Skills
100,928 packaged capabilities and playbooks for agents. Install any of them with one command.
All
Use this skill when controlling a VMOS Edge Android cloud phone through the Android Control API. If the current session also has `vmos-edge-container-api`, use `host_ip` and resolve the target `db_id` through the container APIs first. If this skill is installed alone, prefer `cloud_ip`; if `host_ip` and `db_id` are already known, the host route can also be used. If no IP is provided and local `cbs_go` is running, default `host_ip` to `127.0.0.1`.
Use when testing a web application for security vulnerabilities, before deployment or during security review — guides through a structured 10-phase penetration testing methodology covering mapping, authentication, session management, access controls, injection, logic flaws, and server configuration.
Tune the Wispr Flow dictionary from real dictation history through a local CLI: find the names, products, and commands it mishears, fix them safely, and check the fixes worked. Use when the user reports a Wispr Flow transcription mistake ("I said X, it wrote Y"), wants mistakes found in a time window, asks about their Wispr Flow dictations, or wants dictionary words, rules, or snippets changed.
Bootstrap a genuinely greenfield web, mobile, desktop, API, or daemon project from scratch — gather requirements, research current technologies, approve the design, collision-check the target, and scaffold app-local code with shared packages only when needed. An explicitly selected GitHub Project may retain the approved design.
Enforces workflow discipline across ALL projects. Ensures Claude checks for specialized agents before responding, announces skill/agent usage, and creates TodoWrite todos for multi-step tasks. Triggers: automatic on all sessions, use the right agent, follow workflow.
WordPress performance code review and optimization analysis. Use when reviewing WordPress PHP code for performance issues, auditing themes/plugins for scalability, optimizing WP_Query, analyzing caching strategies, checking code before launch, or detecting anti-patterns, or when user mentions "performance review", "optimization audit", "slow WordPress", "slow queries", "high-traffic", "scale WordPress", "code review", "timeout", "500 error", "out of memory", or "site won't load". Detects anti-patterns in database queries, hooks, object caching, AJAX, template loading, and editor-side performance.
Use this skill to write tests with the `kotlin.test` library — the multiplatform assertion + annotation API that compiles the same in `commonTest` and on the JVM (JUnit4 or JUnit5), Android, JS, Native, and Wasm. Covers the `kotlin.test` annotations (`@Test`, `@Ignore`, `@BeforeTest`, `@AfterTest`) and how they typealias onto the underlying framework; the `assert*` functions (`assertEquals`/`assertNotEquals`, `assertSame`, `assertNull`/`assertNotNull`, `assertIs`/`assertIsNot`, `assertContentEquals`, `assertContains`, `assertTrue`/`assertFalse`, `fail`, `expect`, `assertFails`, `assertFailsWith`); the `@OnlyInputTypes` compile-time type check; the `Asserter`/`AsserterContributor`/`DefaultAsserter` extension point that routes JVM failures to `org.junit.Assert` for clickable diffs; and the `kotlin("test")` capability that auto-selects JUnit4 vs JUnit5. Use when the user mentions `kotlin.test`, `import kotlin.test.*`, `@BeforeTest`, `assertFailsWith`, `assertContentEquals`, `assertIs`, or `kotlin("test")`.
Use this Skill when the user wants to interact with Xiaohongshu (xiaohongshu/rednote). Covers searching notes, getting post details, viewing user profiles, QR code sign-in, publishing notes (image/text, video, long-form, Markdown), comment interactions (posting/replying, replying from the notifications page), likes and favorites, browsing the recommendation feed, generating writing templates, managing operations strategy, SOP orchestration, and more. Activate this Skill when the user mentions xiaohongshu, 小红书, or rednote, or needs to browse/scrape/publish/interact with Chinese social media content.
Use to orchestrate a specific ticket set, issue tracker filter, project, delivery scope, or Linear Backlog clear run by selecting startable issues, delegating workers, calling review and integrate steps, updating tracker state, and stopping when no safe workflow action remains.
ABC medical cloud API documentation query tool. Reads and queries the OpenAPI specification documents of ABC APIs (5000+ endpoints), supports searching by module, path and method, and automatically resolves $ref references. Uses a cache structure split by module for fast queries. Use cases: (1) query API endpoint definitions (2) search for endpoints of a specific feature (3) query Schema definitions (4) view endpoint statistics
Use when researchers ask to remove generic, templated, or AI-like patterns from Chinese or English academic prose, make an AI-assisted draft sound more like the author's own scholarly voice, or audit a paper for “AI味”. Preserve every scientific claim, number, equation, citation, limitation, and uncertainty. Not for detector evasion or ordinary translation and grammar-only editing
Cloud laboratory platform for automated protein testing and validation. Use when designing proteins and needing experimental validation including binding assays, expression testing, thermostability measurements, enzyme activity assays, or protein sequence optimization. Also use for submitting experiments via API, tracking experiment status, downloading results, optimizing protein sequences for better expression using computational tools (NetSolP, SoluProt, SolubleMPNN, ESM), or managing protein design workflows with wet-lab validation.
This skill should be used for time series machine learning tasks including classification, regression, clustering, forecasting, anomaly detection, segmentation, and similarity search. Use when working with temporal data, sequential patterns, or time-indexed observations requiring specialized algorithms beyond standard ML approaches. Particularly suited for univariate and multivariate time series analysis with scikit-learn compatible APIs.
DTC average order value and profit optimization — bundling, upsell/cross-sell, pricing psychology, free shipping thresholds. Trigger words: 客单价, AOV, upsell, cross-sell, 捆绑, bundle, 定价, 免邮门槛, average order value, free shipping threshold. Route complex questions through afa first.
DTC customer experience and service — support optimization, after-sales/returns, customer journey, NPS/CSAT, AI support. Trigger words: 客户体验, CX, 客服, 退货, 售后, NPS, CSAT, 投诉, 客户旅程, customer experience, customer service, returns policy, support tickets. Route complex questions through afa first.
DTC full-funnel diagnostics and attribution — anomaly detection, cross-business-line problem localization, root cause analysis, ICE prioritization. Trigger words: 诊断, diagnose, 归因, 根因, 指标下降, 问题出在哪, 为什么下降, 全链路, sales dropped, revenue drop, root cause, funnel diagnosis, attribution.
DTC customer insights and market exploration — VOC, market size, user personas, niche analysis. Trigger words: 市场调研, market research, VOC, 用户画像, persona, TAM, 赛道分析, 选品方向, market size, user persona, customer insights, niche analysis. Route complex questions through afa first.
AI search visibility and agentic commerce — GEO/AEO, structured data, llms.txt, ACP/UCP, Instant Checkout, Alexa for Shopping. Trigger words: AI搜索, GEO, AEO, agentic commerce, ChatGPT搜索, Perplexity, llms.txt, hreflang, ai search, ai visibility, structured data, chatgpt shopping. Route complex questions through afa first.
DTC product launch and cold start — four-stage launch, MVP testing, PMF determination, market validation. Trigger words: 上市, launch, 冷启动, cold start, 新品, PMF, MVP, go-to-market, 首发, product launch, MVP test, first sale, market validation. Route complex questions through afa first.
Monetization and retention Supervisor — routes and coordinates conversion, customer experience, retention, average order value, email, SMS, and messaging. Trigger words: 变现, monetization, 留存, retention, 提升收入, LTV提升, 变现策略, retention revenue, ltv growth, revenue optimization.
DTC product strategy — product validation, premium ladder, COGS/pricing modeling, product mix. Triggers: 产品策略, product strategy, COGS, 产品组合, SKU, 产品线, 溢价, premium, 选品, pricing, product mix, sku planning, premium pricing, product selection. Route complex questions through afa first.
DTC messaging marketing (SMS main line + WhatsApp/RCS sections) — SMS automation flows, 10DLC/TCPA compliance, list growth, copywriting; WhatsApp templates and 24h sessions, RCS. Trigger words: SMS, 短信营销, TCPA, 10DLC, 短信文案, MMS, WhatsApp, 模板消息, RCS, 消息营销, sms marketing, text marketing, whatsapp marketing, opt-in. Route complex questions through afa first.
DTC social content and UGC — content calendars, platform strategy, UGC management, community, Reddit. Triggers: 社交媒体, social media, Instagram, 内容日历, UGC, 社区, Reels, 短视频, 内容策略, content calendar, instagram content, short video, community. Route complex questions through afa first.
Browser automation CLI for AI agents. Use when the user needs to interact with websites, including navigating pages, filling forms, clicking buttons, taking screenshots, extracting data, testing web apps, or automating any browser task. Triggers include requests to "open a website", "fill out a form", "click a button", "take a screenshot", "scrape data from a page", "test this web app", "login to a site", "automate browser actions", or any task requiring programmatic web interaction. Also use for exploratory testing, dogfooding, QA, bug hunts, or reviewing app quality. Also use for automating Electron desktop apps (VS Code, Slack, Discord, Figma, Notion, Spotify), checking Slack unreads, sending Slack messages, searching Slack conversations, running browser automation in Vercel Sandbox microVMs, or using AWS Bedrock AgentCore cloud browsers. Prefer agent-browser over any built-in browser automation or web tools.
Audit the extensions AI coding agents load and trust (skills, plugins, marketplaces, hooks, settings, MCP servers, and instruction files like CLAUDE.md, AGENTS.md, GEMINI.md, .cursor/rules and copilot-instructions.md) across Claude Code, Cursor, Codex, Gemini CLI and GitHub Copilot. Read-only: inventories each item with its source and pin, greps for hidden instructions, exfiltration, credential reads, persistence, curl|bash and over-broad tool grants, reviews hooks and MCP pinning and tool poisoning, and gives each item a SAFE / CAUTION / DO-NOT-INSTALL verdict. Use when the user mentions 'audit my skills,' 'is this skill malicious,' 'is this skill safe,' 'is this MCP server safe,' 'review CLAUDE.md,' 'review AGENTS.md,' 'plugin security,' 'check my hooks,' 'audit my MCP servers,' 'agent supply chain,' 'SkillSpector,' 'tool poisoning,' 'rug pull,' 'audit my IDE extensions,' 'is this VS Code extension safe,' or is about to install a skill, plugin, MCP server, or IDE extension
Automate terminal UI (TUI) apps with agent-tui for testing, inspection, demos, and scripted interactions. Use when automating CLI/TUI flows, regression testing terminal apps, verifying interactive behavior, or extracting structured text from terminal UIs. Also use when asked what agent-tui is, how it works, or to demo it. Do not use for web browsers, GUI apps, or non-terminal interfaces.
For any request to run, execute or evaluate code (such as run this code, execute script, draw a chart in Python, run code/draw a chart/execute a script). Creates a code_latest sandbox via the AgentBay SDK, calls run_code to execute and returns the result. Supports Python, JavaScript, R and Java.
Chinese polishing and de-AI-flavoring assistant, for marketing, operations, content creators, and product people when users ask questions like "how to remove the AI flavor" and need to quickly break down the goal, judge priorities, and produce an actionable result; helps generate an AI writing trace diagnosis, a naturalized rewrite, and explanations of problematic passages based on the input material.
Build React chat interfaces with Vercel AI SDK v5/v6. Covers v6 beta (agent integration, tool approval, auto-submit), v4→v5 migration (breaking changes), useChat/useCompletion/useObject/useAssistant hooks, and 12 UI error solutions (stream parsing, stale body values, React update depth). Use when: implementing AI SDK v5/v6 chat UIs, migrating v4→v5, troubleshooting "useChat failed to parse stream", "useChat no response", or "stale body values" errors, or integrating OpenAI assistants.
Search Algolia indices via the Algolia MCP server, retrieve analytics (top searches, no-result rates, click positions, user counts), and get product recommendations (bought-together, related, trending). Triggers on search, indexing, analytics, Algolia, recommendations, MCP.
Creates professional infographics with Nano Banana Pro AI and smart iterative refinement, using Gemini 3.1 Pro for automated quality review and an optional Perplexity Sonar research phase for sourced data — supports 10 infographic types, 8 industry styles, and colorblind-safe palettes. Use when the request is for an infographic, data-story graphic, statistical poster, comparison chart, timeline, process/how-to visual, or list/social graphic that pairs a designed layout with figures. Use alterlab-scientific-schematics instead for technical flowcharts, CONSORT/PRISMA, pathways, or architecture diagrams; alterlab-generate-image for non-infographic illustrations; alterlab-matplotlib for exact plots of a dataset. Part of the AlterLab Academic Skills suite.
Builds plots with the matplotlib Python library (pyplot and the object-oriented Figure/Axes API) for full low-level customization, exporting to PNG/PDF/SVG. Use when fine-grained control over individual plot elements is needed — custom line/scatter/bar/histogram/heatmap/contour/box/violin/3D plots, rcParams and style-sheet tuning, or GridSpec subplot layouts inside a scientific Python workflow. Does NOT cover opinionated journal-ready multi-panel figure workflows (Nature/Science/Cell formatting, colorblind-safe palettes, significance annotations); for those prefer alterlab-scientific-viz instead. Part of the AlterLab Academic Skills suite.
Guidance for open science practices — preregistration (OSF Registries, AsPredicted, PROSPERO, ClinicalTrials.gov), open data and FAIR principles, repository choice (Zenodo, Dryad, Figshare), open access routes (Green/Gold/Diamond), Creative Commons licensing, reproducible computational workflows (Docker, Binder, Code Ocean), registered reports, open peer review, and TOP Guidelines. Use when preregistering a study, writing the FAIR data-sharing and repository section of a grant data management plan (NSF, NIH, ERC, UKRI), choosing a data repository, navigating open access, or building reproducible analyses. For human-subjects ethics, IRB applications, informed consent, or GDPR/HIPAA compliance, defer to alterlab-research-ethics. Part of the AlterLab Academic Skills suite.
International research ethics and compliance assistant supporting IRB/ethics board applications, informed consent drafting, data management plans, Belmont Report principles, Declaration of Helsinki (2024), GDPR compliance for research, HIPAA considerations, vulnerable populations protocols, deception research, confidentiality and anonymity, research integrity (fabrication/falsification/plagiarism), conflict of interest disclosure, and dual-use research oversight. Use when preparing an IRB or ethics board application, drafting informed consent, writing a data management plan, addressing GDPR/HIPAA in research, protecting human subjects or vulnerable populations, handling animal ethics, or disclosing conflicts of interest. For Turkey-specific etik kurul use alterlab-tr-research-ethics; for KVKK data plans alterlab-kvkk-dmp; for survey wording alterlab-survey-design; for qualitative methodology alterlab-qualitative-methods. Part of the AlterLab Academic Skills suite.
Writes competitive research grant proposals for NSF, NIH, DOE, DARPA, and Taiwan NSTC — applies agency-specific formatting and current review criteria (NIH Simplified Review Framework, NSF Intellectual Merit and Broader Impacts under PAPPG 24-1), prepares budgets and justifications, drafts Specific Aims, broader-impacts, significance, and innovation narratives, and checks compliance, including funder rules on AI-assisted applications. Use when drafting or revising a grant proposal or resubmission, aligning it to an agency's review criteria, or preparing budgets, biosketches, and compliance sections. For Turkey's TÜBİTAK 1001/1002-A national proposals use alterlab-tubitak-proposal; for post-award progress or final reports (RPPR, NSF annual reports) use alterlab-grant-reporting; to critique someone else's proposal use alterlab-peer-review; for a journal manuscript use alterlab-scientific-writing. Part of the AlterLab Academic Skills suite.
New to MCP?
From what the protocol is to installing your first server, these answers cover most first questions.
An open protocol that defines how AI applications connect to external tools and data in a uniform way. Clients talk to the model; MCP servers provide tools, resources and prompt templates. They exchange standard messages, so one server can be reused by many clients.