Skills
97,725 packaged capabilities and playbooks for agents. Install any of them with one command.
All
Use when a task needs a real iPhone — operating iOS apps that have no API (Apple Health, banking, IM apps), exporting on-phone data, tapping/typing/scrolling on the phone, or taking phone screenshots. Replays saved per-app flows from the iphone-use-flows registry in one call and offers to save new ones after multi-step tasks. Drives the iphone-use daemon through its custom XCTest device runner, HTTP agent API or MCP server.
Use JavaScript number math safely for front-end UI behavior, including expressions, precedence, coercion, NaN, Infinity, floating-point precision, BigInt limits, modulo wrapping, rounding, random values, and repeatable UI randomness. Use when building sliders, carousels, counters, animation values, randomized UI, financial-ish display values, or debugging numeric edge cases in browser JavaScript.
Generate AI images and videos using jimeng-mcp-server. Use this skill when the user requests image generation from text, compositing multiple images, creating videos from text descriptions, or animating still images. Supports four core capabilities: text-to-image, image compositing, text-to-video, and image-to-video. Requires jimeng-mcp-server to run locally or be accessed via SSE/HTTP.
Use this skill when refining email copy, improving message quality, or reviewing outreach for common mistakes. Josh Braun's five cold email principles — write with an eraser, be cheeky, be specific, use loss aversion — plus personalization do's and don'ts.
Local pentest sandbox for a full black-box engagement. Triggers on "kage", "pentest", "security audit on", "audit the security of". Runs recon, deep testing, exploit verification, and judging inside a per-engagement Kali Docker container. Each host working directory gets its own isolated sandbox. Produces `./results/<target>/audit-report.md`.
Manage KASM Workspaces - a container-based VDI platform streaming desktops to browsers. Covers installation, workspace configuration, persistent profiles, S3 storage, backup/recovery, troubleshooting, and API operations for single-server and multi-server deployments. Use when: installing KASM, configuring workspaces, setting up persistent profiles, troubleshooting "No Resources Available", container destruction errors, backup to Backblaze B2, Cloudflare Tunnel setup, database operations, or managing KASM services.
Answer from the knowledge bundle. Use when the user asks what they/the project know about something, wants to look something up, explore connections, or compare things that live in a knowledge/ bundle — and when any task would be informed by an existing bundle, consult it here before answering from scratch. Navigates by progressive disclosure and files valuable answers back so the bundle compounds.
Repurpose source content into channel-ready drafts with a Busabase App-in-Skill review and export workflow. Use when the user asks to write content, make a content pack, turn a main blog/long article/transcript/notes into Xiaohongshu, WeChat, newsletter, LinkedIn, X/Twitter, short video scripts, SEO snippets, or a multi-platform publishing plan; also use when they ask for a content approval dashboard or App-in-Skill content workflow.
Write or revise Japanese Markdown documents in this repository with a concise, structured style. Use this whenever the task involves drafting Markdown, especially maintainable ordered lists with 1.-style numbering and anchor-based cross references.
Deeply analyze links, documents or code and generate "all-round mentor-level" teaching notes (from zero basics to mastery). Features "truth anchoring" verification that automatically identifies hallucinations and outdated information. Supports traditional Chinese studies style rendering and automatically cleans ads and useless content.
Refactor Kotlin code toward clearer, more idiomatic design without breaking Spring behavior, serialization, persistence, or public contracts. Use when Java-flavored Kotlin needs cleanup, domain modeling should become more expressive, or boilerplate should be reduced, but the refactoring must remain safe for proxies, Jackson, JPA, configuration binding, and existing tests
Design effective KPI dashboards with metrics selection, visualization best practices, and real-time monitoring patterns. Use this skill when building an executive SaaS metrics dashboard tracking MRR, churn, and LTV/CAC ratios; designing an operations center with live service health and request throughput; creating a cohort retention analysis view for a product team; or debugging a dashboard where metrics contradict each other due to inconsistent calculation methodology.
Use ksubdomain for stateless subdomain brute-forcing. Use it for extremely fast subdomain brute-forcing and validation. ksubdomain sends packets directly through raw network interface sockets and is 10 times faster than dnsx. It supports validation and enumeration modes and requires root privileges. Use this skill for any high-speed subdomain brute-forcing or large-scale subdomain validation.
Design Rails applications using layered architecture. Use when analyzing codebases for architecture violations, planning feature implementations, deciding where code belongs, or extracting abstractions from fat models/controllers. Complements dhh-coder (which keeps things simple) with guidance for when complexity demands structure.
Create high-converting lead magnets that generate email subscribers. Use when building an email list, creating opt-in offers, or need a freebie to drive signups. Supports checklists, templates, swipe files, mini-courses, and guides with landing page copy.
Compresses domain mastery using Ultralearning and Metacognition principles — moving from passive consumption to active production through directness, retrieval practice, and feedback loops. Use when learning a new domain rapidly, building a study plan, or preparing for a high-stakes professional skill.
Audits websites for compliance with the Brazilian LGPD (Law 13.709/2018). Validates privacy policy, cookie consent, data minimization, international transfer, data subject rights, third-party scripts, and analytics. Generates a report with a compliance score and priority fixes.
Light research mainline, step 9 — figures: make each figure serve an argument (which claim it supports and what would be missing if removed); set publication-grade specifications (column width, font size, colorblind safety, error bars, n, significance); ensure visual honesty (no secretly truncated y-axes, no false correlations from dual y-axes, no jet-rainbow); multimodally “take a real look” after rendering; research data figures must be generated programmatically, never with AI image generation. When to use: after results analysis, to draw paper figures; plan a figure set (figure list, budget, redundancy control); choose chart types; create publication-grade figures (column width, font size, dpi, colorblind-safe palette); address concerns that a figure is misleading or presents a nonsignificant result as the main figure; inspect rendered output for overlapping labels or legends obscuring data; create framework or schematic diagrams (programmatic, not AI-generated). Triggers: draw / figures / figure / illustration / render / paper figure / main figure / caption / error bar / colorblind / viridis / truncated y-axis / dual y-axis / heatmap / framework diagram / panel / display item / column width / publication-grade / chart recommendation / review render / plot / chart / matplotlib / seaborn. Core rules: **visual dishonesty (truncated y-axis / false correlation from dual y-axes) = critical gate** (spec §4.2, STAGE_GATES[9]=[visual_honesty]); missing error bars / jet-rainbow / over-budget figure set / redundancy = warn; **presenting a nonsignificant result as the main figure / mismatch between figure and text = critical → initiate 9→7 rework**; **research data figures must be generated programmatically (matplotlib/seaborn/R), never with AI image generation** (permanent rule); static lint only flags suspicious forms—whether something is truly misleading requires final judgment based on the caption and a person/reviewer. This skill initiates **9→7 rework (nonsignificant result as main figure / figure-text mismatch → result-analysis)**.
Linear API integration with managed OAuth. Query and manage issues, projects, teams, cycles, and labels using GraphQL. Use this skill when users want to create, update, or query Linear issues, search for tasks, manage projects, or track work. For other third party apps, use the api-gateway skill (https://clawhub.ai/byungkyu/api-gateway). Requires network access and valid Maton API key.
This skill should be used when comparing Lisa's source templates against a target project's implementation to identify drift. It validates the Lisa directory, detects project types, scans template directories, compares files, categorizes changes, and offers to adopt improvements back into Lisa. This is the inverse of lisa:review-implementation.
Use when the user wants a structured, saturating literature survey on a question — not a one-shot summary, but an evidence/contradiction matrix (sources × claims) built by iterative search until coverage stops growing. Each round expands the search (new sub-topic queries plus citation-graph walks), admits new sources, extracts their claims with verbatim snippets, and records where every source stands on each claim (supports / contradicts / qualifies); the feedback signal is how many new matrix-changing sources a round adds, and it stops at saturation, patience, or budget. The output is the matrix plus a synthesis of consensus, disputes, and gaps, every cell backed by a real citation. Not for grading a written proposal against the literature (that is a proposal-evaluation task) and not for generating new hypotheses — this maps what the literature already says.
Audit code comments and docstrings quality across 6 categories (WHY-not-WHAT, Density, Forbidden Content, Docstrings, Actuality, Legacy). Use when code needs comment review, after major refactoring, or as part of ln-100-documents-pipeline. Outputs Compliance Score X/10 per category + Findings + Recommended Actions.
This skill should be used when setting up, auditing, or enforcing internationalization/localization in UI codebases (React/TS, i18next or similar, JSON locales), including installing/configuring the i18n framework, replacing hard-coded strings, ensuring en-US/zh-CN coverage, mapping error codes to localized messages, and validating key parity, pluralization, and formatting.
New to MCP?
From what the protocol is to installing your first server, these answers cover most first questions.
An open protocol that defines how AI applications connect to external tools and data in a uniform way. Clients talk to the model; MCP servers provide tools, resources and prompt templates. They exchange standard messages, so one server can be reused by many clients.