Skills
101,174 packaged capabilities and playbooks for agents. Install any of them with one command.
All
IoT and embedded device security testing methodology. Covers hardware reconnaissance (UART, JTAG, SWD, SPI flash, I2C EEPROM, eMMC chip-off), firmware acquisition (vendor portals, OTA capture, flash dump, binwalk extraction), firmware analysis (filesystem mounting, binary triage, hardcoded secrets, default credential discovery), bootloader attacks (U-Boot console, secure-boot bypass, fault injection), runtime attacks on embedded Linux/RTOS (busybox CVEs, MTD writes, /dev/mem), wireless protocol attacks (Zigbee, BLE, Z-Wave, LoRaWAN, Thread/Matter, sub-GHz), MQTT/CoAP/Modbus/BACnet/OPC-UA exploitation, mobile companion app analysis, cloud-IoT API abuse, and side-channel/glitching basics. Use for IoT pentest, smart-home assessment, ICS/OT testing, or embedded vulnerability research.
Inspect, explain, audit, and safely change Proxyman macOS App Settings. Use when a user asks where a preference lives, what it does, why it is locked or ineffective, or requests a settings change or review. Do not use for individual debugging-tool rules.
Python SDK for inference.sh - run AI apps, build agents, and integrate with all models. Package: inferencesh (pip install inferencesh). Supports sync/async, streaming, file uploads. Build agents with template or ad-hoc patterns, tool builder API, skills, and human approval. Use for: Python integration, AI apps, agent development, RAG pipelines, automation. Triggers: python sdk, inferencesh, pip install, python api, python client, async inference, python agent, tool builder python, programmatic ai, python integration, sdk python
Write a complete requirements document, published as a readable HTML artifact (table of contents, search by ID, diagrams, copy all or part of the Markdown) and also delivered in Markdown, based on UI and functional specs (project from the specs-ui skill): overview and scope, users and roles, functional and UI specifications by batch with acceptance criteria, visual identity, non-functional requirements, architecture, detailed technical stack, infrastructure and operations, batch breakdown with estimate ranges, schedule, risks and open questions. Derive the architecture from the specs, propose options, then validate it. Use whenever someone mentions a requirements document, technical specifications, design document, document for the dev team, architecture or stack based on specs, estimation or batch breakdown, exporting requirements to the application repository, or test coverage of criteria, even without saying “requirements document”.
Act as a Senior QA Engineer covering the complete software testing lifecycle, from requirements analysis through test automation and continuous improvement. Always orchestrate available skills to determine the best approach before executing tasks.
Audit AI crawler access and Google AI-feature eligibility for a page — check the snippet controls that actually gate AI Overviews and AI Mode (noindex, nosnippet, max-snippet, data-nosnippet), resolve per-bot effective access from robots.txt for the audited path (training vs retrieval vs user-fetch tokens), read Content-Signal posture, diff what different user-agents are served, confirm non-JS crawlers can read the page, and generate a choice-gated robots.txt preset. Module M14. Feeds the AI Visibility score.
Audit and generate sitemaps and discovery files — validate XML sitemap presence/size/extensions/lastmod, check robots.txt referencing and sitemap-to-canonical consistency, reconcile orphans against the link graph, and produce repaired sitemap entries plus a robots.txt Sitemap line. Module M17. Feeds the Search SEO score.
Shioaji (SJ) is SinoPac/永豐金證券's API for trading Taiwan markets (台股/期權 on TWSE, TPEX, TAIFEX). Use for any Shioaji task, or for Taiwan trading automation where Shioaji may apply: Python sync/async code, the `shioaji` CLI, the local HTTP API server with SSE streaming, or HTTP clients in JS/TS, Go, C/C++, C#, Rust, Java/Kotlin. Covers login, API keys and CA, contracts, placing and managing orders (下單/改單/刪單), order reports, real-time quotes and K-bars (即時行情), historical data, market signals, accounts and positions, watchlists, reserve orders, migration, and troubleshooting errors. Also use when someone wants to start using Shioaji or get SinoPac API access for the first time. US/HK markets are not supported yet. Not for other brokers or generic indicators without Shioaji data.
Build a complete presentation deck from a brief. Generates storytelling plan, slide operations, renders the deck, and runs QA. Requires extracted template contracts from /slides-extract. Use when the user wants to create slides, build a deck, generate a presentation, write a strategy deck, or says things like “make me a 10-slide deck on X”, “create a presentation about Y”, “build slides for the board meeting”.
Extract template contracts from a .pptx file. Produces layout catalogs, archetypes, a resolved manifest, and a clean base template for slides-build. Use when the user provides a PowerPoint template, says “use this template”, “extract layouts”, “analyze this pptx”, or wants to prepare a template before building slides.
Multi-slide carousel design for Instagram, LinkedIn, and Twitter/X with layout rules and hooks. Covers slide structure, text hierarchy, swipe psychology, and platform-specific specs. Use for: carousel posts, Instagram carousels, LinkedIn carousels, slide posts, educational content. Triggers: carousel, instagram carousel, linkedin carousel, slide post, carousel design, swipe post, multi-image post, carousel template, educational carousel, carousel content, instagram slides, linkedin slides
Talking head video production with AI avatars, lipsync, and voiceover. Recommended: P-Video-Avatar (fastest, cheapest, built-in TTS). Also covers OmniHuman, PixVerse, Fabric. Portrait requirements, audio quality, production workflows. Use for: spokesperson videos, course content, social media, presentations, demos. Triggers: talking head, avatar video, lipsync, lip sync, ai spokesperson, virtual presenter, ai presenter, omnihuman, talking avatar, video presenter, ai talking head, presenter video, ai face video, p-video-avatar
Prevent Terraform/OpenTofu hallucinations by diagnosing and fixing failure modes: identity churn, secret exposure, blast-radius mistakes, CI drift, and compliance gate gaps. Use when generating, reviewing, refactoring, or migrating IaC and when building delivery/testing pipelines.
Remediate security findings by producing minimal, surgical code patches. Triggers on 'patch security findings', 'fix vulnerabilities', 'remediate findings', 'threat patch', or when the user provides a findings.json (from threat-model), a Codex security findings CSV, a THREAT-MODEL.md, or individual vulnerability descriptions and wants them fixed. Also trigger when reviewing code flagged by a security scanner and the user wants actionable fixes rather than just reports.
Publish organic TikTok content (videos, photos, carousels) through the TikTok-compliant consent card via the Hyper MCP. Use when the user wants to post a video to TikTok, share photos on TikTok, upload to TikTok, or any phrase like "post this to TikTok" / "share on TikTok" / "put this on my TikTok". For paid TikTok advertising campaigns, use the `tiktok-ads` skill instead.
Rare disease genomics — disease identification (Orphanet), causative gene discovery, gene-disease validity (GenCC), variant interpretation (ClinVar), and translational research (ClinicalTrials.gov, drug repurposing for orphans). Use for rare-disease-gene curation, novel-gene-discovery analysis, and rare-disease drug-development support
A general-purpose PPT generation skill. Automatically creates a presentation in a consistent style using any PPT template specified by the user and provided text and image materials (documents, images, etc.). It can analyze template structure, extract background images and colors, parse color schemes and font specifications, and generate a complete PPT from the materials. Supports data visualization with various chart types, including bar, line, pie, and radar charts. Keywords: PPT generation, template analysis, presentation, slides, text and image layout, automation, charts, data visualization.
Use ve docs search/fetch to search VolcEngine official documentation and retrieve full text. Use when the user asks about the concepts, usage, billing rules, deployment steps, best practices, or terms of service of VolcEngine products, or provides www.volcengine.com/docs/ or docs.volcengine.com/docs/ links whose body text needs to be read.
Retrieve transcripts from YouTube, Instagram, TikTok, X, Vimeo and other video sites, summarize or analyze what was said (and shown on screen), or save an Obsidian-ready Markdown knowledge-base note with captions or a Whisper transcript, creator metadata, frames, language, and source provenance. Use for a video URL, video ID or local video file when the request needs spoken content, on-screen text, or an archival note. A bare video link defaults to saving a note.
Build RAG (Retrieval Augmented Generation) pipelines with web search and LLMs. Tools: Tavily Search, Exa Search, Exa Answer, Claude, GPT-4, Gemini via OpenRouter. Capabilities: research, fact-checking, grounded responses, knowledge retrieval. Use for: AI agents, research assistants, fact-checkers, knowledge bases. Triggers: rag, retrieval augmented generation, grounded ai, search and answer, research agent, fact checking, knowledge retrieval, ai research, search + llm, web grounded, perplexity alternative, ai with sources, citation, research pipeline
Manage Alibaba Cloud SLS (Simple Log Service) resources using aliyun-cli. Use when working with SLS projects, logstores, log queries, or when the user mentions Aliyun Log, Aliyun SLS, LogStore, Log Collection, or log service operations
Read and analyze Arduino or embedded serial output for structured runtime debugging across Arduino IDE, Arduino CLI, PlatformIO, and vendor-specific monitor tools. Use when boot output, sensor data, resets, communication failures, timing symptoms, or field behavior need evidence rather than compile-only reasoning.
Advanced ArgoCD operations beyond the core CLI/API: multi-cluster ApplicationSet generators, automated image updates, new-cluster bootstrapping, and workload onboarding via templated ApplicationSets. Use when working with ApplicationSet CRDs (list, cluster, git, matrix, merge, SCM, pull request, plugin generators), configuring ArgoCD Image Updater (semver/digest/newest-build update strategies + git write-back), bootstrapping a new Kubernetes cluster into a multi-repo GitOps setup, registering clusters with proper labels for ApplicationSet targeting, onboarding a new workload via the standard ApplicationSet template, or troubleshooting any of these. For routine app sync/status/diff work use the core `argocd` skill instead.
Generates infographic image card series with 12 visual styles, 8 layouts, and 3 color palettes. Breaks content into 1-10 cartoon-style image cards optimized for social media engagement. Use when the user mentions “小红书图片”, “小红书种草”, “小绿书”, “微信图文”, “微信贴图”, “image cards”, “图片卡片”, or wants a social media infographic series.
Migrates carousels from Embla, Swiper, Splide, Slick (including react-slick), Flickity, or similar libraries to Blossom Carousel by mapping wrappers, options, methods, events, and plugins to native scrolling, CSS scroll snap, and Blossom's controls and APIs. Use when the user wants to replace, remove, or move off one of these carousel libraries, or compares them with Blossom Carousel.
Nadia, the Founder Advisor. Use when the user asks for Nadia, the founder advisor, the startup advisor or the advisor, or wants help with the business side of a startup: runway, pricing, unit economics or a cap table; a pitch deck, investor update, board pack, lean canvas, fundraising plan, grant or accelerator application; investor targets, outreach or meeting prep; reading a term sheet or SAFE; a co-founder agreement or first hire; rehearsing a pitch or a hard conversation.
Create distinctive brands that customers choose because they believe there's no substitute, using Marty Neumeier's Brand Gap and Zag frameworks. Use when: building a new brand from scratch (startup, product, service); repositioning an existing brand that's become commoditized; defining brand differentiation when competitors all look the same; creating brand guidelines for consistent execution; evaluating brand strength through structured testing
Entry point for MCP server development — interrogates the user about their use case, determines the right deployment model (remote HTTP, MCPB, local stdio), picks a tool-design pattern, and hands off to specialized skills. Triggers when the user asks to "build an MCP server", "create an MCP", "make an MCP integration", "wrap an API for Claude", "expose tools to Claude", "make an MCP app", or discusses building something with the Model Context Protocol.
Standalone evaluation of an existing PDB directory with Proteina-Complexa. Use this skill whenever the user wants to "evaluate PDB files", "re-fold these designs", "compute interface pAE", "compute i_pLDDT for a folder", "run AF2 / RF3 / ESMFold on my designs", "score binder candidates", "designability of this folder", "scRMSD for designs", "motif RMSD for these PDBs", "complexa analysis", "complexa evaluate from a PDB directory", "evaluate from pdb dir", or score third-party outputs (BindCraft, AlphaProteo, RFdiffusion, hand-curated decoys). It picks the correct `evaluate_*.yaml` config, wires `++dataset.pdb_dir` and the folding backend, runs `complexa analysis` (the evaluate → analyze chain), parses the result CSV, reports pass-rates against the right `result_type` thresholds, and emits a replayable `eval_manifest.json`. Reach for this skill before hand-rolling refolding scripts.
First-time setup, environment configuration, and model-weight installation for Proteina-Complexa. Reach for this skill whenever the user says "set up complexa", "install complexa", "configure my .env", "first-time setup", "what models do I have installed", "what's in my .env", "download model weights", "download Complexa / AF2 / RF3 / ProteinMPNN / LigandMPNN / ESM2 / ESMFold checkpoints", "preflight my GPU", "verify environment", "complexa init", "complexa download", "complexa download --status", "complexa validate env", or any time a fresh checkout needs to be made runnable. This is the first skill to run on a new clone—it drives `complexa init`, `complexa download`, and `complexa validate env` end-to-end, edits the required `.env` keys, picks the right runtime (UV vs Docker), and emits a replayable setup artifact
Use when the user wants to prepare a due diligence data room for fundraising, or when an investor has requested additional materials after a pitch. Also activates for "data room", "due diligence", "DD checklist", or "what documents do investors need?".
Improve decision quality by clarifying the real problem, exposing hidden assumptions, reasoning from fundamental facts, reducing unnecessary complexity, and ending with a cleaner recommendation or next step. Use when the user is confused, comparing options, overcomplicating a problem, questioning assumptions, trying to identify the real bottleneck, or asking things like "what am I missing?", "does this really have to be this way?", "what should I remove?", "what is the simplest explanation that still fits?", or "help me think this through".
ElevenLabs text-to-speech with 22+ premium voices, multilingual support, and voice tuning via inference.sh CLI. Models: eleven_multilingual_v2 (highest quality), eleven_turbo_v2_5 (low latency), eleven_flash_v2_5 (ultra-fast). Capabilities: text-to-speech, voice selection, stability/style control, 32 languages. Use for: voiceovers, audiobooks, video narration, podcasts, accessibility, IVR. Triggers: elevenlabs, eleven labs, elevenlabs tts, premium tts, professional voice, ai voice, high quality tts, multilingual tts, eleven labs voice, voice generation, natural speech, realistic voice, voice over, speech synthesis
Email marketing design with layout patterns, subject line formulas, and deliverability rules. Covers welcome sequences, promotional emails, transactional templates, and mobile optimization. Use for: email marketing, newsletter design, drip campaigns, email templates, transactional emails. Triggers: email design, email template, email marketing, newsletter design, email layout, email campaign, drip campaign, welcome email, promotional email, transactional email, email subject line, email header image, email banner
Eva Create 2.5.0 content creation entry point. Handles two independent tracks: short videos, spoken scripts, video titles/openings/body; and new writing, continuation, and editing of nonfiction creator articles, WeChat Official Account articles, and opinion essays. When users explicitly want to generate customer inquiries through short videos, build purchase trust in a product, or prompt prospective customers to act, load the Eva trust-building customer acquisition overlay as needed, without creating a second creation workflow. Does not handle Moments posts, Weibo, Xiaohongshu short-form posts, fiction, academic papers, or professional documents. Triggers: /eva-create, /eva-shortvideo, /eva-title, /eva-script, make a short video, improve a video opening, write a complete video script, review short-video pacing, why a short-video script feels weak/where it lacks momentum, write a WeChat Official Account article, turn ideas or materials into an article.
New to MCP?
From what the protocol is to installing your first server, these answers cover most first questions.
An open protocol that defines how AI applications connect to external tools and data in a uniform way. Clients talk to the model; MCP servers provide tools, resources and prompt templates. They exchange standard messages, so one server can be reused by many clients.