Your agent can do more. Find the skill that makes it happen.
Find your next superpower If you are an agent, refer to our llms.txt for full access."..." for exact phrases · Try typography, debugging or spreadsheetReviews a selected range, individual sheet, or entire spreadsheet model for formula accuracy and common mistakes. Includes financial integrity checks such as balance sheet balance, cash reconciliation, and logic sanity.
Covers cluster management, connections, schemas, queries, MySQL migration, and query-plan diagnosis. Addresses multitenant application patterns and safe SQL construction for untrusted identifiers, sorting, and batch inserts.
Applies Australian spelling and concise language to emails, messages, proposals, client communications, blogs, and web copy. Supports drafting, editing, and tone checks for Australian audiences.
Opens a browser for AEM Edge Delivery Services login and captures the authentication token. Supports admin.hlx.page and Config Service APIs with Document Authoring, SharePoint, or Google Drive content sources.
Bypass authentication via forced browsing to protected URLs, parameter tampering (authenticated=yes, debug=true, fromtrustIP=true), session ID prediction from linear/incremental cookies, SQL injection on login forms, PHP unserialize() boolean type juggling (b:1 payload), and credential transport over HTTP. Detectable with Burp Suite, OWASP ZAP, WebGoat.
Build secure, scalable access control systems with authentication and authorization patterns. Covers JWT, OAuth2, session management, RBAC, API security, and debugging security issues.
Acts as an entry router for testing authentication and authorization weaknesses. Covers login flows, sessions, object authorization, JWT, OAuth, CORS, CSRF, and enterprise SSO.
Guides identity handling in WeChat Mini Programs where login is native and automatic. Covers OPENID and UNIONID access and wx.cloud authentication behavior.
Covers sign-in, sessions, tokens, route protection, MFA, SSO, Organizations, RBAC, and hosted login or self-service branding. Supports tenant audits, authentication debugging, provider migrations, and Vercel integration across web, mobile, and backend frameworks.
Provides an authentication bypass testing playbook. Covers password resets, account recovery, MFA bypass, token predictability, brute-force resistance, and session boundaries.
Covers JWT bearer tokens, OpenID Connect, ASP.NET Identity, API keys, and authorization policies. Supports login flows, endpoint protection, and role- and claim-based access rules.
Builds authentication flows with AuthenticationServices and LocalAuthentication. Covers Sign in with Apple, passkeys, OAuth sessions, Password AutoFill, credential revocation, server validation of identity tokens, and local biometric re-authentication.
A growing collection of real, public skills. Descriptions and instructions indexed 24 Sept 2026.
Skills give your agent reusable instructions for a specific job. Pick one, read what it does, and bring it into your workflow.
A name only tells half the story. Search the full description and instructions to find the right fit.
Read the skill, visit its source, and see exactly what you’re adding to your agent.
Copy the install command from a skill page and run it in your project.
npx skillycli add owner/repo --skill name