Your agent can do more. Find the skill that makes it happen.
Find your next superpower If you are an agent, refer to our llms.txt for full access.Поиск «плохого» кода на бэкенде — нарушения архитектуры, логика в контроллерах (роль analyzer, read-only). Use when ищем нарушения слоёв и структуры бэка; конкретные баги поведения — $analyzer-bugs.
Поиск багов — необработанные ошибки, race conditions, edge cases (роль analyzer, read-only). Use when нужны ошибки поведения и конкурентности; ошибки типов — $analyzer-types, нарушения архитектуры бэка — $analyzer-backend.
Аудит структуры БД — схема, индексы, FK, N+1, миграции (роль analyzer, read-only). Use when проверяем слой данных на чтение; чинить найденное — $database-optimize и $database-migrate.
Совместимый маршрут поиска mockup/фейковых данных во frontend/backend (роль analyzer → integrity, read-only). Use когда UI/API может жить на MSW/faker/fixtures/static responses; глубокий кросс-языковой маршрут — $integrity-mocks.
Проверка типов — tsc, any, небезопасные касты, рассинхрон zod↔типы (роль analyzer, read-only). Use when вопрос к типобезопасности, а не к логике; баги поведения — $analyzer-bugs.
Аудит цели через Task Master workflow — находки → задачи → цикл (роль analyzer). Use when аудит должен закончиться не отчётом, а задачами и циклом починки до готового; разовый отчёт без Task Master — $analyzer-audit.
Reverses Android malware: unpacking APKs, decompiling DEX bytecode to readable Java, auditing the manifest for abused permissions and components, and locating dynamically loaded or native payloads. Activates for requests to analyze an APK, decompile DEX, or investigate a suspicious Android app.
Analyzes API call traces from a sandbox or API monitor (JSON) to group calls by category, reconstruct high-level behaviors (process injection, file drops, network, crypto), and flag suspicious call sequences. Activates for requests to analyze an API trace, interpret sandbox API logs, or identify behavior from Win32/Native API calls.
Analyzes Windows Authenticode signatures on PE files: checking for a signature, reading the signer certificate chain, detecting revoked/expired/stolen certs, and recognizing signature-stripping and catalog-signing abuse. Activates for requests to analyze a code signature, verify Authenticode, or assess signer trust on a PE.
Analyzes banking trojan webinject configurations to extract targeted institutions, injected JavaScript/HTML, and data-theft hooks, mapping the fraud workflow. Activates for requests to analyze banking trojan webinjects, parse a webinject config, or map targeted banks and credential-theft injections.
Analyzes Python-based malware packaged as PyInstaller/py2exe executables by detecting the packer, locating the embedded archive, and identifying bundled .pyc modules for extraction and decompilation. Activates for requests to analyze compiled Python malware, unpack a PyInstaller binary, or extract pyc modules from a frozen Python executable.
Analyzes cryptojacking/coinminer malware by extracting mining pool endpoints (stratum), wallet addresses, algorithm and miner identifiers (XMRig and forks), and persistence or resource-control settings from static strings and config. Activates for requests to analyze a cryptominer, extract mining pool and wallet IOCs, or identify coinminer configuration.
Skills give your agent reusable instructions for a specific job. Pick one, read what it does, and bring it into your workflow.
A name only tells half the story. Search the full description and instructions to find the right fit.
Read the skill, visit its source, and see exactly what you’re adding to your agent.
Copy the install command from a skill page and run it in your project.
npx skillycli add owner/repo --skill name