Your agent can do more. Find the skill that makes it happen.
Find your next superpower If you are an agent, refer to our llms.txt for full access.Supports authenticated X posts, replies, reads, searches, direct messages, media uploads, and follower operations. Includes authentication status checks and raw v2 API calls.
A CLI tool for making authenticated requests to the X (Twitter) API. Use this skill when you need to post tweets, reply, quote, search, read posts, manage followers, send DMs, upload media, or interact with any X API v2 endpoint.
XML External Entity (XXE) injection exploits XML parsers that process DTD external entity declarations, enabling local file disclosure (file:///etc/passwd), SSRF via http:// entities, and DoS via Billion Laughs. Vulnerable Java APIs include DocumentBuilder, SAXParser, dom4j, TransformerFactory, SAXReader, XMLInputFactory, Xerces. Detect by injecting <!DOCTYPE> DTD with SYSTEM e…
Covers XXE in XML, SVG, OOXML, SOAP, and parser-driven imports. Focuses on external entity resolution that may access files or internal network resources.
Exploit XML External Entity (XXE) vulnerabilities in web applications to read arbitrary files, perform SSRF, or execute denial of service attacks. Use this skill when the server parses XML input from the user (such as SAML, SOAP, DOCX, or direct XML payloads).
Identifies a World Y skill without describing its functionality.
Obtains market and company financial data from Yahoo Finance using the yfinance library. Covers prices, quotes, fundamentals, earnings, options, dividends, and analyst ratings without requiring an API key.
Supports authoring and tuning malware detection rules for YARA and YARA-X.
Guides malware detection rule design with naming conventions, string selection, performance optimization, and false-positive reduction. Covers YARA-X authoring and migration from legacy YARA.
Develop and deploy advanced YARA rules, the industry standard "pattern-matching swiss army knife" for malware researchers. Use this skill to identify, classify, and hunt for specific malicious binaries (APT implants, ransomware) across enterprise networks, memory dumps, and VirusTotal based on hexadecimal signatures, API imports, and behavioral strings.
Write custom YARA rules to identify and classify malware based on textual and binary patterns. This skill focuses on creating robust signatures using strings, regular expressions, and hexadecimal opcodes extracted during malware analysis for enterprise threat hunting.
Look up Y Combinator companies and batches from the public yc-oss API, a static JSON dataset refreshed daily: company profiles, batch rosters (e.g. W25, S24), companies by industry or tag, top companies, who is hiring, founder-diversity lists, and overall YC stats. Use this skill whenever the user asks about YC-backed startups, a YC batch, YC companies in a sector or tag or that are hiring, the Y Combinator portfolio, or startup and venture research that draws on YC data. Re…
Skills give your agent reusable instructions for a specific job. Pick one, read what it does, and bring it into your workflow.
A name only tells half the story. Search the full description and instructions to find the right fit.
Read the skill, visit its source, and see exactly what you’re adding to your agent.
Copy the install command from a skill page and run it in your project.
npx skillycli add owner/repo --skill name