Your agent can do more. Find the skill that makes it happen.
Find your next superpower If you are an agent, refer to our llms.txt for full access.Integrate with external APIs, REST, GraphQL, web services, SDKs, and third-party tools. Use when connecting external services, managing API keys securely, handling authentication (OAuth, JWT, API keys), implementing network retry logic, or configuring HTTP client libraries.
Identify and exploit Mass Assignment vulnerabilities in APIs. Use this skill when testing REST APIs or application forms that directly map user-supplied JSON or POST input to internal database objects. An attacker can inject undocumented variables (e.g., is_admin, verified) to illegally modify restricted properties.
Provides API design principles and guidance for choosing between REST, GraphQL, and tRPC. Covers response formats, API versioning, and pagination.
Identify and exploit flaws in API rate limiting enforcement. Use this skill when encountering HTTP 429 Too Many Requests errors during password brute-forcing, OTP validation, credential stuffing, or enumeration attacks. These bypasses leverage IP spoofing, parameter manipulation, and edge-case application logic.
Covers secure API design patterns for authentication, authorization, input validation, and rate limiting. Guides protection against common API vulnerabilities.
Creates mocks that simulate real API behavior. Supports testing, demos, and parallel development with realistic mock services.
按项目约定生成 apps/web-antd/src/api 下的接口文件（typed wrapper + enum Api + requestClient）。Use when creating or modifying API files, adding backend endpoints, 接口封装, api wrapper, "加个接口", "对接后端", or when a new page needs its api/<域>/<实体>.ts.
Uses Apify's E-commerce Scraping Tool to gather product data from e-commerce platforms. Extracts prices, customer reviews, and seller information.
Supports advanced web scraping and extraction of data from social media.
Creates full-stack applications from natural language requests. Determines the project type, selects a technology stack, and coordinates agents through the application-building process.
Harden an application against common security risks — validate inputs at boundaries, least-privilege access, safe secrets handling, dependency hygiene, and secure defaults. Load when shipping user-facing code, adding auth/session flows, handling untrusted data, exposing APIs, or the user asks for "security hardening", "OWASP hardening", "secure this feature". Not for skill-library security gates (…
Provides an App Store Optimization toolkit for the Apple App Store and Google Play Store. Supports research, optimization, and tracking of mobile app performance.
Skills give your agent reusable instructions for a specific job. Pick one, read what it does, and bring it into your workflow.
A name only tells half the story. Search the full description and instructions to find the right fit.
Read the skill, visit its source, and see exactly what you’re adding to your agent.
Copy the install command from a skill page and run it in your project.
npx skillycli add owner/repo --skill name