Software Development AI agent skills

13,359 skills in the archive. Read a skill’s instructions or open its original repository.

• Entity Model Auditor

  by @hylarucoder

  Audits an entity model field by field: what should exist, what exists now, where each value belongs (column, config, computed runtime value, or removal), and what must migrate. Use when comparing a PRD with a schema/model,…

• Context Detection

  by @MadAppGang

  Use when detecting project technology stack from files/configs/directory structure, auto-loading framework-specific skills, or analyzing multi-stack fullstack projects (e.g., React + Go).

• Claudish Usage

  by @MadAppGang

  CRITICAL - Guide for using Claudish CLI ONLY through sub-agents to run Claude Code with OpenRouter models (Grok, GPT-5, Gemini, MiniMax). NEVER run Claudish directly in main context unless user explicitly requests it. Use when…

• Yaml Agent Format

  by @MadAppGang

  YAML format for Claude Code agent definitions as alternative to markdown. Use when creating agents with YAML, converting markdown agents to YAML, or validating YAML agent schemas. Trigger keywords - "YAML agent", "agent YAML",…

• Ultrathink Detective

  by @MadAppGang

  Comprehensive analysis skill. Best for: 'comprehensive audit', 'deep analysis', 'full codebase review', 'multi-perspective investigation', 'complex questions'. Combines all perspectives (architect+developer+tester+debugger).…

• Claudemem Search

  by @MadAppGang

  PRIMARY TOOL for semantic code search AND structural analysis. NEW: AST tree navigation with map, symbol, callers, callees, context commands. PageRank ranking. Recommended workflow: Map structure first, then search semantically,…

• Bunjs Architecture

  by @MadAppGang

  Use when implementing clean architecture (routes/controllers/services/repositories), establishing camelCase conventions, designing Prisma schemas, or planning structured workflows for Bun.js applications. See bunjs for basics,…

• Audit

  by @MadAppGang

  On-demand security and code quality audit. Use when checking for vulnerabilities, security issues, code smells, or compliance problems. Trigger keywords - "audit", "security check", "vulnerability scan", "code quality",…

• Debug Mode

  by @MadAppGang

  Enable, disable, and manage debug mode for agentdev sessions. Records all tool invocations, skill activations, hook triggers, and agent delegations to JSONL. Use when debugging agent behavior, optimizing workflows, or analyzing…

• Cross Plugin Detective

  by @MadAppGang

  Use when integrating detective skills across plugins. Maps agent roles to appropriate detective skills (developer → developer-detective, architect → architect-detective). Reference this to connect agents with claudemem…

• Code Search Selector

  by @MadAppGang

  Tool selector for code search tasks. Helps choose between semantic search (claudemem) and native tools (Grep/Glob) based on query type. Semantic search recommended for: 'how does X work', 'find all', 'audit', 'investigate',…

• Deep Analysis

  by @MadAppGang

  PRIMARY SKILL for: 'how does X work', 'investigate', 'analyze architecture', 'trace flow', 'find implementations'. PREREQUISITE: code-search-selector must validate tool choice. Launches codebase-detective with claudemem INDEXED…

• Developer Detective

  by @MadAppGang

  Implementation analysis skill. Best for: 'how does X work', 'find implementation of', 'trace data flow', 'where is X defined', 'find all usages'. Uses claudemem AST with callers/callees for efficient code tracing.

• Agent Coordination Discipline

  by @MadAppGang

  Use when deciding whether to launch an agent, selecting which agent to use, or coordinating multiple agents. Covers delegation criteria, external-model patterns, task isolation, and agent selection strategies.

• Architect Detective

  by @MadAppGang

  Use when analyzing architecture and system design. Find design patterns, map layers, identify core abstractions via PageRank. Uses claudemem AST structural analysis for efficient architecture investigation.

• Claudemem Orchestration

  by @MadAppGang

  Use when orchestrating multi-agent code analysis with claudemem. Run claudemem once, share output across parallel agents. Enables parallel investigation, consensus analysis, and role-based command mapping.

• Systematic Debugging

  by @MadAppGang

  Use when debugging failures, errors, or unexpected behavior. Covers root cause investigation, data flow tracing, hypothesis-driven debugging, and fix verification to prevent trial-and-error approaches.

• Debugger Detective

  by @MadAppGang

  Debugging skill. Best for: 'why is X broken', 'find bug source', 'root cause analysis', 'trace error', 'debug issue'. Uses claudemem AST with context command for efficient call chain analysis.

• Patterns

  by @MadAppGang

  Common agent patterns and templates for Claude Code. Use when implementing agents to follow proven patterns for Tasks integration, quality checks, and external model invocation via claudish CLI.

• Bunjs Apidog

  by @MadAppGang

  Use when creating OpenAPI specs for Bun.js APIs, integrating with Apidog, documenting endpoints with schemas, or automating API specification imports via Apidog REST API. See bunjs for basics.

• Golang

  by @MadAppGang

  Use when building Go backend services, implementing goroutines/channels, handling errors idiomatically, writing tests with testify, or following Go best practices for APIs/CLI tools.

• Worktree Lifecycle

  by @MadAppGang

  Use when starting isolated feature work or before executing implementation plans. Manages full worktree lifecycle from creation through cleanup with safety checks and error recovery.

• Test Driven Development

  by @MadAppGang

  Use when writing production code. Enforces RED-GREEN-REFACTOR cycle: write failing test, make it pass, improve design. Prevents test-after development and ensures verified behavior.

• Python

  by @MadAppGang

  Use when building FastAPI applications, implementing async endpoints, setting up Pydantic schemas, working with SQLAlchemy, or writing pytest tests for Python backend services.

• Debugging Strategies

  by @MadAppGang

  Use when troubleshooting bugs, analyzing stack traces, using debugging tools (breakpoints, loggers), or applying systematic debugging methodology across any technology stack.

• Investigate

  by @MadAppGang

  Unified entry point for code investigation. Auto-routes to specialized detective based on query keywords. Use when investigation type is unclear or for general exploration.

• Documentation Standards

  by @MadAppGang

  Use when writing README files, API documentation, user guides, or technical documentation following industry standards from Google, Microsoft, and GitLab style guides.

• Rust

  by @MadAppGang

  Use when building Axum applications, implementing type-safe handlers, working with SQLx, setting up error handling with thiserror, or writing Rust backend services.

• Verification Before Completion

  by @MadAppGang

  Use when claiming task completion or marking items as done. Covers completion evidence requirements, verification methods, and anti-rationalization patterns.

• Linear Integration

  by @MadAppGang

  Linear API patterns and examples for autopilot. Includes authentication, webhooks, issue CRUD, state transitions, file attachments, and comment handling.

• Golang Performance

  by @MadAppGang

  Use when profiling Go applications (pprof), running benchmarks, optimizing memory/CPU usage, or debugging performance bottlenecks in production Go code.

• Error Handling

  by @MadAppGang

  Use when implementing custom error classes, error middleware, structured logging, retry logic, or graceful shutdown patterns in backend applications.

• Proof Of Work

  by @MadAppGang

  Proof artifact generation patterns for task validation. Covers screenshots, test results, deployments, and confidence scoring.

• Tag Command Mapping

  by @MadAppGang

  How tag-to-command routing works in autopilot. Defines default mappings, precedence rules, and customization patterns.

• State Machine

  by @MadAppGang

  Task lifecycle state transitions with validation gates. Defines states, triggers, and required proofs.

• Revert

  by @MadAppGang

  Git-aware logical undo at track, phase, or task level with confirmation gates

• Implement

  by @MadAppGang

  Execute tasks from track plan with TDD workflow and git commit integration

• Help

  by @MadAppGang

  Get help with Conductor - commands, usage examples, and best practices

• Setup

  by @MadAppGang

  Initialize Conductor with product.md, tech-stack.md, and workflow.md

• Golang Web

  by @majiayu000

  Modern Go Web application architecture guide. Use when creating new Go web projects, APIs, or microservices. Covers project structure, tech stack selection, and best practices based on Go standards.

• Api Design

  by @majiayu000

  REST/GraphQL/gRPC API design best practices. Use when designing APIs, defining contracts, handling versioning. Covers OpenAPI 3.2, GraphQL Federation, gRPC streaming.

• Codebase Audit

  by @majiayu000

  全面代码库审计 — 自适应并行深度分析（前后端契约、数据完整性、异常处理/安全、架构/技术债、配置/缓存），结构化 findings + 对抗验证 + 基线对比，输出按严重程度排序的统一报告和修复路线图。支持 quick 快速体检模式。Use when user asks to audit, analyze, or review an entire codebase for design issues, find hidden bugs, check…

• Harmonyos App

  by @majiayu000

  HarmonyOS application development expert. Use when building HarmonyOS apps with ArkTS, ArkUI, Stage model, and distributed capabilities. Covers HarmonyOS NEXT (API 12+) best practices.

• Blender Reference To 3d

  by @majiayu000

  根据人物参考图在 Blender 制作、修整和配色可编辑角色，尤其适用于二次元头部与头发、静态多角度展示。覆盖输入拆解、轮廓与五官标注、九视图参考、模板选型、几何实现、材质配色、视觉检查和工程交付；当用户要求图转三维头像、按参考建模、修复相似度、完善配色或运行完整人物制作流程时使用。仅分析、写流程或封装技能时不修改模型。

• Codex Agent

  by @majiayu000

  Use when you want a second-opinion review via Codex CLI, cross-verification after another agent implements changes, debugging help, or alternative implementation proposals. Requires Codex CLI to be installed and authenticated.

• Capability Distill

  by @majiayu000

  能力蒸馏工作流——从用户批准的强模型访谈或真实任务轨迹中提取非显然的判断规则，形成可审计的 judgment packet，再交给 skill-audit 和 skill-creator 决定是否落成可加载 skill。当用户说“蒸馏这个模型的判断力”“把这次任务的关键决策固化下来”“模型窗口要关了，保留它在某类场景的判断”时使用。普通流程文档、直接写 SKILL.md、泛化最佳实践或未授权的会话日志扫描不使用本 skill。

• Architecture Foundation

  by @majiayu000

  Design architecture foundations before implementation. Use when asked to design or refactor architecture, choose Rust/Go crate, package, module, runtime, workflow, or service boundaries, compare mature project architecture,…

• Auth Security

  by @majiayu000

  OAuth 2.1 + JWT authentication security best practices. Use when implementing auth, API authorization, token management. Follows RFC 9700 (2025).

• Flowguard

  by @majiayu000

  Guard long, ambiguous, or stateful AI-agent work from drift. Use when the user asks to run or continue a multi-step task, autonomous loop, bug fix, repo change, PR readiness check, compaction handoff, resume from previous…

• Github Trending

  by @majiayu000

  GitHub Trending 探索与分析。用于发现热门开源项目、技术趋势、开发者偏好，帮助理解技术社区的兴趣走向。使用场景包括“看看今天 GitHub 什么火了”、“Rust 最近热门项目”、“AI 领域趋势日报”、“这个方向有没有值得关注的开源项目”、“帮我做个 GitHub trending 分析”。

• Agentsmd Optimize

  by @majiayu000

  Audit and organize AI coding-agent instructions, including AGENTS.md, CLAUDE.md, skills, and agent definitions. Use when the user asks to diagnose conflicting instructions, excessive approval pauses, broad skill triggers,…

• Blender Editable 3d

  by @majiayu000

  根据参考图、带尺寸的设计图或文字概念，在 Blender 中制作由独立命名零件组成的可编辑 3D 模型，再按用户要求修改尺寸、部件和配色，交付 .blend、GLB 和多角度渲染。用于图纸转三维、产品概念建模和风格化硬表面道具，以及“做一个同样的案例，换成坦克或其他物体”等请求；不用于人物角色、头发或脸部建模，这些请求使用 blender-reference-to-3d。以可继续修改的几何工程为核心；不默认制作拆解动画、录屏、绑定或制造模型。

• Clash Doctor

  by @majiayu000

  Clash Verge 与 mihomo 诊断和 profile 管理。当用户遇到代理失败、需要配置 AI 工具路由、本地 Hub 拓扑、多机对齐、TUN 绕过、克隆或切换订阅，或同步后 配置未生效时使用。进程线路使用 clash-routes，出口 IP 质量使用 ip-check。 普通网络测速不使用。

• Frontend Design

  by @majiayu000

  Create distinctive, production-grade web frontend interfaces with high design quality. Use when the user explicitly asks to build or substantially redesign a web component, page, or application. Only applies when repository…

• Dev Architecture Playbook

  by @majiayu000

  Route full software-development architecture work from product intent through design, implementation, testing, release, and operations. Use when the user asks for a complete development architecture, wants to know which…

• Local Llm Router

  by @hoodini

  Route AI coding queries to local LLMs in air-gapped networks. Integrates Serena MCP for semantic code understanding. Use when working offline, with local models (Ollama, LM Studio, Jan, OpenWebUI), or in secure/closed…

• Comprehensive Testing

  by @majiayu000

  Complete testing strategy covering TDD workflow, test pyramid, unit/integration/E2E/property testing, framework best practices (Jest, Vitest, pytest), mock strategies, and CI integration. Use when writing tests, reviewing test…

• Google Workspace Cli

  by @hoodini

  Interact with all Google Workspace APIs via the gws CLI. Use when managing Drive files, sending/reading Gmail, creating Calendar events, reading/writing Sheets/Docs/Slides, managing Chat spaces, contacts, Admin users/groups,…

• Aws Strands

  by @hoodini

  Build AI agents with the Strands Agents SDK - the open-source framework (the agent "brain") for writing agent logic, tools, and multi-agent systems in Python. Model-agnostic, AWS Bedrock by default. Covers Agent, the @tool…

• Contributor

  by @majiayu000

  End-to-end open source contribution workflow: from scanning issues to submitting PRs. Use this skill whenever the user wants to contribute to an open source project, find issues to fix, submit a pull request, fork a repo to…

• Copilot Sdk

  by @hoodini

  Build agentic applications with GitHub Copilot SDK. Use when embedding AI agents in apps, creating custom tools, implementing streaming responses, managing sessions, connecting to MCP servers, or creating custom agents. Triggers…

• Ask Opencli

  by @majiayu000

  Ask Grok or Gemini via opencli (browser-session based, no API cost). Use when the user says "问 grok", "问 gemini", "ask grok", "ask gemini", "用 grok 查", "grok 怎么看", "让 gemini 分析", or wants a second opinion from Grok/Gemini…

• Nano Banana Pro

  by @hoodini

  Generate images with Google's Nano Banana Pro (Gemini 3 Pro Image). Use when generating AI images via Gemini API, creating professional visuals, or building image generation features. Triggers on Nano Banana Pro, Gemini 3 Pro…

• Copilot Docs

  by @hoodini

  Configure GitHub Copilot with custom instructions. Use when setting up .github/copilot-instructions.md, customizing Copilot behavior, or creating repository-specific AI guidance. Triggers on Copilot instructions,…

• Web Accessibility

  by @hoodini

  Build accessible web applications following WCAG guidelines. Use when implementing ARIA patterns, keyboard navigation, screen reader support, or ensuring accessibility compliance. Triggers on accessibility, a11y, WCAG, ARIA,…

• Github Trending

  by @hoodini

  Fetch and display GitHub trending repositories and developers. Use when building dashboards showing trending repos, discovering popular projects, or tracking GitHub trends. Triggers on GitHub trending, trending repos, popular…

• Mongodb

  by @hoodini

  Work with MongoDB databases using best practices. Use when designing schemas, writing queries, building aggregation pipelines, or optimizing performance. Triggers on MongoDB, Mongoose, NoSQL, aggregation pipeline, document…

• Vercel

  by @hoodini

  Deploy and configure applications on Vercel. Use when deploying Next.js apps, configuring serverless functions, setting up edge functions, or managing Vercel projects. Triggers on Vercel, deploy, serverless, edge function,…

• Bun

  by @hoodini

  Build fast applications with Bun JavaScript runtime. Use when creating Bun projects, using Bun APIs, bundling, testing, or optimizing Node.js alternatives. Triggers on Bun, Bun runtime, bun.sh, bunx, Bun serve, Bun test,…

• Railway

  by @hoodini

  Deploy applications on Railway platform. Use when deploying containerized apps, setting up databases, configuring private networking, or managing Railway projects. Triggers on Railway, railway.app, deploy container, Railway…

• Shabbat Times

  by @hoodini

  Access Jewish calendar data and Shabbat times via Hebcal API. Use when building apps with Shabbat times, Jewish holidays, Hebrew dates, or Zmanim. Triggers on Shabbat times, Hebcal, Jewish calendar, Hebrew date, Zmanim.

• Elegant Architecture

  by @majiayu000

  Guides clean architecture design with strict 200-line file limits. Use when starting new features, refactoring large files, or planning module structure. Enforces modular design and real testing.

• Css Debug

  by @majiayu000

  Use this skill to diagnose CSS and frontend layout issues such as positioning, overflow clipping, Tailwind class conflicts, z-index stacking, and React rendering visibility problems.

• Contribution Architect

  by @majiayu000

  Use when a contributor wants to move beyond simple bug fixes into architectural improvements, technical debt discovery, design proposals, or module ownership opportunities.

• Git Commit Smart

  by @majiayu000

  Generates meaningful, conventional commit messages automatically. Use when committing code changes. Analyzes diff to create descriptive commits following best practices.

• Clash Routes

  by @majiayu000

  查看本机进程的 Mihomo 实时代理链。当用户问 Claude、Codex、Gemini、ChatGPT、 浏览器或其他进程走哪个代理时使用。只读。Profile 拓扑和写入使用 clash-doctor， 出口 IP 质量使用 ip-check。

• Gpu Use

  by @majiayu000

  查看远程服务器 GPU 使用情况。SSH 连接服务器，展示每张卡的显存占用、运行进程、所属容器。当用户说查看 GPU、显卡占用、显存使用时使用

• Disk Cleaner

  by @majiayu000

  当用户要扫描磁盘空间、找出可安全删除的缓存/编译产物/安装包、或交互式释放空间时使用。

• Google Consent Mode V2

  by @mukul975

  Configuring Google Consent Mode v2 for privacy-compliant measurement and advertising. Covers default and update commands, consent state mapping to GA4 and Google Ads, conversion modeling with cookieless pings, and EEA…

• Adequacy Assessment

  by @mukul975

  Guides assessment of third-country adequacy decisions under GDPR Article 45 for international data transfers. Covers the current EC adequacy decisions list, adequacy assessment criteria, partial adequacy handling, and monitoring…

• Ai Federated Learning

  by @mukul975

  Implements federated learning architecture patterns for GDPR compliance. Covers secure aggregation protocols, differential privacy integration, communication protocols, and privacy-by-design distributed ML training. Keywords:…

• Global Privacy Control

  by @mukul975

  Implementation guide for Global Privacy Control (GPC) automated opt-out signal per CPRA Section 1798.135(e). Covers Sec-GPC HTTP header detection, JavaScript navigator.globalPrivacyControl API, and state-specific requirements…

• Apac Transfers

  by @mukul975

  Guides management of cross-border data transfers under Asia-Pacific regulatory frameworks including APEC CBPR, ASEAN Model Contractual Clauses, Japan APPI supplementary rules, South Korea PIPA provisions, and Thailand/Singapore…

• Gpc Cookie Integration

  by @mukul975

  Integrating Global Privacy Control (GPC) signals with cookie consent platforms. Covers GPC signal detection in browsers, automatic opt-out triggering, mapping GPC to US state privacy laws, and CMP integration for CCPA, CPA, and…

• Cookie Consent Testing

  by @mukul975

  Automated cookie consent validation using Selenium and Playwright. Covers banner interaction testing, consent state verification, tag firing audit after consent choices, regression testing for cookie compliance, and CI/CD…

• Cookieless Alternatives

  by @mukul975

  Evaluating and implementing cookie-less tracking alternatives for a post-cookie era. Covers the Privacy Sandbox APIs (Topics, Attribution Reporting, Protected Audiences), server-side analytics, and privacy-preserving measurement…

• Server Side Tracking

  by @mukul975

  Implementing server-side tracking with privacy controls using Google Tag Manager server containers. Covers first-party data collection, IP anonymization, consent-aware event forwarding, and reducing client-side third-party…

• Tcf V2 Implementation

  by @mukul975

  Implementing the IAB Transparency and Consent Framework v2.2 for programmatic advertising consent management. Covers CMP registration, Global Vendor List integration, TC String encoding, publisher restrictions, and compliance…

• Cookie Audit

  by @mukul975

  Comprehensive methodology for auditing website cookies and tracking technologies. Covers automated scanning, cookie categorization, lifecycle documentation, and compliance gap analysis referencing the Planet49 CJEU ruling…

• Cookie Lifetime Audit

  by @mukul975

  Auditing cookie lifetimes against regulatory recommendations and browser policies. Covers CNIL 13-month maximum recommendation, session vs persistent classification, third-party cookie phase-out impact, and Safari ITP duration…

• Unknown Vector Analysis

  by @blacklanternsecurity

  Analyze custom applications, scripts, and binaries that standard technique skills could not exploit. Performs source code review, attack surface mapping, CVE research, and PoC adaptation. Route here when ANY technique agent…

• Xmpp Enumeration

  by @blacklanternsecurity

  XMPP/Jabber service enumeration for Openfire, ejabberd, Prosody, and other XMPP servers. Trigger when ports 5222 (client), 5223 (legacy TLS), or 5269 (server-to-server) are found open. Covers authentication testing, user…

• Av Edr Evasion

  by @blacklanternsecurity

  Bypass antivirus and EDR detection for payload delivery during exploitation. Covers custom payload compilation (mingw C, Go), AMSI bypass, shellcode alternatives, and ETW patching. Route here when an agent reports a payload was…

• Browser Exploitation

  by @blacklanternsecurity

  Exploit browser-based attack surfaces: malicious extension crafting for bot interaction scenarios, Chrome DevTools Protocol abuse on exposed debug ports, and browser profile/cache data extraction from compromised hosts.

• Ajp Ghostcat

  by @blacklanternsecurity

  Exploit Apache JServ Protocol (AJP) misconfigurations and Ghostcat (CVE-2020-1938) for file read and remote code execution on Apache Tomcat. Use when port 8009 is open or AJP connector is exposed.

• Lfi

  by @blacklanternsecurity

  Guide Local File Inclusion (LFI) and Remote File Inclusion (RFI) exploitation during authorized penetration testing.

• Pivoting Tunneling

  by @blacklanternsecurity

  Network pivoting, port forwarding, and tunneling through compromised hosts to reach internal networks.

• Cors Misconfiguration

  by @blacklanternsecurity

  Exploit CORS (Cross-Origin Resource Sharing) misconfigurations during authorized penetration testing.

• Linux Kernel Exploits

  by @blacklanternsecurity

  Exploit Linux kernel vulnerabilities and escape restricted shells for privilege escalation.

• Windows Service Dll Abuse

  by @blacklanternsecurity

  Exploit Windows service misconfigurations and DLL hijacking for local privilege escalation.