1.7K skills · sorted by relevance
Deploy and operate AI agents with AWS Bedrock AgentCore. Choose services for hosting agents, connecting external APIs, managing credentials and conversation state, monitoring activity, and assessing agent quality through automated evaluations.
Support authorized penetration testing of AWS environments by examining IAM permissions and resources such as S3, EC2, and Lambda. It guides identifying privilege escalation paths, where access can be expanded, and documenting security audit findings.
Build attack trees, diagrams showing paths toward an attacker's goal. Break scenarios into required or alternative steps, assess effort and detectability, and map defenses to identify gaps and prioritize security work.
Document major technical choices as Architecture Decision Records, or ADRs. Capture the context, alternatives, reasons, and consequences, then organize related records and track whether decisions are proposed, accepted, retired, or replaced.
Organize API documentation work from endpoint discovery to OpenAPI specifications, developer guides, and tested code examples. The workflow also covers interactive documentation, documentation sites, and maintenance, helping select the phases and supporting skills needed for a task.
Create API specifications, interactive documentation, and developer portals that explain how to use an API. The skill also covers authentication examples, SDK generation, example testing, and migration guides to help developers integrate and maintain their applications.
Guide authorized security assessments of REST, SOAP, and GraphQL APIs. Organize endpoint discovery, authentication checks, access control tests, and input testing, then document discovered weaknesses and evidence of unauthorized data access.
Turn API code into documentation covering available operations, inputs, outputs, authentication, and errors. Add practical request examples and usage guides, with OpenAPI specifications or Postman collections where possible to help developers explore and use the API.
Support authorized security assessments of Microsoft Active Directory with guidance on environment discovery, credential risks, authentication weaknesses, and privilege escalation. The material organizes tools and workflows for penetration testing and controlled training environments.
Check token security audit data before buying or swapping crypto. Review contract and trading risks, buy and sell taxes, and signs of scams such as tokens that can be bought but cannot be sold.
Connect Claude Code plugins to external services through MCP, a protocol that makes service functions available as tools. Covers connection types, configuration files, authentication, tool permissions, and testing for local servers and hosted services.
Build Claude Code plugin hooks: automated checks triggered by tool use or session events. Get guidance on prompt and command hooks for validating actions, checking task completion, loading context, and testing configurations.
Assess your Claude Code experience with a quick checklist or a deeper review across 10 feature areas. Receive a skill profile, identified gaps, and a personalized learning path with priorities, estimated study time, and practice exercises.
Create or update API documentation from source code. The skill produces OpenAPI/Swagger specifications, descriptions of API operations, parameter and response references, authentication guidance, and practical examples for developers integrating an API.
Review code for security, performance, quality, and maintainability. Get findings organized by severity, with file locations, explanations of impact, and example fixes, plus code metrics and complexity comparisons for refactoring reviews.
Create automated shell script tests with Bats, a Bash testing tool. Check exit codes, output, and failure cases, organize reusable test helpers and data, and run checks across shells or in CI/CD pipelines.
Map security threats into attack trees, branching diagrams that connect an attacker’s goal to possible steps. Assess cost, time, expertise, and detection likelihood to identify defense gaps, prioritize mitigations, and explain risks to stakeholders.
Build three- to five-year financial projections for early-stage startups, linking revenue, expenses, hiring, and cash balances. Compare conservative, base, and optimistic scenarios, estimate how long cash will last, and model fundraising amounts and ownership dilution.
Configure Prometheus to collect and store operational metrics from infrastructure and applications. Covers collection schedules, alert rules, automatic discovery of monitored services, and troubleshooting checks to help establish and maintain monitoring.
Create and organize Python tests with pytest. Use reusable setup, mock replacements for external services, controlled test time, and coverage reports to check normal behavior, failures, retries, and interactions between application components.
Evaluate LLM applications using automated scores, human reviews, and model-based judging. Build repeatable checks to compare models or prompts, assess answer quality, and detect declines in performance before deployment.
Plan and carry out major library and framework upgrades by checking compatibility, identifying changes that require code updates, testing each stage, and preparing rollback steps if an upgrade causes problems.
Write JavaScript and TypeScript tests with Jest, Vitest, and Testing Library. Covers functions, UI components, and APIs, including mock replacements for external services, reusable test data, and setup for automated testing.
Build Solidity contract tests with Hardhat and Foundry. Check individual functions, contract interactions, gas usage, and varied inputs, and use a local copy of mainnet state to test against existing contracts.