PermissionKit to request parental permission for children.

dpearson2699/swift-ios-

vueuse-functions vueuse//vueuse-functions Apply VueUse composables where appropriate to build concise, maintainable Vue.js / Nuxt features.

xxe-xml-external-entity yaklang/hack-/xxe-xml-external-entity >- XXE playbook. Use when XML, SVG, OOXML, SOAP, or parser-driven imports may resolve external entities, files, or in…

om-apply-upgrade-notes open-mercato//om-apply-upgrade-notes Apply the collection's UPGRADE_NOTES.md after an upgrade. Re-syncs installed tracker and browser-provider desc…

app-clips dpearson2699/swift-ios-/app-clips Build iOS App Clips with invocation URLs, App Clip Codes, NFC, QR codes, Safari banners, Maps, Messages, target setup…

dpearson2699/swift-ios-

signal-postmortem tradermonty/claude-trading-/signal-postmortem Record and analyze post-trade outcomes for signals generated by edge pipeline and other . Track false positives…

tradermonty/claude-trading-

dx-pkg-post-install-configure forcedotcom/sf-/dx-pkg-post-install-configure Use this skill to automate managed package post-install configuration. Package-agnostic — works with any managed pack…

forcedotcom/sf-

format-string-exploitation yaklang/hack-/format-string-exploitation >- Format string exploitation playbook. Use when printf-family functions receive user-controlled format strings, enab…

file-access-vuln yaklang/hack-/file-access-vuln >- Entry P1 category router for file access and upload workflows. Use when testing download endpoints, file paths, lo…

kernel-exploitation yaklang/hack-/kernel-exploitation >- Linux kernel exploitation playbook. Use when exploiting kernel vulnerabilities (UAF, OOB, race condition, type con…

swiftui-ui-patterns dimillian//swiftui-ui-patterns Best practices and example-driven guidance for building SwiftUI views and components, including navigation hierarchie…

http-parameter-pollution yaklang/hack-/http-parameter-pollution >- HTTP Parameter Pollution (HPP): duplicate query/body keys parsed differently by servers, proxies, WAFs, and app fr…

request-smuggling yaklang/hack-/request-smuggling >- HTTP request smuggling and desynchronization testing. Use when front proxies, CDNs, or load balancers disagree wit…

deserialization-insecure yaklang/hack-/deserialization-insecure >- Insecure deserialization playbook. Use when Java, PHP, or Python applications deserialize untrusted data via Objec…

race-condition yaklang/hack-/race-condition >- Race condition and TOCTOU testing for web apps. Use when testing one-time operations, concurrent HTTP abuse, rate-…

longbridge-research longbridge//longbridge-research Institution ratings, consensus price targets, EPS/revenue forecasts, finance calendar, shareholder data, fund holders…

browser-exploitation-v8 yaklang/hack-/browser-exploitation-v8 >- Browser and V8 exploitation playbook. Use when exploiting JavaScript engine vulnerabilities including JIT type con…

open-redirect yaklang/hack-/open-redirect >- Open redirect playbook. Use when URL parameters, form actions, or JavaScript sinks control navigation targets and …

symbolic-execution-tools yaklang/hack-/symbolic-execution-tools >- Symbolic execution and constraint solving playbook. Use when solving CTF reversing challenges, recovering keys, by…

institutional-flow-tracker tradermonty/claude-trading-/institutional-flow-tracker Use this skill to track institutional investor ownership changes and portfolio flows using 13F filings data.

tradermonty/claude-trading-

swift-codable dpearson2699/swift-ios-/swift-codable Implement Swift Codable models for JSON and property-list encoding and decoding with JSONDecoder, JSONEncoder, Coding…

dpearson2699/swift-ios-

mobile-ssl-pinning-bypass yaklang/hack-/mobile-ssl-pinning-bypass >- Mobile SSL pinning bypass playbook. Use when intercepting HTTPS traffic from mobile applications that implement ce…

crlf-injection yaklang/hack-/crlf-injection >- CRLF injection playbook. Use when user input reaches HTTP response headers, Location redirects, Set-Cookie values,…

energykit dpearson2699/swift-ios-/energykit Query grid electricity forecasts and submit load events using EnergyKit to help users optimize home electricity usage.

dpearson2699/swift-ios-

http-host-header-attacks yaklang/hack-/http-host-header-attacks >- HTTP Host header injection and routing abuse playbook. Use when the application trusts the Host header for generat…

web-cache-deception yaklang/hack-/web-cache-deception >- Web cache deception and poisoning playbook. Use when CDN, reverse proxy, or application caching may serve sensitiv…

subdomain-takeover yaklang/hack-/subdomain-takeover >- Subdomain takeover detection and exploitation playbook. Use when targets have dangling CNAME/NS/MX records pointin…

dependency-confusion yaklang/hack-/dependency-confusion >- Supply-chain testing via package-manager dependency confusion: when internal package names resolve to attacker-con…