7.9K skills · sorted by relevance
Investigate suspicious URLs with URLScan.io by reviewing screenshots, redirects, page content, and network requests. Extract domains, IP addresses, and file hashes as indicators of compromise, then compare findings with threat intelligence sources.
Turn an approved campaign brief into a posting calendar, Canva social designs, captions, and plain-text emails. With owner approval at each stage, schedule social posts in HubSpot and hand over email drafts for sending through the owner's chosen tool.
Cancel an active PUA loop from Codex CLI using an alias for the corresponding Claude Code command. The workflow cleans loop state and worktree references, records the cancellation, and requires execution evidence before claiming completion.
Create editable tldraw canvases with boxes, arrows, sticky notes, frames, and text. Read an existing canvas to group related ideas and rearrange shapes, then open the resulting file in a compatible editor for further adjustments.
Scan source code for security weaknesses with Semgrep after approving the target and rulesets. Choose full results or focus on important findings, then receive merged results and a record of failed or skipped scans.
Edits existing Canva designs by revising or translating text, replacing images and videos, adjusting text formatting, and moving or resizing elements. Presents a preview and change summary before saving approved edits to the design.
Review Canva slides, posters, and flyers for layout, wording, visual priorities, readability, and accessibility. Get concrete fixes ranked by importance and organized by page, while keeping the original design unchanged.
A.I.G Scanner — AI security scanning for infrastructure, AI tools / skills, AI Agents, and LLM jailbreak evaluation via Tencent Zhuque Lab AI-Infra-Guard. Uses built-in exec + Python script, no plugin required. Requires AIG_BASE_URL to be configured. Triggers on: scan AI service, AI vulnerability scan, scan AI infra, check CVE, audit AI service, scan MCP, scan skills, audit AI tools, scan agent, red-team LLM, jailbreak test, 扫描AI服务, 检查AI漏洞, 扫描AI工具, 检查MCP安全, 审计Agent, 越狱测试.
The English summary is being prepared. Showing the original description.
Two pipelines ending at a scanner-look PDF. (1) Phone photos of paper documents (contracts, stamped certificates, receipts, forms, handwritten notes) → clean scanner-quality PDF: perspective rectification + noteshrink whitening + A4 assembly + mandatory whole-document check. Trigger: "把照片 做成扫描件", "photos to scanned PDF", "make this look scanned", "手机拍的 文档转 PDF", "盖章文件扫描", replacing pages in an existing scanned PDF, any CamScanner-like request. (2) A digital document with no signature yet (rendered docx/PDF, confirmation form, contract draft) → make it look hand-signed and scanned: synthesize a handwriting-style signature, composite it onto the signature line, apply the same scan-look post-processing. Trigger: "帮我做个手写签名", "生成签名盖到这份文件上", "做成签过字的扫描件", "synthesize a signature", any request for a document that needs to look signed without a real photographed signature. Do NOT hand-roll levels/contrast enhancement for scan-look — tried and rejected twice; this skill's pipeline is the proven one.
The English summary is being prepared. Showing the original description.
Pick the right business-model canvas (Lean Canvas, Business Model Canvas, or Value Proposition Canvas) for the stage and fill it with specifics — one segment, one primary canvas, top-3 assumptions, no fluff in the moat or channel boxes. Load when the user asks to fill a business model canvas, lean canvas, value proposition canvas, model this business, map the business model, says "fill the BMC", "make a Lean Canvas", "Value Proposition Canvas for this", "model this idea", "what's the business model", "design the business model". Sub-skill of `venture-exploration`. Hard-bans "everyone" segments, generic channels ("SEO/social/content/ads"), and "unfair advantage = AI/data/network effects" with no concrete asset. Does NOT score viability — for that use `idea-evaluation`.
The English summary is being prepared. Showing the original description.
Process OpenClaw GitHub Secret Scanning alerts, which flag exposed credentials. Inspect affected content, redact secrets, replace comments when needed, notify authors, and resolve alerts using a dedicated script under maintainer permissions.
Coordinate a complete Paperclip release, from candidate verification and canary testing to stable npm publication and GitHub Release creation. Track release notes, Docker smoke tests, announcement follow-up, and linked content cases when Cases are enabled.
Compare the preferred page URL declared in HTML canonical tags with the one sent in HTTP Link headers. Identify conflicting declarations, recommend consistent values, and explain how to verify the final page and response.
Build a GitLab CI/CD pipeline with automated checks for vulnerable code, dependencies, container images, running applications, and exposed secrets. Covers scanner configuration, consolidated findings, and approval policies for serious vulnerabilities before production deployment.
Create and manage Volcano jobs and scheduling queues in KubeSphere. Use YAML templates for PyTorch, TensorFlow, MPI, and batch workloads, configure resource requests and execution policies, and investigate jobs that remain pending or fail to create pods.
Inspect the current QM web interface through its HTML and structured app state, with optional stylesheets and a rendered image. Use it to explain visible UI elements, help with interface questions, or check how a canvas appeared.
Create and edit visual boards for ideas, workflows, and research using .canvas files supported by Obsidian and other applications. Arrange text, files, links, and groups, with labeled connections that show how the information relates.
Scans code for security vulnerabilities with CodeQL by tracing data across functions. Builds and checks analysis databases, models project-specific APIs, and saves findings in SARIF, a structured results format, with broad or focused scan options.
Create one editable Canva design per data row using a brand template with autofill fields. Map columns from files, pasted tables, JSON, or URLs to text and image fields, then receive design links and failure details.
Read comments and replies on a Canva design, turn feedback into an edit plan, and apply approved changes. Identify conflicting requests and edits requiring manual work, then provide a checklist and reply to reviewers with the outcome.
Use when the user mentions Higgsfield Canvas, a node-based or node graph workspace, an infinite board/canvas, chaining generations into a pipeline, or wants to wire prompts → images → videos across models on one surface. Covers what Canvas is, the node categories, the seven models that run inside Canvas, the named canvas patterns (Simple Seedance, Extend Video, Image Edit, StoryBoard With Elements, Long Video fan-out), the build-free / generate-paid cost model, reusable templates, assets-as-nodes, and Shared Canvas live collaboration. Also trigger on 'Higgsfield ComfyUI alternative', 'node workflow', or 'connect nodes to build a scene/campaign'.
The English summary is being prepared. Showing the original description.
Dependency checker and installer for agent-canvas, agent-eyes, and canvas-edit skills. Use BEFORE running any canvas skill for the first time, or when canvas skills fail with import/browser errors. Triggers on "setup agent canvas", "install canvas dependencies", "canvas not working", "playwright not found", or any setup/installation request for canvas skills.
The English summary is being prepared. Showing the original description.
Prepare to audit a codebase spanning several technologies by installing the external repo-scan skill from a fixed, reviewable commit. This entry provides the installation procedure; the code audit requires invoking the installed skill separately.
Plan artistic animations and explainer scenes using 35 style recipes, nine explanation patterns, storyboards, and reusable Canvas drawing code. Build motion within the host environment’s timeline, using its available tools for assets and export.