コミュニティスキル
コーディング＆開発
14771 skills
runpod/runpodctl
Runpod CLI to manage your GPU workloads.
github.com
yaklang/http-parameter-pollution
HTTP Parameter Pollution (HPP): duplicate query/body keys parsed differently by servers, proxies,…
github.com
yaklang/xxe-xml-external-entity
XXE playbook. Use when XML, SVG, OOXML, SOAP, or parser-driven imports may resolve external…
github.com
yaklang/graphql-and-hidden-parameters
GraphQL and hidden parameter testing playbook. Use when exploring introspection, batching,…
github.com
yorkeccak/arxiv-search
Search arXiv physics, math, and computer science preprints using natural language queries. Powered…
github.com
yaklang/authbypass-authentication-flaws
Authentication bypass testing playbook. Use when assessing login flows, password reset logic,…
github.com
forcedotcom/generating-permission-set
Generates correct, deployable Salesforce permission set metadata (PermissionSet XML) with object,…
github.com
yaklang/heap-exploitation
Heap exploitation playbook. Use when targeting ptmalloc2/glibc heap vulnerabilities including UAF,…
github.com
rudrankriyam/asc-release-flow
Determine whether an app is ready to submit, then drive the current App Store release flow with…
github.com
yaklang/path-traversal-lfi
Path traversal and LFI playbook. Use when file paths, download endpoints, include operations,…
github.com
yaklang/recon-for-sec
Entry P1 category router for reconnaissance and methodology. Use when mapping scope, discovering…
github.com
vercel/develop-ai-functions-example
Develop examples for AI SDK functions. Use when creating, running, or modifying examples under…
github.com
mantinedev/mantine-combobox
Build custom dropdown/select/autocomplete/multiselect components using Mantine's Combobox…
github.com
machina-sports/football-data
Football (soccer) data across 13 leagues — standings, schedules, match stats, xG, transfers, player…
github.com
yaklang/api-authorization-and-bola
API authorization and BOLA testing playbook. Use when APIs expose object identifiers, nested…
github.com
yaklang/401-403-bypass-techniques
401/403 bypass playbook. Use when encountering access-denied responses on admin panels, API…
github.com
franalgaba/grimoire-morpho-blue
Fetches Morpho Blue public deployment metadata using the Grimoire venue CLI. Use when you need…
github.com
yaklang/recon-and-methodology
Reconnaissance and methodology playbook. Use when mapping assets, discovering endpoints,…
github.com
forcedotcom/generating-custom-field
Use this skill when users need to create, generate, or validate Salesforce Custom Field metadata.…
github.com
franalgaba/grimoire-aave
Fetches Aave V3 public market data using the Grimoire venue CLI. Use when you need Aave health…
github.com
binance/vip-loan
Binance Vip-loan request using the Binance API. Authentication requires API key and secret key.
github.com
elevenlabs/voice-isolator
Remove background noise and isolate vocals/speech from audio using ElevenLabs Voice Isolator (audio…
github.com
franalgaba/grimoire-uniswap
Retrieves Uniswap router metadata using the Grimoire venue CLI. Use when you need router addresses,…
github.com
eronred/rating-prompt-strategy
When the user wants to improve their app's star rating, increase ratings volume, optimize when and…
github.com
yaklang/oauth-oidc-misconfiguration
OAuth and OIDC misconfiguration testing playbook. Use when reviewing redirect URI handling, state…
github.com
bencium/vanity-engineering-review
Reviews codebases, architectures, PRs, and technical plans for vanity engineering — code and…
github.com
forcedotcom/generating-custom-object
Use this skill when users need to create, generate, or validate Salesforce Custom Object metadata.…
github.com
yaklang/auth-sec
Entry P1 category router for authentication and authorization. Use when testing login flows,…
github.com
franalgaba/grimoire
Install and operate Grimoire, author .spell files with full syntax coverage (including advisory…
github.com
eronred/android-aso
When the user wants to optimize their Google Play Store listing — title, short description, full…
github.com
yaklang/waf-bypass-techniques
WAF bypass methodology and generic evasion techniques. Use when a web application firewall blocks…
github.com
mantinedev/mantine-form
Build forms using @mantine/form in the mantine-9 repository. Use this skill when: (1) setting up a…
github.com
facebook/extract-errors
Use when adding new error messages to React, or seeing "unknown error code" warnings.
github.com
yaklang/idor-broken-object-authorization
IDOR and broken object authorization testing playbook. Use when requests expose object identifiers,…
github.com
mastra-ai/react-best-practices
React performance optimization guidelines from Mastra Engineering. This skill should be used when…
github.com
yaklang/websocket-security
WebSocket handshake, CSWSH, tooling (wsrepl, ws-harness, Burp), and common flaws. Use when apps use…
github.com
vercel-labs/zustand
Zustand adapter for json-render's StateStore interface. Use when integrating json-render with…
github.com
uniswap/swap-integration
Integrate Uniswap swaps into applications. Use when user says "integrate swaps", "uniswap",…
github.com
zed-industries/humanizer
Remove signs of AI-generated writing from text. Use after drafting to make copy sound more natural…
github.com
mastra-ai/ralph-plan
Interactive planning assistant that helps create focused, well-structured ralph-loop commands…
github.com
railwayapp/deployment
This skill should be used when the user wants to manage Railway deployments, view logs, or debug…
github.com
mantinedev/mantine-custom-components
Build custom components that integrate with Mantine's theming, Styles API, and core features. Use…
github.com
yaklang/jwt-oauth-token-attacks
JWT and OAuth token attack playbook. Use when validating token trust, signing algorithms, key…
github.com
bencium/adaptive-communication
Use when detecting ambiguous user intent, hedging language, open-ended framing, personal context…
github.com
yaklang/api-auth-and-jwt-abuse
API authentication and JWT abuse playbook. Use when testing bearer tokens, API keys, claim trust,…
github.com
yaklang/android-pentesting-tricks
Android pentesting playbook. Use when testing Android applications for SSL pinning bypass, exported…
github.com
rhavekost/fiction-workshop
Use when writing or editing novels, short stories, or any fiction manuscript. Trigger on: 'write…
github.com
trkbt10/indexion-segment
Split text into contextual chunks for RAG/embedding pipelines. Document segmentation and section…
github.com
trkbt10/indexion-sdd
Generate SDD requirements from RFCs/specs and quantitatively verify implementation conformance.…
github.com
trkbt10/indexion-refactor
After writing code, detect and clean up duplication at three levels — copy-paste blocks,…
github.com
yaklang/sqli-sql-injection
SQL injection playbook. Use when input reaches SQL queries, authentication logic, sorting,…
github.com
yaklang/api-recon-and-docs
API reconnaissance and documentation review playbook. Use when discovering endpoints, schemas,…
github.com
railwayapp/railway-docs
This skill should be used when the user asks about Railway features, how Railway works, or shares a…
github.com
browserbase/browser-to-api
Turn a website's observable HTTP traffic into a best-effort OpenAPI 3.1 spec by analyzing a…
github.com
trkbt10/indexion-readme
README construction — initialize template structure, generate per-package READMEs from doc…
github.com
ar9av/wiki-digest
Generate a periodic knowledge digest — a human-readable newsletter-style summary of what was…
github.com
franalgaba/grimoire-hyperliquid
Queries Hyperliquid market data using the Grimoire venue CLI. Use when you need mids, books,…
github.com
aj-geddes/flask-api-development
Develop lightweight Flask APIs with routing, blueprints, database integration, authentication, and…
github.com
jaganpro/sf-docs
Official Salesforce documentation retrieval guidance. Use when you need authoritative Salesforce…
github.com
binance/simple-earn
Binance Simple-earn request using the Binance API. Authentication requires API key and secret key.
github.com