Your agent can do more. Find the skill that makes it happen.
Find your next superpower If you are an agent, refer to our llms.txt for full access.Fetches current weather and forecasts at minute, hourly, and daily intervals. Covers weather alerts, historical comparisons, summaries, statistics, response caching, query limits, and required Apple Weather attribution.
Tests live websites, staging environments, or local development servers for exploitable security flaws. Supports self-hosted and managed Strix execution and validates authentication, access control, injection, XSS, SSRF, and business-logic findings.
Perform comprehensive web application reconnaissance and enumeration including subdomain discovery, directory bruteforcing, technology fingerprinting, port scanning, and content discovery. Use this skill as the first step in any bug bounty or web penetration test to map the target's attack surface before exploitation. Covers passive and active recon, JavaScript analysis, and API endpoint enumerati…
Suite of tools for creating elaborate, multi-component Codex.ai HTML artifacts using modern frontend web technologies (React, Tailwind CSS, shadcn/ui). Use for complex artifacts requiring state management, routing, or shadcn/ui components - not for simple single-file HTML/JSX artifacts.
Provides tools for multi-component web artifacts that require state management, routing, or shadcn/ui components. Targets complex frontend artifacts rather than simple single-file HTML or JSX outputs.
Builds complex HTML artifacts for claude.ai using React and Tailwind. Uses Anthropic's reference workflow for producing rich, embeddable artifacts.
Suite of tools for creating elaborate, multi-component claude.ai HTML artifacts using modern frontend web technologies (React, Tailwind CSS, shadcn/ui). Use for complex artifacts requiring state management, routing, or shadcn/ui components - not for simple single-file HTML/JSX artifacts.
Covers security risks in CDN, reverse proxy, and application caching. Focuses on path confusion and cache key manipulation that may cause sensitive authenticated content to be served to other users.
Identify and exploit Web Cache Poisoning vulnerabilities by manipulating unkeyed inputs (HTTP headers, hostnames) to force a caching server (CDN or reverse proxy) to save a malicious response and serve it to all subsequent users requesting the same legitimate URL.
Covers component composition, CSS-in-JS, and reusable architecture in React, Vue, and Svelte. Supports UI libraries, component API design, and frontend design system implementation.
Scrapes content from YouTube, TikTok, Instagram, LinkedIn, Reddit, Threads, and general web pages. Provides fallback extraction when plain fetching fails because of JavaScript-heavy content, access errors, or anti-bot barriers.
Verifies frontend functionality and investigates UI behavior using Playwright. Supports browser screenshots and inspection of browser console logs.
Skills give your agent reusable instructions for a specific job. Pick one, read what it does, and bring it into your workflow.
A name only tells half the story. Search the full description and instructions to find the right fit.
Read the skill, visit its source, and see exactly what you’re adding to your agent.
Copy the install command from a skill page and run it in your project.
npx skillycli add owner/repo --skill name