Your agent can do more. Find the skill that makes it happen.
Find your next superpower If you are an agent, refer to our llms.txt for full access.Reviews Xiaohongshu posts for content quality, keyword optimization, headline appeal, sensitive content risks, commercialization, and engagement potential. Supports prepublication review and content improvements aimed at increasing visibility.
Handles XLSX, XLSM, XLTX, CSV, and TSV files as primary inputs or deliverables. Supports formulas, new columns, formatting, charting, and restructuring messy tabular data, as well as spreadsheet creation and file-format conversion.
Create, edit, analyze, and recalculate Excel workbooks (.xlsx, .xlsm) with live formulas, formatting, and charts. Use when a task produces or modifies a spreadsheet file, turns CSV/TSV data into one, or needs values, formulas, or formatting read from one.
Produces Excel workbooks, including multi-sheet files, formulas, formatting, financial models, and tabular cleanup. Also handles CSV and TSV inputs when the intended deliverable is a spreadsheet.
Works with .xlsx, .xlsm, .csv, .tsv, and other spreadsheet formats. Supports formula creation and recalculation, formatting, data analysis, visualization, and edits that preserve existing formulas.
Produces spreadsheet files in headless managed-agent sessions. Operates without controlling a live Excel workbook or requiring an open Office application.
Uses openpyxl to create, edit, and manipulate Excel spreadsheets programmatically.
Covers XSLT processor fingerprinting, XXE, document() SSRF, and EXSLT write primitives. Examines PHP, Java, and .NET extension code execution surfaces where users control stylesheets or transform inputs.
Provides an XSS playbook for user-controlled content in HTML, attributes, JavaScript, and DOM sinks. Also covers uploads and rendering paths that span multiple contexts.
Reflected XSS occurs when user-supplied input is echoed in an HTTP response without sanitization, allowing script execution in the victim's browser. Detect via injecting <script>alert(1)</script>, event handlers like onfocus, HTML entity bypass, and encoding variants. Tools: Burp Suite, OWASP ZAP, PHP Charset Encoder (PCE), Hackvertor, XSS-Proxy, ratproxy.
Detect and exploit Cross-Site Scripting (XSS) vulnerabilities including Reflected, Stored, and DOM-based variants. Use this skill when testing web applications for JavaScript injection, HTML injection, input sanitization bypass, or Content Security Policy evasion. Covers WAF bypass payloads, mutation XSS, blind XSS with out-of-band callbacks, and exploitation chains for session hijacking and accou…
Stored XSS (persistent XSS) occurs when attacker-supplied input is saved server-side and later rendered unencoded to other users. Common injection points include profile fields, comments, forum posts, file upload filenames, and application logs. Detect via PHP $_GET/$_POST/$_REQUEST/$_FILES, ASP Request.Form, JSP request.getParameter, and BeEF hook injection. Tools: Burp Suite, OWASP ZAP, Be…
Skills give your agent reusable instructions for a specific job. Pick one, read what it does, and bring it into your workflow.
A name only tells half the story. Search the full description and instructions to find the right fit.
Read the skill, visit its source, and see exactly what you’re adding to your agent.
Copy the install command from a skill page and run it in your project.
npx skillycli add owner/repo --skill name