Skills
99,064 packaged capabilities and playbooks for agents. Install any of them with one command.
All
Provides comprehensive guidance for Android development with Kotlin including activities, fragments, views, lifecycle, navigation, and Android app development. Use when the user asks about Android Kotlin, needs to create Android applications, implement Android components, or work with Kotlin in Android.
Comprehensive Android APK security audit with static analysis, dynamic instrumentation, source-to-sink tracing, IPC/component abuse analysis, and CVSS 4.0 reporting. Covers decompilation, manifest analysis, deep links and intent injection, secrets detection, crypto analysis, Frida/Objection integration, and APK repackaging. Use when user says "audit APK", "analyze android app", "mobile pentest", "APK security", "decompile APK", "android vulnerability assessment", "reverse engineer android", "modify APK", "intent injection", "deep link abuse", "bypass SSL pinning", "bypass root detection", or provides an APK for security review, decompiled Android sources, or decoded resources.
A testing reference for Android app development (Kotlin). Covers JUnit4, AndroidJUnit4, Truth, Espresso (cheat sheet), the test pyramid, test doubles, Mockito, MockK, Robolectric; coroutines/Flow/ViewModel testing, ActivityScenario, FragmentScenario, UiAutomator, AndroidTestOrchestrator; createComposeRule, runComposeUiTest, ComposeUiTestConfig, Compose UI test synchronization, CI, and Window Testing (by screen size).
A reference for the androidx.wear API and Watch Face Format (WFF) on Wear OS (Kotlin). Covers Wear Compose CurvedLayout, rotary input, ambient mode, one-handed gestures, ScalingLazyColumn; Tiles/Material3TileService/ProtoLayout; ComplicationDataSourceService and ComplicationData types; Health Services (MeasureClient, ExerciseClient, PassiveMonitoringClient); Data Layer (ChannelClient); and WFF XML elements, expressions, complication slots, user settings, and Watch Face Designer.
API testing from OpenAPI/Swagger or case schemas: parameters, boundaries, auth, idempotency, concurrency, error responses, data consistency; runnable scripts; k6 handoff. Not for: Web UI flows, manual case writing. 接口级测试:参数/边界/鉴权/幂等/并发/错误响应/数据一致性,产出脚本与结果;含 k6 压测。不用于:Web UI、手动用例。
Build a local-business lead list without scraping Google Maps. Routes "find dentists / plumbers / salons / restaurants in <city> with emails", "business email finder for <category> in <city>", "web-design prospects with no website or a weak one", "enrich my list of business websites with verified emails", "leads within 5 km of an address" and "alert me when new businesses appear" to an OpenStreetMap-based Actor that crawls each business's own website and returns one 73-column row per business with an MX-verified email, phone, social profiles, website platform and a 0-100 lead score. No Google Maps, no API key, no proxy, no login; every filter runs before billing. Use when the user wants local B2B leads for cold email or calls, a Google Maps alternative that avoids Google's terms, a bring-your-own-website-list enrichment pass, or a scheduled new-business watch for one category and city.
Reverse engineer, debloat, de-ad, patch, or re-sign Android APKs, and analyze their runtime and server-side behaviour. Use for an .apk/.aab/.dex/.so sample, smali or dex patching, Frida hooking, repacking, ad or SDK removal, API probing, or deciding whether a client-side patch can work. Covers recon, anti-tamper, membership limits, surgical dex patching, repack pitfalls, device setup, and a failure catalogue.
Build targeted account and contact lists with Apollo's database through the ColdIQ marketplace. Use when searching companies or people with Apollo's filter semantics (titles, seniority, employee ranges, industries, technologies, intent), enriching people or organizations, or building a TAM from Apollo. Triggers on "Apollo search", "Apollo filters", "build a TAM", "search companies", "search people", "enrich org", "enrich people", "find companies by technology", "employee count range", "intent topics". Do NOT use for Lima Data or large-scale ai-ark search (see coldiq-search-enrich), email-finding waterfalls (see contact-enrichment), or campaign sending (see instantly-api).
Diagnose existing UiAutomator2 session-startup, app-activity, adb transport, helper-server, native or hybrid locator failures, and XCUITest WebDriverAgent, session-startup, app install or launch, device or simulator state, alert, element-source, or locator failures. Use when a session or command under one of those drivers already fails. Do not use for first-time setup, pre-failure real-device provisioning, or Espresso, Chromium, Gecko, Safari, or Mac2 failures.
visionOS / iOS spatial computing. RealityKit, ARKit, visionOS SwiftUI, USDKit, Spatial Preview. Entity, ModelEntity, AnchorEntity, Component, System, RealityView, MeshResource, Material, EntityAction, MeshDeformerComponent, GaussianSplatComponent, ComputeGraphComponent, ComputeNodeGraph, PhysicsJointsComponent, ForceEffectComponent, ClothBodyComponent, NavigationComponent, NavigationMeshComponent, NavigationController, USDStage, SpatialPreviewSession, ImmersiveSpace, ImmersionStyle, WindowGroup, VolumetricWindowStyle, Model3D, ARKitSession, ARSession, ARWorldTrackingConfiguration, WorldTrackingProvider, HandTrackingProvider, ImageTrackingProvider, AccessoryTrackingProvider, CameraFrameProvider, ObjectTrackingProvider, RoomTrackingProvider, SceneReconstructionProvider.
Turn artifact photos, artifact descriptions, or existing sketches into a cultural relic drawing workflow that conforms to archaeological report standards, generation prompts, image production execution, and drawing review criteria. Use when Codex needs to create, edit, critique, prompt, or generate cultural relic drawings, artifact report plates, orthographic line drawings, vessel profiles, half-section views, stone tool multi-view drawings, openwork ornament drawings, or black-and-white technical illustrations from photos or descriptions. Triggers include: 文物绘图、考古绘图、器物线图、器物剖面图、半剖面、正投影、文物照片转绘图、器物照片转绘图、cultural relic drawing, archaeological drawing, artifact illustration, orthographic artifact drawing, pottery profile drawing.
Build and debug encrypted Solana applications with Arcium — data stays private during computation, no single party sees it. Use when writing Arcis circuits (#[encrypted], #[instruction]), wiring Anchor programs with init/queue_computation/callback flows, choosing Shared vs Mxe encrypted state, encrypting inputs with @arcium-hq/client (RescueCipher, x25519), or debugging ArgBuilder ordering, nonce, callback, or computation finalization failures. Covers dark pools, sealed-bid auctions, encrypted voting, hidden game state, confidential DeFi, secure randomness, and threshold signing. Also use for getting started with your first Arcium app.
Route Arduino and embedded-system requests across Arduino IDE, Arduino CLI, PlatformIO, and vendor-specific tools. Use when a request combines firmware, board constraints, electronics, power, networking, calibration, enclosure, upload, debugging, OTA, or maintenance, or when the exact board or toolchain is not yet clear.
ArgoCD CLI interaction for cafehyna-hub cluster. USE WHEN managing ArgoCD applications OR applicationsets OR syncing OR deploying OR checking app status OR managing clusters/repos/projects via argocd CLI at argocd.cafehyna.com.br or localhost:8080.
Creates beautiful ASCII art visualizations for plans, architectures, workflows, and data. This skill should be used when explaining system architecture, creating implementation plans, showing workflows, visualizing comparisons, or documenting file structures. NOT for code syntax highlighting or markdown tables. User explicitly loves ASCII art - use liberally for visual communication.
Assess an immutable patch artifact's program impact, regression risk, and auto-merge eligibility. Use for generated patch files, provider pull-request diffs, or commit ranges when reviewers need evidence about affected runtime paths, contracts, tests, and recoverability. This skill is read-only and does not generate, edit, apply, push, or merge the patch
Use this skill ANY time you need to search for code structure, refactor symbols, analyze impact, find dead code, or trace dependencies. ALWAYS invoke BEFORE using grep for structural code analysis. Trigger categories: structural pattern search (e.g. useEffect without deps, async without try-catch, fetch calls outside src/api), bulk code migration/transformation (wrap handlers, replace API calls), dependency & impact analysis (blast radius, transitive deps, which modules depend on X), safe renaming across codebases, dead code & circular import detection, ast-grep rule authoring. Trigger keywords: try-catch, useEffect, async without, circular imports, safe rename, blast radius, bulk migration, never imported, unused exports, ast-grep, enforce pattern, structural search, depends on, which modules. Do NOT trigger for: grep-able string searches, file-name lookups, reading READMEs, writing regex, CSV/data scripts.
Comprehensive Python library for astronomy and astrophysics. This skill should be used when working with astronomical data including celestial coordinates, physical units, FITS files, cosmological calculations, time systems, tables, world coordinate systems (WCS), and astronomical data analysis. Use when tasks involve coordinate transformations, unit conversions, FITS file manipulation, cosmological distance calculations, time scale conversions, or astronomical data processing.
Turn manual cases into Playwright E2E automation run in a browser: page objects, helpers, bug evidence, reports. Not for: API tests, exploratory sessions, bug root-cause. 将手动用例转为 Playwright E2E 自动化并真实执行;含写自动化前的业务熟悉踩点、Page Object/Helper、Bug 证据与报告条目。不用于:API 接口测试、独立探索会话(exploratory-testing)、Bug 根因。
Automated quantitative trading strategy generator. Input a strategy requirement (clear or vague) → in-depth analysis → generate runnable strategy code + backtest validation → automatic optimization. Core innovation: STRATEGY_DESIGN.md serves as the "system blueprint", and AI strictly translates it when generating code rather than improvising. Four entry points: (1) clear strategy requirement → direct analysis (2) vague requirement → diagnosis and recommendation → then analysis (3) existing strategy → optimization and iteration (4) influencer/blogger → internet research → distilled strategy. Trigger words: 「量化策略」「制定策略」「写个策略」「回测」「autostrategy」「策略生成」「量化XX」「XX投资策略」「XX的投资逻辑」. Scenario triggers: 「帮我设计一个均线交叉策略」「我想做一个A股量化策略」「这个策略回测一下」「优化这个策略的回测结果」. Applicable markets: A-shares / HK stocks / US stocks (futures and options not yet supported; to be added gradually in later versions). Persona-style strategies also trigger: 「写一个巴菲特投资策略」「段永平的投资逻辑量化一下」「帮我用索罗斯的反身性做个策略」. Blogger strategies trigger: 「根据XX博主的投资观点做个策略」「按XX大V的思路写个策略」「帮我量化XX的炒股方法」「XX博主的投资逻辑做策略」.
Design banners for social media, ads, website heroes, creative assets, and print. Multiple art direction options with AI-generated visuals. Actions: design, create, generate banner. Platforms: Facebook, Twitter/X, LinkedIn, YouTube, Instagram, Google Display, website hero, print. Styles: minimalist, gradient, bold typography, photo-based, illustrated, geometric, retro, glassmorphism, 3D, neon, duotone, editorial, collage. Uses ui-ux-pro-max, frontend-design, ai-artist, ai-multimodal skills.
Mandatory rules for running bazel tests during development. Load this skill before running any bazel test command, especially when validating fixes or verifying regression tests. Prevents false confidence from cached results, filter flags that silently match nothing, and partial test runs that miss breakage.
Better environment variable management for agents and humans with full type safety, CLI-based remote environment synchronization, and environment validation. Use when setting up typed config schemas, validating env variables, or managing remote env vars across Vercel, Netlify, Railway, Cloudflare, and Fly.io with better-env.
A tool for automatically recording livestreams, submitting posts, and reposting Twitch and ytb channel content. Provides command-line posting (Bilibili) and video downloads, supports multiple login methods and multi-part videos. Records and uploads simultaneously without writing to disk.
Reason about Commet subscription, plan-change, invoicing, dunning, usage, credits, balance, seats, add-on, pricing, Offer, and billing edge cases. Use the installed SDK documentation for exact API contracts and these verified references only for behavior that the generated contract cannot express.
New to MCP?
From what the protocol is to installing your first server, these answers cover most first questions.
An open protocol that defines how AI applications connect to external tools and data in a uniform way. Clients talk to the model; MCP servers provide tools, resources and prompt templates. They exchange standard messages, so one server can be reused by many clients.
