Skills
100,928 packaged capabilities and playbooks for agents. Install any of them with one command.
All
Design selling-point / feature infographic images (one benefit per image, icons, callout lines, short headlines, comparison or spec rows) for Amazon secondary images, Taobao detail screens and ads, keeping the real product and exact user-approved copy. Use for 卖点图, 信息图, feature image, infographic, benefit graphic.
When the user wants keyword research with search volume, competitive keyword analysis, site audit data, position tracking, or competitor organic analysis. Trigger on "keyword research," "search volume," "keyword difficulty," "what keywords do they rank for," "site audit," "Semrush," or "competitive analysis." Use Semrush for keyword data and competitive intelligence — use Ahrefs for backlink-focused analysis.
Google SEO APIs: Search Console (Search Analytics, URL Inspection, Sitemaps), PageSpeed Insights v5, CrUX field data with 25-week history, Indexing API v3, and GA4 organic traffic. Provides real Google field data for Core Web Vitals, indexation status, search performance, and organic traffic trends. Use when user says "search console", "GSC", "PageSpeed", "CrUX", "field data", "indexing API", "GA4 organic", "URL inspection", "google api setup", "real CWV data", "impressions", "clicks", "CTR", "position data", "LCP", "INP", "CLS", "FCP", "TTFB", or "Lighthouse scores".
Image optimization analysis for SEO and performance. Checks alt text, file sizes, formats, responsive images, lazy loading, and CLS prevention. Use when user says "image optimization", "alt text", "image SEO", "image size", or "image audit".
Structured reflective problem-solving methodology. Process: decompose, analyze, hypothesize, verify, revise. Capabilities: complex problem decomposition, adaptive planning, course correction, hypothesis verification, multi-step analysis. Actions: decompose, analyze, plan, revise, verify solutions step-by-step. Keywords: sequential thinking, problem decomposition, multi-step analysis, hypothesis verification, adaptive planning, course correction, reflective thinking, step-by-step, thought sequence, dynamic adjustment, unclear scope, complex problem, structured analysis. Use when: decomposing complex problems, planning with revision capability, analyzing unclear scope, verifying hypotheses, needing course correction, solving multi-step problems.
Set up and manage the Sentry development environment using devenv. Handles fresh setup, updating existing environments, starting dev services, resetting the database, per-worktree environment setup (each worktree needs its own devenv sync/.venv), and troubleshooting. Use when asked to "set up sentry", "setup dev environment", "get sentry running", "start dev server", "devenv setup", "devservices not working", "sentry won't start", "reset the database", "new worktree venv/devenv setup", or any development environment issue.
Set up Ralph RLM in an existing OpenCode project by installing the package, running the opencode-ralph-rlm setup command, checking generated .opencode config, and verifying the provider/worker loop wiring. Use when a user asks to install, configure, initialize, troubleshoot setup for, or add opencode-ralph-rlm / Ralph RLM to a repository.
Expert guidance for shadcn-svelte, a Svelte 5 port of shadcn/ui. Use this skill when working with shadcn-svelte components, installing UI components via CLI, implementing forms with Superforms/Formsnap, adding dark mode with mode-watcher, creating data tables with TanStack Table, theming with Tailwind CSS v4 and OKLCH colors, or building custom component registries. Triggers on mentions of shadcn-svelte, Bits UI components, or SvelteKit UI component libraries.
Expert knowledge for GPU shader development across GLSL, HLSL, ShaderLab, and compute shadersUse when "write shader, shader code, GLSL, HLSL, ShaderLab, vertex shader, fragment shader, pixel shader, compute shader, post-processing, visual effects, screen effect, bloom effect, outline shader, toon shader, water shader, dissolve effect, custom material, render texture, GPU compute, raymarching, SDF, signed distance field, shader, glsl, hlsl, shaderlab, gpu, graphics, rendering, visual-effects, post-processing, compute, webgl, vulkan, directx, metal, opengl" mentioned.
Frontend-backend communication patterns in Shopify Remix apps. Use when adding pages that need backend data, creating data mutations, using loaders and actions, handling authenticated requests, or managing session and authentication in routes.
Register, segment, filter, resample 3D medical images (MRI, CT, microscopy) via SimpleITK Python; DICOM, NIfTI, multi-modal. Rigid/affine/deformable registration, threshold/region-growing segmentation, Gaussian/morph filtering, label stats, format conversion. Use to align volumes across timepoints/modalities, segment fluorescence, or convert DICOM→NIfTI.
Process-based discrete-event simulation. Model queues, shared resources, timed events: manufacturing, service ops, network traffic, logistics. Processes are Python generators yielding events. Resources: capacity-limited (Resource/Priority/Preemptive), bulk (Container), objects (Store, FilterStore). For continuous use SciPy ODEs; for agent-based use Mesa.
Create AiderDesk Agent Skills by writing SKILL.md files, defining frontmatter metadata, structuring references, and organizing skill directories. Use when building a new skill, creating a SKILL.md, planning skill architecture, or writing skill content.
Create new skills, modify and improve existing skills, and measure skill performance. Use when users want to create a skill from scratch, update or optimize an existing skill, run evals to test a skill, benchmark skill performance with variance analysis, or optimize a skill's description for better triggering accuracy.
A streamlined plan for deep research; use when you need to generate plan.json based on request.md alone, completing in one pass the research scoping, report format discovery, structure ideation, dimension breakdown, key questions, search strategy, dependencies, execution order, and completion criteria.
An intelligent tool for generating software copyright application materials. Automatically analyzes project source code and produces software manuals and source code documents that meet software copyright application requirements. Supports keyword search, intelligent source code analysis, formatted output, and PDF export.
Comprehensive Solidity smart contract security auditing and vulnerability analysis skill. Based on methodologies from Trail of Bits, OpenZeppelin, Consensys Diligence, Sherlock, CertiK, Cyfrin, Spearbit, Halborn, and other leading Web3 security firms. This skill should be used whenever the user asks to "audit a smart contract", "review Solidity code for security", "find vulnerabilities", "check for reentrancy", "analyze gas optimization", "review access control", "check proxy patterns", "analyze DeFi protocol security", "review ERC20/ERC721 implementation", "check oracle manipulation risks", "review upgrade patterns", or mentions any security review of EVM-compatible smart contracts. Also triggers for keywords like "slither", "echidna", "foundry fuzz", "formal verification", "invariant testing", "flash loan attack", "MEV", "sandwich attack", "front-running", "delegatecall", "selfdestruct", "reentrancy guard", "access control vulnerability", "storage collision", "proxy upgrade security", "smart contract exploit", "L2 security", "cross-chain", "bridge security", "sequencer", "LayerZero", "CCIP", "account abstraction", "ERC-4337", "smart account", "paymaster", "bundler", "UserOperation", "re-audit", "diff audit", "remediation review", "fix verification", "Uniswap v4 hooks", "Chainlink integration", "Aave integration", "flash loan receiver", "ERC-4626 vault", "restaking", "EigenLayer", "AVS", "severity classification", "severity decision", "perpetual", "perp dex", "GMX", "Synthetix", "funding rate", "liquidation cascade", "intent protocol", "UniswapX", "Permit2", "1inch Fusion", "Dutch auction order", "ZK-VM", "zkSync", "Polygon zkEVM", "ZK proof", "Risc0", "SP1", "Circom", "under-constrained", "ERC-7683", "cross-chain intents", "IOriginSettler", "IDestinationSettler", "CrossChainOrder", "filler protocol", "origin settler", "destination settler", "orderId", "fillDeadline", "EIP-7002", "triggerable exit", "execution layer withdrawal", "validator exit", "EIP-7251", "MaxEB", "max effective balance", "validator consolidation", "consolidation", "EIP-6110", "beacon deposit", "validator deposit", "liquid staking security", "OWASP SC", "OWASP smart contract", "SC01", "SC02", "ERC-6909", "multi-token", "PoolManager claims", "claim token", "isOperator", "MEV bot", "MEV contract", "arbitrage bot", "sandwich bot", "sweep function", "AI-generated code", "Copilot", "vibe coding", "LLM-generated Solidity", "Wake", "eth-wake", "Ackee Blockchain", "TSTORE", "TLOAD", "transient storage", "tstore compiler bug", "tstore poison", "solc 0.8.28", "solc via-ir", "via-ir optimizer", "reentrancy guard bypass tstore", "EOF", "EIP-7692", "Fusaka upgrade", "EXTDELEGATECALL", "EVM object format", "gas observability", "code observability", "CODESIZE EXTCODESIZE EOF", "ERC-7726", "price adapter", "price oracle adapter", "false validity assumption", "IQuote", "getQuote oracle", "phantom collateral", "orphaned state", "Abracadabra exploit", "cook batch router", "failed external call state", "liquidation ghost debt", "overflow sentinel", "Cetus exploit", "bit-shift guard", "FullMath overflow", "PRBMath overflow", "custom math library overflow", "OpenZeppelin v5 migration", "OZ v4 to v5", "ERC-7201 namespaced storage", "sequential storage layout", "namespaced storage layout", "storage slot migration", "LDF rounding", "Bunni exploit", "liquidity distribution function", "asymmetric rounding liquidity", "flash tick shift", "JIT liquidity attack", "just-in-time liquidity", "V4 JIT", "Morpho Blue", "Euler V2", "EVC", "modular lending", "permissionless market", "EigenVault", "cross-vault health", "ERC-4337 executor vault", "EIP-7701", "native account abstraction", "ACCEPT_ROLE opcode", "per-transaction validation", "legacy contract validation", "Cork Protocol", "V4 hook drain", "onlyPoolManager hook", "missing onlyPoolManager", "TransientStorageClearingHelperCollision", "delete transient storage", "delete tstore bug", "ERC-7579 module poisoning", "module onUninstall revert", "stale module state", "executor delegatecall module", "ERC-7484", "module registry attestation", "ERC-7821", "minimal batch executor", "EIP-7821", "sweeper delegation campaign", "tx.origin bypass Pectra", "EIP-7702 sweeper", "cross-chain sandwich", "source chain event leakage", "CeDeFi", "recursive leverage collapse", "oracle price hardcoding", "hardcoded collateral price", "cook() flag bypass", "batch router flag reset", "deferred solvency check bypass", "oracle chain complexity", "restaking oracle chain", "chained price adapter", "Hyperliquid exploit", "vault liquidation absorber", "HLP vault manipulation", "Fusaka gas cap", "EIP-7825", "per-transaction gas limit", "app chain fork", "Berachain fork", "forked L1 inherited bugs", "Aderyn v0.6", "Aderyn LSP server", "echidna verification mode", "halmos recon reproducer", "slither triage", "too many slither findings", "slither false positive", "slither 200 findings", "slither filter", "slither config", "slither suppress", "slither FP", "slither findings triage", "slither-check-upgradeability", "slither priority", "when to skip slither finding", "Solidity 0.9.0", "transfer deprecated", "send deprecated solidity", "transfer removed 0.9", "send removed 0.9", "migrate from transfer call", "PUSH0 cross-chain", "PUSH0 opcode incompatible", "evm-version paris", "evmVersion paris", "shanghai fork compatibility", "non-shanghai chain", "PUSH0 zkSync", "EIP-3855", "ERC-1967 slot corruption", "proxy storage slot", "implementation slot overwrite", "UUPS brick attack", "upgradeTo interface check", "proxiableUUID missing", "storage layout migration", "proxy slot collision", "delegatecall slot overwrite", "ePBS", "EIP-7732", "enshrined PBS", "proposer builder separation consensus", "block access lists", "Block Access Lists", "BALs EIP-7928", "EIP-7928", "Glamsterdam", "payload withholding attack", "preconfirmation timing", "preconf security", "AI-generated code audit", "vibe coding security", "LLM contract review", "copilot Solidity", "hallucinated interface", "broken reentrancy guard AI", "incomplete access control AI", "Noir circuit", "unconstrained Noir", "pub input Noir", "Noir language audit", "SP1 zkVM", "SP1 Succinct", "SP1 cycle limit", "SP1 precompile security", "Polygon CDK", "CDK chain audit", "LxLy bridge", "AggLayer security", "folding scheme", "Nova IVC", "SuperNova folding", "HyperNova", "ProtoStar IVC", "dYdX v4", "dYdX Cosmos chain", "CLOB trust model", "CometBFT MEV", "Gains Network", "gTrade", "DAI vault counterparty", "synthetic perp solvency", "skew manipulation funding", "funding rate oracle", "insurance fund drain", "cross-margin contagion", "isolated to cross margin switch", "xUSD exploit", "Stream Finance exploit", "hardcoded oracle dollar", "Hyperliquid HLP exploit", "HLP liquidation absorber", "dual role vault", "RWA protocol", "real world asset", "tokenized asset", "NAV manipulation", "pool manager trust", "senior tranche", "junior tranche", "epoch redemption", "KYC transfer restriction", "ERC-1400", "ERC-3643", "Centrifuge audit", "Maple Finance audit", "Goldfinch audit", "TrueFi audit", "options protocol", "options settlement oracle", "implied volatility manipulation", "IV oracle", "options expiry manipulation", "covered call vault", "put selling vault", "Ribbon Finance audit", "Dopex audit", "Lyra audit", "Opyn audit", "Hegic audit", "option strike manipulation", "Premia audit", "Aevo audit", "Thetanuts audit", "options-protocols.md", "oToken", "theta vault", "SSOV", "option collateral", "option margin", "option settlement", "call spread payoff", "IV drainage", "Deus DAO oracle", "Gnosis Auction abuse", "prediction market", "prediction market oracle", "resolver manipulation", "conditional token", "CTF conditional", "Gnosis CTF", "LMSR AMM", "market resolution bribe", "Polymarket audit", "Gnosis Safe module", "Safe module audit", "Safe guard", "Safe fallback handler", "enableModule security", "Safe storage collision", "delegatecall Safe", "Zodiac module", "Safe recovery module", "social recovery Safe", "module threshold bypass", "BNB Chain bridge exploit", "BSC bridge Merkle proof", "iavl library bug", "forged Merkle proof bridge", "Multichain exploit", "MPC key centralization", "TSS bridge centralization", "MPC bridge audit", "bridge operator jurisdiction", "single point of failure bridge", "MPC key rotation", "off-chain proof library audit", "ICS23 proof verification", "cross-chain proof forgery", "Code4rena", "C4 contest", "Sherlock contest", "Immunefi", "Cantina contest", "CodeHawks", "Cyfrin Updraft", "warden submission", "Watson submission", "bug bounty submission", "audit contest", "audit competition", "contest finding", "submit to contest", "contest report", "H/M finding", "QA report warden", "vm.signDelegation", "vm.attachDelegation", "vm.signAndAttachDelegation", "ERC-7702 Foundry", "ERC-7702 PoC", "delegation revocation", "forge build --eof", "forge test --eof", "EOF PoC", "EOF migration", "EXTDELEGATECALL proxy", "selfdestruct EOF", "EOF container validation", "Move language", "Move audit", "Sui audit", "Aptos audit", "Move resource", "Sui object model", "Aptos fungible asset", "MoveBit", "OtterSec Move", "hot potato Move", "capability token Move", "Sui PTB", "Move bytecode verifier". Even if the user simply pastes Solidity code and asks "is this safe?" or "any issues here?", use this skill.
Master SQL query optimization, indexing strategies, and EXPLAIN analysis to dramatically improve database performance and eliminate slow queries. Use when debugging slow queries, designing database schemas, or optimizing application performance.
Statistical models library for Python. Use when you need specific model classes (OLS, GLM, mixed models, ARIMA) with detailed diagnostics, residuals, and inference. Best for econometrics, time series, rigorous inference with coefficient tables. For guided statistical test selection with APA reporting use statistical-analysis.
When the user wants to develop category strategies, execute sourcing events, or implement strategic procurement initiatives. Also use when the user mentions "category management," "sourcing strategy," "value levers," "should-cost analysis," "RFx management," "e-sourcing," "strategic procurement," or "category sourcing." For supplier evaluation, see supplier-selection. For spend analysis, see spend-analysis.
Create, visualize, and analyze lithological and stratigraphic logs for well data. Use when the agent needs to: (1) Create lithology columns from depth intervals, (2) Parse geological descriptions into structured logs, (3) Visualize stratigraphic columns with patterns and colors, (4) Perform well-to-well correlations, (5) Extract statistics like net-to-gross ratios, (6) Define rock type lexicons and legends, (7) Export lithology data to CSV/LAS/JSON.
Build private dapps on Starknet through the Starknet Wallet API. Covers shield/unshield, private transfers, shielded balances, private DeFi calls, shadow-account actions, and AVNU private swaps from TypeScript or React. Use whenever an app asks the user's privacy-enabled wallet to perform STRK20 actions (starknet.js WalletAccountV6, useStrk20 hooks, strk20InvokeTransaction, STRK20_ACTION, open notes, openNoteIds placeholders). For the Cairo helper side use strk20-anonymizer-contracts, for wallets or backends holding their own keys use strk20-privacy-sdk, for concepts and route choice use strk20-privacy.
Structural validation and damage systems for Three.js building games. Use when implementing building stability (Fortnite/Rust/Valheim style), damage propagation, cascading collapse, or realistic physics simulation. Supports arcade, heuristic, and realistic physics modes.
Reduce defensive disclaimers, stacked hedging, and self-protective narration when drafting, rewriting, or auditing proposals, articles, case studies, captions, and other reader-facing prose. Use when defensive wording is requested for review or appears in a draft, including wording the assistant adds. Preserve meaningful limits; do not perform general style cleanup or ordinary code work.
Apply the Animaxxing art direction: monochrome editorial design, Rethink Sans and JetBrains Mono, poster type, hairlines, and a curated motion treatment. Use for 'animaxx it', the Animaxxing aesthetic, or a requested Swiss-style monochrome redesign. Use animaxxing for reusable effects while preserving another brand. Not for framework routing or isolated GSAP API questions
Sequential subagent execution with two-stage review gates for implementation plans. Use when executing multi-task plans in current session, when tasks need fresh subagent context to avoid pollution, when formal review cycles (spec compliance then code quality) are required between tasks, or when you need diff-based validation of each task before proceeding.
Respond to questions from Sunzi's perspective - strategic analysis of knowing yourself and your enemy, the game-theoretic wisdom of subduing the enemy without fighting, and the flexibility of warfare having no constant form. Use when the user explicitly asks to use this figure's perspective, mentions "sunzi-perspective", or wants to apply its core methods to analyze a problem; do not trigger automatically for general questions.
Spec-first, TDD, subagent-driven software development workflow. Use when: (1) building any new feature or app — triggers brainstorm → plan → subagent execution loop, (2) debugging a bug or test failure — triggers systematic root-cause process, (3) user says "let's build", "help me plan", "I want to add X", or "this is broken", (4) completing a feature branch — triggers test verification + merge/PR options. NOT for: one-liner fixes (just edit), reading code, or non-code tasks. Requires exec tool and sessions_spawn.
Svelte CLI (sv) skill. Use when the user creates a project with sv (sv create), adds integrations (sv add, e.g. drizzle/tailwind/prettier/eslint/playwright/storybook/vitest/mdsvex/paraglide/better-auth/sveltekit-adapter/mcp/experimental), runs type and compile checks (sv check), runs migration scripts (sv migrate svelte-5/sveltekit-2/app-state/self-closing-tags/package/routes), or develops a custom sv add-on.
Report Svelte MCP autofixer opportunities when the user corrects a Svelte or SvelteKit mistake the agent made. Use after corrections to .svelte components, .svelte.ts/.svelte.js modules, or SvelteKit features where a reusable check or fix could prevent the mistake. Do not trigger for initial implementation requests, unrelated bugs, or personal style preferences.
SvelteKit advanced features guide - state management, Remote Functions, environment variables, Hooks, error handling, link options, Service Workers, server modules, snapshots (snapshots/Shallow Routing), $app/* modules, $lib, $service-worker.
Progressively draw an SVG line (stroke-draw) with page scroll or on entering the viewport — measure `path.getTotalLength()`, set `stroke-dasharray`/`stroke-dashoffset`, animate dashoffset from length to 0. Call when the user says "vẽ svg khi cuộn", "svg stroke draw", "logo vẽ dần", "path animation reveal", "stroke-dashoffset", or /svg-stroke-reveal. DIFFERENT from `skills/scroll-effects` (7 general scroll effects — reveal/stagger/highlight/nav/top/toc/parallax, NO stroke-draw) — this skill is specialized for SVG `<path>` with a DRAWN STROKE (logo, signature, line chart, journey).
Run all security scanners against the project and produce a unified, severity-bucketed report. Orchestrates gitleaks (secrets), osv-scanner/trivy (dependency vulns), semgrep (static analysis), context-file injection scanner (built-in), and repo hygiene checks (built-in). Missing scanners are skipped with install hints — the scan always completes. Triggers on: 'security check', 'security scan', 'run security', 'scan for secrets', 'check for vulnerabilities', 'security audit', 'audit dependencies', 'check secrets', 'find vulnerabilities', 'scan codebase'.
Expert guidance on Swift library and framework design. Use when developers mention: (1) designing a Swift library or framework, (2) public API design patterns, (3) protocol-oriented architecture or associated types, (4) result builders or DSL design, (5) performance optimization for libraries, (6) @inlinable or @usableFromInline, (7) noncopyable types for APIs, (8) progressive disclosure in API design, (9) ResponseGenerator or builder patterns.
Use this skill when users need to apply themes, customize appearance, switch dark mode, use CSS variables, configure icons, or modify visual styling for Syncfusion JavaScript controls. Covers icon library, size modes, and Theme Studio integration.
Migrate TailwindCSS to StyleX. Use when converting Tailwind `className` utility strings into `stylex.create` with `stylex.props` or `stylex.attrs`. Use for one component or a whole codebase in React, Preact, Solid, Svelte, Vue, Qwik, react-strict-dom, and other JavaScript frameworks supported by StyleX. Trigger on tailwind-to-stylex, tw-to-stylex, or any request to move code from Tailwind to StyleX.
The Docker execution platform for TAO jobs — a local daemon or a remote GPU box via DOCKER_HOST=ssh://user@host. Implements the four-verb consumer contract (submit/status/logs/cancel) over the docker CLI, wired to the job-record, tao-data-io staging, and the redact lint, on top of the underlying docker conventions (--gpus, mounts, NGC auth, inspection, data-root relocation, error modes). Use to run any single-node TAO container action on Docker without the SDK. Trigger keywords — docker, docker run, run on docker, DOCKER_HOST, remote docker, nvcr.io, --gpus, single-node GPU job.
Tencent Maps JavaScript GL (JSAPIGL) development guide. Applies to writing map applications or tools. Use this skill when writing, reviewing or debugging code that uses the Tencent Maps API. Applies to tasks involving map initialization, overlay display, layer control, event handling, control interaction, visual rendering, map tools, search, route planning, address lookup, administrative divisions, IP location, geometry calculation, 3D model display and performance optimization. Triggers automatically when the user mentions 腾讯地图, jsapi, jsapi-gl or related map development needs.
New to MCP?
From what the protocol is to installing your first server, these answers cover most first questions.
An open protocol that defines how AI applications connect to external tools and data in a uniform way. Clients talk to the model; MCP servers provide tools, resources and prompt templates. They exchange standard messages, so one server can be reused by many clients.