Skills
101,174 packaged capabilities and playbooks for agents. Install any of them with one command.
All
Emulated Sign in with Apple / Apple OIDC for local development and testing. Use when the user needs to test Apple sign-in locally, emulate Apple OIDC discovery, handle Apple token exchange, configure Apple OAuth clients, or work with Apple userinfo without hitting real Apple APIs. Triggers include "Apple OAuth", "emulate Apple", "mock Apple login", "test Apple sign-in", "Sign in with Apple", "Apple OIDC", "local Apple auth", or any task requiring a local Apple OAuth/OIDC provider.
Render a markdown draft / any document in the conversation context into a single-file “paper proposal” HTML — serif body, monospace meta, numbered sections, inline SVG figures, callouts, tables, optional interactive elements. Trigger when the user says “turn this into HTML / render as a web page / make a pretty HTML / give me a single-page doc / generate article HTML / paper-style HTML / convert to article html / render this as a doc html” or similar, and wants a **static single file** rather than Figma/PDF/PPT. Also fires when the user pastes some markdown and says “beautify this / typeset this / give me a web version”. Do NOT trigger when the user wants slides, needs a backend, or needs a multi-page site.
Expert knowledge for Azure Virtual Network development including best practices, decision making, architecture & design patterns, limits & quotas, security, configuration, and deployment. Use when configuring IPs/routing, VNet peering, NSGs/service endpoints, gateways/firewalls, or upgrading Basic to Standard IPs, and other Azure Virtual Network related development tasks. Not for Azure Networking (use azure-networking), Azure Virtual Network Manager (use azure-virtual-network-manager), Azure Virtual WAN (use azure-virtual-wan), Azure Route Server (use azure-route-server).
Generates images and text via reverse-engineered Gemini Web API. Supports text generation, image generation from prompts, reference images for vision input, and multi-turn conversations. Use when other skills need image generation backend, or when user requests "generate image with Gemini", "Gemini text generation", or needs vision-capable AI generation.
Converts Markdown to styled HTML with WeChat-compatible themes. Supports code highlighting, math, Mermaid (rendered to PNG via headless Chrome), PlantUML, footnotes, alerts, infographics, and optional bottom citations for external links. Use when user asks for "markdown to html", "convert md to html", "md 转 html", "微信外链转底部引用", or needs styled HTML output from markdown
Use when the user wants to extract project vision, decisions, and preferences from their head into clear documentation (README + ADRs) through a back-and-forth Q&A loop. Triggers on "brain-to-docs", "build out the docs", "extract the vision", "let's document this project".
Looks up the design spec (a DESIGN.md of colors, type weights, letter-spacing, radii, shadows) for well-known brands such as Stripe, Linear, Apple, Figma, Notion and Nike from getdesign.md at runtime, then applies it to your project. The installed skill is written in Chinese but accepts English brand names.
Validate the accuracy, source quality, and formatting of all citations in research reports. Ensure every factual claim has a verifiable source and provide source-quality ratings. Use this skill before finalizing a research report, reviewing others’ research, or publishing or sharing research.
Black-box CLI grading harness that runs a test suite against a target CLI and reports per-rule pass/fail results from the cli-for-agents 45-rule catalog. Use when reviewing, auditing, or grading a command-line tool for agent-friendliness. Trigger even if the user doesn't explicitly say "agent-friendly"—apply whenever they ask "is my CLI good for agents?", "review this CLI", "grade my CLI against the rules", "check if this tool is safe to automate", or "audit command-line design". Companion to the cli-for-agents distillation skill.
Use when adding snippet support to a CloudCannon site, configuring MDX components (Astro, Next.js), Hugo or Eleventy shortcodes and includes for the Content Editor, debugging snippet round-trip issues, or setting up inline HTML snippets in Markdown content.
Comprehensive Cloudflare platform skill covering Workers, Pages, storage (KV, D1, R2), AI (Workers AI, Vectorize, Agents SDK), networking (Tunnel, Spectrum), security (WAF, DDoS), and infrastructure-as-code (Terraform, Pulumi). Use for any Cloudflare development task. Favors retrieval from Cloudflare docs over pretrained knowledge.
CodeStable documentation wrap-up. Triggers: end of a phase, organizing docs, syncing memory, /sync, /neat; performs a global knowledge base hygiene check and four-layer sync. Do not use for writing a single developer/user guide or API reference (cs-docs), fixing bugs (cs-issue), implementing features (cs-feat), or repository initialization (cs-onboard).
Expert in the W3C DTCG token specification — token structure, color spaces (sRGB, Display P3, OKLCH), references/aliasing, theme resolvers, and tools (jq, JSONata, Terrazzo, Figma exports). The authoritative skill for design token architecture.
Methodology playbook for analyzing DEX/AMM trading, liquidity, and pricing data on Allium—Uniswap, PancakeSwap, PumpSwap/Pump.fun, Orca, Pendle, aggregators (0x, 1inch), and perp DEXs like Hyperliquid. Use whenever a question touches swap volume, trade counts, liquidity positions, impermanent loss, aggregator fee/routing analysis, or DEX-derived token prices—even if the user just names a protocol or asks why a number "looks off" compared with a known reference. Covers per-hop double counting, protocol-vs-project grouping, and fee-leg reconstruction pitfalls that commonly arise before writing SQL
Integrate the Didit Database Validation API (POST /v3/database-validation/) to check identity data against government and authoritative registries. Use when the user wants to validate a national ID, CPF, CURP, DNI, RUT or cedula number against official records, confirm a person's name and date of birth with a civil registry, run a registry face match (Argentina RENAPER, Panama SIB), choose database validation services per country, or implement government database lookups using Didit. Covers 100+ services in 45 countries (strongest in Latin America, plus Spain, South Africa, Kenya and other markets) with per-service pricing and per-field match results.
Use when the user asks for a GCP or Google Cloud architecture diagram—VPC/networking, GKE, Cloud Run, landing zone, multi-region, or any diagram built with GCP service icons. Builds with the declarative layout engine using ground-truth GCP stencils, validates stencils, colors, nesting, and geometry, then runs a render-based vision self-check. Default output is .drawio; PNG/SVG only on request.
Drizzle ORM targeting SQLite (better-sqlite3, libsql/Turso, bun:sqlite, Cloudflare D1, expo-sqlite, op-sqlite). Covers schema definition (column modes, primary keys, foreign keys, indexes), drizzle-kit migrations (generate vs push, renames, custom SQL), the query builder (selects, upserts, returning, EXPLAIN), the relational query builder (relations(), `with`, partial columns), transactions and `db.batch()`, prepared statements with `sql.placeholder()`, connection pragmas (WAL, foreign_keys, busy_timeout), and Drizzle type inference (`$inferSelect`, `$inferInsert`, `$type<>`, drizzle-zod). Use when writing, reviewing, or refactoring Drizzle code for SQLite. Trigger even if the user doesn't say "performance" — schema/migration choices made now are expensive to reverse later, and SQLite-specific traps (single-writer model, no native booleans/dates, ALTER TABLE limits, FK pragma off by default) catch teams who reach for Drizzle without reading the SQLite docs.
Audit external compatibility between two DSH (DeepSeek Harness) versions and detect reverts, producing an upgrade-report directory. Compare git tags with a source checkout, or published npm packages without one. Use whenever the user asks to check, compare, or audit two DSH versions or whether upgrading is safe—for example, “more changes or reverts in dsh-vX -> dsh-vY” or “compare the breaking changes”—even with only two version numbers and no source location. Read-only outside the report directory; npm mode installs in isolation with --ignore-scripts.
Use this skill to run a visual-craft audit of a rendered UI and produce an evidence-grounded Craft Report across Useful, Usable, Reliable, Coherent, and Well-Crafted. Invoke it for craft audits, visual critiques, design comparisons, felt-quality reviews, or visual-craft readiness checks on screenshots (.png, .jpg, .jpeg, .webp, .gif), Figma frames, rendered prototypes, and live URLs. Do not use it for source-code review, SLDS compliance (use design-systems-slds-validate), or accessibility compliance (use experience-accessibility-validate).
Design an auditable playbook when no narrower one fits: a large migration, an ambitious multi-part change, or work a human reviews after stepping away. Scale rigor to the task, run a hypothesis loop, and log decisions. Use for /figure-it-out or "figure it out".
Web scraping, search, crawling, and browser interaction via Firecrawl CLI. Use when the user wants to search the web, fetch a URL, scrape content, crawl docs, download a site, extract structured data, or interact with JS-heavy/login-gated pages. Triggers on: "search for", "scrape", "fetch this URL", "get the page", "crawl", "download the site", "extract structured data", "click the button", "fill the form", "log in to". Do NOT use for local files, git, or code editing. For advanced use (bulk crawl, AI agent extraction, browser profiles, parallel jobs): install firecrawl-crawl, firecrawl-agent, or firecrawl-instruct skills.
Integrates the Gleap customer feedback SDK into projects. Detects the platform (JavaScript, iOS, Android, React Native, Flutter, Ionic Capacitor, Cordova, FlutterFlow) and guides through installation, initialization, permissions, and common API usage such as user identification and event tracking. Use when adding Gleap, setting up the feedback SDK, or integrating the Gleap SDK.
Generate and EDIT images with OpenAI gpt-image-2 via AceDataCloud API. Use when you need high-fidelity images from a prompt, or to edit/composite existing images (e.g. fuse a real logo/QR/screenshot into a scene, keep characters consistent, restyle). Strong at legible text and faithful editing.
Generate or edit images, transparent assets, SVGs, and animated GIFs with GPT Image CLI; returns JSON results and JSONL progress. Supports text-to-image, reference-image editing, local mask or markup edits, OpenAI GPT Image 2.6 Sunburst/Flare, compatible services, and Codex login; capabilities are validated separately for each channel.
Digital pathology image processing toolkit for whole slide images (WSI). Use when working with histopathology slides, processing H&E- or IHC-stained tissue images, extracting tiles from gigapixel pathology images, detecting tissue regions, segmenting tissue masks, or preparing datasets for computational pathology deep learning pipelines. Applies to WSI formats (SVS, TIFF, NDPI), tile-based analysis, and histological image preprocessing workflows.
HR and talent management expertise for talent acquisition, performance management, compensation strategy, organizational design, culture building, succession planning, and D&I programs. Use when hiring, managing performance, designing organizations, or building culture
Build a professional HTML slide deck from source content and convert it to a pixel-perfect PDF. Covers slide architecture, layout patterns, print-safe CSS, Puppeteer PDF conversion, and quality verification. Use when creating presentation decks, converting documents to slide format, or generating PDF decks from HTML.
Use this skill when the user asks to “test for insecure direct object references,” “find IDOR vulnerabilities,” “exploit broken access control,” “enumerate user IDs or object references,” or “bypass authorization to access other users’ data.” It provides comprehensive guidance for detecting, exploiting, and remediating IDOR vulnerabilities in web applications.
Guide for Infisical KMS — managing cryptographic keys and performing encrypt/decrypt, sign/verify, and HMAC operations without the key ever leaving the platform. Covers KMS key creation with the three key usages (encrypt-decrypt, sign-verify, generate-verify-mac), symmetric algorithms (aes-256-gcm, aes-128-gcm), asymmetric algorithms (RSA_4096, ECC_NIST_P256/P384/P521, post-quantum ML_DSA_44/65/87), signing algorithms (RSASSA_PSS, RSASSA_PKCS1_V1_5, ECDSA, ML-DSA), HMAC algorithms, key rotation, exportable keys, external KMS backing with AWS KMS or GCP KMS, KMIP server integration, Kubernetes encryption-at-rest, and Sigstore cosign signing. Use this skill when someone asks about: Infisical KMS, encrypting data with a managed key, envelope encryption, sign and verify with Infisical, HMAC, KMIP, external KMS, or 'how do I encrypt data without handling the key'. For doing cryptography with a key Infisical never releases. Not for storing a value and reading it back, which is a secret (infisical-setup), nor for X.509 certificates (infisical-pki).
Jest best practices, patterns, and API guidance for JavaScript/TypeScript testing. Covers mock design, async testing, matchers, timer mocks, snapshots, module mocking, configuration, and CI optimization. Baseline: jest ^30.5.2. Triggers on: jest imports, describe, it, test, expect, jest.fn, jest.mock, jest.spyOn, mentions of "jest", "unit test", "test suite", or "mock".
Make your messages unforgettable using the Heath brothers' SUCCESs framework. Use when: crafting a core message for a product, campaign, or company that needs to stick; presenting complex ideas to audiences who may forget 90% of what you say; writing headlines, taglines, or slogans that people remember and repeat; training or educating when retention matters more than coverage; pitching investors or stakeholders where one memorable idea beats ten forgettable ones
New to MCP?
From what the protocol is to installing your first server, these answers cover most first questions.
An open protocol that defines how AI applications connect to external tools and data in a uniform way. Clients talk to the model; MCP servers provide tools, resources and prompt templates. They exchange standard messages, so one server can be reused by many clients.