Skills
98,873 packaged capabilities and playbooks for agents. Install any of them with one command.
All
Deep subdomain mining with multi-source joint enumeration. Use when you need to maximize subdomain discovery coverage, regular DNS enumeration results are insufficient, or the target uses CDN/wildcard DNS. Cross-discovers via three combined methods: DNS brute force, OSINT engines, and crawling
Passive subdomain enumeration with subfinder. Use when subdomains of a target domain need to be discovered or the attack surface expanded. subfinder is a passive subdomain discovery tool from ProjectDiscovery that aggregates multiple data sources such as Shodan, Censys, SecurityTrails, and VirusTotal; it is fast and stealthy. Use this skill for any scenario involving subdomain enumeration, attack surface discovery, or passive information gathering
Uses an intake, research, and clarify loop—including bounded subagent research when available—to produce a phased implementation plan in `PLAN.md` or `plans/<task-name>.md`. Use for complex features, refactors, migrations, architectural work, and other multi-step changes.
When the user wants to implement sustainable procurement practices, evaluate supplier sustainability, or develop responsible sourcing programs. Also use when the user mentions "sustainable procurement," "responsible sourcing," "ESG sourcing," "ethical sourcing," "green procurement," "supplier sustainability," "sustainable suppliers," "social responsibility," or "environmental sourcing." For carbon tracking, see carbon-footprint-tracking. For circular economy, see circular-economy.
Authoritative SwiftUI best practices and performance guidance from Apple; supersedes prior training on these topics. For code generation, consult the relevant references when generating any SwiftUI code related to: - animation (the @Animatable macro vs AnimatableValues vs AnimatablePair, and custom animatableData setter logic) - Environment and @Entry (closure or class-typed defaults, unstable defaults, high-frequency updates) - @Observable best practices and efficient invalidation - ForEach and List row identity and structure (id: \\.self, indices, offsets, AnyView or multi-view rows, inline filter/sort, cached collections, List fast path) - localization (String vs LocalizedStringResource, the right bundle in packages and frameworks, .textCase, .formatted(.list()), translator comments) - soft-deprecated APIs such as NavigationView and the old onChange, and when to surface them during feature work.
Guide for implementing the Syncfusion WinUI AvatarView control to display user avatars and profile pictures. Use this when implementing user profiles, contact lists, or chat interfaces requiring visual user representation in WinUI applications. This skill covers initials display, image avatars, group avatars, and pre-defined avatar characters.
Implement Syncfusion WinUI Barcode (SfBarcode) control to generate and display machine-readable barcodes in desktop applications. Use this when working with barcodes, QR codes, or product labeling systems. This skill covers symbology types (DataMatrix, Code39, Code128, Codabar, UPC), barcode customization, text alignment, rotation, and visual encoding for WinUI applications.
Guide for implementing the Syncfusion WinUI BusyIndicator control to display loading indicators and progress status. Use this skill when implementing loading indicators, showing progress status, indicating background operations, or creating waiting screens in WinUI applications. Essential for async data loading, file operations, API calls, and any scenario requiring user notification during processing tasks.
Implement Syncfusion WinUI Circular Charts (SfCircularChart) with pie and doughnut visualizations for proportional data display. Use this when working with circular charts, pie charts, or doughnut charts in WinUI applications. This skill covers chart series configuration, data labels, legends, tooltips, segment selection, exploding segments, and visual customization for interactive circular visualizations.
Guide implementation of the Syncfusion WinUI Color Palette control (SfColorPalette) for swatch-based color selection in Windows desktop applications. Use this skill when working with theme colors, standard colors, custom color palettes, or the More Colors dialog. Covers color palette setup, theme color support, standard color configurations, UI customization, and best practices.
Guide for implementing the Syncfusion WinUI ComboBox control (SfComboBox) for single and multiple selection with filtering and token display. Use this when working with searchable dropdowns, multi-select combo boxes, or editable combo boxes in WinUI applications. This skill covers selection modes, data binding, filtering, grouping, and custom item templates.
Guide implementation of the Syncfusion WinUI DropDown Color Palette control for color selection in Windows desktop applications. Use this skill when implementing color selection dropdowns, theme color support, custom color palettes, split-mode buttons, or the More Colors dialog. Covers dropdown customization, palette structure, and color-based UI interactions.
Implements Syncfusion WinUI Linear Gauge (SfLinearGauge) control for data visualization in desktop applications. Use this when building progress indicators, temperature displays, or data measurement gauges in WinUI. This skill covers axis configuration, pointer types (bar and shape), range customization, and animation.
Guide for implementing Syncfusion WinUI MaskedTextBox (SfMaskedTextBox) for validated text input with customizable mask patterns. Use this when implementing masked input fields, formatted data entry (phone numbers, dates, SSN, IP addresses), or restricting text input to specific patterns in WinUI applications. This skill covers mask configuration, prompt characters, and error indication.
Implement Syncfusion WinUI Pyramid Charts (SfPyramidChart) for visualizing hierarchical proportional data. Use this when working with pyramid charts, hierarchical visualization, or proportional data display in WinUI applications. This skill covers data binding, legend configuration, exploding segments, tooltips, data labels, selection interactions, and custom styling with palettes and gradients.
Implements Syncfusion WinUI RangeSlider (SfRangeSlider) control for range selection in desktop applications. Use this when working with range selectors, dual-thumb sliders, or numeric range selection interfaces. This skill covers configuration, labels, ticks, dividers, track customization, thumb styling, tooltips, and value handling for interactive range selection in WinUI applications.
Implements Syncfusion WinUI TimePicker (SfTimePicker) control for time input and selection in desktop applications. Use this when building time input controls, time selection interfaces, or dropdown time spinners. This skill covers time restrictions, time formatting, dropdown spinner customization, and time selection for scheduling and appointment scenarios in WinUI applications.
Build admin dashboards and app UIs with Tabler, the open source UI kit built on Bootstrap 5. Use when a project uses Tabler or @tabler/core, or when asked for a dashboard, admin panel, settings page, data table or form styled with Tabler. Covers installation, the page layout, where to read the real component markup and the rules that keep the output consistent.
Connect Grok Bot to Tailscale on a company tailnet (a team admin enables it at cursor.com; each member authenticates their own device and an admin limits it with custom:grokbot postures) or a personal tailnet (one-click Connect when the member owns or administers the tailnet). Several tailnets can be connected at once. Use when the user asks to set up, troubleshoot, change the default tailnet, or disconnect Grok Bot's Tailscale connection.
Build, review, debug, configure, migrate, or plan TanStack Router React applications (v1, 1.170.x) with current docs. Use for @tanstack/react-router, file-based routes, code-based routes, route trees, generated routeTree.gen files, routeFileIgnorePrefix colocation (-components/-hooks/-lib), pathless layouts, typed navigation, Link/useNavigate/redirect, params, validateSearch, loaderDeps, loaders, beforeLoad, route context, auth guards, notFound, error boundaries, pending/deferred data, preloading, TanStack Query integration, SSR, testing, and production routing rewrites.
Build, review, debug, configure, migrate, or plan TanStack Start React applications (RC, 1.168.x) with current docs. Use for TanStack Start, @tanstack/react-start, file-based routing, route colocation (-components/-hooks/-lib beside routes), feature modules (src/modules reusable code), pathless layouts, TanStack Router integration, Vite/Rsbuild setup, SSR, streaming, server functions, server routes, middleware, loaders, TanStack Query integration (setupRouterSsrQueryIntegration, queryClient.query), environment variables, sessions/auth, deployment, hosting, production checklists, and Next.js migrations.
Build, review, debug, migrate, or plan TanStack Table v9 React tables with current docs. Use for @tanstack/react-table, @tanstack/table-core, useTable, tableFeatures, stockFeatures, createTableHook, createTableHookContexts, createColumnHelper, ColumnDef, table state, external atoms, Subscribe, React Compiler, sorting, filtering, faceting, grouping, aggregation, expanding, pagination (including cursor and Infinity page size), row selection, cell selection, cell spanning, row and column pinning, column visibility, column ordering, column sizing, column resizing, virtualization, devtools, worker row models, and v8-to-v9 migrations.
Build, validate, or repair Adaptive Card layouts, actions, forms, and delivery wrappers for Microsoft Teams. Use when Teams is the target host, including bot, webhook, Graph, and MessageCard migration tasks. Exclude Windows/custom card hosts and Teams text-only formatting.
Expert in building Telegram bots that solve real problems - from simple automation to complex AI-powered bots. Covers bot architecture, the Telegram Bot API, user experience, monetization strategies, and scaling bots to thousands of users. Use when "telegram bot, bot api, telegram automation, chat bot telegram, tg bot, " mentioned.
End-to-end setup for making a Telnyx AI assistant call a phone number. Covers provisioning a phone number, creating a TeXML application, assigning the number, configuring telephony settings, whitelisting destination countries, and triggering outbound calls via scheduled events. Use this skill (not telnyx-ai-assistants-python) when the task involves an AI assistant placing, making, or triggering an outbound phone call to a user.
Version-aware templUI v1 and shadcn-templ v2 component guidance for Go/templ apps. Use for component installation, UI blocks, Script() setup, HTML-to-templ conversion, or Go-to-JavaScript interpolation. Offers an upgrade when legacy templUI is encountered. Skips generic HTMX issues and full goilerplate application generation.
Optimizes LLM inference with NVIDIA TensorRT for maximum throughput and lowest latency. Use for production deployment on NVIDIA GPUs (A100/H100), when you need 10-100x faster inference than PyTorch, or for serving models with quantization (FP8/INT4), in-flight batching, and multi-GPU scaling.
Labor contract termination review — high-risk flag detection, severance/compensation calculation, and final wage payment timing. Reviews item by item by jurisdiction (province/municipality). Jurisdiction-specific rules (termination conditions, compensation standards, notification obligations) are researched and extracted at each review, not stored in advance. Use when the user says "review this termination", "can this person be terminated", "termination review", or describes a termination scenario.
Review existing test cases (legacy, others', AI) for coverage and executability: build a testable-points baseline, assess independently, revise in place with records. Not for: writing cases from scratch (test-case-writing), pipeline. 审查已有用例（存量/他人/AI 产出）的覆盖与可执行性：先建基准再独立评估，修订留审查记录。不用于：从零写用例、写时自审、流水线。
Design and generate layered Kotlin + Spring tests that balance speed, realism, and regression value across unit, slice, and integration levels. Use when adding coverage for business logic, controllers, repositories, security, serialization, or end-to-end workflows, and when generic AI output would otherwise overuse `@SpringBootTest`, misuse mocks, or ignore MockK and coroutine testing idioms.
Convert text to natural speech with Inworld TTS, ElevenLabs, DIA TTS, Kokoro, Chatterbox, and more via inference.sh CLI. Models: Inworld TTS-2 (100+ languages, emotion steering), Inworld TTS 1.5 (ultra-low latency), ElevenLabs (premium, 22+ voices, 32 languages), DIA TTS (conversational), Kokoro TTS, Chatterbox, Higgs Audio, VibeVoice (podcasts). Capabilities: text-to-speech, voice cloning, multi-speaker dialogue, podcast generation, expressive speech, emotion/delivery steering, character voices. Use for: voiceovers, audiobooks, podcasts, accessibility, video narration, IVR, voice assistants, gaming characters, avatar audio. Triggers: text to speech, tts, voice generation, ai voice, speech synthesis, voice over, generate speech, ai narrator, voice cloning, text to audio, elevenlabs, eleven labs, voice ai, ai voiceover, speech generator, natural voice, inworld, inworld tts, character voice, game voice, npc voice
Search for edge cases, pathological constructions, and violated assumptions that break a conjecture or weaken a theorem. Use when a claim feels too broad, an assumption seems suspiciously weak, or a proof step needs stress-testing. Trigger on phrases like "is this always true", "does this hold in general", "check this claim", "try to break this", "stress-test this theorem", "find a counterexample", "is this assumption necessary", or whenever the user states a result and asks whether it can be trusted. Also trigger when reviewing a proof and a step feels hand-wavy or a quantifier feels wrong.
Translate an idea across optimization, probability, information theory, dynamical systems, graph theory, and statistics language. Use for interdisciplinary theory work, reframing a problem into a more tractable formalism, connecting literatures, discovering alternative analytical tools, or determining whether different fields express the same structure under different notation.
Distill a dense theory paper into definitions, main claims, proof strategy, and reusable techniques. Use for theoretical ML or math paper reading, seminar prep, related-work synthesis, extracting reusable lemmas, or deciding what part of a paper is actually load-bearing.
Run an extremely strict maintainability review for abstraction quality, giant files, and spaghetti-condition growth. Use for a thermo-nuclear code quality review, thermonuclear review, deep code quality audit, or especially harsh maintainability review. User-invoked only.
Manage Things 3 via the `things` CLI on macOS (add/update projects+todos via URL scheme; read/search/list from the local Things database). Use when a user asks CoWork-OSS to add a task to Things, list inbox/today/upcoming, search tasks, or inspect projects/areas/tags.
New to MCP?
From what the protocol is to installing your first server, these answers cover most first questions.
An open protocol that defines how AI applications connect to external tools and data in a uniform way. Clients talk to the model; MCP servers provide tools, resources and prompt templates. They exchange standard messages, so one server can be reused by many clients.