Software Development AI agent skills

13,359 skills in the archive. Read a skill’s instructions or open its original repository.

• React Native

  by @alinaqi

  React Native mobile patterns, platform-specific code

• Reddit Api

  by @alinaqi

  Reddit API with PRAW (Python) and Snoowrap (Node.js)

• Supabase

  by @alinaqi

  Core Supabase CLI, migrations, RLS, Edge Functions

• Supabase Python

  by @alinaqi

  FastAPI with Supabase and SQLAlchemy/SQLModel

• Typescript

  by @alinaqi

  TypeScript strict mode with eslint and jest

• Supabase Node

  by @alinaqi

  Express/Hono with Supabase and Drizzle ORM

• Blogger Distiller

  by @otter1101

  Use when the user wants to analyze or distill a blogger/account on Xiaohongshu or Douyin, benchmark a target creator, or diagnose their own content strategy. Trigger on requests such as “拆解博主””蒸馏博主””分析小红书博主””分析抖音博主”…

• Com Proxy Triage

  by @SpecterOps

  Use this skill when the user wants to triage Windows COM proxy/hijack candidates by capturing `HKCU\Software\Classes\CLSID\{...}\InProcServer32` `NAME NOT FOUND` lookups for a process, mapping each CLSID to the machine-wide…

• Mythic Implant Development

  by @SpecterOps

  Provides guidance and documentation for building Mythic C2 framework agents/implants from scratch

• Binary Ninja Mcp Analysis

  by @SpecterOps

  Provides Binary Ninja IL documentation and MCP server usage guidance for binary analysis and reverse engineering

• Oc2 Bof Script Development

  by @SpecterOps

  Use when writing Outflank C2 Python BOF wrappers for OC2 V2 (*_bof.s1.py, BaseBOFTask, outflank_stage1, stage1) or V3 (oc2_sdk_python, @command, manifest.json, command provider), when porting/migrating/converting a V2 BOF script…

• Cwe Code Review

  by @SpecterOps

  Perform CWE-grounded security code reviews and precise weakness mapping using a locally derived MITRE CWE corpus, relationship graphs, mapping notes, detection methods, mitigations, and schema semantics. Use when Codex needs to…

• Macos Initial Access

  by @SpecterOps

  Provide macOS guidance for initial access using app bundles, installer packages, and disk images, including current Gatekeeper behavior and pkgbuild and hdiutil examples.

• C2 Bof Development

  by @SpecterOps

  Beacon Object File (BOF) development. Use when creating, porting, or debugging BOFs for C2 frameworks including API usage, DFR conventions, and compilation.

• Openssf Python Review

  by @SpecterOps

  Perform adversarial Python security code reviews grounded in the OpenSSF Secure Coding Guide for Python. Use when Codex needs to audit large Python repositories, recovered or decompiled Python source, Python services or scripts…

• Oc2 Bot Development

  by @SpecterOps

  Develop Outflank C2 event-driven Python bots. Use when creating or debugging OC2 automations.

• Codex Activity Report

  by @SpecterOps

  Generate a normalized UTC timeline and evidence-based narrative from Codex activity artifacts. Use when Codex needs to turn `.codex` logs, rollout JSONL files, archived session bundles, history files, SQLite logs, or planner…

• Bloodhound Analysis

  by @SpecterOps

  Use as the default router for generic BloodHound asks: check the BloodHound connection, verify MCP health, analyze BloodHound data, find or explain a path, inspect shortest paths, find a path to Domain Admin or Tier Zero, show…

• Cpp Core Guidelines

  by @SpecterOps

  Apply a condensed version of the ISO C++ Core Guidelines to C++ design, implementation, refactoring, modernization, and code review. Use for .cpp, .cc, .cxx, .h, .hpp, CMake-backed C++ projects, API design, ownership/lifetime…

• Ghidra Mcp Analysis

  by @SpecterOps

  Use for reverse engineering and binary analysis with LaurieWired/GhidraMCP. Trigger for Ghidra MCP setup, bridge_mcp_ghidra.py usage, GhidraMCP plugin workflows, decompilation, function/string/import/export/xref analysis,…

• Phishing Email Html

  by @SpecterOps

  Generate a phishing email in HTML from an approved pretext. Use when the task needs polished email copy plus HTML formatted for common delivery workflows such as GoPhish or Phishmonger.

• Bloodhound Ad Analysis

  by @SpecterOps

  Use for BloodHound Active Directory and ADCS attack-path work when the user clearly means on-prem AD semantics: find a path to Domain Admin, DA, Tier Zero, Domain Controllers, or privileged groups; investigate DCSync, ACL abuse,…

• Openhound Jamf

  by @SpecterOps

  Use for OpenHound Jamf/JamfHound OpenGraph BloodHound work when the user clearly means Jamf semantics such as Jamf tenant, site, account, group, computer, API-client exposure, Tier 1 to Tier 0 paths, policy/script/profile…

• Phishing Pretext

  by @SpecterOps

  Research and draft a target-specific phishing email pretext. Use when building or refining a believable lure for a named company, policy change, department, or employee audience and when the work benefits from current…

• Pretext Brainstormer

  by @SpecterOps

  Research recent public events and brainstorm phishing pretext ideas for a named target organization. Use when the user provides a client name and a phishing goal such as payload delivery or credential capture and wants timely…

• Readme Generation

  by @SpecterOps

  Generate a professional README.md for a project. Works on local codebases and remote GitHub repos. Use when a project needs a README, when an existing README is outdated, or when documenting someone else's tool.

• Sccm Takeover Relay

  by @SpecterOps

  Validate SCCM TAKEOVER-1 style hierarchy takeover via NTLM coercion and relay to the site database, with C2-aware relay-host planning, operator SSH access requirements, prechecks, and evidence capture.

• Secret Scan

  by @SpecterOps

  Scan repositories and codebases for exposed secrets, credentials, and sensitive data. Use for GitHub repo/org/user scans, local code scans, and secret-discovery triage with optional command execution.

• Scaffold Security

  by @SpecterOps

  Scaffold a security tool project with CLI, logging, and target handling. Prefer uv-based setup and packaging; if uv is unavailable, warn the user, request approval, and use a fallback bootstrap path.

• Shodan

  by @SpecterOps

  Query Shodan for reconnaissance, target enrichment, and exposed service discovery. Builds queries, parses results, and highlights interesting findings. Requires SHODAN_API_KEY environment variable.

• Scaffold Python

  by @SpecterOps

  Scaffold a new Python project with a src layout, linting, and tests. Prefer uv-based setup and packaging; if uv is unavailable, warn the user, request approval, and use a fallback bootstrap path.

• Git Preflight

  by @SpecterOps

  Pre-commit and pre-edit git checklist — staged diff code-review, macOS case renames, remote branch sync verification. Run before committing or starting work on a feature branch.

• Credential Harvest Landing Page Copy

  by @SpecterOps

  Draft believable copy for a credential-harvest landing page. Use when creating target-specific text for a fake login, SSO prompt, meeting join page, or internal portal notice.

• Vishing Pretext

  by @SpecterOps

  Research and draft a target-specific vishing pretext. Use when creating or refining phone-based social engineering scripts for a named company, department, workflow, or event.

• Nmap Parse

  by @SpecterOps

  Parse nmap scan output and generate actionable recon notes. Use when analyzing nmap XML/grepable output, planning service enumeration, or doing network reconnaissance.

• Git Cleanup

  by @SpecterOps

  Repository hygiene — prune merged/stale branches, detect orphans, repo health checks. Use when cleaning up branches, checking repo health, or scanning projects.

• Git Merge

  by @SpecterOps

  Complex git operations — merge conflict resolution, cherry-picks, rebases. Use when merging branches, resolving conflicts, cherry-picking commits, or rebasing.

• Security Review

  by @SpecterOps

  Perform a security-focused review of current git changes. Use when reviewing staged/unstaged diffs, checking for vulnerabilities, and deciding merge readiness.

• Code Review

  by @SpecterOps

  Security-focused code review of current git changes. Use when reviewing code diffs, checking for vulnerabilities, or before merging branches.

• Sccmhunter Install Local

  by @SpecterOps

  Clone SCCMHunter into operating-tools and install it in a local Python virtual environment using the repository's documented setup flow.

• Ghostwriter Mcp

  by @SpecterOps

  Use for Ghostwriter MCP setup, connection verification, project discovery, oplog discovery, and environment guidance in Codex.

• Go Review

  by @SpecterOps

  Performs security review of arbitrary Go packages, including libraries, frameworks, CLIs, HTTP and gRPC services, and backend applications. Covers authentication and authorization, request parsing, SSRF, SQL and command…

• Interview Collector

  by @Zchary1106

  Collect and curate public AI Agent, LLM, RAG, MCP, and AI application interview experiences for agent-interview-hub.

• Mcp Builder

  by @modiqo

  Guide construction of MCP servers that expose external services through well-designed, documented, testable tools. Use for mcp-builder, MCP server, Model Context Protocol, build MCP, FastMCP, TypeScript MCP SDK, MCP SDK, MCP…

• Skillspec

  by @modiqo

  Multiplex SkillSpec post-install setup: inspect skill/repo shape with doctor, map multi-skill and plugin-shaped repositories before fanout import, import existing SKILL.md skills from local folders or public URIs, inspect…

• Rote Shell

  by @modiqo

  Use when the task needs to run a local command and remember the result, inspect CLI output with provenance, follow a log or process stream, start or observe a background job, capture terminal-sensitive output, crystallize shell…

• Webinar Registration Page

  by @Affitor

  Build a webinar or live event registration page as a self-contained HTML file with countdown timer, speaker bio, agenda, and registration form. Triggers on: "build a webinar registration page", "create a webinar sign-up page",…

• Squeeze Page Builder

  by @Affitor

  Build email capture landing pages (squeeze pages) as single self-contained HTML files. Triggers on: "build a squeeze page", "email capture page", "lead magnet page", "create an opt-in page", "build an email list page", "lead…

• Generic Code Review

  by @modiqo

  Review code changes by collecting the review target, researching context, checking risks, and reporting findings before summary.

• Generic Commit Convention

  by @modiqo

  Write conventional commit messages and run the repository's pre-push checks before commit, push, or PR title work.

• Research Codebase

  by @modiqo

  Document and explain the codebase as-is using parallel sub-agents. Use when the user asks to research, explore, map, document, or understand the codebase — including questions like 'how does X work', 'where is Y implemented',…

• Code Review

  by @modiqo

  Multi-agent code review with deep analysis. Orchestrates codebase research, optional web research, parallel Rust engineers, codex second opinion, and general-purpose reviewers into a synthesized report. Use when the user asks to…

• Listicle Generator

  by @Affitor

  Write "Top N best..." listicle articles for affiliate marketing with mini-reviews, pricing, pros/cons, and CTAs per entry. Triggers on: "write a best of list", "top 10 [category] tools", "best [product category] article",…

• Comparison Post Writer

  by @Affitor

  Write "X vs Y" comparison blog posts that help readers choose between two competing products. Triggers on: "write a comparison post", "X vs Y blog post", "compare [product A] and [product B]", "which is better [A] or [B]", "head…

• Guarantee Generator

  by @Affitor

  Create YOUR personal guarantee on top of the product's guarantee for risk reversal. Triggers on: "create a guarantee", "guarantee for my affiliate", "risk reversal", "money back guarantee", "what guarantee can I offer", "reduce…

• Value Ladder Architect

  by @Affitor

  Design the complete free-to-premium value ladder for affiliate promotions. Triggers on: "value ladder", "customer journey", "upsell path", "ascension model", "free to paid funnel", "tripwire offer", "upsell strategy",…

• Commit Convention

  by @modiqo

  Use when writing commit messages, creating PR titles, pushing commits, or creating PRs — ensures conventional commit format and that formatting/linting pass before any push

• Birdview Review

  by @Qiuner

  Review and improve codebase architecture with source-backed current/proposed diagrams, tradeoffs and verification. Use for birdview-review or requests to optimize architecture, review module boundaries or find architectural…

• Vulnhunter Run

  by @nealbridges

  Unattended VulnHunter operator. Clone a repo, run the vulnhunt skill with this harness's own tools and subagents, then write and check the scan manifest. Does not call a model SDK and does not name a harness.

• Xiaohu Wechat Cover

  by @xiaohuailabs

  公众号封面图生成器。一步出图，输入文章路径或主题即可。当用户要求'公众号封面''微信封面''文章封面'时使用。

• Observe

  by @simple10

  Agents Observe dashboard and server management

• Prefab Dev Build

  by @PrefectHQ

  How to build and preview renderer/playground changes locally. Use this skill when modifying the renderer (themes, components, styles), the playground (theme picker, examples), or any Python source that needs to appear in the…

• Live Panel

  by @ythx-101

  Build a terminal-style, always-running animated architecture diagram (a "live panel") from a JSON config and render it to an mp4. Use when the user wants a system, agent or org architecture diagram that looks like a monitoring…

• Research Visualizer

  by @ARA-Labs

  Research Visualizer. Renders an existing Agent-Native Research Artifact (ARA) into ONE self-contained, interactive HTML file showing the AI scientist's step-by-step research process: a clickable process map of the exploration…

• Compiler

  by @ARA-Labs

  Universal ARA Compiler. Converts ANY research input — PDF papers, GitHub repositories, experiment logs, code directories, raw notes, or combinations thereof — into a complete Agent-Native Research Artifact (ARA): a structured,…

• Research Manager

  by @ARA-Labs

  End-of-turn research process recorder with progressive crystallization. Invoked at the END of EVERY turn, after the user's current request has been fully addressed and before yielding control back to the user. Reviews what…

• Research Foresight

  by @ARA-Labs

  ARA World Model — read-only reasoning engine over ONE Agent-Native Research Artifact (ARA), run LOCALLY with the coding agent itself as the LLM (no SDK, no API key). Given an ARA directory and a free-text query, it answers any…

• Research Fuzzer

  by @ARA-Labs

  Treat an open-ended investigation the way a fuzzer treats a program. After every action, reflect on two things a fuzzer always knows and an agent never does: did anything NEW happen, and where have I NOT been yet. Keeps an…

• Submit Ara

  by @ARA-Labs

  ARA Submitter. Takes a research directory, makes sure it is a valid Agent-Native Research Artifact (ARA) — compiling it with the `compiler` skill when it is not — guarantees it carries an interactive visualization…

• Ticketsatwork

  by @borski

  Search TicketsAtWork (EBG corporate perks) for hotels, theme park tickets, attractions, and rental cars via Patchright. Often beats portals by 10-30%. Use when comparing hotel or ticket prices for a trip.

• Sutochno

  by @borski

  Search Sutochno.ru (СУТОЧНО.РУ), a Russian short-term apartment-rental platform where you book directly from owners and pay in rubles (Mir card / bank transfer). Best for Russian-speaking travellers booking stays in Georgia /…

• Vrbo

  by @borski

  Search VRBO (Vrbo / Expedia Group) vacation rentals including entire homes, condos, and cabins via Patchright browser automation. VRBO sits behind Akamai Bot Manager so plain HTTP and standard Playwright get a 429 bot wall. Use…

• Chase Travel

  by @borski

  Search Chase UR travel portal via Patchright for cash prices, points pricing, Points Boost offers, and Chase Edit hotel benefits. Use for pay-with-points portal comparison on Sapphire Reserve/Preferred.

• Amex Travel

  by @borski

  Search Amex travel portal for cash prices, MR points pricing, IAP discounts, and FHR/THC hotel benefits via Patchright. Use when comparing pay-with-points portal pricing to award alternatives.

• American Airlines

  by @borski

  Check American Airlines AAdvantage balance, elite status, and loyalty points via Patchright. Handles email 2FA with 6-box code entry. Uses persistent browser profiles to skip 2FA on subsequent runs.

• Transfer Bonuses

  by @borski

  Active credit card transfer bonuses from Amex, Chase, Capital One, Citi, Bilt, and Rove. Weekly-refreshed data with confidence markers. Use when pricing an award booking that involves a points transfer or deciding whether to…

• Award Holds

  by @borski

  Per-program rules for placing award flights on hold before transferring points. Covers programs with holds (AA, Lufthansa, Flying Blue, Cathay, Turkish, Virgin Atlantic, ANA, Emirates, EVA Air) and those without. Includes…

• Flight Search Strategy

  by @borski

  Canonical multi-source flight search strategy. Source priority (Duffel, Ignav, Google Flights, Skiplagged, Kiwi, Seats.aero, Southwest), parallel workflow, market selection for international price arbitrage.

• Lessons Learned

  by @borski

  Mandatory pre-flight-search reference. Contains the Seats.aero workflow (pull ALL programs first), source accuracy hierarchy, Southwest/Companion Pass specifics, small-market caveats, and Duffel limitations.

• Partner Awards

  by @borski

  Loyalty program airline ticketing partnerships (alliance + bilateral). Cross-references credit card currencies to booking programs for award reachability checks.

• Getting Started

  by @borski

  First-run setup. Detects configured API keys, points to the local setup-keys script for secure key entry, and shows sample prompts scaled to available tools.

• Data Safety Auditor

  by @ananddtyagi

  Comprehensive data safety auditor for Vue 3 + Pinia + IndexedDB + PouchDB applications. Detects data loss risks, sync issues, race conditions, and browser-specific vulnerabilities with actionable remediation guidance.

• Document Sync

  by @ananddtyagi

  A robust skill that analyzes your app's actual codebase, tech stack, configuration, and architecture to ensure ALL documentation is current and accurate. It never assumes—always verifies and compares the live system with every…

• Skills Manager

  by @ananddtyagi

  Universal consolidation & audit skill for Claude Code skills. Analyzes project state, detects redundancies, and safely manages skills with backup, confirmations, and rollback capabilities. Never assumes without verifying actual…

• API Contract Sync Manager

  by @ananddtyagi

  Validate OpenAPI, Swagger, and GraphQL schemas match backend implementation. Detect breaking changes, generate TypeScript clients, and ensure API documentation stays synchronized. Use when working with API spec files (.yaml,…

• Safe Project Organizer

  by @ananddtyagi

  Safely analyze and reorganize project structure with multi-stage validation, dry-run previews, and explicit user confirmation. Use when projects need cleanup, standardization, or better organization.

• Openai Image Gen

  by @swarmclawai

  Generate images via OpenAI Images API (GPT Image, DALL-E 3, DALL-E 2). Supports batch generation with random prompt sampler and HTML gallery output. Use when asked to generate images with OpenAI and an OPENAI_API_KEY is available.

• Coding Agent

  by @swarmclawai

  Delegate coding tasks to external coding agents (Claude Code, Codex, Pi, OpenCode) via shell. Use when: (1) building new features or apps in a separate project, (2) reviewing PRs, (3) refactoring large codebases, (4) iterative…

• Comprehensive Testing & Verification

  by @ananddtyagi

  MASTER Vue.js application testing with strict enforcement of verification protocols. Systematically test functionality with Playwright, validate bug fixes, verify features work, and enforce zero-tolerance policies for false…

• Github

  by @swarmclawai

  GitHub operations via `gh` CLI: issues, PRs, CI runs, code review, API queries. Use when: (1) checking PR status or CI, (2) creating/commenting on issues, (3) listing/filtering PRs or issues, (4) viewing run logs. NOT for: local…

• Swarmclaw

  by @swarmclawai

  AI agent runtime and multi-agent orchestration platform. Teaches agents how to use SwarmClaw's 6 primitive tools, persistent memory, dreaming, delegation, connectors, credentials, and the skill system. Use when an agent is…

• AI Truthfulness Enforcer

  by @ananddtyagi

  MANDATORY verification system that prevents Claude Code instances from making false claims or fabricating evidence. Enforces cryptographic verification, real testing evidence, and automatic claim validation before any success…

• Taskmaster

  by @lili-luo

  Unified task execution protocol for Codex-only work. Supports Single Task, Epic Task, and Batch Task while preserving CSV truth-source, validation gates, context recovery, and Debug-First failure exposure. WHEN TO USE: user asks…

• Docs To Book

  by @lili-luo

  把任意项目消化重构为一本结构化、带阅读路线的离线"网站书"，帮助接手者按认知逻辑快速吃透项目。输入可以是散乱文档（docs/ 里成堆的 markdown），也可以在文档缺失或过时时由 agent 探查代码库反推梳理；产出零依赖、双击即开的静态多页站点（侧边栏导航、上下页、全文搜索、深浅色、Mermaid…

• Bcut Release

  by @JimLiu

  Release BaoCut Electron desktop apps through GitHub Actions tags by default; use local/manual packaging only when explicitly requested. Also handles App version bumps, release continuation and portable signing backups; excludes…

• Todo List Csv

  by @lili-luo

  当需要修改项目（增删改文件）并希望将 update_plan 与 CSV 有机同步时使用此技能：在项目根目录创建“{任务名} TO DO list.csv”，用 TODO/IN_PROGRESS/DONE 驱动 plan 的 pending/in_progress/completed，同步推进，全部完成后删除该文件。

• Release

  by @devoxx

  Release a new version of the DevoxxGenie IntelliJ plugin — prompt for the target version, bump it in the build files, write a curated CHANGELOG.md entry and plugin.xml change-notes from the git/PR history since the last tag,…

• Review

  by @devoxx

  Review local code changes for bugs, regressions, missing tests, and pragmatic improvements. Use when the user asks to review the current changes from `git status`, or to review a specific backlog task by id such as `task-65` or…

• Close Task Commit Push Pr

  by @devoxx

  Close the active backlog task (detected from branch name), commit all changes, push to remote, and open a pull request. Use when the user says "close task and ship it", "close task commit push pr", or invokes…

• Start Task

  by @devoxx

  Create a feature branch for a backlog task, switch to it, and start implementation. Use when the user says "start task-123", "work on task-123", "implement task-123", or invokes /start-task with a task ID.