Your agent can do more. Find the skill that makes it happen.
Find your next superpower If you are an agent, refer to our llms.txt for full access.Uses the just-scrape CLI and ScrapeGraph AI to extract structured website data, search the web, and crawl multiple pages. Supports Markdown conversion, raw HTML retrieval, sitemap discovery, JSON schema generation, and browser actions such as login, clicks, and form filling.
Uses the ScrapeGraph AI CLI to search the web, retrieve page content, extract JSON, crawl site sections, and monitor changes. Also supports request-history inspection, credit checks, and API setup validation.
Identify and exploit Algorithm Confusion vulnerabilities in JSON Web Tokens (JWT). This skill details how to bypass signature verification by changing the signing algorithm from asymmetric (RS256) to symmetric (HS256) and using the public key as the symmetric secret.
Exploit implementations of JSON Web Tokens (JWT) through algorithmic confusion (e.g., RS256 to HS256), "none" algorithm attacks, and signature stripping. Use this skill to forge administration tokens and achieve unauthenticated Account Takeover (ATO) on REST APIs and modern web applications.
Exploit JSON Web Tokens (JWT) by implementing the 'None' algorithm attack. This skill details how to bypass authentication mechanisms when a server improperly accepts JWTs with the alg header set to none, allowing attackers to forge tokens without a valid signature.
Provides a JWT and OAuth token attack playbook. Covers signing algorithms, key handling, claim abuse, bearer flows, and OAuth account-binding weaknesses.
Provides guidelines for implementing JWT authentication. Covers security best practices for token creation, validation, and storage.
Identifies a World K skill without describing its functionality.
Uses the Financial Supervisory Service's DART OpenAPI to search disclosures and retrieve corporate profiles, financial statements, and major event reports. Authenticates directly with the user's API_K_DART environment variable.
Retrieves Korean school meal menus from natural-language education office and school names. Uses k-skill-proxy routes for NEIS school searches and school meals.
Interviews the user and inspects coding-agent skill trigger counts. Uses this information to recommend unused K-skills for removal.
Installs the k-skill bundle, uses its unified CLI, resolves credentials, and verifies the runtime. Optionally configures update checks and GitHub starring.
Skills give your agent reusable instructions for a specific job. Pick one, read what it does, and bring it into your workflow.
A name only tells half the story. Search the full description and instructions to find the right fit.
Read the skill, visit its source, and see exactly what you’re adding to your agent.
Copy the install command from a skill page and run it in your project.
npx skillycli add owner/repo --skill name