Skills
97,905 packaged capabilities and playbooks for agents. Install any of them with one command.
All
Use when the user says 'run a sale', 'discount this category', 'set up a coupon', 'reprice these products', 'end the sale', or asks what a discount would cost them. Plans the price change, shows it as a preview before anything moves, writes it with a snapshot, and can put it back.
Manage WordPress sites via MCP. Use when the user asks to create, read, update, or delete posts, pages, categories, tags, media, comments, redirections, TablePress tables, synced patterns (reusable blocks), or site settings on a WordPress site connected through the MCP adapter. Covers Rank Math SEO, Gutenberg block discovery, reusable patterns, TablePress, plugin management, cache clearing, user listing, and bulk operations.
Generate an interactive HTML diagram of the user's business systems, workflows, or tooling — showing how everything connects, where data flows, which AI agents / scheduled tasks run when, and how processes hang together. Use this whenever the user says 'visualize my workflow,' 'map my systems,' 'show me how this all connects,' 'business OS,' 'system diagram,' 'workflow map,' or wants to see the architecture of their work as a picture rather than a list. Output is a single self-contained HTML file with clickable nodes and progressive disclosure of detail.
Complete documentation for World of Warcraft FrameXML functions — global Lua functions, mixins, object pools, SharedXML utilities, and game utility modules. Use this for UI helpers (StaticPopup_Show, EasyMenu), formatting (SecondsToTime, FormatLargeNumber), table/math utils (tContains, Lerp), mixin/pool patterns, chat frame filters, tooltip helpers, bag functions, texture/atlas markup, and all FrameXML game utility modules.
Systematic approach to finding and testing CVEs for identified WordPress plugins. Covers plugin discovery, version extraction from multiple sources (readme.txt, assets, inline JS), CVE database cross-referencing with WPScan/Patchstack/NVD/NVD API, version-based vulnerability matching, exploitation PoC generation, and false-positive elimination. Built from field experience finding exploitable plugin CVEs across 58-company mass recon including ElementsKit (CVE-2023-6851/CVE-2023-6853), Revslider (CVE-2024-2534), WPDM (CVE-2023-49753), Gravity Forms (CVE-2024-6115), and Jetpack (CVE-2024-1782).
Turn agreed product, domain, scope, and architecture decisions into one traceable, implementation-ready feature specification with observable acceptance criteria and verification points. Use when a requirement is sufficiently decided to specify behavior but should not yet be decomposed into implementation tasks.
Write and edit consulting analysis, recommendations, reports, decks, and client communications with direct language, proportional detail, and explicit evidence. Use to adapt a consulting deliverable to its audience and remove generic or unsupported claims.
WeChat Official Account content creation and publishing workflow, covering topic selection, drafting, polishing, illustrations, layout, publishing, and review. For personal subscription accounts without verification, publishing guides the user to operate manually in the backend. Use when: "公众号", "写文章", "发文", "选题", "涨粉", "内容运营", "草稿箱", "帮我写篇公众号", "最近公众号没什么灵感", "公众号文章", "发布到公众号". Proactively suggest when the user mentions writing articles, content creation, or WeChat Official Account related tasks.
Researches X (formerly Twitter) profiles and posts via the Crawlora API, returning clean JSON. Use when the user wants a public X profile's stats, a user's recent posts, or a single post's content/engagement — instead of scraping x.com or using the official (paid, rate-limited) X API.
Trigger this skill when the user expresses intent to create, manage, or query a virtual card, or wants to know what they can buy / do with the card. This includes intents such as: - "get a virtual card" - "create a card" - "card status" - "set up a card for an agent" - "what can I buy" - "show me what's available" - "what can I do?" - "what can I use the card for" Also, any request involving the creation of a one-time-use virtual Visa/Mastercard funded with cryptocurrency for agent use.
**WORKFLOW SKILL** - Guide for migrating Xamarin.Forms apps to .NET MAUI. Covers project structure decisions, SDK-style project conversion, namespace renames, layout behavior changes, renderer-to-handler migration, effects-to-behaviors redesign, Xamarin.Essentials namespace mapping, NuGet dependency compatibility, data migration, and common troubleshooting. Incorporates field-tested advice from production migrations. USE FOR: "migrate Xamarin.Forms", "upgrade to MAUI", "Xamarin to MAUI", "convert Xamarin.Forms project", "Forms migration", "namespace changes Xamarin", "renderer to handler", "effects to behaviors", "AndExpand replacement", "layout changes MAUI", "Xamarin.Essentials to MAUI". DO NOT USE FOR: migrating Xamarin.Android native apps (use xamarin-android-migration), migrating Xamarin.iOS native apps (use xamarin-ios-migration), creating new MAUI handlers from scratch (use maui-custom-handlers), performance optimization (use maui-performance).
Run a standalone Xiaohongshu data workflow with bundled JS signing and Cookie/QR code login, for login, search, extraction, export, and creator data collection; use when you need to reliably reuse Spider_XHS core capabilities without the original repository, or when the user explicitly asks to download Xiaohongshu images, videos, or media files and the workflow should default to the no-watermark download path. Use this skill to run a standalone Xiaohongshu workflow with bundled JS signing assets and cookie or QR login for authentication, plus search, extraction, export, and creator data collection when you need Spider_XHS-derived capabilities without depending on the original repository, especially when the user asks to download XHS images, videos, or media files and the workflow should default to no-watermark downloads.
Comprehensive assistant for the full Xilinx toolchain, covering complete zero-to-one FPGA/MPSoC project builds, including: - Vivado: hardware design, Block Design, IP configuration, XDC constraints, synthesis and implementation, bitstream generation - Vitis HLS: C/C++ high-level synthesis, generating custom IP cores - Vitis Unified IDE (2022.x+): embedded software development, Platform/Domain/Application creation, XSCT scripts - PetaLinux: embedded Linux system builds, BSP configuration, kernel/rootfs customization, boot image generation - Device support: Zynq UltraScale+ MPSoC (full EG/EV range and ZCU10x evaluation boards), Versal, pure FPGA (UltraScale+/UltraScale/7 series) Whenever the user mentions any of the following, use this skill immediately: vivado, vitis, hls, high-level synthesis, vitis_hls, petalinux, zynq, ultrascale, fpga, mpsoc, xsa, bitstream, block design, synthesis, implementation, xdc, constraints, IP core, AXI, embedded software, bare-metal programs, linux image, bsp, device tree, jesd204, jesd204b, jesd204c, 204b upgrade to 204c, 204b migration, high-speed serial, DAC, ADC, AD9144, AD9250, AD9680, grpc, protobuf, rpc, remote calls, host-computer communication, petalinux grpc, embedded rpc, zmq migration to grpc, udmabuf, axi dma host computer. Please proactively use this skill whenever the user describes any Xilinx/AMD FPGA hardware or software design task.
Comprehensive spreadsheet creation, editing, and analysis with support for formulas, formatting, data analysis, and visualization. When Claude needs to work with spreadsheets (.xlsx, .xlsm, .csv, .tsv, etc) for (1) Creating new spreadsheets with formulas and formatting, (2) Reading or analyzing data, (3) Modify existing spreadsheets while preserving formulas, (4) Data analysis and visualization in spreadsheets, or (5) Recalculating formulas
Comprehensive spreadsheet creation, editing, and analysis with support for formulas, formatting, data analysis, and visualization. When Claude needs to work with spreadsheets (.xlsx, .xlsm, .csv, .tsv, etc) for (1) Creating new spreadsheets with formulas and formatting, (2) Reading or analyzing data, (3) Modify existing spreadsheets while preserving formulas, (4) Data analysis and visualization in spreadsheets, or (5) Recalculating formulas
Automated web vulnerability scanning with xray. Use when you need comprehensive vulnerability scanning of a web application (XSS/SQLi/command injection/SSRF/XXE/path traversal/file upload/weak credentials, etc.). xray is a comprehensive web security assessment tool by Chaitin Tech, supporting three modes: active scanning, passive proxy scanning, and basic crawler scanning, with rich built-in detection plugins and community POCs. Use this skill for any scenario involving xray vulnerability scanning, web security assessment, or passive proxy scanning
[Multi-perspective roundtable] A focused chat room. Introduce a topic; the moderator identifies missing judgment variables, selects 3–5 theoretical frameworks and their representative thinkers to discuss it together, then adjudicates disagreements. “小爷” (9 principles + atomic retrieval) is always present, and users can call on the “classic four.” There is also an “XY deep analysis” mode that produces a report using four lenses: people, money, structure, and red lines. Use when users ask for help thinking, different perspectives, a chat room, deep analysis, or analysis by four thinkers.｜小爷出品
Download videos, audio, playlists, and channels from YouTube and 1000+ websites using yt-dlp. Supports quality selection, format conversion, subtitle download, playlist filtering, metadata extraction, thumbnail download, and batch operations. Use when downloading YouTube videos in any quality (4K, 8K, HDR), extracting audio as MP3/M4A/FLAC, downloading entire playlists/channels, getting subtitles in multiple languages, converting to specific formats, downloading live streams, archiving content, or batch processing multiple URLs. Optimized for reliability with automatic retries, rate limiting, and error handling.
YouTube Search API via AIsa unified endpoint. Search YouTube videos, channels, and playlists with a single AIsa API key — no Google API key or OAuth required. Use this skill when users want to search YouTube content. For other AIsa capabilities (LLM, financial data, Twitter, web search), see the aisa-core skill.
Manage local Zerion wallets via the Zerion CLI: create, import (private key or mnemonic), list, fund (deposit addresses), backup (recovery phrase), delete, and sync to the Zerion mobile app. Most commands require an interactive passphrase prompt — humans must run them directly. Use whenever the user asks to set up, manage, or back up a wallet.
For Chinese consultations related to "张老师", "张雪峰" or "升学": college application planning, academic advancement planning, major choice, school comparison, subject selection advice, and trade-offs between graduate exams and employment. Especially when the user wants a "张雪峰-style" conversation that is pragmatic, employment-oriented, and asks about the situation before giving advice. First collect province, score or ranking, subject choices, family constraints, city preferences and career goals, then give advice based on the latest rules and data; anything involving admission scores, enrollment policies, major restrictions or year-over-year changes must be verified online.
A knowledge base of web/JS reverse-engineering case studies distilled from all 42 articles on 1997.pro. Applies to case leads such as Akamai/Kasada/PX/reese84/同盾/a_bogus/腾讯滑块/阿里滑块/JSVMP/227/226/wasm/protobuf/rid/fuid/fs/bx-pp/run_js/storage.estimate/animationend, as well as scenario assessment, method routing, and case comparison for risk-control fingerprints, environment patching, JSVMP/flat flow/WASM, CAPTCHAs, and protocol parameter chains; used by default together with web-js-reverse-master-flow and the three MCPs jshook + js-reverse + chrome-devtools-mcp.
Implements 42 CFR Part 2 protections for substance use disorder patient records. Covers written consent requirements stricter than HIPAA, re-disclosure prohibition, court order procedures, qualified service organization agreements, and 2024 amendments aligning Part 2 with HIPAA. Keywords: 42 CFR Part 2, substance use disorder, SUD records, re-disclosure, consent, Part 2 amendments.
Attacks on domain trust relationships. Use when the target has a multi-domain or multi-forest environment. Covers parent-child domain privilege escalation (Golden Ticket + ExtraSid), cross-forest attacks (SID History/MSSQL Trust Links), and exploitation of one-way trusts. Load first when child-domain Domain Admin access has been obtained or a trust relationship is discovered.
Guides assessment of third-country adequacy decisions under GDPR Article 45 for international data transfers. Covers the current EC adequacy decisions list, adequacy assessment criteria, partial adequacy handling, and monitoring of adequacy decision reviews. Keywords: adequacy decision, Article 45, third country, adequate protection, EC adequacy list.
Inspect an existing project to discover implicit architectural decisions and propose candidate ADRs. Use when the user wants to audit a repository for undocumented decisions, asks to "descubrir ADRs", "qué decisiones arquitectónicas tiene este proyecto", "busca ADRs en el repo", "analiza la arquitectura del proyecto", or any variant that involves exploring the code/structure to infer relevant decisions that deserve an ADR. Also trigger when the user arrives at a new project and wants to understand what decisions have already been made, even if they don't explicitly mention "ADR".
This skill should be used for time series machine learning tasks including classification, regression, clustering, forecasting, anomaly detection, segmentation, and similarity search. Use when working with temporal data, sequential patterns, or time-indexed observations requiring specialized algorithms beyond standard ML approaches. Particularly suited for univariate and multivariate time series analysis with scikit-learn compatible APIs.
Build realtime voice / live audio agents with AG2's `ag2.live` module. Wrap a prompt + provider config in `LiveAgent` and open a bidirectional voice session with `agent.run()`, pumping mic audio in and playing synthesized speech out. Covers the two realtime providers — Gemini Live (`GeminiRealTimeConfig`) and OpenAI Realtime (`OpenAIRealTimeConfig`) with audio/text output modalities, voices, and user-speech transcription; audio I/O over the local sound card (`SoundDeviceRecorder` / `SoundDevicePlayer`, both sounddevice-backed); one-shot speech-to-text (`OpenAITranscriber`, `OpenAITranslationTranscriber`) and its `.pipe(agent)` voice pipeline; text-to-speech (`OpenAITTSConfig`); and `TTSObserver`, which speaks a regular text `Agent`'s streamed tokens aloud. Use when the user wants a talking agent, a phone/voice assistant, live transcription, or to add TTS playback to a text agent.
Browser automation CLI for AI agents. Use when the user needs to interact with websites, including navigating pages, filling forms, clicking buttons, taking screenshots, extracting data, testing web apps, or automating any browser task. Triggers include requests to “open a website”, “fill out a form”, “click a button”, “take a screenshot”, “scrape data from a page”, “test this web app”, “login to a site”, “automate browser actions”, or any task requiring programmatic web interaction.
Sets up and drives TencentDB Agent Memory (MemoryCore, MemoryHub, MemoryProxy, MemoryPanel) for agent teams. Use when the user mentions “memory hub”, “team memory”, “chat memory”, “skill library”, “wiki”, or “codegraph”, or asks to install, configure, or troubleshoot the memory-tencentdb plugin, onboard a new agent, or deploy standalone (Docker Compose, panel UI, team review).
Use when the request is already narrowed to wiring a model endpoint, env vars, settings-file-based model config, `${ENV.xxx}` placeholders, `auto_load_env=True`, or connectivity check for a model-powered feature, including local Ollama, dotenv-loaded DeepSeek or other OpenAI-compatible settings, plugin namespace placement, auth, request options, and minimal verification.
Use when the user is shaping how one model request or request family should be instructed or templated, including prompt slots, input/instruct/info layering, mappings, recursive placeholder injection, prompt config, YAML or config-file-driven prompt behavior, and reusable prompt structure.
Build React frontends for LiveKit voice AI agents. Use this skill when creating web interfaces for voice assistants using LiveKit's shadcn-based Agents UI components. Covers AgentSessionProvider, audio visualizers, media controls, chat transcripts, and customization with Tailwind CSS.
Implements GDPR Art. 22 automated decision-making and AI Act Art. 14 human oversight requirements for AI systems. Covers identification of solely automated decisions, meaningful human intervention design, logic explanation mechanisms, and contestation procedures. Keywords: Art. 22, automated decision, human oversight, AI Act, profiling, contestation.
New to MCP?
From what the protocol is to installing your first server, these answers cover most first questions.
An open protocol that defines how AI applications connect to external tools and data in a uniform way. Clients talk to the model; MCP servers provide tools, resources and prompt templates. They exchange standard messages, so one server can be reused by many clients.