Community Skills
Coding & Development
14771 skills
yaklang/active-directory-certificate-services
AD Certificate Services attack playbook. Use when targeting misconfigured AD CS for privilege…
github.com
forcedotcom/handling-sf-data
Salesforce data operations with 130-point scoring. Use this skill to create, update, delete, bulk…
github.com
yuan1z0825/nature-writing
Draft, restructure, or plan Nature-style manuscript sections from author-provided claims, results,…
github.com
yaklang/active-directory-kerberos-attacks
Kerberos attack playbook for Active Directory. Use when targeting AD authentication via AS-REP…
github.com
yaklang/arbitrary-write-to-rce
Arbitrary write to RCE playbook. Use when you have an arbitrary write primitive (from heap…
github.com
yaklang/http2-specific-attacks
HTTP/2 protocol-specific attack playbook. Use when the target supports HTTP/2 and you need to…
github.com
rudrankriyam/asc-build-lifecycle
Track build processing, find latest builds, and clean up old builds with asc. Use when managing…
github.com
yaklang/email-header-injection
Email header injection and spoofing playbook. Use when testing contact forms, email APIs, password…
github.com
yaklang/csv-formula-injection
CSV/spreadsheet formula injection (DDE, Excel/LibreOffice, Google Sheets IMPORT*). Use when…
github.com
qianwen-ai/qianwen-audio-tts
[QianWen] Synthesize speech from text with Qwen TTS models. TRIGGER when: user wants to convert…
github.com
vercel-labs/react-native
React Native renderer for json-render that turns JSON specs into native mobile UIs. Use when…
github.com
grafana/dashboarding
Create, modify, and organise Grafana dashboards including panels, variables, transformations, and…
github.com
yaklang/active-directory-acl-abuse
Active Directory ACL abuse playbook. Use when exploiting misconfigured AD permissions including…
github.com
yaklang/dependency-confusion
Supply-chain testing via package-manager dependency confusion: when internal package names resolve…
github.com
lc2panda/wps-word
WPS 文字智能助手，通过自然语言操控 Word 文档，解决排版、格式、内容编辑等痛点问题
github.com
waditu-tushare/tushare-data
面向中文自然语言的 Tushare…
github.com
ailabs-393/business-document-generator
This skill should be used when the user requests to create professional business documents…
github.com
instantdb/instantdb
Build complete, functional apps with InstantDB as the backend. Use when creating React/vanilla JS…
github.com
yaklang/race-condition
Race condition and TOCTOU testing for web apps. Use when testing one-time operations, concurrent…
github.com
yaklang/browser-exploitation-v8
Browser and V8 exploitation playbook. Use when exploiting JavaScript engine vulnerabilities…
github.com
eyadsibai/document-processing
Use when working with "PDF", "Excel", "Word", "PowerPoint", "XLSX", "DOCX", "PPTX", "spreadsheets",…
github.com
yaklang/format-string-exploitation
Format string exploitation playbook. Use when printf-family functions receive user-controlled…
github.com
marimo-team/add-molab-badge
Add "Open in molab" badge(s) linking to marimo notebooks. Works with READMEs, docs, websites, or…
github.com
alchaincyf/mrbeast-perspective
MrBeast（Jimmy Donaldson）的内容创造操作系统。基于泄露的36页内部培训手册、 6个深度播客、决策记录和外部批评的深度调研，提炼6个核心心智模型、8条决策启发式、…
github.com
johnrogers/swift-style
Swift code style conventions for clean, readable code. Use when writing Swift code to ensure…
github.com
yaklang/http-host-header-attacks
HTTP Host header injection and routing abuse playbook. Use when the application trusts the Host…
github.com
vkehfdl1/start-issue
Start working on a Marshroom cart issue — creates branch, injects context, updates status to running
github.com
forcedotcom/generating-validation-rule
Use this skill when users need to create, modify, or validate Salesforce Validation Rules. Trigger…
github.com
firebase/firebase-auth-basics
Guide for setting up and using Firebase Authentication. Use this skill when the user's app requires…
github.com
rudrankriyam/asc-localize-metadata
Automatically translate and sync App Store metadata (description, keywords, what's new, subtitle)…
github.com
yaklang/deserialization-insecure
Insecure deserialization playbook. Use when Java, PHP, or Python applications deserialize untrusted…
github.com
yaklang/expression-language-injection
Expression Language injection playbook. Use when Java EL, SpEL, OGNL, or MVEL expressions may…
github.com
ailabs-393/storyboard-manager
Assist writers with story planning, character development, plot structuring, chapter writing,…
github.com
forcedotcom/generating-list-view
Use this skill when users need to create, generate, or validate Salesforce List View metadata.…
github.com
aj-geddes/markdown-documentation
Master markdown formatting, GitHub Flavored Markdown, README files, and documentation formatting.…
github.com
yaklang/prototype-pollution
Prototype pollution testing for JavaScript stacks. Use when user input is merged into objects…
github.com
lc2panda/wps-excel
WPS 表格智能助手，通过自然语言操控 Excel，解决公式编写、数据清洗、图表创建等痛点问题
github.com
yaklang/csrf-cross-site-request-forgery
CSRF testing playbook. Use when reviewing state-changing web flows, anti-CSRF defenses, SameSite…
github.com
yaklang/cors-cross-origin-misconfiguration
CORS misconfiguration testing playbook. Use when analyzing cross-origin trust, credentialed browser…
github.com
yaklang/jndi-injection
JNDI injection playbook. Use when Java applications perform JNDI lookups with attacker-controlled…
github.com
cypress-io/cypress-author
Creates, updates, and fixes Cypress tests (E2E/end-to-end and component tests). Use when the user…
github.com
yaklang/type-juggling
PHP type juggling and weak comparison (`==`) bypass. Use when authentication, HMAC/signature…
github.com
yaklang/kernel-exploitation
Linux kernel exploitation playbook. Use when exploiting kernel vulnerabilities (UAF, OOB, race…
github.com
rudrankriyam/asc-submission-health
Validate App Store submission readiness, submit prepared versions, and monitor review status with…
github.com
efremidze/swift-architecture-skill
Swift architecture patterns and playbooks for MVVM, TCA, Clean Architecture, and more.
github.com
yaklang/insecure-source-code-management
Source control and artifact exposure (.git, .svn, .hg, backups, .env). Use when recon finds VCS…
github.com
forcedotcom/generating-flexipage
Use this skill when users need to create, generate, modify, or validate Salesforce Lightning pages…
github.com
steveyegge/beads
Dolt-powered issue tracker for multi-session work with dependencies and persistent memory across…
github.com
yaklang/cmdi-command-injection
Command injection playbook. Use when user input may reach shell commands, process execution,…
github.com
rkiding/alphaear-stock
Search A-Share/HK/US finance stock tickers and retrieve finance stock price history. Use when user…
github.com
franalgaba/grimoire-pendle
Fetches Pendle Hosted SDK metadata using the Grimoire venue CLI. Use when you need supported…
github.com
resciencelab/skill-name
Clear description of what this skill does and when to use it. Include trigger keywords and contexts…
github.com
eronred/crash-analytics
When the user wants to monitor, triage, or reduce their app's crash rate — including setting up…
github.com
eronred/asc-metrics
When the user wants to analyze their own app's actual performance data from App Store Connect —…
github.com
rudrankriyam/asc-id-resolver
Resolve App Store Connect IDs (apps, builds, versions, groups, testers) from human-friendly names…
github.com
eronred/in-app-events
When the user wants to create, plan, or optimize App Store In-App Events — the event cards that…
github.com
eronred/press-and-pr
When the user wants to get press coverage, media mentions, or editorial features for their app —…
github.com
yaklang/open-redirect
Open redirect playbook. Use when URL parameters, form actions, or JavaScript sinks control…
github.com
thedotmack/wowerpoint
Turn one document into a kawaii NotebookLM slide-deck PDF. Use for "wowerpoint this", "make a deck…
github.com
equinor/fusion-github-review-resolution
Resolves unresolved GitHub PR review threads end-to-end: evaluates whether each review comment is…
github.com