Skills
98,873 packaged capabilities and playbooks for agents. Install any of them with one command.
All
Create comprehensive test suites for Frappe Framework v15 applications. Triggers: "create tests", "add tests", "frappe test", "write tests", "test coverage", "/frappe-test". Generates unit tests, integration tests, fixtures, and factory patterns following testing best practices.
Use this skill as the frontend entrypoint for the Svelte 5 app in ClientApp — adding routes, creating feature slices, writing Svelte components, applying TypeScript conventions, using shared UI/formatter components, handling accessibility, or adding frontend tests. The legacy Angular app still powers most of the current site in ClientApp.angular, but all new frontend development should be Svelte UI only unless the user explicitly asks for Angular or legacy UI changes.
End-to-end funding signal composite. Takes any set of companies, detects recent funding events, qualifies against your company context, finds relevant people (buyers, champions, users), and drafts personalized outreach. Tool-agnostic — works with any company source, contact finder, and outreach platform.
Dedicated Skill for the duplex, split-level and LOFT renovation guide. Covers the full process including staircase design and safety, double-height spaces and mezzanines, split-level homes and top-floor attics, space planning and function, and apartment and duplex overviews, integrating the highlights of the Xi'an Renovation Classroom members' edition knowledge base in reverse order, helping users renovate duplex, split-level and LOFT homes with less hassle and fewer pitfalls.
Extract the actual core loop from a game, feature set, or pitch based on repeated player actions, feedback, rewards, and renewed motivation. Use when a team can list mechanics but cannot clearly articulate the repeatable loop that drives engagement, when a pitch sounds like disconnected features, when a design document lacks loop clarity, or when you need to test whether the claimed loop is coherent, rewarding, and structurally complete.
This skill should be used at the start of any computationally intensive scientific task to detect and report available system resources (CPU cores, GPUs, memory, disk space). It creates a JSON file with resource information and strategic recommendations that inform computational approach decisions such as whether to use parallel processing (joblib, multiprocessing), out-of-core computing (Dask, Zarr), GPU acceleration (PyTorch, JAX), or memory-efficient strategies. Use this skill before running analyses, training models, processing large datasets, or any task where resource constraints matter.
Diagnose and fix the problem of a Git repository not seeing all remote branches, restoring a restricted fetch refspec to a wildcard pattern so git fetch can pull all remote branches. Use this skill when the user mentions keywords such as "can't see remote branches", "branches are incomplete", "only master/main", "fetch all branches", "complete branches for a shallow clone", "--single-branch fix", "remote branches missing", or "get all branches". Even if the user does not explicitly mention refspec or a shallow clone, trigger this skill whenever the intent is to let the repository see and pull all remote branches.
Software development engine for coding. A production-grade skills system for web apps and mobile architecture, APIs, databases, web, mobile, AI, security, UX, SaaS, and ERP engineering. Encodes reusable engineering judgment through layered baseline and specialist skills to help generate secure, scalable, maintainable, high-performance software systems
Adapt fragment shaders or runtime-shader snippets into standard GLSL, render them with glslViewer in headless mode, and inspect PNG output for shader debugging. Use when Codex needs to validate SDFs, gradients, masks, edge contours, or intermediate shader math by producing reproducible preview images from `.frag` files or translated shader snippets.
Builds and troubleshoots Godot 4.x 3D gameplay, including CharacterBody3D controllers, jumping and slopes, third-person cameras, SpringArm3D collision, WorldEnvironment, lights, shadows, and 3D verification. Use when a request mentions 3D movement, camera follow or orbit, environments, lighting, or gameplay feel.
Build document Q&A and searchable knowledge bases with Google Gemini File Search - fully managed RAG with automatic chunking, embeddings, and citations. Upload 100+ file formats (PDF, Word, Excel, code), configure semantic search, and query with natural language. Use when: building document Q&A systems, creating searchable knowledge bases, implementing semantic search without managing embeddings, indexing large document collections (100+ formats), or troubleshooting document immutability errors (delete+re-upload required), storage quota issues (3x input size for embeddings), chunking configuration (500 tokens/chunk recommended), metadata limits (20 key-value pairs max), indexing cost surprises ($0.15/1M tokens one-time), operation polling timeouts (wait for done: true), force delete errors, or model compatibility (Gemini 2.5 Pro/Flash only).
Generate videos with Google Veo models via inference.sh CLI. Models: Veo 3.1, Veo 3.1 Fast, Veo 3, Veo 3 Fast, Veo 2. Capabilities: text-to-video, cinematic output, high quality video generation. Triggers: veo, google veo, veo 3, veo 2, veo 3.1, vertex ai video, google video generation, google video ai, veo model, veo video
Use when uploading, releasing, promoting, or managing rollouts on Google Play. Make sure to use this skill whenever the user mentions gpc releases, upload AAB, upload APK, staged rollout, promote to production, halt rollout, gpc publish, release notes, track management, internal testing, beta release, production rollout, version code, rollout percentage, or wants to ship an Android app to any Play Store track. Also trigger when someone asks about the Google Play edit lifecycle, release validation, or how to do a phased rollout — even if they don't mention GPC by name. For metadata and listings, see gpc-metadata-sync. For CI/CD integration, see gpc-ci-integration.
Grill the user relentlessly about a plan or design. Use when the user wants to stress-test a plan before building, asks for a design interview, or uses trigger phrases such as "grill me", "grill this", "stress test this plan", "poke holes", or "challenge this design".
WeChat official account positioning analysis + a three-piece design (account bio / auto-reply after follow / custom menu). First reverse-engineer a one-sentence positioning through layered interviews and past articles, then derive three pieces of content that can be pasted directly into the official account backend, all with character-count validation. Triggered when the user says "official account positioning", "how to write an account bio", "feature description", "official account introduction", "reply after follow", "welcome message", "auto-reply", "how to design the menu", "menu bar", "official account setup", "how to get a new account started", or "nobody follows my account".
Short-form writing for WeChat official accounts (under 1,000 characters, text only, no images). Turn an observation, a test, or a line of thought into a quick, punchy post, or compress a long article or raw material into a short piece. The core is a set of style rules: first person without preaching, no AI tone, rhythm through paragraph breaks, and endings that land on a concrete image. Triggered when the user says "write something short", "official account short post", "under a thousand words", "jot one down", "write a short piece about this", "compress into a short post", or "the no-images kind".
Home Assistant custom integration development in Python. Covers custom_components, DataUpdateCoordinator, config_flow, OAuth2, conversation agent, HACS publishing, device registry, entity platforms, services, repair issues, diagnostics, Bluetooth integrations, and multi-coordinator patterns.
Write the current session's work into a versioned, self-contained handoff document in .agents/handoffs/ and point to it from AGENTS.md, so another session, agent, or person can resume it. Use when the user asks for a handoff, or to write up where the work stands for another session, agent, or person.
Guide the user from their first download through getting started with Harness Anything: check the environment, obtain persistent source code, install dependencies, link the full skill set to the selected Agent's user directory, then continue with target repository initialization and first use of the orchestrator skill. Use when the user asks to download, install everything, onboard for the first time, or get Harness set up in one go. Distribution is currently from source; do not assume an npm package has been published.
Offline password hash cracking with hashcat. Use when password hashes (NTLM/NTLMv2/Kerberos TGS/AS-REP/SHA/MD5/bcrypt/NetNTLMv2) are obtained and the plaintext password needs to be recovered. hashcat is a GPU-accelerated password cracking tool, dozens of times faster than john. Covers hash type identification, dictionary attacks, rule-based attacks, mask attacks, and combination attacks. Always use this skill after obtaining hashdump/secretsdump/Kerberoast/AS-REP output
Apply cutting-edge 2025 nutrition science on longevity, metabolic health, gut microbiome, and evidence-based dietary patterns for optimal vitality and disease prevention. Use when planning a diet, evaluating a nutrition claim, or applying evidence-based guidance on longevity, metabolic, and gut health.
Persistent Claude-Codex pairing inside one Herdr tab. Use for live peer work, workflows requesting a pair, or any inbound `[agent ...]` / `[herdr-pair control ...]` line — including after context compaction; resume the exact session and reply through the bundled transport.
Technical safeguards and architectural patterns for building HIPAA-compliant software on AWS. Use when building healthcare SaaS, handling PHI (Protected Health Information), designing patient data systems, implementing healthcare APIs, setting up HIPAA-eligible AWS infrastructure, reviewing code for PHI exposure, designing audit logging, or when the user mentions patients, medical records, EHR/EMR, health data, HL7, FHIR, or covered entities. Essential for founders and developers building in healthcare or digital health space.
Control Home Assistant smart home devices, run automations, and receive webhook events. Use when controlling lights, switches, climate, scenes, scripts, or any HA entity. Supports bidirectional communication via REST API (outbound) and webhooks (inbound triggers from HA automations).
Create a self-contained HTML page that explains a codebase, subsystem, or flow from its real code: a short architecture orientation, or a detailed walkthrough with diagrams and expandable source evidence. Use for onboarding, architecture overviews, or interactive code explanations.
Detect DCSync attacks (MITRE ATT&CK T1003.006) by analyzing Windows Event ID 4662 (AccessMask 0x100) for DS-Replication-Get-Changes and DS-Replication-Get-Changes-All requests issued by non-domain-controller accounts. Use when hunting for DCSync credential theft, after detecting Mimikatz-class tooling, or during incident response and purple-team exercises involving Active Directory replication abuse.
New to MCP?
From what the protocol is to installing your first server, these answers cover most first questions.
An open protocol that defines how AI applications connect to external tools and data in a uniform way. Clients talk to the model; MCP servers provide tools, resources and prompt templates. They exchange standard messages, so one server can be reused by many clients.