Search

Find skills by name, source, slug, or description across the full catalog.

Feature your product here Catalog & search unit · reach builders installing agent skills View pricing →

#

Skill

Source

Installs

frontend-design-deslop samber/cc-/frontend-design-deslop Designs distinctive, non-generic UI — typography, OKLCH color, design tokens (DESIGN.md), layout, components, motion,…

jwt-oauth-token-attacks yaklang/hack-/jwt-oauth-token-attacks >- JWT and OAuth token attack playbook. Use when validating token trust, signing algorithms, key handling, claim abus…

er-intake cslawyer1985/claude-for-legal-zh/er-intake 登记新案件——统一问题涵盖标识信息、利益冲突检索、来源、风险分流、重要性、外聘律师、内部负责人、证据保全和关键日期； …

cslawyer1985/claude-for-legal-zh

api-recon-and-docs yaklang/hack-/api-recon-and-docs >- API reconnaissance and documentation review playbook. Use when discovering endpoints, schemas, versions, OpenAPI s…

learn-agent- rohitg00/ai-engineering-from-scratch/learn-agent- Focused interactive tutor for the Agent Engineering path in AI Engineering from Scratch. Start or resume this …

rohitg00/ai-engineering-from-scratch

idor-broken-object-authorization yaklang/hack-/idor-broken-object-authorization >- IDOR and broken object authorization testing playbook. Use when requests expose object identifiers, tenant boundar…

telegram-bot-builder sickn33/agentic-awesome-/telegram-bot-builder Expert in building Telegram bots that solve real problems - from simple automation to complex AI-powered bots. Covers…

sickn33/agentic-awesome-

api-auth-and-jwt-abuse yaklang/hack-/api-auth-and-jwt-abuse >- API authentication and JWT abuse playbook. Use when testing bearer tokens, API keys, claim trust, header spoofing,…

document- travisjneuman/.claude/document- Professional document creation, editing, and analysis for Office formats (docx, pdf, pptx, xlsx). Use when working wi…

travisjneuman/.claude

401-403-bypass-techniques yaklang/hack-/401-403-bypass-techniques >- 401/403 bypass playbook. Use when encountering access-denied responses on admin panels, API endpoints, or restrict…

options-strategy-advisor tradermonty/claude-trading-/options-strategy-advisor Options trading strategy analysis and simulation tool.

tradermonty/claude-trading-

waf-bypass-techniques yaklang/hack-/waf-bypass-techniques >- WAF bypass methodology and generic evasion techniques. Use when a web application firewall blocks injection payloa…

websocket-security yaklang/hack-/websocket-security >- WebSocket handshake, CSWSH, tooling (wsrepl, ws-harness, Burp), and common flaws. Use when apps use real-time chan…

platform-dataspace-access-configure forcedotcom/sf-/platform-dataspace-access-configure Use this skill to configure or inspect Salesforce Data Cloud DataSpace access for permission sets. Grants dataspace-l…

forcedotcom/sf-

word-document-processor qodex-ai/ai-agent-/word-document-processor Comprehensive word document processing with full format support. Handles creation, editing, foring preservation, …

qodex-ai/ai-agent-

training-report samber/cc-/training-report Produce a professional training/workshop report as a .docx file. Use this skill whenever the user mentions "training …

platform-sharing-owd-configure forcedotcom/sf-/platform-sharing-owd-configure Use when the user wants to retrieve or update Organization-Wide Default (OWD) sharing settings for Salesforce objects…

forcedotcom/sf-

caveman juliusbrussee//caveman Ultra-compressed communication mode. Cuts token usage ~75% by speaking like caveman while keeping full technical accu…

rust-skill-creator actionbook/rust-/rust-skill-creator Use when creating for Rust crates or std library documentation.

actionbook/rust-

api-authorization-and-bola yaklang/hack-/api-authorization-and-bola >- API authorization and BOLA testing playbook. Use when APIs expose object identifiers, nested resources, hidden wri…

marimo-batch marimo-team//marimo-batch An opintionated skill to prepare a marimo notebook to make it ready for a scheduled run.

auth-sec yaklang/hack-/auth-sec >- Entry P1 category router for authentication and authorization. Use when testing login flows, sessions, object auth…

google-search fetcher-sh/fetcher-/google-search >- A Google Search API alternative and SERP API alternative on fetcher.sh — pay-per-call in USDC via x402, or prepaid…

fetcher-sh/fetcher-

core-motion dpearson2699/swift-ios-/core-motion Access Core Motion accelerometer, gyroscope, magnetometer, device-motion, pedometer, activity-recognition, altitude, …

dpearson2699/swift-ios-

kubernetes-pentesting yaklang/hack-/kubernetes-pentesting >- Kubernetes penetration testing playbook. Use when targeting Kubernetes clusters via API server, RBAC enumeration, …

natural-language dpearson2699/swift-ios-/natural-language Tokenize, tag, and analyze natural language text using Apple's NaturalLanguage framework and translate between langua…

dpearson2699/swift-ios-

gmail-skill idanbeck/claude-/gmail-skill Read, search, send, and draft Gmail emails and Google contacts. Use when the user asks to check email, find emails, s…

idanbeck/claude-

injection-checking yaklang/hack-/injection-checking >- Entry P1 category router for injection testing. Use when routing between XSS, SQLi, SSRF, XXE, SSTI, command injec…

doca-flow-grpc-server Official nvidia//doca-flow-grpc-server `grpc::InsecureServerCredentials()` with NO TLS / mTLS / token-auth knob on the binary — transport security must come…

doca-hardware-safety Official nvidia//doca-hardware-safety Use this skill whenever the agent is about to recommend or apply a change that touches DPU / NIC hardware state on a …

cors-cross-origin-misconfiguration yaklang/hack-/cors-cross-origin-misconfiguration >- CORS misconfiguration testing playbook. Use when analyzing cross-origin trust, credentialed browser reads, origin …

vm-and-bytecode-reverse yaklang/hack-/vm-and-bytecode-reverse >- Custom VM and bytecode reverse engineering playbook. Use when CTF challenges or protected software implement custo…

device-integrity dpearson2699/swift-ios-/device-integrity Verify device legitimacy and app integrity using DeviceCheck (DCDevice per-device bits) and App Attest (DCAppAttestSe…

dpearson2699/swift-ios-

recon-for-sec yaklang/hack-/recon-for-sec >- Entry P1 category router for reconnaissance and methodology. Use when mapping scope, discovering assets, fingerpri…

shopify-liquid-themes benjaminsehl/liquid-/shopify-liquid-themes Generate Shopify Liquid theme code (sections, blocks, snippets) with correct schema JSON, LiquidDoc headers, translat…

benjaminsehl/liquid-

php-best-practices asyrafhussin/agent-/php-best-practices PHP 8.x modern patterns, PSR standards, and SOLID principles. Use when reviewing PHP code, checking type safety, audi…

asyrafhussin/agent-

deep-research samber/cc-/deep-research Deep research on any topic — broad parallel web searches, multi-source validation, confidence tracking, and a cited M…

speech-recognition dpearson2699/swift-ios-/speech-recognition Transcribe speech to text using Apple's Speech framework.

dpearson2699/swift-ios-

ios-pentesting-tricks yaklang/hack-/ios-pentesting-tricks >- iOS pentesting playbook. Use when testing iOS applications for keychain extraction, URL scheme hijacking, Universa…

platform-encryption-configure forcedotcom/sf-/platform-encryption-configure Configure Salesforce Shield Platform Encryption — generate deployable encryption settings and encrypted-field metadat…

forcedotcom/sf-

llm-prompt-injection yaklang/hack-/llm-prompt-injection >- LLM prompt injection playbook. Use when testing AI/LLM applications for direct injection, indirect injection via R…

macro-regime-detector tradermonty/claude-trading-/macro-regime-detector Detect structural macro regime transitions (1-2 year horizon) using cross-asset ratio analysis.

tradermonty/claude-trading-

position-sizer tradermonty/claude-trading-/position-sizer Calculate risk-based position sizes for long stock trades.

tradermonty/claude-trading-

csrf-cross-site-request-forgery yaklang/hack-/csrf-cross-site-request-forgery >- CSRF testing playbook. Use when reviewing state-changing web flows, anti-CSRF defenses, SameSite behavior, JSON CS…

heap-exploitation yaklang/hack-/heap-exploitation >- Heap exploitation playbook. Use when targeting ptmalloc2/glibc heap vulnerabilities including UAF, double free, ov…

react-router-framework-mode remix-run/agent-/react-router-framework-mode Build full-stack React applications using React Router's framework mode.

remix-run/agent-

oauth-oidc-misconfiguration yaklang/hack-/oauth-oidc-misconfiguration >- OAuth and OIDC misconfiguration testing playbook. Use when reviewing redirect URI handling, state and nonce valida…

inngest-middleware inngest/inngest-/inngest-middleware Use when adding cross-cutting concerns to durable functions — structured logging or tracing across all functions, err…

inngest/inngest-

traffic-analysis-pcap yaklang/hack-/traffic-analysis-pcap >- Traffic analysis and PCAP forensics playbook. Use when analyzing network captures including Wireshark filters, pro…

do- fabio-barboza/development-orchestrator/do- Initializes the project, identifies relevant , and updates the project configuration file (CLAUDE.md, .github/c…

fabio-barboza/development-orchestrator