Skills
100,928 packaged capabilities and playbooks for agents. Install any of them with one command.
All
Tests APIs for excessive data exposure (OWASP API3:2023) by intercepting raw API responses and comparing them against what the UI actually renders, looking for leaked PII, internal identifiers, debug data, or business-sensitive fields the frontend filters but the API still transmits. Use when auditing REST or mobile-app APIs for over-fetching, response filtering bypass, or unintended data leakage in endpoint responses.
Generate professional fashion photography with models wearing products, including pose direction, styling, lighting, and composition for editorial and commercial use. Use for garment shoots, accessory photography, and high-end fashion content.
Review GitHub pull requests with detailed, multi-perspective code analysis using parallel subagents. Use this skill whenever the user wants to review a PR, asks for code review on a pull request, mentions "review PR", "check this PR", "look at pull request", or references a PR number or GitHub PR URL. Do NOT use for local uncommitted changes — this skill only reviews pull requests on GitHub.
Expert blueprint for player mortality loops: progress-index checkpoints, soul graves, ghost/spirit layers, I-frame restitution, world-progress persistence, and death analytics. Use when implementing respawn, shrine checkpoints, corpse-run retrieval, or second-chance mechanics. Keywords: revival, respawn, checkpoint, soul grave, ghost mode, I-frames, death analytics, progress index.
Creates, modifies, and debugs Infrahub Generators—design-driven automation that builds infrastructure objects from templates and topology definitions. Trigger when: building design-to-implementation workflows, auto-creating objects from templates, topology-driven generation, modifying or extending an existing generator, debugging why a generator produced or deleted the wrong objects or left a field empty or incorrect, or changing what a generator produces. Do not trigger when: designing schemas, writing data transforms, querying live data, or populating static data files.
Generate AI videos with Luma Dream Machine via AceDataCloud API. Use for creating videos from text prompts, generating videos from reference images, extending existing videos, or any video generation task with Luma. Supports text-to-video, image-to-video, and video extension.
Upgrading a MapLibre GL JS app from v5 to v6 — the ESM-only build, the removed default export, CommonJS require() breakage, the styleimagemissing/setMissingStyleImageResolver change, the removal of the internal map.transform, the MapDataEvent → MapSourceDataEvent/MapStyleDataEvent split, and the bundler-only setWorkerUrl() requirement. Use when a v5 app breaks after upgrading to v6, or before pinning a v6 install.
Persistent cross-session memory using Memento MCP knowledge graph (mcp__memento__* tools). Recall-before-acting: search memory before starting tasks, on errors, and when receiving corrections. Multi-dimensional search: two queries per recall event (technical topic + process/workflow learnings). Store-after-discovery: persist solutions, conventions, and corrections immediately. Three-step recall: search, open_nodes, traverse relations. WORKING_STATE.md for crash recovery. Self-reminder protocol every 5-10 messages. Activate on task start, errors, corrections, session boundaries, or explicit memory requests. See references/agents-md-setup.md for AGENTS.md integration.
Deploy a local project to a ModelScope Studio. Supports Gradio, Streamlit, Docker, and static website types. Covers creation, code sync, deployment, log monitoring, plaintext/secret variable management, and automatic diagnosis and repair. Use when the user mentions deploying to ModelScope, Studio, the ModelScope community, ModelScope, Studio deployment, Gradio deployment, Streamlit deployment, Docker deployment, FastAPI deployment, or static website deployment, or wants to publish a local app, web app, or API service to the cloud. Also applies when the user encounters a Studio build failure or runtime error and needs to inspect logs, wants to update an already-deployed Studio, or wants to manage a Studio's plaintext variables or secrets. Not applicable to: Hub repository management, model/dataset operations, MCP/skill management, model training, or model evaluation
Use this skill for MolMIM, NVIDIA's BioNeMo NIM microservice for small-molecule latent-space generation and optimization. Invoke for MolMIM, molecular embeddings, hidden states, latent decoding, sampling around a seed SMILES, CMA-ES guided molecule generation, QED or plogP optimization, hosted NVIDIA API calls, or local Docker deployment.
Interactive, problem-first PRD generator — interviews the user to surface the thesis (the problem, and WHY build it) and a falsifiable hypothesis, then writes a focused PRODUCT-level PRD (problem · evidence · hypothesis · users · MVP · success metrics · non-goals · open questions). Use at the start of a greenfield effort to discuss the product. A PRD is INTENT (what/why), never engineering decisions (how) — those are the `plan-architecture` skill's spec.
Review an incoming supplier technical or financial offer against an IPPF ToR, and keep the internal procurement pack consistent: offer-review, pack-propagate, and score-compare modes. Use when Ane checks an offer or revised offer against a ToR and her comments, propagates a decision or figure across the procurement/waiver pack, or compares her panel scores with the AI scores. Distinct from tor-procurement (drafts and grades the ToR itself, upstream of offers), /proposal (funding proposals to donors), implementation-pack (post-award tracking), and accreditation-desk-review (MA compliance).
Predicts client renewal likelihood based on health score signals. Analyzes engagement, support, adoption, satisfaction, billing, stakeholder, and usage data to calculate a weighted Health Score (0-100), classify renewal risk, and generate a prioritized action plan with early warning signals and recommended save plays.
Threshold-based alerting on Scrapfly account metrics. Wire up rules like "alert me when scrape success rate drops below 95% for 10 minutes" and receive notifications via email, webhook, or in-app. Use when the user asks to "set up an alert", "monitor my scrape success rate", "tell me when my scrapes start failing", "alert on unblocker block rate", "alert on ASP block rate", "watch a specific domain", or any task involving the Scrapfly alerting product. Covers the three call paths: REST API, MCP `alert_*` tools, and the `scrapfly alert` CLI subcommand. Enterprise plan feature
Expert Section 508 compliance advisor for US federal ICT accessibility. Use this skill whenever a user asks about Section 508, WCAG 2.0/2.1 AA for federal systems, VPAT or Accessibility Conformance Reports (ACR), accessibility audits, remediation planning, PDF accessibility, web or software accessibility, mobile accessibility, federal procurement accessibility requirements, contractor obligations, undue burden exceptions, assistive technology compatibility, or Section 508 testing. Covers the Revised Section 508 Standards (2018), all WCAG 2.0 Level AA success criteria, the four POUR principles, testing methodologies, and agency compliance workflows. Trigger even if the user doesn't say "skill" — any Section 508 or ICT accessibility question for federal systems should use this skill.
Use sem for entity-level (function/class/method) code questions in any Git repo. Four questions, four verbs — where is it (sem find, sem grep), what does my change touch (sem impact), is it correct (sem check), what should a human review (sem certify). Trigger whenever the user asks where something is defined or called, what a change breaks or which tests to run, whether a change is correct, what changed in a commit or PR, or what to review; also use it proactively before refactors and in code review, where line-level git output is noisy.
Check installed pstack personas, optionally register native agents, configure which models pstack uses per role and at what reasoning budget, and set up a repository PR template. Use for /setup-pstack, "configure pstack models", "pstack budget", "set up pstack PR templates", or changing pstack's model choices.
Run existing ShinkaEvolve tasks with the `shinka_run` CLI from a task directory (`evaluate.py` + `initial.<ext>`). Use when an agent needs to launch async evolution runs quickly with required `--results_dir`, generation count, and strict namespaced keyword overrides.
Use when the user wants their Claude agent to improve itself based on past usage, asks about a nightly/offline “sleep” or “dream” cycle, memory/skill consolidation, or says things like “make my agent better the more I use it,” “review my past sessions,” “learn my preferences,” “consolidate what you learned,” “run the sleep cycle,” or wants to schedule background self-optimization. Drives the skillopt_sleep engine: harvest past sessions -> mine recurring tasks -> replay through a selected backend -> consolidate validated CLAUDE.md/SKILL.md behind a held-out gate.
Run `gbrain skillpack-check` to produce an agent-readable JSON health report for the gbrain install. Wraps `gbrain doctor` + `gbrain apply-migrations --list` so a host agent (your OpenClaw's morning-briefing, any OpenClaw cron) can see at a glance whether the skillpack needs attention. Use when the user asks "is gbrain healthy?", when a cron fires a morning check, or proactively when something seems off (jobs not running, brain not updating, autopilot silent).
Design and generate polished, on-brand presentation decks as clean 1920×1080 HTML — with real charts, tables, and AI or stock imagery. Use whenever someone wants to create, design, or improve a presentation, slide deck, pitch deck, investor or sales deck, keynote, training or teaching deck, PowerPoint (PPTX), Google Slides, or a data-heavy report, and cares about design quality. The visual style is derived from the brief, never picked from a theme or template menu.
Supanova landing page design engine. Generates premium, conversion-optimized landing pages using pure HTML + Tailwind CSS (CDN). Overrides default LLM biases toward generic templates. Enforces metric-based design rules, Korean typography standards, and hardware-accelerated motion for standalone HTML output.
Integrates the uView UI component library into UniApp projects, including easycom configuration, pages.json and manifest.json setup, SCSS theming, and platform-specific handling (H5, mini-program, App, nvue). Use when the user needs to add uView UI components to a UniApp project, configure easycom auto-import, or handle cross-platform styling
Generates properly tagged UTM links with consistent naming conventions. Maintains a UTM registry file (utm-registry.json) to enforce naming consistency, prevent duplicates, generate short links, and output ready-to-copy links for LinkedIn, email, social, and ads.
Alibaba Cloud AnalyticDB for MySQL operations and diagnosis assistant. Supports cluster information queries, performance monitoring, slow query diagnosis, running SQL analysis, table-level optimization suggestions, and more. Triggers: “ADB MySQL,” “AnalyticDB,” “cluster list,” “slow query,” “BadSQL,” “data skew,” “idle index,” “SQL Pattern,” “space diagnosis,” “table diagnosis,” “performance monitoring.”
Alibaba Cloud Firewall Status Overview Skill. One-click query of overall cloud firewall status including asset management, border firewall switch status, and traffic overview. Triggers: "cloud firewall status", "firewall overview", "firewall status overview", "asset management", "protection coverage", "what is the overall cloud firewall status", "how many assets are not managed", "what is the protection coverage for each boundary", "CFW status", "cloud firewall overview"
Entry skill for the aliyun CLI distribution of CloudMonitor (CMS). Use when the user mentions aliyun cms2, CloudMonitor, CMS commands, or any CMS module operation such as Integration Policy/Center, APM, RUM, Prometheus Service, Recording rule, alert rule, alert template, alert history, event hub, SLS event, PromQL, cloud resource, service observability, monitoring onboarding, metric query, etc.
The primary development workflow for the Archon project (remote-coding-agent). Use this skill instead of any PRP skills when working on Archon code. Routes to 10 specialized cookbooks based on the task: RESEARCH — “how does the orchestrator work?”, “where is session state defined?”, “trace the workflow execution flow”, “what is IWorkflowStore?” INVESTIGATE — “should we use Drizzle or Prisma?”, “what’s the best way to add WebSockets?”, “can we migrate to Turso?”, “how do other projects handle rate limiting?” PRD — “write a PRD for dark mode”, “spec out the notification feature”, “product requirements for webhook retry” PLAN — “plan the auth refactor”, “design the caching layer”, “create an implementation plan for #42” IMPLEMENT — “implement the plan”, “execute .claude/archon/plans/auth.plan.md”, “build the feature from the plan”, “code this up” REVIEW — “review PR #123”, “review my changes”, “code review the diff” DEBUG — “debug the failing test”, “why is streaming broken?”, “root cause analysis on the timeout issue” COMMIT — “commit these changes”, “commit the auth refactor” PR — “create a PR”, “open a pull request for this branch” ISSUE — “report this to gh”, “create a gh issue”, “log it in github”, “file a bug for this”, “create a feature request”. This skill triggers on any development task: researching, investigating, planning, building, reviewing, debugging, committing, or shipping code. Not for running Archon CLI workflows in worktrees (use /archon instead).
When a task is blocked by missing or unverified information (an undocumented protocol, an unknown API shape, a value only real hardware/prod can confirm), build everything that does NOT depend on the unknown right now, and quarantine the unknown behind a single adapter boundary—best-guess defaults + a verified flag + a conformance/adapt kit—so adapting later means editing one file, not rewriting the project. Trigger when the user says “làm những gì có thể trước,” “build what we can now,” “wrap the unknowns,” “isolate/quarantine the unknown parts,” “don't block on missing info,” “adapter so we can swap later,” “ready to adapt,” or invokes /build-now-adapt-later. Also applies whenever a spec has ⚠️ “to be verified” items but most of the work doesn't actually depend on them
CesiumJS time, properties, and animation—Clock, JulianDate, TimeInterval, Property, SampledProperty, CallbackProperty, PathMode, interval and sampled path materials, interpolation, splines, and CZML temporal data. Use when making entity attributes or path materials time-dynamic, configuring the simulation clock, interpolating positions, or working with sampled, interval, or callback properties.
New to MCP?
From what the protocol is to installing your first server, these answers cover most first questions.
An open protocol that defines how AI applications connect to external tools and data in a uniform way. Clients talk to the model; MCP servers provide tools, resources and prompt templates. They exchange standard messages, so one server can be reused by many clients.