Skills
100,928 packaged capabilities and playbooks for agents. Install any of them with one command.
All
This skill should be used when the user asks to "create a slash command", "add a command", "write a custom command", "define command arguments", "use command frontmatter", "organize commands", "create command with file references", "interactive command", "use AskUserQuestion in command", or needs guidance on slash command structure, YAML frontmatter fields, dynamic arguments, bash execution in commands, user interaction patterns, or command development best practices for Claude Code.
Comprehensive CSV data analysis and visualization tool. Use this skill when analyzing CSV files, generating data summaries, creating visualizations from data, detecting outliers, finding correlations, assessing data quality, or creating data reports. Triggers on CSV analysis, data exploration, data visualization, data profiling, statistical analysis, or data quality assessment requests
Use this skill when conducting comprehensive research on any topic using the OpenAI Deep Research API. It automates prompt enhancement through interactive clarifying questions, saves research parameters, and executes deep research with web search capabilities. Use when the user asks for in-depth analysis, investigation, research summaries, or topic exploration.
Deploy a Decentraland scene to Genesis City (LAND-based). Use when the user wants to deploy or publish to parcels they own, reduce the deployed scene size, upload a large scene, script or cancel a deploy, or hits a DEPLOY_* error. Do NOT use for Worlds deployment (see deploy-worlds).
Use to list, view, or manage DevOps Center projects in a Salesforce org — show all projects, create a project, or update an existing project's name, description, or active status. Invoke to run sf devops project list on any listing request, or to create a project, set up a new pipeline foundation, initialize DevOps Center for a feature, update project settings, or activate/deactivate (archive) a project. Consolidates sf devops project list/create/update. DO NOT TRIGGER for work item, pipeline, promotion, or conflict operations — those are separate skills
Workspace locales and translations for Factorial Code—`i18n/<locale>.yaml` files, the `fcode.i18n` helper in code and form schemas, execution-locale selection, per-call locale overrides, primary-locale fallback, locale versioning, and the `i18n:*` CLI commands. Use when adding a locale, internationalizing process code or form text, rendering several languages in one execution, or testing and syncing translations
Use the Figma MCP server to fetch design context, screenshots, variables, and assets from Figma, and to translate Figma nodes into production code. Trigger when a task involves Figma URLs, node IDs, design-to-code implementation, or Figma MCP setup and troubleshooting.
Foundry IQ knowledge bases. WHEN: make local or Blob documents searchable; create/diagnose KBs; triage unsupported connectors or multi-source KB creation/reconfiguration (even with classic-search terms); connect existing KB to agents (including multi-source KBs); create/reuse a Search service; retrieve from an existing knowledge base with citations; no brand words needed. Read its procedure before query/target questions. NOT: other KB providers, repository-file search, classic Azure AI Search index/query/app work with no Foundry IQ KB or connector request, generic agent creation.
Expert blueprint for tower defense games (Bloons TD, Kingdom Rush, Fieldrunners) covering wave management, tower targeting logic, path algorithms, economy balance, and mazing mechanics. Use when building TD, lane defense, or tower placement strategy games. Keywords tower defense, wave spawner, pathfinding, targeting priority, mazing, NavigationServer baking.
Expert GTM marketing copywriter for emails, content, and social media. Use when writing marketing emails, email sequences, newsletters, blog posts, LinkedIn posts, Twitter/X threads, social content, brand copy, or personal brand content. Use for launch announcements, product updates, thought leadership, and engagement copy.
Hunting skill for cache poison vulnerabilities. Built from 10 public bug bounty reports including X-Forwarded-Host poisoning, X-HTTP-Method-Override / GCS cache, reflected→stored XSS via cache, classic Omer-Gil Web Cache Deception, Cloudflare Cache Deception Armor bypass, session-token cache deception, Akamai hop-by-hop smuggling → server-side edge poisoning, and Kettle's 2024 path-normalization WCD against Cloudflare/Fastly/GCP. Host/X-Forwarded-Host injection that reaches app logic (reset-link poisoning, routing SSRF, OAuth issuer) is owned by hunt-host-header; this skill owns the case where the poisoned response is CACHED and served to other users. Use when hunting cache poisoning, Web Cache Deception, CDN-fronted apps.
Create and debug Minecraft 26.x and 1.21.x resource packs, including pack metadata, textures, models, blockstates, item definitions, sounds, fonts, animations, and shaders. Use for client-side visual or audio assets without gameplay code.
MPI skill for distributed-memory parallel programming. Use when writing MPI_Send/Recv programs, collective operations, non-blocking communication, MPI+OpenMP hybrid programs, or debugging with mpirun. Activates on queries about MPI_Init, MPI_Allreduce, MPI_Isend, mpirun, MPI-IO, or MPI performance.
Construct and execute analytics queries against the OpenRouter API—full parameter reference for metrics, dimensions, filters, time ranges, ordering, and pagination. Use when building or debugging an analytics query, understanding the request/response shape, or handling query errors
Use this skill when the user asks to “create a plugin,” “scaffold a plugin,” “understand plugin structure,” “organize plugin components,” “set up plugin.json,” “use ${CLAUDE_PLUGIN_ROOT},” “add commands/agents/skills/hooks,” “configure auto-discovery,” or needs guidance on plugin directory layout, manifest configuration, component organization, file naming conventions, or Claude Code plugin architecture best practices.
Generate a browser-based p5.js curtain simulation that weaves user-supplied PNG, JPEG, or WebP artwork and optional text into individually moving strands. Use when users ask for an interactive curtain or thread simulation, artwork woven into cloth or ropes, image-bearing fabric motion, 可交互线帘/幕布, 图片织入布料, printed curtain effects, or a customizable browser-based fabric reveal.
General online video and music downloading and media extraction skill. Use it to detect and download when the user expresses an intent to download, such as “download this” or “save this,” and provides an HTTPS URL, even without mentioning “video” or “music.” Includes built-in adapters for WeChat Channels and Spotify tracks, and supports yt-dlp extractors for YouTube, Bilibili, X/Twitter, Douyin, TikTok, Xiaohongshu, Instagram, Facebook, Vimeo, Twitch, Reddit, Weibo, AcFun, and more. Also use for MP3s, subtitles, media information, and yt-dlp updates. Do not automatically download when a URL is pasted without download intent. Never use UI automation to interact with WeChat, Xiaohongshu, or risk-control verification pages.
Single entry point for the Unified Catalog Service Process lifecycle in Salesforce — find and deploy Service Process templates, create a Service Process from scratch, activate one, or organize it under a catalog category. It discovers the platform's own guided setup recipe for the requested operation and follows its live steps, so results and safeguards always match the org. Use when a business user wants to work with Unified Catalog or Service Process templates, find or browse templates, deploy or install a named template, set one up end to end, activate a Service Process, or add, file, or place a Service Process under a catalog or category. Triggers on: set up Unified Catalog templates, find a Service Process template, deploy the X template, activate a service process, add a service process to a catalog. DO NOT TRIGGER when the request concerns Data Cloud data kits, CRM Analytics, or App Framework catalogs rather than Unified Catalog Service Processes.
Use this skill when the user asks about Syncfusion Angular licensing, license keys, license registration, license validation errors, trial licenses, or license troubleshooting. This skill provides comprehensive guidance on generating, registering, and managing Syncfusion license keys for Angular applications, including edition-based and platform-based licensing models, registration methods, CI/CD integration, and resolving common licensing errors.
Use this skill when users need to apply themes, customize appearance, switch dark mode, use CSS variables, configure icons, or modify visual styling for Syncfusion Angular components. Covers icon library, size modes, and Theme Studio integration.
Read the fire: topic evaluation. Assess what could be filmed based on the user's experiences, situations, references, or trending topics; offer a few personalized directions with reasons and recommend one. Also assess whether an existing topic is worth filming and what audience it may attract. Use when the user doesn't know what to film, has a trend or reference and wants an angle, or wants to know whether a topic is viable.
Form the elixir: monetization conversion. Use when the user explicitly wants to monetize, take on client work, build a product or open-source project, or address the business problem of attracting the wrong audience. Distinguish exposure, demand, and conversion; identify whom the showcased work attracts; and design a deliverable and conversion path that can be fulfilled, complies with rules, and can be validated on a small scale. No earnings are guaranteed.
Series planning: Help users design a series they can keep producing episode after episode: what stays fixed, what changes, where the material comes from, how long it can last, who it will attract, how to shoot the first episode, and what signals to watch after how many episodes to decide whether to continue or switch. Use when users want to publish regularly but don't know what to make, their account content is scattered, they stop posting after a few videos, or they want a recurring format that makes people feel “this is all I need to watch.” Also use when a video has just gone viral and they don't know what should come next.
Title crafting: Titles. Use when a finished video has no title, the existing title is unsatisfactory, or you want to judge whether a title is good. First distill the “whole” from the content, then use “relevance to me” (recognizing people, events, and feelings) to create titles from a stranger’s perspective, noting for each why it makes viewers feel it is relevant to them.
Use when writing UX scenarios (docs/ux/scenarios.md): a new feature, a user-facing behavior change, or a move to scenario-driven development. Triggers: "ux scenarios" / "сценарии использования", "новая фича". Not for an empty project (vision first). Refusal phrase "no scenarios" / «без сценариев».
Make a complete Remotion video from a short brief with remocn components: pick the archetype, plan a storyboard with frame budgets, install the components, compose the scenes, check the render and offer to open the project in Remocn Studio. Use when the user asks for a whole video (product demo, launch, feature announcement, changelog, OSS showcase, CLI demo, testimonials, year in review, pricing, logo bumper), not a single component.
Help a facilitator run a conversational Well-Architected Framework Review (WAFR) with a customer — generates tailored facilitator questions, probing follow-ups, and "things to look out for" per WA question and best practice, adapted to the workload context
Worst Possible Idea (reverse brainstorming) — deliberately design the most terrible solutions to the problem, name the mechanism that makes each one bad, then invert those mechanisms into strong features. Use when ideas all feel timid and safe, when the team is optimizing instead of imagining, or for "worst idea", "reverse brainstorming", "what would make this worse", "design the disaster", "how would we guarantee failure". Do NOT use for analytical work like debugging, code review, or implementation tasks.
Use when creating or refining a structured Java implementation plan from trusted issue summaries, approved designs, ADRs, OpenSpec changes, existing plans, or a valid combination. The plan records its source artifacts and derivation direction and can remain the execution artifact without requiring OpenSpec. This should trigger for requests such as Create a plan from an issue; Create a plan from OpenSpec; Design an implementation plan; Refine an existing plan. Part of Plinth Toolkit
Event-driven interactivity on Decentraland entities - clicks and hover (pointerEventsSystem), E/F presses near an entity (proximity events), enter/exit zones (TriggerArea), raycasts. For per-frame key polling, cursor lock, InputModifier or the action bar see advanced-input; for screen buttons see build-ui.
Materials, textures and 3D text in Decentraland scenes - PBR, emissive (glow) and transparent materials, texture modes and UVs, GltfNodeModifiers (recolor or retexture GLB nodes), TextShape, Billboard, VisibilityComponent, faked mirrors. For screen UI see build-ui; for light sources see lighting-environment; for loading models and collision masks see add-3d-models.
A local-tooling companion to the bug-bounty orchestrator. It carries the same complete bug-bounty workflow, but use this variant when you also need to find where tools, wordlists, and clones are installed locally (jhaddix, SecLists, trufflehog, ffuf, dalfox, ghauri). For pure orchestration/routing, use the bug-bounty skill. Workflow coverage: recon (subdomain enumeration, asset discovery, fingerprinting, HackerOne scope, source code audit); pre-hunt learning (disclosed reports, tech stack research, mind maps, threat modeling); vulnerability hunting (IDOR, SSRF, XSS, auth bypass, CSRF, race conditions, SQLi, XXE, file upload, business logic, GraphQL, HTTP smuggling, cache poisoning, OAuth, timing side-channels, OIDC, SSTI, subdomain takeover, cloud misconfig, ATO chains, agentic AI); LLM/AI security testing (chatbot IDOR, prompt injection, indirect injection, ASCII smuggling, exfil channels, RCE via code tools, system prompt extraction, ASI01-ASI10); A-to-B bug chaining (IDOR→auth bypass, SSRF→cloud metadata, XSS→ATO, open redirect→OAuth theft, S3→bundle→secret→OAuth); bypass tables (SSRF IP bypass, open redirect bypass, file upload bypass); language-specific grep (JS prototype pollution, Python pickle, PHP type juggling, Go template.HTML, Ruby YAML.load, Rust unwrap); and reporting (7-Question Gate, 4 validation gates, human-tone writing, templates by vuln class, CVSS 3.1, PoC generation, always-rejected list, conditional chain table, submission checklist). Use when you need the local install path for a tool, wordlist, or clone for a hunt, or as the full-workflow variant when operating from this local toolkit. For general routing, use the bug-bounty skill. Chinese trigger terms: 漏洞赏金、安全测试、渗透测试、漏洞挖掘、信息收集、子域名枚举、XSS 测试、SQL 注入、SSRF、安全审计、漏洞报告
Scaffolds a complete agent TUI in TypeScript using @openrouter/agent — like create-react-app for terminal agents. Generates a customizable terminal interface with three input styles, four tool display modes, ASCII banners, streaming output, session persistence, and configurable tools. Use when building an agent, creating a TUI, scaffolding an agent project, or building a coding assistant.
Scaffold a new Decentraland SDK7 scene project, edit an existing scene's scene.json (parcels, spawn points, permissions, tags, feature toggles, skybox time), or pick preview options (start flags, Creator Hub Play Options). For publishing see deploy-scene or deploy-worlds.
Connects Figma design components to code components using Code Connect mapping tools. Use when user says "code connect", "connect this component to code", "map this component", "link component to code", "create code connect mapping", or wants to establish mappings between Figma designs and code implementations. For canvas writes via `use_figma`, use `figma-use`.
Comprehensive equity research analyst skill that orchestrates all Octagon financial analysis skills. Use when conducting full company analysis, writing initiation of coverage reports, performing due diligence, or creating investment recommendations with quantitative support.
Use when creating, redesigning, or reviewing web interfaces that need product-specific structure, clear hierarchy, responsive composition, accessible interaction, or relief from generic AI-generated SaaS aesthetics. Adapt grid, typography, imagery, motion, and product evidence to the established brand—including technical, editorial, image-led, warm, playful, and utilitarian directions—across React, Next.js, Tailwind CSS, HTML/CSS, landing pages, dashboards, documentation, portfolios, and interactive tools
Hunting skill for race condition vulnerabilities. Built from 12 public bug bounty reports including modern HTTP/2 single-packet attack cases (James Kettle DEF CON 2023 “Smashing the State Machine”; RyotaK / Flatt Security 10,000-request first-sequence-sync expansion 2024). Covers coupon double-redemption, gift-card double-spend, MFA-OTP-validate race, account-create race, faucet/crypto token double-mint, email-activation race, vote/upvote inflation, password-reset token race, rate-limit bypass via concurrent requests. Use when hunting race conditions, TOCTOU bugs, MFA-bypass-via-timing.
Monitor buyer intent signals across the web, including job postings, technology changes, funding rounds, and leadership changes. Send alerts when prospects show buying signals and prioritize "hot" accounts. Use for timing-based prospecting
New to MCP?
From what the protocol is to installing your first server, these answers cover most first questions.
An open protocol that defines how AI applications connect to external tools and data in a uniform way. Clients talk to the model; MCP servers provide tools, resources and prompt templates. They exchange standard messages, so one server can be reused by many clients.