Your agent can do more. Find the skill that makes it happen.
Find your next superpower If you are an agent, refer to our llms.txt for full access.Plans and executes third-party platform SEO through hosted content and external publishing. Covers platform selection and use of established domain authority for rankings and backlinks.
First asks for the user's current location, then searches for nearby parking lots. Uses official Data.go.kr public parking data through k-skill-proxy or the parking-lot-search package.
Provides reference material for managing Paseo projects and workspaces. Covers workspace scripts, agents, schedules, and heartbeats.
Creates one agent to offer an outside perspective on the current task. Supports consultation without handing over execution of the work.
Forms a committee of two high-reasoning agents to reassess a problem, analyze root causes, and produce a plan. Intended for difficult planning, repeated failure loops, or stalled progress.
Hands ongoing work to another agent with the full task context.
Execute lateral movement within Active Directory environments using credential material (NTLM hashes and Kerberos tickets) instead of plaintext passwords. Use this skill when engaging in red team operations or internal network penetration tests to expand access, bypass authentication portals, and achieve Domain Dominance without relying on crackable passwords.
Covers payment buttons, requests, authorization, merchant capabilities, and shipping or contact fields. Supports Wallet pass management and distribution, plus Apple Pay flows for physical goods, services, donations, and eligible recurring payments.
Exploit weak password reset and change flows via CSRF on reset forms, cross-user password modification by swapping username parameters, token predictability in reset links, reset displaying old password in plaintext (revealing weak storage), missing current-password verification on change forms, and session hijacker lockout via passwordless change. Test with Burp Suite, OWASP ZAP following OWASP F…
Exploit path traversal and local/remote file inclusion (LFI/RFI) via URL parameters, cookies, and hidden fields using ../ sequences, URL encoding (%2e%2e%2f), double encoding (%252e%252e%255c), Unicode bypasses (..%c0%af), and Windows UNC paths. PHP include/require with $_GET/$_POST/$_COOKIE pattern. Target /etc/passwd, boot.ini, web.config. Tools: DotDotPwn, WFuzz, Burp Suite, ZAP.
Covers path traversal and local file inclusion involving file paths, download endpoints, include operations, archive extraction, and wrapper behavior. Focuses on cases that may expose filesystem control.
Creates feature-grouped codebase flowcharts and identifies concerns duplicated across systems. Proposes a unified architecture with a combined flowchart and per-system implementation planning prompts.
Skills give your agent reusable instructions for a specific job. Pick one, read what it does, and bring it into your workflow.
A name only tells half the story. Search the full description and instructions to find the right fit.
Read the skill, visit its source, and see exactly what you’re adding to your agent.
Copy the install command from a skill page and run it in your project.
npx skillycli add owner/repo --skill name