Software Development AI agent skills

13,359 skills in the archive. Read a skill’s instructions or open its original repository.

• Build Resource Pages

  by @onvoyage-ai

  Takes existing content markdown files and builds production-final resource center pages on client websites using their existing tech stack and design system. Output is live-ready — no review pass, no placeholder content, no…

• Spring Boot

  by @piomin

  Spring Boot 3.x development - REST APIs, JPA, Security, Testing, and Cloud-native patterns. Use for building enterprise Java applications with Spring Boot.

• Logging Patterns

  by @piomin

  Java logging best practices with SLF4J, structured logging (JSON), and MDC for request tracing. Includes AI-friendly log formats for Claude Code debugging. Use when user asks about logging, debugging application flow, or…

• Jpa Patterns

  by @piomin

  JPA/Hibernate patterns and common pitfalls (N+1, lazy loading, transactions, queries). Use when user has JPA performance issues, LazyInitializationException, or asks about entity relationships and fetching strategies.

• Design Patterns

  by @piomin

  Common design patterns with Java examples (Factory, Builder, Strategy, Observer, Decorator, etc.). Use when user asks "implement pattern", "use factory", "strategy pattern", or when designing extensible components.

• Code Quality

  by @piomin

  Comprehensive code review for Java - clean code principles, API contracts, null safety, exception handling, and performance. Use when user says "review code", "refactor", "check API", or before merging changes.

• Hunt Ato

  by @uphiago

  Hunt account takeover taxonomy — 9 distinct paths to ATO, plus chains. Paths: (1) password reset flaws (host-header injection redirects token, predictable/numeric token, Referer leak, no-expiry/reuse), (2) email change without…

• Hunt Api Misconfig

  by @uphiago

  Hunt API security misconfiguration — mass assignment, JWT attacks, prototype pollution, HTTP verb tampering. Mass assignment: send {is_admin:true, role:admin, verified:true} on profile/account/reset endpoints — server blindly…

• Hunt Firebase

  by @uphiago

  Hunt Firebase / Firestore / GCP exploitation — Firebase API key discovery in JS bundles, anonymous auth via signUp endpoint, Firestore collection enumeration with anon key, Realtime Database read/write without auth, Firebase…

• Hunt Auth Bypass

  by @uphiago

  Hunting skill for auth bypass vulnerabilities. Built from 12 public bug bounty reports across SAML XSW / parser-differential (GitHub Enterprise CVE-2025-25291/25292), SAML signature stripping (Uber, Rocket.Chat, samlify…

• Hunt Brute Force

  by @uphiago

  Hunt Missing/Weak Rate Limiting — login brute force, OTP/2FA brute force (10^6 keyspace), password-reset-token brute, credential stuffing, username/email enumeration via error-string / status-code / timing differences, weak…

• Hunt Metrics Exposure

  by @uphiago

  Hunt public /metrics, /health, and actuator endpoints leaking AI usage, DB pools, and operational intelligence.

• Hunt Fastapi

  by @uphiago

  Hunt FastAPI-specific vulnerabilities: dependency injection gaps, Pydantic coercion, and OpenAPI mining.

• Hunt Django

  by @uphiago

  Hunt Django-specific vulnerabilities: DRF permission gaps, ORM injection, and admin exploitation.

• Hunt Broken Function Level Auth

  by @uphiago

  Hunt broken function-level authorization via verb drift, route shadowing, and transport gaps.

• Hunt Mass Assignment

  by @uphiago

  Hunt mass assignment via sensitive field injection and ORM framework exploitation.

• Wiki

  by @nvk

  Manage LLM-compiled wikis in Codex: ingest/import, shape/promote Ideas, review portfolios, track inventory/datasets, archive, compile/query/lint/audit, research/plan, manage sessions, private adapters, personal specialists, and…

• Wiki Manager

  by @nvk

  Manage LLM-compiled wikis: initialize, ingest/import, compile/query, research/audit, collect catalogs, track inventory/datasets/Ideas, review Idea/Project portfolios, manage archives/sessions/feedback, and generate outputs.…

• Wiki Manager

  by @nvk

  Manage LLM-compiled wikis in OpenCode: ingest/import, shape/promote Ideas, review portfolios, track inventory/datasets, archive, compile/query/lint/audit, research/plan, manage sessions, private adapters, personal specialists,…

• Ap Worker

  by @Spielewoy

  Produce only the assigned result, protect other owners' work, run the listed checks, and report an exact conflict instead of expanding scope.

• Ap Independent Checker

  by @Spielewoy

  Independently review the exact result and run its real checks in one context, using isolated resources and without changing the deliverable.

• Ap Roadmap Scout

  by @Spielewoy

  Answer one named planning question with observations tied to the inspected sources; do not write or coordinate the roadmap.

• Ap Route Analyst

  by @Spielewoy

  Inspect only enough read-only project information to recommend a route and list the facts behind that recommendation.

• Ap Run Coordinator

  by @Spielewoy

  Start only ready, non-overlapping roadmap work and combine returned status at the written integration points.

• Ap Arbiter

  by @Spielewoy

  Report the compatibility redirect to `ap-independent-checker`; this retired role cannot perform new work.

• Ap Framework Validator

  by @Spielewoy

  Report the compatibility redirect to `ap-independent-checker`; this retired role cannot perform new work.

• Ap Fresh Verifier

  by @Spielewoy

  Report the compatibility redirect to `ap-independent-checker`; this retired role cannot perform new work.

• Ap Goal Checker

  by @Spielewoy

  Report the compatibility redirect to `ap-independent-checker`; this retired role cannot perform new work.

• Ap Juror

  by @Spielewoy

  Report the compatibility redirect to `ap-independent-checker`; this retired role cannot perform new work.

• Ap Reviewer

  by @Spielewoy

  Report the compatibility redirect to `ap-independent-checker`; this retired role cannot perform new work.

• Ap Sweeper

  by @Spielewoy

  Report the compatibility redirect to `ap-independent-checker`; this retired role cannot perform new work.

• Ap Verifier

  by @Spielewoy

  Report the compatibility redirect to `ap-independent-checker`; this retired role cannot perform new work.

• Ap Manager

  by @Spielewoy

  Report the compatibility redirect to `ap-work-group-manager`; this retired role cannot perform new work.

• Ap Work Group Manager

  by @Spielewoy

  Divide one accepted work group only when at least two useful workers can have non-overlapping ownership.

• Ap Feature Coordinator

  by @Spielewoy

  Report the compatibility redirect to `ap-run-coordinator`; this retired role cannot perform new work.

• Ap Roadmap Author

  by @Spielewoy

  Write one dependency-ordered roadmap with owners, integration points, success items, and real checks.

• Ap Scope Coordinator

  by @Spielewoy

  Report the compatibility redirect to `ap-run-coordinator`; this retired role cannot perform new work.

• Ap Sweep Coordinator

  by @Spielewoy

  Report the compatibility redirect to `ap-run-coordinator`; this retired role cannot perform new work.

• Ap Planner

  by @Spielewoy

  Report the compatibility redirect to `ap-roadmap-author`; this retired role cannot perform new work.

• Ap Scoper

  by @Spielewoy

  Report the compatibility redirect to `ap-roadmap-author`; this retired role cannot perform new work.

• Ap Synthesizer

  by @Spielewoy

  Report the compatibility redirect to `ap-roadmap-author`; this retired role cannot perform new work.

• Ap Depth Prober

  by @Spielewoy

  Report the compatibility redirect to `ap-worker`; this retired role cannot perform new work.

• Ap Execharness Resolver

  by @Spielewoy

  Report the compatibility redirect to `ap-worker`; this retired role cannot perform new work.

• Ap Framework Generator

  by @Spielewoy

  Report the compatibility redirect to `ap-worker`; this retired role cannot perform new work.

• Ap Implementer

  by @Spielewoy

  Report the compatibility redirect to `ap-worker`; this retired role cannot perform new work.

• Ap Researcher

  by @Spielewoy

  Report the compatibility redirect to `ap-worker`; this retired role cannot perform new work.

• Ap Intake

  by @Spielewoy

  Report the compatibility redirect to `C0`; this retired role cannot perform new work.

• Ap Janitor

  by @Spielewoy

  Report the compatibility redirect to `C0`; this retired role cannot perform new work.

• Ap Preflight Probe

  by @Spielewoy

  Report the compatibility redirect to `C0`; this retired role cannot perform new work.

• Ap Re Anchor

  by @Spielewoy

  Report the compatibility redirect to `C0`; this retired role cannot perform new work.

• Ap Scribe

  by @Spielewoy

  Report the compatibility redirect to `C0`; this retired role cannot perform new work.

• Unity Agent Workflows

  by @hashgraph-online

  Use for AI-assisted Unity work that needs live repo discovery, project-derived routing, runtime-owner proof, runtime-visible output hard stops, runtime numeric proof for repeated visible-output failures, state-step guards,…

• Sendsets

  by @hashgraph-online

  Use Sendsets to turn a software product into useful outbound campaigns, then operate mailboxes, warmup, campaigns, replies, and product integrations through the CLI. Use when the user asks to set up or run cold email with…

• Use Burpsuite Mcp Bridge

  by @hashgraph-online

  Operate BurpSuite MCP Bridge for professional, authorized web testing. Use when Codex needs to inspect Burp live/history/logger/selection traffic, prioritize one target, retrieve a decisive request/response, intercept and edit a…

• Agent Drift Auditor

  by @hashgraph-online

  中文漂移审计技能。用于项目或学习过程变乱、上下文漂移、任务分叉、多个方案冲突、命名不一致、Codex 可能顺手改多了时。触发语包括"漂移检查""感觉跑偏了""项目变乱了""检查是否失控""分叉太多""上下文漂移"。

• Agent Debug Fixer

  by @hashgraph-online

  中文调试修复技能。用于报错、测试失败、页面异常、功能不符合预期、需要定位根因并做最小修复时。触发语包括"进入调试模式""帮我修问题""报错了""测试失败""页面坏了""找根因"。

• Xedit Automation

  by @hashgraph-online

  Use whenever the task involves inspecting, modifying, or building plugins for Bethesda games via the forked xEdit automation daemon. Loads first; routes to the right path (MCP intent tool, MCP atomic passthrough, or sub-agent…

• Setting Up Bgs Modding Environment

  by @hashgraph-online

  Use on first install of this plugin, when MO2 or xEdit is not yet detected, when starting a new modpack project, or when the user says 'set up', 'install', 'bootstrap', 'configure', or 'initialize' the BGS modding environment.…

• Evaluating Bgs Mods

  by @hashgraph-online

  Use when deciding whether a mod belongs in a modpack — judging mod quality, fit, risk, and pack-value BEFORE download/install. Triggers - "should I add this mod", "is this mod good", "评估这个mod", "这个mod值得装吗", "is this mod worth…

• Seo Geo

  by @hashgraph-online

  Optimize content for AI Overviews (formerly SGE), ChatGPT web search, Perplexity, and other AI-powered search experiences. Generative Engine Optimization (GEO) analysis including brand mention signals, AI crawler accessibility,…

• Using Bgs Translator

  by @hashgraph-online

  Use when the user wants to translate a Bethesda Game Studios plugin (.esp/.esm/.esl) with bgs-translator/xtl, create or inspect a translation project, run LLM batch translation, generate prompt previews, or export SST/XML for…

• Seo Backlinks

  by @hashgraph-online

  Backlink profile analysis: referring domains, anchor text distribution, toxic link detection, competitor gap analysis. Works with free APIs (Moz, Bing Webmaster, Common Crawl) and DataForSEO extension. Use when user says…

• Alibaba Supplier Outreach

  by @hashgraph-online

  Codex-native supplier sourcing and outreach workflow for Alibaba using LaunchFast research. Use when the user wants supplier shortlists, outreach messages, reply triage, or negotiation support. Requires `supplier_research`.…

• Seo Technical

  by @hashgraph-online

  Technical SEO audit across 9 categories: crawlability, indexability, security, URL structure, mobile, Core Web Vitals, structured data, JavaScript rendering, and IndexNow protocol. Use when user says "technical SEO", "crawl…

• Launchfast Full Research Loop

  by @hashgraph-online

  End-to-end Codex-native Amazon FBA research workflow using LaunchFast MCP. Use when the user wants a single report covering product research, IP risk, supplier sourcing, and PPC keyword intelligence. Requires…

• Maintaining Modding Environments

  by @hashgraph-online

  Use after first-run for ongoing modpack maintenance: update/install KB packs, author or register custom/mod KB packs, maintain localization glossary KBs for translator use, prune KB cache, health-check the environment,…

• Using Bgs Papyrus

  by @hashgraph-online

  Use when the user wants to compile Papyrus PSC to PEX, decompile PEX to PSC, detect Creation Kit Papyrus toolchains, or inspect Papyrus capabilities for Skyrim, Fallout 4, or Starfield. Triggers - "compile PSC", "decompile PEX",…

• Run Work

  by @hashgraph-online

  Execute a work unit end-to-end: sequence tasks by dependency, implement, test between tasks, commit, and track progress. Use to deliver a complete feature in one session. Invoked as /agiflow:run-work <work-unit>. Uses…

• Using Bgs Archive

  by @hashgraph-online

  Use when the user wants to inspect, list, extract, unpack, or repack Bethesda BA2/BSA archives; determine archive format/version/compression; or build archive assets for an MO2 overlay. Triggers - "unpack BA2", "extract BSA",…

• Seo Page

  by @hashgraph-online

  Deep single-page SEO analysis covering on-page elements, content quality, technical meta tags, schema, images, and performance. Use when user says "analyze this page", "check page SEO", "single URL", "check this page", "page…

• Seo Images

  by @hashgraph-online

  Image optimization analysis for SEO and performance. Checks alt text, file sizes, formats, responsive images, lazy loading, and CLS prevention. Use when user says "image optimization", "alt text", "image SEO", "image size", or…

• Kunze Ad Setup

  by @hashgraph-online

  Codex-native Amazon PPC setup workflow using Kunze's broader ecosystem-driven strategy. Use when the user wants LaunchFast-driven bulk-sheet generation with broad and phrase coverage, gap analysis, and a campaign package written…

• Ontoly Software Graph

  by @hashgraph-online

  Use Ontoly Software Graph evidence, CLI reports, MCP, and official Ontoly Agent Skills before searching source files when reviewing architecture, dependencies, request flows, configuration, impact, or security-sensitive ownership.

• Mailagent

  by @hashgraph-online

  Temporary inboxes for agent signup QA — create disposable addresses, wait for verification email, extract OTP or magic links. Use when automating signup, login, or email verification without parsing HTML manually.

• Wilco Ad Setup

  by @hashgraph-online

  Codex-native Amazon PPC setup workflow using Wilco's exact-match and analytics-first strategy. Use when the user wants stricter keyword control, exact-match campaigns, and a LaunchFast-driven bulk-sheet export.

• Batch Product Research

  by @hashgraph-online

  Codex-native batch Amazon keyword research using LaunchFast MCP. Use when the user wants a ranked comparison across many keywords and optionally wants HTML and CSV artifacts written to disk.

• Seo Schema

  by @hashgraph-online

  Detect, validate, and generate Schema.org structured data. JSON-LD format preferred. Use when user says "schema", "structured data", "rich results", "JSON-LD", or "markup".

• Waggle Memory

  by @hashgraph-online

  Use Waggle automatically as portable, local project memory during meaningful coding work; retrieve prior decisions and constraints, then store only durable outcomes.

• Qa Reviewer

  by @hashgraph-online

  Используй только внутри активного Codex Project Autopilot-проекта для verification/handoff; не включай для обычного code review вне автопилота.

• Waggle Checkpoint

  by @hashgraph-online

  Checkpoint durable decisions, fixes, constraints, results, and open next steps from the current Codex task into scoped Waggle project memory.

• Finding Latest Julia Version

  by @hashgraph-online

  Use when you need the latest stable JuliaLang version number (e.g., to fill `VERSION=` in an install script) instead of hard-coding a value

• Waggle Recall

  by @hashgraph-online

  Recall project-scoped Waggle history about a topic, component, decision, bug, experiment, or implementation attempt.

• Waggle Prime

  by @hashgraph-online

  Prime a Codex task with the most relevant Waggle project history before starting or resuming substantial work.

• Installing Julia

  by @hashgraph-online

  Use when your machine does not have JuliaLang runtime

• Creating Julia Test Env

  by @hashgraph-online

  Use when you add tests for Julia packages

• Developing Julia Package

  by @hashgraph-online

  Use when you write a Julia package

• Gentle Ai Issue Creation

  by @Gentleman-Programming

  Create and triage GitHub issues from repository evidence. Trigger: issue creation, bug reports, feature requests, or issue approval.

• Gentle Ai

  by @Gentleman-Programming

  Use Gentle AI harness discipline for Pi work: clarify first, track ODD work, use applicable test-first development by default, delegate when useful, and protect review workload.

• Gentle Ai Skill Creator

  by @Gentleman-Programming

  Trigger: /skill-creation, skill creation, skill creator, create skill, new skill. Create LLM-first skills with valid frontmatter.

• Gentle Ai Skill Registry

  by @Gentleman-Programming

  Trigger: update skills, skill registry, actualizar skills, after skill changes. Index available skills by trigger and path.

• VibeSec Skill

  by @BehiSecc

  This skill helps Claude write secure web applications. Use this when working on any web application or when a user requests a scan or audit to ensure security best practices are followed.

• Phone Calls

  by @vellum-ai

  Make outgoing phone calls, receive incoming calls, and pull up past call transcripts

• Subagent

  by @vellum-ai

  Spawn and manage autonomous background agents for parallel work

• Memory Corpus Ingest

  by @vellum-ai

  Ingest a large dataset into memory as a skimmed map. Cold-store the raw files under a workspace imports directory, census them into a slice plan, skim each slice into compact map pages that point back at the raw files, ingest…

• Inbox Management

  by @vellum-ai

  Ongoing Gmail inbox management via scheduled runs. Archives known noise, flags urgent items, drafts replies in-thread (never auto-sends), and catches stale follow-ups. Empty polls spend no model tokens. Starts in flag-only mode.

• Meme Generator

  by @vellum-ai

  Generate memes from 170+ classic templates using the free Memegen.link API. Search templates, generate captioned images, and download them for posting. No API key required.

• Conversation Launcher

  by @vellum-ai

  Offer the user several spin-off conversations as clickable buttons on a single persistent card. Each click spawns a fresh seeded conversation in the sidebar; the user keeps their place in the current conversation. Use when you…

• Headless Claude Code

  by @vellum-ai

  Reference guide for running Claude Code in third-party headless, container, and CI environments. Covers auth strategies, interactive mode pitfalls, tmux orchestration, root user workarounds, and git auth without SSH agents or…

• Deploy Fullstack Vercel

  by @vellum-ai

  Build and deploy a full-stack app (React frontend + Python/FastAPI backend) or a Vellum app to Vercel as a serverless demo with seeded data

• Oura Setup

  by @vellum-ai

  Connect an Oura Ring via OAuth2 — app registration, token exchange, and credential storage