Your agent can do more. Find the skill that makes it happen.
Find your next superpower If you are an agent, refer to our llms.txt for full access.Creates a .py script that fetches data, generates signals, and backtests a strategy on a selected symbol. Includes statistics and plots.
Provides data fetching patterns for Next.js App Router, including parallel fetching, SWR, React Query, and Incremental Static Regeneration. Helps choose server or client fetching and implement caching, revalidation, loading states, and error boundaries.
Commits local changes and pushes them to the origin remote without creating a pull request.
Covers inconsistencies in parsing duplicate query or body keys across servers, proxies, WAFs, and frameworks. Examines resulting bypasses, SSRF, logic abuse, and CSRF token confusion.
Covers applications deserializing untrusted data through ObjectInputStream, unserialize, pickle, or similar mechanisms. Focuses on potential code execution, file access, and privilege escalation.
Provides DynamoDB patterns for creating, querying, scanning, and performing CRUD operations on tables. Covers indexes, batch operations, transactions, and Spring Boot integration using AWS SDK for Java 2.x.
Provides a browser and V8 exploitation playbook for Chrome and Chromium. Focuses on JIT type confusion, incorrect bounds elimination, and V8 sandbox bypass leading to renderer code execution or sandbox escape.
Provides second-model review, debugging, refactoring, and design using selected files. Supports dry-run token checks and API or browser engines through the Oracle CLI.
Hacker News API for stories and comments. Use when user mentions "Hacker News", "HN", "Y Combinator", or asks about tech news.
Sets up Sentry SDKs for server-side JavaScript and TypeScript running on Node.js, Bun, or Deno. Covers error monitoring, tracing, logging, profiling, metrics, crons, and AI monitoring.
Covers race condition and TOCTOU testing for one-time operations and synchronization gaps. Includes concurrent HTTP abuse, rate-limit bypass, Turbo Intruder gates, and HTTP/2 single-packet attacks.
Tests discrepancies in HTTP message framing between front proxies, CDNs, load balancers, and origin servers. Covers Content-Length versus Transfer-Encoding, HTTP/2-to-HTTP/1 translation, and client-side desynchronization through browser fetch pipelines.
Skills give your agent reusable instructions for a specific job. Pick one, read what it does, and bring it into your workflow.
A name only tells half the story. Search the full description and instructions to find the right fit.
Read the skill, visit its source, and see exactly what you’re adding to your agent.
Copy the install command from a skill page and run it in your project.
npx skillycli add owner/repo --skill name