Your agent can do more. Find the skill that makes it happen.
Find your next superpower If you are an agent, refer to our llms.txt for full access.Systematic fuzzing across two dimensions: (1) content discovery — hidden directories, files, backup/source leaks, HTTP verb enumeration, 401/403 bypass via path manipulation; (2) input validation — auth/token stripping, type confusion, boundary value analysis, HTTP parameter pollution, header fuzzing, cookie fuzzing, mass assignment discovery, and entropy/predictability analysis of any generated v…
Execute lateral movement within Active Directory environments using credential material (NTLM hashes and Kerberos tickets) instead of plaintext passwords. Use this skill when engaging in red team operations or internal network penetration tests to expand access, bypass authentication portals, and achieve Domain Dominance without relying on crackable passwords.
Exploit weak password reset and change flows via CSRF on reset forms, cross-user password modification by swapping username parameters, token predictability in reset links, reset displaying old password in plaintext (revealing weak storage), missing current-password verification on change forms, and session hijacker lockout via passwordless change. Test with Burp Suite, OWASP ZAP following OWASP F…
Exploit path traversal and local/remote file inclusion (LFI/RFI) via URL parameters, cookies, and hidden fields using ../ sequences, URL encoding (%2e%2e%2f), double encoding (%252e%252e%255c), Unicode bypasses (..%c0%af), and Windows UNC paths. PHP include/require with $_GET/$_POST/$_COOKIE pattern. Target /etc/passwd, boot.ini, web.config. Tools: DotDotPwn, WFuzz, Burp Suite, ZAP.
Focuses on in-product upgrade moments after users have experienced value. Covers paywalls, upsell modals, feature gates, trial expiration screens, usage limits, and plan upgrade prompts.
Covers development principles for PC and console games. Addresses engine selection, platform features, and optimization strategies.
Handles PDF text and table extraction, merging, splitting, rotation, watermarking, creation, and form filling. Also supports encryption, decryption, image extraction, and OCR to make scanned documents searchable.
Provides PDF manipulation for extracting text and tables, creating documents, merging and splitting files, and handling forms. Supports programmatic PDF processing, generation, and analysis at scale.
Provides PDF manipulation for text and table extraction, document creation, merging, splitting, and form handling. Supports programmatic processing, generation, and analysis of PDF documents at scale.
Use when editing or QA'ing an existing resume/CV source or PDF for job applications, especially requests about PDF readability, clickable links, clean HTML-to-PDF export, natural role-fit wording, dense sections, header/footer artifacts, or avoiding “too made-up / too overdone” phrasing. Do not use for creating a full application package from a job URL; use job-application-packager instead.
Deterministically extracts PDF content into Markdown or text while stripping PDF metadata. Handles ruled and borderless tables, inline sidebars, and scanned documents through Tesseract OCR.
Convert PDF documents to clean structured Markdown for LLM context. Supports two modes: fast (PyMuPDF) and accurate (IBM Docling TableFormer AI). Features aggressive persistent caching, image extraction with metadata, table detection, and batch processing. Use when asked to convert PDFs, extract PDF content, parse documents, or prepare PDF data for AI/LLM consumption.
Skills give your agent reusable instructions for a specific job. Pick one, read what it does, and bring it into your workflow.
A name only tells half the story. Search the full description and instructions to find the right fit.
Read the skill, visit its source, and see exactly what you’re adding to your agent.
Copy the install command from a skill page and run it in your project.
npx skillycli add owner/repo --skill name