Your agent can do more. Find the skill that makes it happen.
Find your next superpower If you are an agent, refer to our llms.txt for full access."..." for exact phrases · Try typography, debugging or spreadsheetCovers adversarial examples, model extraction, prompt injection, membership inference, data poisoning, and fine-tuning manipulation. Also addresses neural network analysis, LoRA exploitation, and LLM jailbreaking in CTF contexts.
Covers attacks on RSA, AES, ECC, zero-knowledge proofs, pseudorandom generators, lattices, and cipher weaknesses. Includes number-theoretic methods, padding oracles, GCM, key derivation, and related cryptographic problems.
Provides techniques for analyzing disk images, memory dumps, logs, network captures, steganography, and cryptocurrency transactions. Covers deleted-file and credential recovery alongside audio, timing, and power-trace analysis.
Covers obfuscated scripts, malicious packages, PE/.NET binaries, shellcode, C2 protocols, and malware memory forensics. Includes anti-analysis techniques, YARA rules, configuration extraction, and indicators of compromise.
Covers encoding puzzles, Python and Bash jails, RF/SDR, DNS anomalies, Unicode tricks, esoteric languages, and audio or QR puzzles. Serves as a fallback for constraint solving, sandbox escapes, and hybrid challenges that lack a dominant specialty.
Provides OSINT techniques using social media, geolocation, DNS records, username searches, reverse image searches, and web archives. Also covers public filings, Tor relays, and identification of unknown hashes or coordinates.
Covers memory corruption, buffer overflows, format strings, heap bugs, ROP, ret2libc, shellcode, and kernel exploitation. Applies to understood vulnerabilities in native targets, including seccomp bypasses, sandbox escapes, and Windows/Linux exploit chains.
Helps explain how binaries, APKs, WASM, firmware, custom VMs, bytecode, and game clients work before solving or exploiting them. Includes analysis of loaders and anti-debugging or anti-analysis logic.
Covers XSS, SQL injection, template injection, SSRF, XXE, authentication bypass, file uploads, and request smuggling. Also addresses JWT, OAuth/OIDC, SAML, prototype pollution, and smart-contract web surfaces when a web flaw is the main attack path.
Produces a single structured submission after a CTF challenge is solved. Documents solution steps, tools used, and lessons learned for handoff and review.
Performs independent re-execution and internal-consistency reviews of governance artifacts. Files runs, reviews, evidence packets, and verdicts while keeping claims aligned with the evidence.
Runs diagnostics for a context-mode installation. Checks runtimes, hooks, FTS5, plugin registration, and npm and marketplace versions.
A growing collection of real, public skills. Descriptions and instructions indexed 25 Sept 2026.
Skills give your agent reusable instructions for a specific job. Pick one, read what it does, and bring it into your workflow.
A name only tells half the story. Search the full description and instructions to find the right fit.
Read the skill, visit its source, and see exactly what you’re adding to your agent.
Copy the install command from a skill page and run it in your project.
npx skillycli add owner/repo --skill name