3K skills · sorted by relevance
Assess candidate security findings using focused reproduction, tests, or code tracing. Record the evidence, confidence, and remaining proof gaps for each candidate, helping determine which findings warrant reporting and which remain uncertain.
Examines code or code changes for plausible security vulnerabilities by tracing attacker-controlled input to dangerous operations or failed safeguards. Records candidate issues with affected locations, supporting evidence, potential impact, and controls that need further validation.
Add native macOS behavior when SwiftUI alone falls short. Choose a small AppKit bridge for views, windows, panels, or menus, while clarifying state ownership, data flow, and lifecycle risks that need validation.
Turn descriptions or code analysis into Mermaid diagrams for workflows, system architecture, and database relationships. Check diagram syntax and export SVG, PNG, or text-based ASCII output, with themes and batch rendering options.
Convert articles, tutorials, or prompt collections into reusable agent skills, with one independent capability per skill. Package portable instructions, example prompts, working demos, preview images, and validation so the methods can transfer to other projects.
Review the exact final set of changes for a LoopX goal, checking reuse, simplification, concrete risks, and project validations. Record and verify a quality receipt, a review record tied to those specific changes.
Decide whether a LoopX pull request is ready for approval or merge by checking review evidence for the current commit, required validation, and owner authorization. Record the decision and its supporting checks on the pull request.
Plan substantial DeepChat changes with a written design proposal and a clear implementation path. Record decisions, track progress, review the completed change, and select focused validation for features, complex bugs, or architecture updates.
Turn an agreed product direction into a technical specification before coding. Create architecture and flow diagrams, define failure handling and input validation, and map tests to the behavior engineers need to implement.
Coordinate feature development from product direction through architecture, planning, validation, and implementation. Run the whole workflow or start at a selected stage, with saved decisions, review checkpoints, and a final pull request.
Create a reusable command with explicit preconditions, numbered actions, checks after each step, and error handling. This template provides a structure to customize so Claude verifies the required context before starting a defined workflow.
Extract key metrics from spreadsheet data, check whether recorded values match calculations after unit conversion, and rank selected metrics from highest to lowest. Export the ranking or validation results to an Excel file for download.
Create the starting files for a new agent skill, including SKILL.md, metadata, and optional folders. It guides descriptions that help agents select the skill, actionable workflows, ownership entries, and validation checks.
Convert SKILL.md files into SSL JSON, a structured format describing invocation conditions, workflow stages, and individual actions. Receive a validation report covering format errors, invalid references, and rejected outputs.
Extend safe-output jobs, which execute agent-generated actions, to reference newly created issues through temporary IDs. The guide covers job dependencies, issue-number resolution, input validation, tests, and warning-based handling of unresolved references.
Add checks to npm release workflows for version formats, authentication tokens, delayed package availability, and draft releases. The skill also covers preventing build scripts from unexpectedly changing release versions.
Follow gh-aw development conventions with checks matched to Go, JavaScript, and workflow changes. Provides staged validation commands, capitalization rules, and pointers to more detailed guidance for specific parts of the codebase.
Add a new safe-output message type to gh-aw, connecting configuration validation, Go parsing, and JavaScript rendering. Follow the required updates through tests, exports, documentation, and generated action bundles so the message reaches workflow output.
Prepare an open pull request for human merging from a GitHub Copilot cloud agent. Address review threads, validate changes locally, resolve branch conflicts, and report remaining blockers, including the need for a human to rerun CI.
Guide a bug bounty investigation from scope checks and asset discovery to vulnerability testing, impact validation, and report writing. Covers web applications, source code, and AI features, with an emphasis on reproducible evidence of real harm.
Guide bug bounty work from target research and vulnerability hunting through validation and reporting. Compare authenticated users, investigate related weaknesses, and organize reproducible evidence of practical impact before preparing a submission.
Evaluate security findings before writing a bug bounty report. Check reproducibility, scope, practical impact, duplicates, and behavior across user sessions, then use submission checklists and CVSS 3.1 guidance to prepare evidence and assess severity.
Assess WebSocket security in chat, notifications, and other live features. The skill covers connection checks, message permissions, tampering, and access to private channels, with validation steps to distinguish actual data exposure or state changes from misleading responses.
Inventory old and undocumented API versions, then compare their authentication, request limits, input validation, and exposed fields with current versions. Uses API specifications and archived records to identify overlooked endpoints with weaker security controls.