Software Development AI agent skills

13,359 skills in the archive. Read a skill’s instructions or open its original repository.

• Wordpress Full Compromise

  by @uphiago

  Use when verified WordPress findings may combine into an authorized path to administrative or server control.

• Web Enumeration

  by @uphiago

  Sensitive file scanning, path traversal bypass, vHost enum, .env extract, log mining, Varnish detect

• Attack Patterns Reference

  by @uphiago

  Use when classifying a verified web or WordPress behavior and selecting a related validation skill.

• Js Secrets Extraction

  by @uphiago

  Analyze JS bundles and source maps for hardcoded secrets, API keys, JWTs, and internal endpoints

• Cross Attack Chains

  by @uphiago

  Use when two or more verified findings may combine into a higher-impact authorized attack path.

• Error Log Mining

  by @uphiago

  Mine error_log for creds, paths, SQL when leak hunt finds.

• Wp Mass Recon

  by @uphiago

  Batch WP recon: users, CORS, XMLRPC, leaks across domains.

• Wp Plugin Rest Auth Bypass

  by @uphiago

  Scan WordPress REST API plugin endpoints for unauthenticated state-changing operations — discover write endpoints (POST/PUT/PATCH/DELETE) exposed without auth, enumerate all plugin routes, and test for unauthorized content…

• Cloud Iam Deep

  by @uphiago

  GCP/AWS/Azure cloud exploitation -- Cloud Functions, Firestore, Cloud Run, S3, MinIO, Blob Storage, SA keys

• Cors Chain Automation

  by @uphiago

  Use when a bounded list of authorized API endpoints needs consistent CORS triage before browser validation.

• Google Dorks Catalog

  by @uphiago

  High-precision Google dorks for exposed configs, secrets, and credentials -- real-world validated

• Recon Playbook

  by @uphiago

  Use when starting or restructuring an authorized external web and API assessment.

• Api Noauth Hunt

  by @uphiago

  Use when an API may expose data or privileged operations without authentication.

• Visual Recon

  by @uphiago

  Screenshot all live hosts for rapid visual triage and technology fingerprinting.

• Github Secret Hunting

  by @uphiago

  Find leaked API keys, tokens, and credentials in public GitHub repositories.

• S3 Minio Content Type Xss

  by @uphiago

  Exploit public bucket Content-Type override for stored XSS on target origin.

• Http2 Header Impersonation

  by @uphiago

  Spoof HTTP/2 SETTINGS frames and pseudo-header order per browser profile.

• Humanize Automation

  by @uphiago

  Human-like mouse, keyboard and scroll behavior for behavioral bot bypass.

• Stealth Browser Launch

  by @uphiago

  Launch stealth Chromium with C++ fingerprint patches for anti-bot bypass.

• Flask Werkzeug Attack

  by @uphiago

  Exploit Flask/Werkzeug debugger exposure for traceback and SECRET leaks.

• Hardcoded Credential Hunt

  by @uphiago

  Detect hardcoded passwords in HTML forms, JavaScript, and API responses.

• Cms Detection

  by @uphiago

  Identify CMS, frameworks, and server technology stacks on live hosts.

• Tls Fingerprint Impersonation

  by @uphiago

  Spoof TLS ClientHello and JA4 fingerprints for browser impersonation.

• Scada Hikvision Isapi

  by @uphiago

  Enumerate Hikvision ISAPI endpoints on SCADA and IoT web interfaces.

• Deep Invade

  by @uphiago

  Deep pentest WP: SSRF, plugin CVE, JS mine, port scan chain.

• Exchange Owa Attack

  by @uphiago

  Exchange/OWA NTLM AD leak, spray attack when mail subdomain.

• Firebase Supabase Attack

  by @uphiago

  Exploit Firebase/Supabase for data via JS config leak probe.

• Xmlrpc Exploitation

  by @uphiago

  Exploit XMLRPC multicall, pingback for brute force and SSRF.

• Saml Sso Attack

  by @uphiago

  Attack SAML SSO via XSW, signature strip, metadata extract.

• Iot Camera Recon

  by @uphiago

  Attack cameras via RTSP, ONVIF, Axis config when 554 open.

• Jwt Attack

  by @uphiago

  Decode, forge, brute JWTs when Bearer auth header is seen.

• Source Leak Hunt

  by @uphiago

  Mass scan for exposed env files, backups, and git configs.

• Subdomain Enumeration

  by @uphiago

  Map subdomains via crt.sh and subfinder at recon kickoff.

• Gitlab Public Recon

  by @uphiago

  Mine GitLab for secrets, CI tokens when subdomain found.

• Port Mass Scan

  by @uphiago

  Port scan /8-/24 with Masscan+RustScan and nmap banners.

• Cors Credential Wordpress

  by @uphiago

  Exploit WP CORS credential reflection for data theft.

• 401 403 Bypass Techniques

  by @uphiago

  Use when protected HTTP routes return 401 or 403.

• Writers Pattern

  by @caliber-ai-org

  Add a new platform writer module in src/writers/ that generates and writes agent config files for a supported platform. Each writer exports a function that accepts a config interface, creates directories (rules/, skills/, mcp…

• Llm Provider

  by @caliber-ai-org

  Adds a new LLM provider implementing LLMProvider interface with call() and stream() methods. Integrates with provider factory in src/llm/index.ts, config detection in src/llm/config.ts, and error handling via tracking and…

• Scoring Checks

  by @caliber-ai-org

  Add a new deterministic scoring check in src/scoring/checks/ that evaluates config quality. Follows the Check[] return pattern, uses point constants from src/scoring/constants.ts, and integrates via filterChecksForTarget() in…

• Find Skills

  by @caliber-ai-org

  Discovers and installs community skills from the public registry. Use when the user mentions a technology, framework, or task that could benefit from specialized skills not yet installed, asks 'how do I do X', 'find a skill for…

• Adding A Command

  by @caliber-ai-org

  Creates a new CLI command following the Commander.js pattern in src/commands/. Handles command registration in src/cli.ts, telemetry tracking via tracked() wrapper, and option parsing. Use when user says add command, new CLI…

• Save Learning

  by @caliber-ai-org

  Saves user instructions as persistent learnings for future sessions. Use when the user says 'remember this', 'always do X', 'from now on', 'never do Y', or gives any instruction they want persisted across sessions. Proactively…

• Setup Caliber

  by @caliber-ai-org

  Sets up Caliber for automatic AI agent context sync. Installs pre-commit hooks so CLAUDE.md, Cursor rules, and Copilot instructions update automatically on every commit. Use when Caliber hooks are not yet installed or when the…

• Ai Search Hub

  by @minsight-ai-info

  Run the AI Search Hub browser automation scripts for Yuanbao, LongCat, Doubao, Qwen, Gemini, Grok, and MiniMax. Use this skill when the user wants to ask one of those sites a prompt, auto-start or attach to a Chrome DevTools…

• Research Meme Context

  by @MemeMeow-Studio

  Research evidence-backed structured representations of image memes, including visible subjects, caption text, templates, references, origins, current meaning, and uncertainty. Use when Codex must investigate a meme image with…

• Hermes Lcm

  by @stephenschoettler

  Use, configure, diagnose, and retrieve exact evidence with the Hermes-LCM lossless context plugin.

• Visual Flow Gif

  by @AI-Builder-Club

  Create animated flow diagrams from articles, workflow notes, architecture sketches, or process descriptions using a JSON specification and a local Python/Pillow renderer. Use when the user wants to turn source material into a…

• Open Agent Teams

  by @AI-Builder-Club

  Delegate tasks to ANY CLI agent (claude, codex, aider, ...) running in a detached tmux session, with a race-safe done-signal protocol and multi-turn iteration. Use when delegating work to a non-Claude CLI agent, when the user…

• Dev Local Setup

  by @AI-Builder-Club

  Scaffold a one-command `dev-local` launcher for ANY codebase. Investigates the repo to find its services, ports, and infra dependencies, then generates a single `scripts/dev-local.sh` (up/down/status/logs/restart) that runs…

• Setup Codebase Harness

  by @AI-Builder-Club

  Master skill — set up the full agent harness for any repo so an agent can work it reliably: legible (map-not-manual docs + custom lints), executable (one-command dev stack), verifiable (e2e gate + a verify-before-ship loop),…

• E2e Setup

  by @AI-Builder-Club

  Set up an end-to-end test suite in any repo, following practices that make e2e a reliable per-PR gate: real flows over bypass, layered assertions, a reusable auth/session helper, video+trace evidence, and a compounding suite.…

• Hello Js Reverse Skill

  by @WhiteNightShadow

  通用 Web API 数据采集、Node.js/Python 协议调用与前端签名分析。 使用 Camoufox MCP 捕获请求、调试 Hook、分析混淆/JSVMP/WASM， 交付可验证的采集程序，支持分页、断点续采和接口改版回归。 用于自有或已授权接口；微信小程序 wxapkg 解包使用对应小程序技能。

• Router

  by @gamedev-skills

  Routes any game-development request to the right specialized skill(s): it detects the engine (Godot, Unity, Unreal, Bevy, Phaser, PixiJS, three.js, LÖVE, pygame, Roblox) and the task, then reads the chosen skill before acting.…

• Roblox Studio Workflow

  by @gamedev-skills

  Modify living Roblox Studio projects safely: inspect Explorer and execution locations, preserve existing structure, reuse modules/remotes, create meaningful Instances, apply Attributes and CollectionService tags, test…

• Roblox Networking

  by @gamedev-skills

  Design and harden Roblox client/server networking with RemoteEvent, RemoteFunction, and UnreliableRemoteEvent; server authority, argument and Instance validation, rate limits, proximity/ownership checks, targeted replication,…

• Roblox Characters

  by @gamedev-skills

  Build respawn-safe Roblox character systems around Players, CharacterAdded/CharacterRemoving, Humanoid, HumanoidRootPart, Animator, R6/R15 rigs, movement, animations and markers, death, tools, accessories, ownership, and custom…

• Procedural Gen

  by @gamedev-skills

  Generate game content procedurally — seeded deterministic RNG, value/Perlin/ Simplex noise for terrain and heightmaps, grid dungeon generation (rooms + corridors, BSP, random walk), and weighted loot/drop tables. Engine-neutral…

• Performance Optimization

  by @gamedev-skills

  Find and fix game performance problems methodically — measure with the engine profiler first, reason about the frame-time budget, locate the CPU-vs-GPU bottleneck, then apply the right fix: object pooling, draw-call batching,…

• Godot Physics

  by @gamedev-skills

  Use Godot 4.7 physics bodies and detection in 2D and 3D: RigidBody, StaticBody, Area, and CharacterBody; collision layers vs masks; contact/overlap signals; and raycasts (RayCast nodes and direct space-state queries). Use when…

• Threejs Materials Lighting

  by @gamedev-skills

  Light and shade a three.js scene: choose materials (MeshStandardMaterial PBR vs unlit MeshBasicMaterial), add ambient/hemisphere/directional/point/spot lights, turn on shadow maps, and use an environment map (IBL) for realistic…

• Roblox Luau

  by @gamedev-skills

  Script a Roblox experience in Luau: get services, create and parent Instances, connect events, run server Scripts vs client LocalScripts, and communicate across the client/server boundary with RemoteEvents/RemoteFunctions…

• Unreal Cpp Gameplay

  by @gamedev-skills

  Write Unreal Engine 5 C++ gameplay code: the UCLASS/UPROPERTY/UFUNCTION reflection macros, the Gameplay Framework (GameMode, Pawn, Character, PlayerController, Actor components), and the module Build.cs. Use when writing or…

• Phaser Arcade Physics

  by @gamedev-skills

  Use Phaser 4 Arcade Physics: enable the world, give sprites bodies, set velocity/acceleration/gravity, and resolve collisions with colliders, overlaps, groups, and world bounds. Use when a Phaser game needs movement or…

• Bevy Ecs

  by @gamedev-skills

  Structure a Bevy app around its Entity Component System: build the App with plugins, define Component/Resource types, write systems with Query/Res/Commands, filter and order systems, and use the Time resource for…

• Unreal Blueprints

  by @gamedev-skills

  Build Unreal Engine 5 gameplay with Blueprint visual scripting: Blueprint Classes, the Event Graph and Construction Script, variables/functions/macros, and Blueprint communication (Cast, Interfaces, Event Dispatchers). Use when…

• Pixijs Rendering

  by @gamedev-skills

  Build a PixiJS v8 render layer: create the async Application, load textures with Assets, compose the scene graph with Container and Sprite, drive the ticker loop, wire pointer events, and group draws with render groups. Use when…

• Godot Multiplayer

  by @gamedev-skills

  Build networked games with Godot 4.7 high-level multiplayer: set up an ENetMultiplayerPeer server/client, define RPCs with the @rpc annotation (call via rpc()/rpc_id()), set per-node multiplayer authority, and replicate state…

• Unity Build Pipeline

  by @gamedev-skills

  Build and ship Unity 6.3 LTS players: build settings and scenes, player/quality settings, the IL2CPP vs Mono scripting backend, managed code stripping, scripted BuildPipeline.BuildPlayer, and CI/headless builds. Use when…

• Phaser Core

  by @gamedev-skills

  Set up and debug a Phaser 4 game: the Game config, the Scene lifecycle (init/preload/create/update), the asset loader, cameras, and cross-scene communication. Use when building or debugging a Phaser game — when the user mentions…

• Godot Csharp

  by @gamedev-skills

  Use C#/.NET in Godot 4.7: partial classes extending nodes, the PascalCase lifecycle (_Ready/_Process/_PhysicsProcess), [Export] fields, [Signal] delegates as C# events, type-safe node lookup, and calling between C# and GDScript.…

• Unreal Enhanced Input

  by @gamedev-skills

  Set up player input in Unreal Engine 5 with Enhanced Input: Input Actions, Input Mapping Contexts, modifiers and triggers, adding the mapping context, and binding actions by ETriggerEvent. Use when wiring movement/look/jump…

• Godot Export

  by @gamedev-skills

  Export and build a Godot 4.7 project for distribution: install export templates, define export presets (Windows/macOS/Linux/Web/Android), run headless command-line exports for CI, and handle web (HTML5) COOP/COEP and…

• Godot Nodes Scenes

  by @gamedev-skills

  Structure a Godot 4.7 project with the scene tree and node composition: build reusable scenes, instance PackedScenes at runtime, navigate the tree safely, and register autoload singletons. Use when designing .tscn scenes,…

• Shader Programming

  by @gamedev-skills

  Write game shaders from cross-engine fundamentals — the vertex→fragment pipeline, coordinate spaces, UV math, and common 2D/3D effects (tint, UV scroll, dissolve, outline, fresnel rim, vignette) in GLSL with HLSL equivalents.…

• Pygame Core

  by @gamedev-skills

  Structure a pygame (pygame-ce) game in Python: the init/event/update/draw loop, delta-time movement, Surface/Rect blitting, keyboard/mouse input, and Sprite/Group management with collision. Use when building or debugging a…

• Unity Input System

  by @gamedev-skills

  Wire player input in Unity 6.3 LTS with the Input System package: Input Actions, action maps, the PlayerInput component, and reading values via callbacks or polling. Use when the project has a .inputactions asset or…

• Unreal Behavior Trees

  by @gamedev-skills

  Build NPC AI in Unreal Engine 5 with Behavior Trees and Blackboards: composites (Selector/Sequence), tasks, decorators, services, and running the tree from an AIController. Use when creating enemy/NPC AI, BT_/BB_ assets, custom…

• Unity Scriptableobjects

  by @gamedev-skills

  Architect Unity 6.3 LTS data and decoupling with ScriptableObjects: config/data assets, shared runtime variables, event channels, and runtime sets/registries. Use when designing data-driven systems, replacing…

• Unity Physics

  by @gamedev-skills

  Set up 3D physics in Unity 6.3 LTS: Rigidbody movement and forces, colliders, triggers vs collisions, layer-based collision, raycasts, and joints. Use when adding a Rigidbody, handling OnCollisionEnter/OnTriggerEnter, tuning…

• Save Systems

  by @gamedev-skills

  Design save/load for game state — choosing what to serialize, file formats, save slots, atomic crash-safe writes, schema versioning and migration, and autosave. Engine-neutral. Use when the user mentions save system, save/load,…

• Steam Publish

  by @gamedev-skills

  Publish or update a game on Steam with Steamworks and SteamPipe: configure depots and packages, upload builds with steamcmd, set a build live on a branch, and run the release checklists. Use for Steam publishing,…

• Roguelike

  by @gamedev-skills

  Build a roguelike: turn-based grid movement, procedural dungeons, permadeath, field-of-view, and loot tables. Use for a roguelike/roguelite or turn-based grid dungeon crawler with procedural levels.

• Tower Defense

  by @gamedev-skills

  Build a tower defense: enemies pathing along lanes, wave spawning, towers that auto-target and fire, an economy, and lives. Use for a tower-defense/wave-defense game, or balancing waves and economy.

• Platformer

  by @gamedev-skills

  Build a 2D platformer: run/jump control with coyote time, jump buffering, and variable jump height, plus tiled levels and hazards. Use for a platformer or Mario/Celeste-like, or tuning jump feel.

• Survival Crafting

  by @gamedev-skills

  Build a survival-crafting game: resource gathering, inventory, crafting and a tech tree, needs (hunger/thirst/temperature), and base building. Use for a survival or crafting/base-building game.

• Love2d Core

  by @gamedev-skills

  Structure and debug a LÖVE (Love2D) game in Lua: the love.load/update/draw loop, delta-time movement, input, and screen states. Use when building a LÖVE 11.x game (main.lua, conf.lua, .love).

• Fps Shooter

  by @gamedev-skills

  Build a first-person shooter: move+mouse-look controller, hitscan or projectile shooting, weapons, health, and enemy AI. Use for an FPS, or tuning aim feel, time-to-kill, recoil, or spread.

• Rpg

  by @gamedev-skills

  Build an RPG: stats and leveling, inventory and equipment, quests, branching dialogue, save/load, and combat. Use for an RPG/JRPG, or designing stat, inventory, quest, or combat systems.

• Card Game

  by @gamedev-skills

  Build a card game: card data, deck/hand/discard zones, draw/shuffle/reshuffle, a turn structure, costs, and effect resolution. Use for a deckbuilder, TCG/CCG, or roguelike deckbuilder.

• Godot Gdscript Headless Testing

  by @gamedev-skills

  Run GDScript test suites from the command line with `godot --headless`, using a SceneTree/MainLoop runner script that exits non-zero on failure so CI can gate merges. Use when a Godot project needs unit tests without opening the…

• Unreal Packaging

  by @gamedev-skills

  Package and ship an Unreal Engine 5 project: the Platforms menu Package Project flow, build configurations (Development vs Shipping), cooking content, packaging settings and the Game Default Map, and command-line builds with…

• Unreal Niagara

  by @gamedev-skills

  Create and control VFX in Unreal Engine 5 with Niagara: systems and emitters, modules and the spawn/update stages, exposed User parameters, and spawning or driving effects from Blueprints or C++. Use when building particle…

• Unity Navmesh

  by @gamedev-skills

  Add AI navigation in Unity 6.3 LTS: bake a NavMesh with the AI Navigation package (NavMeshSurface), move agents with NavMeshAgent.SetDestination, and handle dynamic obstacles. Use when setting up pathfinding, making an enemy…

• Unity Tilemap 2d

  by @gamedev-skills

  Build and script 2D tilemaps in Unity 6.3 LTS: the Grid + Tilemap components, the Tile Palette, tilemap colliders, rule tiles, and runtime SetTile/GetTile painting. Use when painting tile levels, adding a TilemapCollider2D,…

• Prototype Fast

  by @gamedev-skills

  Build a playable prototype in about an hour to answer one question — is it fun? — with greybox primitives, a hard timebox, and explicit keep/kill criteria. Use when prototyping a mechanic, making a vertical slice or MVP,…

• Ios Simulator Skill

  by @conorluddy

  29 production-ready scripts for iOS app testing, building, and automation. Provides semantic UI navigation, build automation, accessibility testing, and simulator lifecycle management. Optimized for AI agents with minimal token…

• Starknet Js

  by @starknet-io

  Use when writing or debugging JavaScript/TypeScript that interacts with Starknet through the starknet.js SDK — building Call objects or calldata, encoding/decoding Cairo types (felt252, u256, structs, arrays, spans, ByteArray,…

• Skill Creator

  by @AIPexStudio

  Guide for creating effective skills. This skill should be used when users want to create a new skill (or update an existing skill) that extends AIPex's capabilities with specialized knowledge, workflows, or tool integrations.

• Clean Code Guard

  by @amElnagdy

  Review generated or changed production code before it ships, using Clean Code, SOLID, DRY, KISS, YAGNI, and LLM-specific failure-mode checks in any programming language. Best used reactively after an agent writes, edits,…