Skills
101,174 packaged capabilities and playbooks for agents. Install any of them with one command.
All
Expert knowledge for Azure AI Bot Service development, including troubleshooting, decision-making, limits and quotas, security, configuration, integrations, coding patterns, and deployment. Use for Direct Line 3.0, configuring Teams/Web Chat channels, setting up App Service bots, CI/CD, App Insights, and other Azure AI Bot Service development tasks. Not for Azure Health Bot (use azure-health-bot), Azure Functions (use azure-functions), or Azure App Service (use azure-app-service)
Expert knowledge for Content Safety in Foundry Control Plane development, including troubleshooting, best practices, decision-making, limits and quotas, security, configuration, integrations and coding patterns, and deployment. Use when using Content Safety/Prompt Shields APIs, Docker containers, text blocklists, custom categories, or groundedness checks, and for other Content Safety in Foundry Control Plane-related development tasks. Not for Azure Content Understanding in Foundry Tools (use azure-content-understanding), Azure Speech in Foundry Tools (use azure-speech), Azure Security (use azure-security), or Azure Sentinel (use azure-sentinel).
Expert knowledge for Azure Copilot development including troubleshooting, decision making, architecture & design patterns, security, configuration, and integrations & coding patterns. Use when sizing VMs, generating Bicep/Terraform, configuring Cosmos DB chat storage, or designing Azure networks, and other Azure Copilot related development tasks. Not for Azure Portal (use azure-portal), Azure Machine Learning (use azure-machine-learning), Azure DevOps (use azure-devops), Microsoft Foundry (use microsoft-foundry).
Expert knowledge for Azure Firewall Manager development, including best practices, decision-making, security, and configuration. Use when configuring DDoS plans, DNS proxy, FQDN/IP groups, WAF policies, secured virtual hubs, or other Azure Firewall Manager development tasks. Not for Azure Firewall (use azure-firewall), Azure Virtual Network Manager (use azure-virtual-network-manager), Azure Network Function Manager (use azure-network-function-manager), or Azure Web Application Firewall (use azure-web-application-firewall)
Expert knowledge for Azure Migrate development including troubleshooting, best practices, decision making, architecture & design patterns, limits & quotas, security, configuration, integrations & coding patterns, and deployment. Use when migrating VMware/Hyper-V servers, SQL/.NET apps, PostgreSQL, encrypted VMs, or using Arc-based discovery, and other Azure Migrate related development tasks. Not for Azure Database Migration Service (use azure-database-migration), Azure Site Recovery (use azure-site-recovery), Azure Virtual Machines (use azure-virtual-machines), SQL Server on Azure Virtual Machines (use azure-sql-virtual-machines).
Orchestrates a new Domo custom app build with Remotion-compatible styling, sample data generation, and automatic demo video creation. Use when you want to build a Domo app AND produce a polished 10-15 second demo video of it in one workflow.
Interact with Bitget Wallet API for crypto market data, token info, swap quotes, RWA (real-world asset) stock trading, and security audits. Use when the user asks about wallet, token prices, market data, swap/trading quotes, RWA stock discovery and trading, token security checks, K-line charts, or token rankings on supported chains (ETH, SOL, BSC, Base, etc.).
Interactive escalation-resolution workflow for the bmad-loop orchestrator. A bmad-loop run paused on a CRITICAL escalation (a contradiction or gap a dev/review session could not safely resolve alone); you and the human disambiguate the frozen spec so the story can be re-driven. Invoked as /bmad-loop-resolve <story-key>. Unlike the automated dev/review sessions this session is interactive — a human is present and you SHOULD ask.
Build your own custom editor with the IMG.LY SDK (CE.SDK, CreativeEditor SDK), an embeddable, white-label SDK—not a hosted tool. Create photo/image, video or trimming, design (Canva-like), template/brand, print and merch customization, social post/story, collage, sticker/text/filter overlay, crop, background removal, and automated or server-side creative generation editors (PNG/JPEG/PDF/MP4). Use when the user wants to add, build, embed, customize, or scaffold an editing experience or creative automation in their own app on Web (React, Next.js, Vue, Angular, Svelte, Node), iOS/Swift, Android/Kotlin, Flutter, or React Native, even if CE.SDK isn't named. Not for one-off image/video processing scripts (ffmpeg, sharp, Pillow) without an editor UI.
Build a systematic threat-hunt workflow that turns threat intelligence and ATT&CK gap analysis into testable hypotheses, then executes and validates them via EDR/SIEM queries (CrowdStrike, Defender, Splunk, Elastic, Sysmon, Velociraptor, Sigma) and documents findings in a standardized hunt report. Use when planning or running a proactive threat hunt or scoping compromise from an intel- or anomaly-driven lead.
Editor role. Reads local materials, asks narrative questions, plans story arc. Outputs $DECK_DIR/deck.md as the sole content source. Use whenever the user says “outline”, “plan slides”, “organize materials”, “structure”, “table of contents”, “narrative”, or wants to structure content into a presentation
Respond to security incidents in AWS, Azure, and GCP through identity-based containment, cloud-native log analysis (CloudTrail, Azure Activity Logs, GCP Audit Logs), resource isolation, and forensic evidence acquisition adapted for ephemeral cloud infrastructure. Use when CSPM alerts or audit logs show compromised cloud credentials, unauthorized IAM changes, or a breach spanning cloud services.
Expert-level dbt (data build tool), models, tests, documentation, incremental models, macros, and Jinja templating. Use when the user mentions analytics engineering, SQL, data transformation, Jinja, or testing, or when the task involves Project Structure and Configuration, Sources and Staging Models, Intermediate and Mart Models, or Incremental Models.
Use when Codex is building or iterating on a web game (HTML/JS) and needs a reliable development + testing loop: implement small changes, run a Playwright-based test script with short input bursts and intentional pauses, inspect screenshots/text, and review console errors with render_game_to_text.
Web search and real-time information retrieval. Use to find the latest news, real-time data, technical documentation, or trending events, or when the user says “search for this”, “look this up”, “find information”, or “web search”. Powered by 小宿AI智能搜索; supports keyword search, time-range filters (one day/week/month/year), custom result counts, and JSON output.
Manages OrchestKit learning system including feedback status, usage pattern tracking, and privacy/analytics consent. Supports pause/resume learning, data export, privacy policy display, and bug reporting. Tracks learned patterns and agent performance metrics. Use when reviewing learned patterns, pausing learning, or managing data consent.
Use when existing code has untestable dependencies that prevent writing tests — direct construction of collaborators, static or global function calls, tight coupling to external systems, or singleton access patterns. Specifically for identifying substitution points (seams) that make legacy or tightly coupled code testable without editing at the call site. Do NOT use for greenfield TDD (see tdd), general test writing patterns (see testing), or refactoring already-tested code (see refactoring)
Evidence-safe firewall ruleset audit reference specification — 22 documented detector patterns (17 vendor-agnostic plus 5 FortiGate-specific), a 15-check semantic catalogue, CIS Fortinet FortiGate Benchmark guidance, a custom customer-policy benchmark, and consolidated network-team Excel profiles including grouped observation/severity presentation. Separates configuration-proven findings from runtime, business-context, and external-evidence gaps; every static claim requires source-file + line/offset + quoted-rule evidence.
Use when writing BK-CI frontend Vue pages and components, such as developing Vue components, managing state with Vuex, calling APIs, following styling conventions, and implementing page interactions. Prefer this when the user wants to change a frontend page rather than a backend service.
Queries Huawei Cloud billing and fee details only when Terraform needs a billing or pricing inquiry. Covers balances, bills, coupons, cash coupons, stored-value cards, orders, refunds, costs, free resources, resource usage, enterprise accounts, and on-demand/period/ELB/NAT/DCS pricing. No write operations. Use this skill only when Terraform requires billing details, invoice/bill summaries, coupon or balance status, refund/order billing status, or pricing inquiry. Triggers: Terraform 账单查询, Terraform 费用查询, Terraform 价格询价, Terraform 询价, Terraform billing query, Terraform pricing inquiry, Terraform price quote, Terraform bill summary
Comprehensive SQL statement checking for DWS, supporting two check modes: 1. Syntax Check - Keyword validation, statement structure verification, clause completeness, DWS syntax compatibility based on gram.y grammar definitions 2. Specification Check - Object design standards, data operation standards, naming conventions based on DWS development design specification Built-in custom DWS SQL tokenizer (594 keywords) and recursive descent parser supporting 160+ statement types. Applicable when users need SQL quality review, syntax validation, or specification compliance checking. Trigger phrases: “SQL检查”, “SQL规范”, “SQL审计”, “SQL语法”, “SQL优化”, “检查SQL”, “SQL review”
Select semantically appropriate icons for websites using Lucide, Heroicons, or Phosphor. Covers concept-to-icon mapping, React/HTML templates, and tree-shaking patterns. Use when: building feature sections, service grids, contact info, navigation, or any UI needing icons. Prevents emoji usage, ensures consistency.
Registers cron triggers with 7-field expressions to run functions on recurring schedules. Use when scheduling periodic jobs, timed automation, crontab replacements, cleanup routines, report generation, health checks, batch processing, or any task that should run every N seconds, minutes, hours, or on a weekly/monthly calendar.
Creates scoped key-value stores, reads and writes state entries, lists keys, and performs partial updates across functions. Use when persisting data between invocations, managing user sessions, caching computed values, storing feature flags, sharing state between workers, or building a KV data layer as an alternative to Redis or DynamoDB.
Navigate the Israeli pension and savings system including pension funds (keren pensia), manager's insurance (bituach menahalim), training funds (keren hishtalmut), severance handling at Form 161, Tikun 190 post-60 deposits, and retirement planning. Use when user asks about Israeli pension, "pensia", "keren hishtalmut", retirement savings, "bituach menahalim", pension contributions, tax benefits from savings, severance withdrawal vs continuity, or pension at divorce / relocation. Uninformed pension decisions cost hundreds of thousands of NIS over a lifetime. Covers mandatory pension, voluntary savings, withdrawal rules, and life events (divorce, relocation, death). Do NOT provide specific investment recommendations or fund performance comparisons.
Apply Karpathy-style minimalism and anti-dependency principles to code and system design. Use this skill when the user wants to reduce dependencies, avoid supply chain risks, rewrite something in pure Python or minimal code, audit a project for bloat, design agent-native CLI tools, or says "too many dependencies", "minimize deps", "pure python", "yoink this", "vibe code this", "no frameworks", "agent-native design". Based on 28k-like litellm attack post and 25k-like 243-line GPT post.
Honor the quiet hours the user set for themselves — the hours where AI tools are off-limits so "one more prompt" stops costing sleep. Enforced as refused tool calls where hooks exist, advisory everywhere else, with a deliberate logged override path. Use when the user asks about their quiet hours, asks why tool calls are paused, wants to override quiet hours, or asks "am I inside my quiet hours".
Enforce the sessions-per-day ceiling the user set for themselves — count sessions honestly, refuse new ones past the limit with the same terse message every time, and make raising the limit a deliberate, logged act. Use when the user asks "how many sessions have I used", "am I at my limit", "raise my session limit", "limits report", or asks why a session was refused.
Loft the shape before cutting steel — answer a design question that prose cannot settle by building a throwaway artifact: a pure logic module in a clickable shell, or structurally different UI variants behind one route. The captain reacts to the artifact; the answer folds into the decision; the artifact never docks. Use when a design question stalls in words, when a navigator map carries a loft ticket, or when a spec discussion reaches "we would have to see it".
mise — the tool-version manager, env-var loader, and task runner that replaces asdf, direnv, and make. Use for anything involving mise.toml or .tool-versions: installing or pinning tools, choosing a backend (core, packslip, aqua, github, cargo, npm, pypi/pipx), env vars, tasks, lockfiles, trust prompts, auto-updates, CI setup, migrating from asdf/direnv/make/npm scripts or off ubi, and install failures — including attestation/cosign/SLSA verification errors.
Analyze media files (PDFs, images, diagrams) that require interpretation beyond raw text. Extracts specific information or summaries from documents, describes visual content. Use for document analysis, image understanding, diagram interpretation, chart analysis, table extraction, and any media requiring visual or contextual interpretation beyond literal text extraction.
A guide to writing NSFC applications. Covers writing tips and templates for each section, including topic selection, abstract, rationale, research content, research plan, innovation, and feasibility analysis. Suitable for project types such as Young Scientists Fund C, General Program, and Key Program.
Dense methodology covering DNS exfiltration (dnscat2, iodine, dns2tcp), HTTPS tunneling (domain fronting, CDN abuse, legitimate service channels), ICMP tunneling (icmpsh, ptunnel-ng), cloud storage dead drops (S3 presigned URLs, Azure Blob SAS tokens, GCS signed URLs), email-based exfil (SMTP, EWS, draft method), steganography (image, audio, document metadata), encoding/encryption (base64 chunking, XOR, AES), covert channels (custom protocol tunneling, HTTP header encoding, timing channels), and data staging (compression, splitting, encryption). Tools: dnscat2, iodine, dns2tcp, PacketWhisper, chisel, stunnel, icmpsh, ptunnel-ng, steghide, zsteg, OpenStego. MITRE ATT&CK: T1048 (Exfiltration Over Alternative Protocol), T1041 (Exfiltration Over C2 Channel), T1567 (Exfiltration Over Web Service), T1029 (Scheduled Transfer), T1030 (Data Transfer Size Limits), T1132 (Data Encoding), T1001 (Data Obfuscation). Use when planning or executing data exfiltration during authorized red team engagements or post-exploitation.
Find, browse, and organize content in Omni Analytics — dashboards, workbooks, folders, and labels — using the Omni CLI. Use this skill whenever someone wants to find an existing dashboard, search for content, list workbooks, browse folders, see what dashboards exist, find popular reports, download a dashboard as PDF or PNG, set an alert on a dashboard tile, favorite content, manage labels on documents, or any variant of "find the dashboard about", "what reports do we have", "show me our dashboards", "where is the sales report", "download this dashboard", or "alert me when this changes". This skill locates and organizes content; to inspect what a dashboard tile actually queries — its fields, filters, and sorts — use omni-query.
Embed Omni Analytics dashboards in external applications — URL signing, custom themes, iframe events, entity workspaces, and permission-aware content — using the @omni-co/embed SDK and Omni CLI. Use this skill whenever someone wants to embed a dashboard, sign an embed URL, customize the embedded theme, handle embed events, listen for clicks or drills in the iframe, send filters to an embedded dashboard, set up entity workspaces, look up embed users, build a permission-aware content list, white-label an embedded dashboard, or any variant of "embed this dashboard", "customize the iframe theme", "handle click events from the embed", "filter the embedded dashboard", "set up embedding", or "what dashboards can this user see".
Parallel and concurrent processing patterns in bash, including GNU Parallel, xargs -P, job pools, and async patterns (2025). Proactively activate for: (1) running tasks in parallel from bash, (2) xargs -P for parallel command execution, (3) GNU parallel for complex distribution, (4) background jobs with & and wait, (5) implementing a concurrency cap (job pool of N workers), (6) collecting exit codes from parallel children, (7) preventing race conditions in shared output files, (8) parallel file processing across many cores. Provides: xargs -P recipes, GNU parallel quick reference, job-pool implementations in pure bash, exit-code aggregation patterns, and FIFO-based work queues.
Patent writing assistant for Chinese patents with search, disclosure document writing, workflow guidance, and strategic filing advice. Triggers when: Writing a patent application, creating a patent disclosure document, conducting patent search and analysis, planning patent filing strategy, or seeking guidance on the patent process timeline and requirements. Commands: - /patent search <keywords> - Conduct patent search with analysis framework - /patent disclosure <invention> - Write disclosure document with complete structure - /patent report <invention> - Generate self-search report with blocking risk assessment - /patent workflow - Show patent workflow with timeline and milestones - /patent strategy <invention> - Provide filing strategy advice - /patent check <document> - Check patent document compliance - /patent examples - Show patent writing examples and best practices Capabilities: Patent search platform guidance with analysis framework, disclosure document templates with complete structure, patent three-property analysis with blocking risk assessment, writing tips and best practices with quality checklist, workflow timeline estimation with strategic filing advice, self-search report generation, prior art analysis, novelty and inventiveness assessment, Chinese patent law compliance
Design and optimize pricing strategies for SaaS products, including tiering, packaging, value metrics, and experimentation. Use when setting initial pricing, optimizing conversion, expanding revenue, or when users ask about pricing strategy, monetization, or revenue optimization.
Provider-independent production design direction for AI-generated media. Use when translating narrative, brand, advertising, product, social, film, or worldbuilding intent into sets, locations, props, color and material palettes, era research, graphic and environmental design, continuity bibles, image/video prompt planning, reference strategy, production constraints, iteration notes, handoff specs, and QA.
When the user wants to create or update a README.md file for a project. Also use when the user says "write readme," "create readme," "document this project," "project documentation," or asks for help with README.md. This skill creates absurdly thorough documentation covering local setup, architecture, and deployment.
Provider-independent reference media analysis for generated-media production. Use when an agent must analyze reference images, videos, audio, style boards, product shots, brand assets, mood boards, storyboards, performances, prior cuts, or client examples and translate them into safe, non-copying direction, prompts, QA criteria, provenance records, and handoff notes for image, video, audio, avatar, or post-production agents.
New to MCP?
From what the protocol is to installing your first server, these answers cover most first questions.
An open protocol that defines how AI applications connect to external tools and data in a uniform way. Clients talk to the model; MCP servers provide tools, resources and prompt templates. They exchange standard messages, so one server can be reused by many clients.