Skills
100,696 packaged capabilities and playbooks for agents. Install any of them with one command.
All
Expert blueprint for RichTextLabel with BBCode formatting (bold, italic, colors, images, clickable links) and custom effects. Covers meta tags, RichTextEffect shaders, and dynamic content. Use when implementing dialogue systems or formatted text. Keywords: RichTextLabel, BBCode, [b], [color], [url], meta_clicked, RichTextEffect, dialogue.
Expert ISO 27001 compliance assistant for security and compliance teams. Use this skill whenever a user asks about ISO 27001 or ISO/IEC 27001, including any of the following: gap analysis, auditing, compliance assessments, control checklists, policy writing, document generation, Statement of Applicability (SoA), risk assessment, risk registers, risk treatment plans, Annex A controls, ISMS implementation, clause requirements, certification readiness, transitioning from 2013 to 2022, control implementation guidance, incident response policies, access control policies, supplier security, or any information security management system (ISMS) topic. Trigger even if the user doesn't say "skill" — any ISO 27001 or ISMS question should use this skill.
Lark Wiki: manage knowledge spaces, space members, and document nodes. Create and query knowledge spaces, view and manage space members, manage node hierarchy, organize documents and shortcuts in the knowledge base. Use when users need to find or create documents, browse knowledge space structure, view or manage space members, or move or copy nodes. When users provide a doubao.com /wiki/ URL/token, use this skill directly without falling back to WebFetch due to domain name; routing is based on URL path pattern and token, not domain name. Not responsible for: uploading files to knowledge base nodes (use lark-drive), editing document/sheet/Base content (use lark-doc / lark-sheets / lark-base).
Generates MyBatis-Plus code (Entity, Mapper, Service, ServiceImpl, Controller, DTO, VO, BO) from database tables. Supports MVC and DDD architectures, Java and Kotlin, with standard CRUD and custom methods. Use ONLY when the user explicitly mentions MyBatis-Plus or mybatis-plus-generator; do NOT trigger for JPA, Hibernate, or other ORMs.
nginx C module development guidelines based on the official nginx development guide. This skill should be used when writing, reviewing, or refactoring nginx C modules to ensure correct memory management, request lifecycle handling, and event-driven patterns. Triggers on tasks involving nginx module development, ngx_http_module_t, handler/filter/upstream implementation, pool allocation, or nginx configuration directives.
When you want to clean and reformat content (usually from your terminal) for pasting into Slack, Notion, Twitter/X, LinkedIn, email, GitHub, or plain text. Strips ANSI codes, box-drawing characters, and terminal prompt artifacts, and applies destination-specific formatting. Default input is the system clipboard; default output is both the clipboard and a chat preview. Triggers on "/paste", "/paste [destination]", "clean this for X," "format for slack/notion/twitter/linkedin/email/github," "render as markdown," "paste-ready," "strip formatting," "make this copy-pastable." Default destination is plain. Also scans for secrets (API keys, tokens, .env values) and warns before copying anything sensitive.
Use this skill any time a .pptx or .potx file is involved in any way — as input, output, or both. This includes: creating slide decks, pitch decks, or presentations; reading, parsing, or extracting text from any .pptx or .potx file (even if the extracted content will be used elsewhere, like in an email or summary); editing, modifying, or updating existing presentations; combining or splitting slide files; working with templates (.potx), layouts, speaker notes, or comments. Trigger whenever the user mentions \"deck,\" \"slides,\" \"presentation,\" or references a .pptx or .potx filename, regardless of what they plan to do with the content afterward. If a .pptx or .potx file needs to be opened, created, or touched, use this skill.
Build sandboxed applications for secure code execution. Load when building AI code execution, code interpreters, CI/CD systems, interactive dev environments, or executing untrusted code. Covers Sandbox SDK lifecycle, commands, files, code interpreter, and preview URLs. Biases towards retrieval from Cloudflare docs over pre-trained knowledge.
Captures and maintains learnings, errors, and corrections. Use when a command fails, the user corrects an assumption, a capability is missing, knowledge is outdated, or a better approach is found. Review relevant saved guidance before major tasks, reuse, and promotion; revalidate it according to what could change and how quickly.
Full Sentry SDK setup for Python. Use when asked to "add Sentry to Python", "install sentry-sdk", "setup Sentry in Python", or configure error monitoring, tracing, profiling, logging, metrics, crons, or AI monitoring for Python applications. Supports Django, Flask, FastAPI, Celery, Starlette, AIOHTTP, Tornado, and more.
A skill for refining stock investment research questions. Turns user-provided stock names or tickers into structured eight-stage investment due diligence instructions. Clarifies investment style (value/growth/turnaround), holding period (short/medium/long term), risk tolerance, and research focus through questions, then generates structured research tasks that meet professional investment research standards. Use when users mention stock analysis, investment research, or stock due diligence.
Test case generator - Generates high-quality test cases in batches by test point (POINT), based on equivalence partitioning and boundary value analysis, and outputs them in Markdown format. Use when the user runs the /testcase-gen command or needs to generate test cases.
When you want to integrate an external tool, API, MCP server, or service into a project — the wizard walks you through auth, config, env vars, client wrapper code, example usage, and an optional smoke test. Scoped to Next.js and Rails projects. Interactive Q&A — starts with the tool name, asks structured questions until the integration is specified, then scaffolds files. Examples — Stripe, Kit, Sanity, Notion, Neon, Supabase, Resend, Postmark, Twilio, Anthropic, OpenAI, Vercel Blob, custom internal APIs. For MCP servers, also handles the .mcp.json wiring. Triggers on "/toolify," "integrate X," "add X to this project," "wire up X," "set up the X integration," "hook up X," "connect X," "add MCP for X." Part of the -ify trifecta (skillify / toolify / loopify). NOT for adding new SKILL.md files — that's skillify. NOT for cron/agent loops — that's loopify.
Use when a builder needs the top-level router for the provisional standard Gear/Vara Sails skill pack across Codex, Claude, or OpenClaw. Covers standard Sails apps and ethexe-specific work via dedicated skills. Do not use for non-Sails programs or broad protocol research.
Use when you need to analyze Java profiling data collected during the detection phase — including interpreting flamegraphs, memory allocation patterns, CPU hotspots, threading issues, systematic problem categorization, evidence documentation with profiling-problem-analysis and profiling-solutions markdown files, or prioritizing fixes using Impact/Effort scoring. This should trigger for requests such as Analyze JFR profile; Analyze the profile; Analyze the performance; Analyze the memory; Analyze the threading; Analyze GC logs from profiling; Prioritize Java profiling bottlenecks by impact. Part of Plinth Toolkit
Turn raw ideas into one clear pre-planning concept artifact by choosing the right framing mode: problem framing, audience and value framing, concept shaping, game concept framing, or story packaging. Use when the user needs the next artifact before PRDs, sprint plans, launch execution, or game-production routing.
Helps implement coss UI components correctly. Use when building UIs with coss primitives and patterns (buttons, dialogs, selects, forms, menus, tabs, segmented controls, inputs, toasts, etc.), migrating from shadcn/Radix to coss/Base UI, composing trigger-based overlays, or troubleshooting coss component behavior. Covers imports, accessibility, Tailwind styling, and common pitfalls.
CPU pipeline skill for hazards, forwarding, and stalls. Use when explaining pipeline stages, data/control hazards, forwarding paths, or branch stalls in performance analysis. Activates on queries about pipeline hazard, data hazard, control hazard, forwarding, pipeline stall, or superscalar basics.
Parses error messages, traces execution flow through stack traces, correlates log entries to identify failure points, and applies systematic hypothesis-driven methodology to isolate and resolve bugs. Use when investigating errors, analyzing stack traces, finding root causes of unexpected behavior, troubleshooting crashes, or performing log analysis, error investigation, or root cause analysis.
Dataverse schema authoring and inspection — tables, columns, relationships, forms, and views. Use when the user wants to define, evolve, or inspect the data model — add a column, create a table, set up a lookup, customize a form, build a view, or list existing columns and relationships.
Apply Fastify best practices when creating servers, plugins, routes, schemas, hooks, configuration, decorators, authentication, logging, performance tuning, database integration, migrations, testing, clean architecture, and TypeScript integration. Use when writing or reviewing Fastify code, setting up a new Fastify project, or asking "How should I structure my Fastify app?"
Hunting skill for auth bypass vulnerabilities. Built from 12 public bug bounty reports across SAML XSW / parser-differential (GitHub Enterprise CVE-2025-25291/25292), SAML signature stripping (Uber, Rocket.Chat, samlify CVE-2025-47949), SAML domain enforcement bypass via control characters (HackerOne 2024), partner-portal cross-IdP assertion reuse (Slack), WordPress XMLRPC bypassing SSO (Uber), JWT alg-confusion HS256/RS256 (Jitsi), JWT signature-validation skip (Linktree, Newspack), and token-audience confusion (Argo CD CVE-2023-22482). For standalone JWT signature/crypto forging (alg:none, key confusion, kid/jku) see hunt-jwt-crypto; this skill covers JWT only inside SSO/SAML/token-trust bypass chains. SAML assertion-layer attacks (XSW, comment injection, signature stripping, XXE-in-assertion) are owned by hunt-saml; this skill owns the broader cross-protocol auth-bypass taxonomy. Use when hunting auth bypass — see the Legacy-Protocol Matrix for branded-UI vs legacy-endpoint patterns.
Implements drag-and-drop and sortable interfaces with React/TypeScript including kanban boards, sortable lists, file uploads, and reorderable grids. Use when building interactive UIs requiring direct manipulation, spatial organization, or touch-friendly reordering.
Feishu / Lark contacts: resolve a name/email to an open_id, or look up a name/department/email/contact details/personal status/signature by open_id; also search by keyword for bots/agents visible to the current user. Use when a user mentions a name and wants to message them or schedule something next, or has an open_id and wants specific information. Does not handle department tree traversal, listing employees by department, or organization charts; use the native OpenAPI for these.
Feishu cloud storage (Drive): manage Drive files and folders, including uploads/downloads, folder creation, copying/moving/deleting, viewing metadata, checking permission settings, comments/permissions/subscriptions, titles, versions, Feishu document security labels (secure labels), and local file imports. Use when users need to organize Drive folders, handle cloud storage resource URLs/tokens, identify link types/actual tokens/titles, or import Word/Markdown/Excel/CSV/PPTX/.base as docx/sheet/bitable/slides. Route doubao.com cloud storage URLs/tokens by resource path and token too; do not fall back to WebFetch. Not responsible for: editing document content (use lark-doc), spreadsheet/Base table data operations (use lark-sheets/lark-base), knowledge space node/member management (use lark-wiki), or native Markdown file read/write/patch/diff (use lark-markdown).
Feishu instant messaging: send and receive messages and manage group chats. Send and reply to messages, search chat history, manage group members, upload and download images and files, manage emoji reactions, send urgent notifications in-app/by SMS/by phone, send and handle Interactive Cards, and listen for card button callbacks (card.action.trigger). Use when users need to send messages, view or search chat history, download chat files, view group members, search groups, create group or topic chats, manage marker data, manage Feed pins (add/remove/search pinned conversations), manage tag data, or handle card callbacks.
Lark Tasks: manage tasks, checklists, and task agents. Create to-do tasks, view and update task status, split subtasks, organize task checklists, assign collaborators, upload task attachments, register or unregister task agents, update task agent homepage data, and write agent task logs. Use when you need to create to-do items, view task lists, track task progress, manage project checklists, assign tasks to others, upload attachment files for tasks, register/unregister task agents, update agent homepage data, or write task logs.
Lark Whiteboard: query and edit whiteboards in Lark Cloud Documents. Supports exporting whiteboards as preview images, exporting raw node structures, and updating whiteboard content using multiple formats. Use this skill when users need to view whiteboard content, export whiteboard images, or edit whiteboards. Not responsible for: Lark Cloud Documents content editing (lark-doc), embedded spreadsheets/Base in documents (lark-sheets / lark-base).
When you want multiple expert perspectives on a founder/operator question — a simulated board of advisors (Jason Fried, Elon Musk, Jeff Bezos, Jensen Huang, Bob Iger, Paul Graham, Naval Ravikant, Sara Blakely, Jason Cohen). Bring a real decision — "should I raise prices?", "hire my first employee?", "raise or bootstrap?", "kill this project?" — and the council weighs in through documented frameworks, surfaces disagreements, and synthesizes a recommendation. Also use for 'maker council,' 'board of advisors,' 'what would Bezos do,' 'what would Jason Fried say,' 'channel Naval,' 'ask the council,' or how a famous founder would approach a problem. Optional live-research pass via deep-research / watch-video / last30days. Marketing questions go to marketing-skills' marketing-council. Archives to ~/.config/makerskills/maker-council/archive/. To commit to a direction, hand off to decide.
Audits, diffs, copies, and lists providers/models; adds models and switches the default model in local openclaw.json configs; diagnoses gateway/plugin failures (down, parked, broken, or out of date after an upgrade). Use for 虾/龙虾 config audits. Not for model-error repair (use openclaw-model-switch).
Evidence-based code review for local diffs, pull requests, and repository audits. Checks design, correctness, tests, compatibility, and operations using a shared engineering baseline plus TypeScript frontend/backend, Go, Rust, and Python packs. Use after implementation, before merging, or when auditing an existing codebase.
Reshape the commits a branch carries on top of its target branch into a clean, logical sequence without changing the final committed tree. Use when a branch needs presentable history before review or merge, when iterative work left fixups, WIP commits, or interleaved refactors, when another skill needs clean commits, or when the user says "recommit" or asks to tidy the git history.
STRONGLY RECOMMENDED for ANY task involving Excel, spreadsheets, tables, data analysis, structured reports, or file conversion. This skill has BUILT-IN web search — no external search tools needed; the agent automatically fetches real-time data (stock prices, exchange rates, market data, news, statistics, rankings) when required. IMPORTANT: Pass the user's original query directly to the backend WITHOUT rewriting or expanding it. Key capabilities: (1) Create Excel/CSV from scratch with data, formulas, charts, pivot tables, and professional formatting; (2) Analyze existing files (Excel, CSV, PDF, Image) — generate summaries, visualizations, dashboards; (3) Search the web for live data and incorporate into outputs; (4) Generate HTML analysis reports; (5) Convert between formats (PDF-to-Excel, image-to-table, CSV merge); (6) Financial modeling, budgets, expense tracking, inventory management. Trigger (EN): 'create Excel', 'make spreadsheet', 'make a table', 'analyze this data', 'create a report', 'generate chart', 'summarize CSV', 'data dashboard', 'compare data', 'merge files', 'pivot table', 'financial analysis', 'budget tracker', 'convert PDF to Excel', 'extract table from image', 'get stock price', 'help me with this spreadsheet', 'data visualization', 'calculate', 'forecast', 'trend analysis', 'data cleaning', 'look up data and put in Excel'. Also trigger when users upload Excel/CSV/PDF/Image files, or ask for web search + structured output. Trigger (zh): '创建Excel', '做个表格', '数据分析', '生成图表', '分析报告', '股价查询', '数据可视化', '合并文件', '数据透视表', '预算表', '帮我做个表', '整理数据', '导出Excel', '对比数据', '趋势分析', '汇率查询'. Trigger (ja): 'Excelを作成', 'データ分析', 'グラフ作成', 'レポート生成', '表を作って', 'データ整理', '株価をExcelに'. Trigger (ko): 'Excel 만들기', '데이터 분석', '차트 생성', '보고서 작성', '주가 조회', '표 만들어줘', '데이터 정리'. Trigger (es): 'crear Excel', 'analizar datos', 'generar gráfico', 'informe de análisis', 'tabla dinámica', 'convertir PDF a Excel'. Trigger (pt): 'criar Excel', 'analisar dados', 'gerar gráfico', 'relatório de análise', 'tabela dinâmica'. Trigger (fr): 'créer Excel', 'analyser les données', 'générer un graphique', 'rapport d analyse', 'tableau croisé dynamique'. Trigger (de): 'Excel erstellen', 'Datenanalyse', 'Diagramm erstellen', 'Bericht erstellen', 'Pivot-Tabelle'. Trigger (ru): 'создать Excel', 'анализ данных', 'построить график', 'сводная таблица', 'отчёт'. Trigger (ar): 'إنشاء Excel', 'تحليل البيانات', 'إنشاء رسم بياني', 'تقرير'. Trigger (hi): 'Excel बनाओ', 'डेटा विश्लेषण', 'चार्ट बनाओ', 'रिपोर्ट'. Trigger (th): 'สร้าง Excel', 'วิเคราะห์ข้อมูล', 'สร้างกราฟ'. Trigger (vi): 'tạo Excel', 'phân tích dữ liệu', 'tạo biểu đồ', 'báo cáo'. Trigger (id): 'buat Excel', 'analisis data', 'buat grafik', 'laporan'. Trigger (it): 'creare Excel', 'analisi dati', 'generare grafico', 'report'.
New to MCP?
From what the protocol is to installing your first server, these answers cover most first questions.
An open protocol that defines how AI applications connect to external tools and data in a uniform way. Clients talk to the model; MCP servers provide tools, resources and prompt templates. They exchange standard messages, so one server can be reused by many clients.