Skills
99,064 packaged capabilities and playbooks for agents. Install any of them with one command.
All
Comment-hygiene-only reviewer — flags ephemeral review-ID references, historical change-narration, stale comments, reviewer-appeasement, redundant restating, verbose rationale essays, and diff-level comment density in the scoped diff, and normalizes findings into the verify pipeline format
Implement and diagnose Commet webhook endpoints in Node, Python, Go, Java, or PHP, including framework handlers, signature verification, event handling, retries, and idempotency. Use event names, payloads, headers, and helpers from the installed SDK documentation and types rather than a copied event catalog.
Analyse competitor moves and translate them into strategic implications for your product roadmap. Use when a competitor announces a new feature, pricing change, partnership, or strategic shift, or when producing a periodic competitive intelligence report. Produces a categorised signal analysis with reactive-vs-proactive assessment, threat ratings, specific roadmap implications, and recommended responses with owners. For a recurring whole-market briefing use competitive-intelligence-monitor instead.
Build and deploy the Goldsky Compose bitcoin-oracle example under the user's own account — a cron task that fetches BTC/USD from CoinGecko and writes `(timestamp, price)` as `bytes32` values to an on-chain `PriceOracle` contract via a Compose-managed wallet, appending each price to a durable collection. Triggers on: 'build a bitcoin price oracle', 'BTC/USD oracle onchain', 'push a price feed onchain', 'cron price oracle', 'set up / deploy the bitcoin-oracle example', 'compose price oracle'. Recommends the shared fully-unpermissioned oracle on Base Sepolia so there's nothing to deploy. Scaffolds the example from goldsky-io/documentation-examples, walks CLI install, contract choice (reuse shared / deploy own), wiring, optional GitHub publish, and a log-tailing smoke test. For a custom/novel Compose app that isn't this oracle, use /compose. For debugging an already-deployed app, use /compose-doctor. For manifest/CLI/API field lookups, use /compose-reference.
Run all infrastructure standards checks and configure compliance across a project. Use when performing a comprehensive infrastructure audit, setting up a new project against all standards, batch-fixing compliance issues with --fix, or validating CI/CD compliance. Natural triggers: "check all standards", "audit project compliance", "configure everything", "run all configure checks".
Check and configure container infrastructure (builds, registry, scanning, devcontainer). Use when auditing container infrastructure compliance, checking multi-stage builds and non-root users, setting up container build workflows with GHCR and multi-platform support, or adding Trivy/Grype scanning to CI pipelines. Natural triggers: "configure container build", "add container scanning", "set up GHCR workflow".
Provides systematic approaches for solving constraint-based scheduling problems, such as finding meeting times that satisfy multiple participant availability windows, preferences, and existing calendar conflicts. This skill should be used when tasks involve scheduling with constraints, calendar conflict resolution, time slot optimization, or finding valid time windows across multiple inputs with hard and soft constraints.
Use this skill to set up Salesforce Consumer Goods (CG) Cloud Mobile Sync end-to-end for the Sync Management App managed package — it runs all three acts in order (Act 1 Setup Sync, Act 2 Assign Users, Act 3 Plan & Verify), not just installing the baseline, so a sales rep can see the day's planned visits offline. Use it when asked to \"set up CG Cloud mobile sync\", \"configure Consumer Goods mobile sync\", \"set up sync for Retail Execution\", \"install the sync baseline\", \"assign a user to the sync configuration\", \"verify the sync setup\", or \"why can't my rep see their planned visits offline\" when sync setup or the baseline install is suspected. DO NOT TRIGGER for general CG Cloud mobile-app troubleshooting unrelated to sync setup, for authoring new or custom sync baselines (this installs only shipped baselines discovered at runtime), or for building or customizing the mobile app UI itself — those are out of scope.
Creates beautiful, branded HTML content assets — industry reports, landing pages, comparison sheets, one-pagers — from structured data. Uses Gamma API (preferred), v0.dev Platform API, or a self-hosted HTML template system with Tailwind CSS. Outputs self-contained HTML files that can be hosted as web pages or converted to PDF.
Audit and optimise context window usage for AI coding tools (Claude Code, OpenCode, etc.). Estimates token breakdown, identifies waste (duplicate skills, overlapping rules, bloated instruction files, dirty git status, MCP server overhead), and provides actionable recommendations with projected savings. Use when the user says "context checkup", "reduce context", "check context", "context audit", "how big is my context", or when sessions feel sluggish.
Review contracts against your organization's negotiation playbook, flagging deviations and generating redline suggestions. Use when reviewing vendor contracts, customer agreements, or any commercial agreement where you need clause-by-clause analysis against standard positions.
When the user wants to design supply chain control towers, implement visibility platforms, or establish centralized monitoring. Also use when the user mentions "control tower," "supply chain visibility," "command center," "control room," "real-time monitoring," "supply chain operations center," "visibility platform," "exception management," or "centralized control." For track-and-trace, see track-and-trace. For collaboration, see supplier-collaboration.
Fetch web content. Use when the user asks to extract text from PDFs, Word docs, PowerPoint, Excel, images, audio, EPUBs, MHTML, YouTube transcripts, or any URL — even if they say 'read this file', 'get the text from', 'extract content', or 'transcribe'.
Write persuasive, high-converting copy for any format — ads, landing pages, emails, sales pages, headlines, product descriptions, CTAs, and social posts. Applies professional copywriting SOPs including avatar/ICP development, Voice of Customer research, Eugene Schwartz's 5 Stages of Awareness, AIDA, PAS, BAB, FAB frameworks, the TIMER offer framework, readability rules (Grade 6, ≤14 words/sentence), psychological triggers (scarcity, social proof, loss aversion, reciprocity), and the 4 C's quality checklist. Use when a user asks to write, improve, rewrite, or review any marketing or sales copy.
Co-Write mode for Chinese web fiction. Use when the user wants to write together with AI instead of handing over a whole chapter; is stuck on what to write next; wants AI to continue from their own writing; wants several versions in different directions (recommended + alternatives) to choose from; or wants to set only the goal, conflict, and emotion and have AI write the prose. Three modes: Auto (AI writes automatically), Assist (I write some, AI fills in some), and Director (I set the direction, AI produces multiple versions).
Mandatory CTF/range flag verification process. When a suspected flag string (including formats such as flag{, FLAG{, ctf{) is found through **any means**, you **must immediately** use this skill to verify it; do not submit it directly. This prevents submitting an incorrect flag due to character truncation, encoding errors, HTML entities, incomplete base64 decoding, hex truncation, and similar issues. Even if the flag looks complete, hidden characters or encoding problems may be present. Covers all flag extraction scenarios such as segmented extraction via SQL injection, truncated command execution output, file read encoding, and web page parsing. Any time you see the string flag{, this skill should be triggered
Architecture and hard-won debugging lessons for customization enablement (plugins, MCP servers, agents, skills, instructions) in the agent host. Use when changing how customizations are discovered, published, enabled/disabled, or handed to a provider SDK; when a customization shows the wrong enabled state in the UI; or when a disabled MCP server or plugin is still reaching the model.
Optimize resumes by matching keywords to the job description, rewriting experience with the quantified STAR method, and checking ATS compatibility. Triggered when users ask for resume help, review, or polishing, mention JD matching, STAR method, ATS, or want to tailor their resume for a specific role.
Create interactive data visualizations using d3.js. Use this skill when creating custom charts, graphs, network diagrams, geographic visualizations, or any complex SVG-based data visualization that requires fine-grained control over visual elements, transitions, or interactions. Use it for bespoke visualizations beyond standard charting libraries, whether in React, Vue, Svelte, vanilla JavaScript, or any other environment.
Interpret the three core financial statements (income statement, balance sheet, cash flow statement) to assess business health and performance. Use this skill when the user needs to read financial statements, understand profitability vs cash flow, evaluate a company's financial position, or prepare for investor/board meetings — even if they say 'explain these financials', 'are we making money', 'read this annual report', or 'what do these numbers mean'.
Generate self-contained HTML/SVG infographics from JSON data, including stat cards, bar charts, flow diagrams, and mixed dashboards. Offers 8 color palettes and built-in icons with no external dependencies. Triggered when users request data visualization, infographics, charts, or dashboards.
Database performance optimization, schema design, query analysis, and connection management across PostgreSQL, MySQL, MongoDB, and SQLite with ORM integration. Use this skill for queries, indexes, connection pooling, transactions, and database architecture decisions.
Execute database migrations across ORMs and platforms with zero-downtime strategies, data transformation, and rollback procedures. Use when migrating databases, changing schemas, performing data transformations, or implementing zero-downtime deployment strategies.
Analyse Datadog observability data including metrics, logs, monitors, incidents, SLOs, APM traces, RUM, security signals, and more. Use when asked to investigate infrastructure health, query metrics, search logs, check monitors, diagnose errors, or analyse any Datadog data.
French State open data platform (data.gouv.fr) — search catalog, dataset metadata, organizations, download files, query tabular CSV rows (Tabular API), usage metrics (Metrics API), discover external APIs (dataservices). Use for consumption, analysis, or MCP-assisted exploration. Optional producer coaching (documentation/quality before publication on the platform).
Guide for recording significant architectural and design decisions in docs/decisions.md. Use this skill when clearly significant architectural decisions are made (database choices, frameworks, core design patterns) or when explicitly asked to document a decision. Be conservative - only suggest for major decisions, not minor implementation details.
Deduplicates code by finding one single source of truth and sharing it across call sites. Works on a named target or the full first-party codebase. Collapses duplicated logic, types, schemas, constants, UI, and tests that represent the same knowledge—without inventing false abstractions. Use when the user says "deduplicate", "dedupe", "DRY this up", "remove duplication", "single source of truth", "extract shared", or asks to consolidate repeated code into one place.
Use when a non-designer needs to audit a UI, generate a design spec (spacing, type scale, color tokens, grids), or build brand foundations (logo systems, palette and type pairing, brand guidelines). Covers the visual layer, UX/perceptual critique, and brand identity. For implementing the design in code (React/HTML/CSS), use frontend-design.
Apply Gang of Four design patterns to solve architectural problems in TypeScript. Use when refactoring code architecture, implementing extensible systems, decoupling components, or following SOLID principles. Covers all 22 GoF patterns: Creational (Factory Method, Abstract Factory, Builder, Prototype, Singleton), Structural (Adapter, Bridge, Composite, Decorator, Facade, Flyweight, Proxy), and Behavioral (Chain of Responsibility, Command, Iterator, Mediator, Memento, Observer, State, Strategy, Template Method, Visitor).
New to MCP?
From what the protocol is to installing your first server, these answers cover most first questions.
An open protocol that defines how AI applications connect to external tools and data in a uniform way. Clients talk to the model; MCP servers provide tools, resources and prompt templates. They exchange standard messages, so one server can be reused by many clients.