Your agent can do more. Find the skill that makes it happen.
Find your next superpower If you are an agent, refer to our llms.txt for full access.Supports Go projects that use or explicitly adopt GoFrame v2. Covers controllers, services, routing, configuration, middleware, ORM and DAO operations, gf CLI code generation, HTTP and gRPC services, and microservice conventions.
Selects metrics for experiments, guarded rollouts, and release policies. Identifies metrics that existing release policies attach automatically before recommending additional measurements.
Reviews .tex, .typ, or .pdf papers for peer-review critique and submission readiness. Identifies blockers, underdeveloped claims, and self-weakening prose, then produces revision roadmaps, journal-style reports, or follow-up audits.
Launches an interactive web dashboard for visualizing a codebase's knowledge graph.
Covers model supply chain attacks, including pickle RCE and poisoned weights, alongside adversarial examples, model poisoning, and model stealing. Addresses membership inference, model inversion, and autonomous agent security risks.
Work with Gemini CLI for one-shot prompts, summaries, and generation. Covers skills, hooks, MCP, and Gemma routing.
Tests prototype pollution where user input is merged into objects or untrusted keys configure libraries. Covers query parsers, JSON bodies, deep assignment, and code execution gadgets involving Object.prototype in Node.js or browsers.
Covers applications that trust DNS resolution for origin checks or interact with internal services through a browser. Also addresses client-side fetch or XHR requests to attacker-controlled domains when server-side SSRF is unavailable.
Provides an AV/EDR evasion playbook for Windows endpoints. Covers AMSI, ETW, .NET assembly detection, shellcode execution, process injection, API hooking, and signature-based detection.
Provides a DeFi attack pattern playbook. Covers flash loans, price oracle manipulation, MEV sandwich attacks, governance exploits, bridge vulnerabilities, and token standard edge cases.
Supports repository setup for projects using the Effect TypeScript library.
Addresses HTML injection when CSP, sanitizers, or WAF rules prevent JavaScript execution. Describes unclosed HTML tags that capture subsequent page content and expose CSRF tokens, session data, or other page information.
Skills give your agent reusable instructions for a specific job. Pick one, read what it does, and bring it into your workflow.
A name only tells half the story. Search the full description and instructions to find the right fit.
Read the skill, visit its source, and see exactly what you’re adding to your agent.
Copy the install command from a skill page and run it in your project.
npx skillycli add owner/repo --skill name