skilly. Buy ad slot
THE AGENT SKILLS DIRECTORY

Small skills.
Big possibilities.

Your agent can do more. Find the skill that makes it happen.

Find your next superpower If you are an agent, refer to our llms.txt for full access.
K
Ranked by hot
View
Security
ShulkwiSEC/bb-huge
0 installs 22 GitHub stars

burp-suite-advanced-methodology

Master Burp Suite Professional for comprehensive web application security testing. Use this skill when performing manual web application assessments with Burp Suite including proxy interception, Scanner automation, Intruder attacks, Repeater analysis, and extension integration. Covers advanced techniques like match-and-replace rules, macro authentication, Collaborator for OOB testing, and Turbo In…

Community score
0
0 up0 down
Security
ShulkwiSEC/bb-huge
0 installs 22 GitHub stars

business-logic

Application-level business logic security testing for any domain. Takes an understanding-first approach: map the intended workflows before probing them. Covers: value/quantity logic abuse (negative, zero, overflow, rounding on any numeric field), workflow and state machine bypass (skipping required steps, forcing illegal state transitions, reusing one-time tokens), trust boundary violations (BOLA …

Community score
0
0 up0 down
Security
ShulkwiSEC/bb-huge
0 installs 22 GitHub stars

business-logic-bypass

Identify and exploit flaws in the core business rules and logic of web applications. This skill focuses on manipulation of application workflows, pricing, inventory limitations, and multi-step processes. Use this skill when bug hunting or testing e-commerce, banking, or SaaS platforms where standard technical vulnerabilities (e.g., XSS/SQLi) are not present but the application's logic is flawed.

Community score
0
0 up0 down
Security
ShulkwiSEC/bb-huge
0 installs 22 GitHub stars

business-logic-flaws

Business logic flaws are application vulnerabilities where valid functions are abused in unintended ways: price manipulation via hidden field tampering, workflow step-skipping, function call limit bypass (coupon reuse), process timing exploitation (race conditions on balance updates), and request forging via guessable/predictable parameters. Detect using Burp Suite proxy interception, HTTP POST/GE…

Community score
0
0 up0 down
Business
dvy1987/agent-loom
0 installs 3 GitHub stars

business-modeling

Pick the right business-model canvas (Lean Canvas, Business Model Canvas, or Value Proposition Canvas) for the stage and fill it with specifics — one segment, one primary canvas, top-3 assumptions, no fluff in the moat or channel boxes. Load when the user asks to fill a business model canvas, lean canvas, value proposition canvas, model this business, map the business model, says "fill the BMC", "…

Community score
0
0 up0 down

Low community score

: This skill has a community score below −5, meaning it has received more downvotes than upvotes. Review its source and assessment before installing. Community votes are not a security review.

LESS SETUP. MORE POSSIBILITY.

Find it. Add it.
Make something.

Skills give your agent reusable instructions for a specific job. Pick one, read what it does, and bring it into your workflow.

01

Search the actual skill.

A name only tells half the story. Search the full description and instructions to find the right fit.

02

Get to know it.

Read the skill, visit its source, and see exactly what you’re adding to your agent.

03

Give your agent a new ability.

Copy the install command from a skill page and run it in your project.

npx skillycli add owner/repo --skill name