200 skills · sorted by relevance
Analyze suspicious email headers to trace delivery routes and assess sender spoofing. Review SPF, DKIM, and DMARC sender authentication results, compare sender and reply addresses, and examine links and attachment hashes for phishing indicators.
Inspect suspicious PDFs without opening them in a document viewer. Use peepdf, pdfid, and pdf-parser to examine internal objects, extract embedded code and files, and report threat indicators such as URLs and hashes.
Manage Google Chat spaces, the places where conversations happen, and their messages through the gws command-line tool. Create or update spaces, add members, send messages, and upload or download attachments.
Reply to a Gmail message while keeping it in the existing conversation and quoting the original. Add recipients or attachments, use formatted HTML content, or save the reply as a draft for later review.
Send Gmail messages with recipients, a subject, and a message body. Add attachments, CC or BCC recipients, use HTML formatting or a configured sender alias, and save messages as drafts when needed.
Forward a Gmail message to one or more recipients, with an optional note, CC, or BCC. Keep or exclude original attachments, add files, and save the forward as a draft for review before sending.
Manage Google Keep notes through an agent, including creating, retrieving, listing, and deleting notes. The skill also covers downloading attachments and working with note permissions, which control access.
Build and manage local Paseo plugins that add screens, workspace panels, commands, themes, or searchable attachments. It also covers hooks, code triggered by lifecycle events, and backend handlers for custom integrations and agent configuration changes.
Assess reported phishing emails by checking sender authentication, links, and attachments. Post a risk rating, supporting evidence, and a recommended action to Slack, leaving blocking, deletion, and other changes to the security team.
Read, summarize, create, and edit 飞书 Docx and Wiki document content. Revise wording, reorganize sections, insert local images or attachments, and retrieve document media, with additional support for document history and mind notes.
Send and reply to Lark messages, search conversation history, and retrieve attachments through an agent. The skill also supports creating group chats, managing members, and organizing important messages and conversations with bookmarks and pinned chats.
Manage Feishu tasks from creation through completion. Assign people, update deadlines and progress, organize subtasks and task lists, add attachments, and find work assigned to or related to the current user.
Diagnose failed model requests from OpenShell sandboxes to hosted APIs or local servers such as Ollama and vLLM. Check provider attachment, access rules, credentials, network layout, and client settings to identify the narrowest configuration change needed.
Manage Gmail through gog, a command-line tool, to search messages, prepare drafts, reply, organize labels, and download attachments. Explicit account selection and read-only options help control which mailbox is accessed and changed.
Work with Google Keep notes through gog to list, search, retrieve, create, or delete notes. You can also download attachments, making the skill useful for finding saved information and adding new notes through an agent.
Find Airtable records by combining conditions such as assignee, date, number, or attachment type. The skill guides the agent in choosing comparisons that match each field type and building a single filter for the requested records.
Build and check monsters for Three.js and web action games using shared rules for joints, attachment points, collision shapes, and combat states. Separate visual animation from damage decisions, and provide reproducible checks for attacks and detail-level changes.
Hunt file upload bugs — RCE via webshell, XSS via SVG/HTML, SSRF via XXE in DOCX, path traversal via filename. Bypass tables (10 techniques): double extension (shell.php.jpg if server checks last ext only), magic bytes spoofing (PNG header on PHP), null byte (shell.php.jpg), case (PHP, .Php, .pHP), .htaccess upload to enable execution, SVG with <script>, HTML/SVG XSS, DOCX with embedded XXE, ZIP slip (../../../etc/passwd in archive), polyglot files. Detection: any /upload, /avatar, /profile-picture, /attachment, /import endpoint. Test: upload PHP/JSP/ASPX shells, request via direct URL, check response. Validate: actual code execution (whoami output) for RCE; reflected XSS in profile-photo URL. Use when testing file upload features, avatar/attachment endpoints, import/export functions, XML/DOCX/ZIP processors. Real paid examples.
The English summary is being prepared. Showing the original description.
Interact with Zotero reference management libraries using the pyzotero Python client. Retrieve, create, update, and delete items, collections, tags, and attachments via the Zotero Web API v3. Use this skill when working with Zotero libraries programmatically, managing bibliographic references, exporting citations, searching library contents, uploading PDF attachments, or building research automation workflows that integrate with Zotero.
The English summary is being prepared. Showing the original description.
Deliver artifacts (files/images/voice) to current IM chat via gateway, returning a receipt. Use this as the only delivery proof for attachments. Text replies are sent automatically - only use this for file/image/voice attachments.
The English summary is being prepared. Showing the original description.
Detects prompt injection hidden in documents from the other side (pleadings, skeletons, bundles, served evidence, opponents' emails and attachments) before an AI reads them, so the model is not turned against your client. Checks word by word that the text an extractor hands the model was visibly drawn on the page: white, near-white, covered, clipped, off-page, tiny, transparent and invisible-mode text in PDF (ink test plus OCR); Word formatting resolved as Word does (styles, shading, theme colours, scaling, off-page frames, fallbacks, unused headers); HTML/CSS, RTF, email with attachments and zips, xlsx/pptx and legacy formats. Flags Unicode smuggling, text addressed to an AI and authorities found only in hidden text. Fails closed. Optional Read-tool hook. Use BEFORE any AI summary or analysis of an opposing or third-party document. Triggers: 'scan for injection', 'is this document safe', 'check the other side's skeleton', 'injection guard'.
The English summary is being prepared. Showing the original description.
Read, search, and download emails and attachments from Microsoft Outlook via OAuth2. Use when the user asks to (1) check, read, or fetch emails or messages from Outlook, (2) search emails by keyword, sender, or subject, (3) download email attachments such as contracts, NDAs, or documents, (4) chain email content into other skills (e.g. "read the latest email from X and review the attached NDA"), or (5) any task involving Microsoft Outlook, Office 365, or Exchange email access.
The English summary is being prepared. Showing the original description.
Interact with Outlook email — read inbox, send emails, search messages, reply/forward, manage folders, download attachments. Use this skill whenever the user mentions email, Outlook, inbox, mail, send email, check email, unread messages, email search, attachments, reply to email, forward email, 邮件, 收件箱, or wants to read, send, search, reply to, forward, or manage emails.
The English summary is being prepared. Showing the original description.
Read, search, and manage Confluence Cloud pages, spaces, blog posts, comments, attachments, and labels. Use this whenever the user wants to find a page, read a doc, search the wiki with CQL, create or update a page, add a comment, list pages in a space, pull an attachment, or ask "what does the wiki say about X" — even if they don't say "API". Also use it for any *.atlassian.net/wiki URL, or a CQL string when the context is wiki content rather than tickets. Always start from this skill when interacting with this service — its bundled scripts and recipes are the fastest path.
The English summary is being prepared. Showing the original description.