Security First
Skills with the best security audit scores
Showing 4,621–4,680 of 13,205 skills · Page 78 of 221
runkids / skillshare-windows-utm
2.7kVerify skillshare on a real Windows guest running in local UTM: build a pinned commit in the devcontainer, push it into the VM, and either run the Windows E2E runbook with full and basic-user tokens or hand the maintainer a one-line hands-on setup.
supabase / supabase
2.6kUse when doing ANY task involving Supabase. Triggers: Supabase products (Database, Auth, Edge Functions, Realtime, Storage, Vectors, Cron, Queues); client libraries and SSR integrations (supabase-js, @supabase/ssr) in Next.js, React, SvelteKit, Astro, Remix; auth issues (login, logout, sessions, JWT…
expo / expo-ui
2.6kBuild native UI with the @expo/ui package: real SwiftUI on iOS and Jetpack Compose on Android. Default to @expo/ui for sheets (BottomSheet), pickers, sliders, toggles, menus, and grouped-form sections — do NOT reach for Reanimated, @gorhom/bottom-sheet, or RN built-in Picker/Switch; use @expo/ui ins…
apify / apify-integration-development
2.4kDesign and build an official Apify integration for a company's product - workflow-automation apps (Zapier/n8n-style), AI agent plugins (coding-agent skills+MCP bundles or OpenClaw/Hermes-style harnesses), AI framework packages (LangChain/LlamaIndex-style), or direct application clients via apify-cli…
datopian / arcgis-to-portaljs
2.4kMigrate a whole ArcGIS Hub site into a PortalJS Arc portal end-to-end. Harvests the Hub /data.json (DCAT-US) inventory, exports every FeatureService layer through the ArcGIS REST query API with resultOffset paging, converts each to the serverless dual tier (PMTiles render + GeoParquet query) with ta…
datopian / portaljs-add-geo
2.4kAuto-ingest a geospatial file (GeoJSON, Shapefile, GeoPackage, KML/KMZ, FlatGeobuf, CSV-with-geometry) into a PortalJS portal on the user's own machine, with no server.
datopian / portaljs-architect
2.4kRecommend a data-portal architecture (storage, compute, catalog, access, hosting, metadata) from stated needs, then hand off to the build skills. The advisory entry point
datopian / portaljs-connect-ckan
2.4kWire a scaffolded PortalJS portal to a CKAN backend over its API. Generates a tiny server-side fetch client (no runtime dependency) and feeds the /search catalog and /@namespace/slug showcases from CKAN instead of datasets.json
datopian / portaljs-define-schema
2.4kDefine a dataset's metadata profile — infer a Frictionless Table Schema from its data, add Data Package metadata (license, sources, keywords), and write it into datasets.json so the showcase renders a typed field table. Extend or customize via the L0-L3 profile ladder
yaklang / ghost-bits-cast-attack
2.3kJava "Ghost Bits" / Cast Attack playbook (Black Hat Asia 2026)
yaklang / websocket-security
2.3kWebSocket handshake, CSWSH, tooling (wsrepl, ws-harness, Burp), and common flaws
dstackai / dstack-prototyping
2.3kUse with the dstack skill for model-serving work when the image, serving command, resources, backend/fleet choice, or service behavior is not proven.
wondelai / steve-jobs-design-review
2.2kReview designs, products, and features with Steve Jobs'' standards: ruthless simplicity, focus, and end-to-end excellence
wondelai / technical-documentation
2.2kAudit, write, and improve developer documentation using Google''s Developer Documentation Style Guide and Technical Writing courses.
zenstory-ai / short-drama-produce
2.2k在创作者明确确认后，执行短剧项目的图片、视频、TTS/配音或时间线音乐生产任务，并把结果与精简运行记录落回项目。用户说“生成这张图/这段视频/这句配音/这段配乐”“开始跑图/跑视频/合成语音/生成音乐”“把已确认提示词送去生产”，或要求批量执行已确认媒体任务时使用；不负责创作提示词、镜头、台词、歌词或声音身份，也绝不把预览、继续、预算说明或既有接受状态当作本次付费生产确认。
amElnagdy / claude-delegate
2.2kDelegate a coding task to a separate Claude Code CLI process or another Claude session as an implementer, then review its diff and land it yourself.
amElnagdy / delegate-setup
2.2kConfigure delegation fleet lanes: which implementer CLI handles which kind of work, with optional model and effort (or variant) dials. Discovers installed CLIs, proposes a lane map for user approval, and writes global or project config only after explicit yes
amElnagdy / qoder-delegate
2.2kDelegate a coding task to the Qoder CLI (`qodercli`) as a background implementer, then review its diff and land it yourself. Use this whenever the user asks to have Qoder implement, fix, refactor, or run a queue of coding tasks while the orchestrator remains the reviewer.
WordPress / wp-patterns
2.2kIf the user did not provide required inputs, infer only low-risk defaults. Ask before inventing a theme slug, text domain, asset path, custom post type, taxonomy, event date field, or theme-specific `preset`.
WordPress / wp-plugin-directory-guidelines
2.2kUse when reviewing WordPress plugins for GPL compliance, checking license headers or compatibility, evaluating upsell/freemium/trialware patterns, validating plugin naming or trademark rules, checking plugin slugs, running Plugin Check (PCP) to validate plugin changes, interpreting its findings, und…
majidmanzarpour / threejs-game-director
2.1kEntrypoint for building, upgrading, and finishing Three.js browser games. Routes work across the sibling threejs-* skills for gameplay, graphics, UI, 3D/image/audio asset generation, debugging, and release.
Leanmcp / code-explanation
2.1kGenerate a complete, beginner-friendly explanation of an entire code repository as a set of markdown files. Maps the repo structure with `treecap` (installing it if missing), studies the actual source, then writes a `CODE_EXPLANATION/` folder containing an `OVERVIEW.md` plus numbered deep-dive files…
Leanmcp / posthog-adblock-bypass
2.1kConfigure a Next.js app using posthog-js so session recording and dead-click capture survive browser ad blockers. Aliases the three blocker-flagged JS chunks (dead-clicks-autocapture.js, recorder.js, posthog-recorder.js) to bland same-origin paths via Next.js rewrites, and monkey-patches HTMLScriptE…
appeeky / ab-test-store-listing
2.1kWhen the user wants to A/B test App Store product page elements to improve conversion rate. Also use when the user mentions "A/B test", "product page optimization", "test my screenshots", "test my icon", "conversion rate optimization", "CPP", or "custom product pages".
appeeky / app-rejection-recovery
2.1kWhen the user's app or update was rejected by Apple App Review or Google Play Review and they need to diagnose why, fix it, and resubmit fast
appeeky / app-store-featured
2.1kWhen the user wants to get featured on the App Store or understand the editorial process. Also use when the user mentions "get featured", "App Store editorial", "App of the Day", "Today tab", "Apple featuring", or "how to get Apple to feature my app". For launch strategy, see app-launch.
appeeky / creator-ugc-marketing
2.1kWhen the user wants to plan, brief, source, or measure organic creator / influencer / UGC marketing for their app — including TikTok creators, Instagram Reels, YouTube Shorts, micro-influencers, paid creator briefs, UGC ad creative for Meta/TikTok, affiliate programs, and seeding strategy
appeeky / in-app-events
2.1kWhen the user wants to create, plan, or optimize App Store In-App Events — the event cards that appear on the Today tab, search results, and your product page
appeeky / referral-program
2.1kWhen the user wants to design, launch, or optimize an in-app referral / invite / share-to-earn program — including reward structure, mechanics, fraud prevention, deep link setup, and viral coefficient measurement
appeeky / web-to-app-funnel
2.1kWhen the user wants to design or optimize the funnel that takes web visitors into installing and onboarding the app — including smart app banners, web-to-app deep links, deferred deep links, web onboarding (Stripe-paid web flow before app install), QR codes, "open in app" CTAs, and the trade-off bet…
0xsline / create-motion-graphics
2.0kUse whenever the agent needs to add, create, hand-author, patch, or place Motion Graphic JSX assets in a OpenChatCut project. This is the direct-authoring path: use create_motion_graphic_from_code / edit_asset / edit_item, not motion-graphic-gen or submit_motion_graphic.
0xsline / export
2.0kUse when a OpenChatCut video editing or creation workflow needs export, render, download, share, final delivery, subtitle-file export, render choice, local-only asset handling, or export fallback explanation.
0xsline / shader-gen
2.0kAI shader generator for WebGL video effects, transitions, masks, and color grading (LUT / 调色 / 电影感 / film look)
0xsline / voice
2.0kText-to-Speech (TTS), voiceover, narration placement/sync, and custom sound effects (SFX) generator
aipoch / lab-prep-calculations
1.9kPerform pre-experiment calculations and generate step-by-step preparation protocols for dilutions, solution preparation, dissolution, and % concentrations when planning formulations and lab prep workflows.
aipoch / pptx-skill
1.9kCreate, edit, and extract content from PowerPoint (.pptx) files; use when you need to generate slides programmatically, update existing decks, or export slide previews.
aipoch / clinical-diagnostic-reasoning
1.9kIdentify and counteract cognitive biases in medical decision-making through systematic error analysis and contextual algorithm application. For diagnostic reasoning, treatment decisions, and
aipoch / ebm-calculator
1.9kEvidence-Based Medicine diagnostic test calculator. Computes sensitivity, specificity, PPV, NPV, likelihood ratios, NNT, and pre/post-test probability.
aipoch / expert-interview-generator
1.9kGenerates a full expert interview article including introduction, Q&A body, and summary based on interview questions and expert background
aipoch / literature-management
1.9kImport local literature into a managed library; trigger when you need offline deduplication, tagging, and a searchable index.
aipoch / market-research-report-generator
1.9kGenerates professional market research reports by analyzing business intent, decision levels, and conducting multi-source data retrieval (Web, PubMed, Clinical Trials).
aipoch / mindmap-helper
1.9kOrganize requirements into Markdown/JSON mind map structures; use when you need a hierarchical outline for mind map tools (e.g., XMind, ProcessOn, FreeMind) or for documentation planning.
aipoch / mindmap
1.9kGenerate mindmaps locally/offline with native HTML/CSS/JS (no external libraries); use when you need to parse Plain Text node structures or map LLM outputs into an on-device visualization.
aipoch / paper-tweet-generator
1.9kGenerates a structured reading tweet from an academic paper (PDF, Word, or Text), highlighting specific product advantages
aipoch / result-figure-consistencycheck
1.9kChecks consistency between paper result descriptions and figure legends (text-only) when the input is a PDF-to-Markdown full text containing page breaks (e.g., `## Page XX`) and legend text; outputs a Markdown consistency report and a UTF-8 CSV issue list.
aipoch / sci-paper-reviewer
1.9kSimulates a strict SCI peer-review workflow; trigger when a user uploads or pastes a manuscript (PDF/DOC/DOCX/TXT) and requests an innovation score (1–12) plus experimental-logic vulnerability checks and revision suggestions.
aipoch / slide-deck-images
1.9kGenerate professional slide-deck SVG images (not PPTX/PDF) when users ask to “create slides / slide deck / PPT” and need image outputs.
a5c-ai / retrospect-external-babysitter-run
1.8kFor a repository in the babysitter-users catalog, locate its babysitter processes and any committed runs (.a5c/runs/<runId>/) and perform a retrospective on a chosen run -- what went well, what failed, process suggestions, quality of effect design, breakpoint patterns -- mirroring the /babysitter:re…
Besty0728 / unity-material
1.8kEdit material and shader properties across Built-in/URP/HDRP
Besty0728 / skill-creator
1.8kGuide for authoring user-defined custom UnitySkills skills inside your own Unity project - a [UnitySkill] C# method plus the conventions that let agents and the server discover and gate it
Besty0728 / unity-cli
1.8kGuide for using the experimental Unity CLI with bound UnitySkills projects
alchaincyf / huashu-slides
1.6k从内容到成品PPTX的端到端演示文稿制作，含AI插画生成和18种设计风格。当用户提到"做PPT"、"做幻灯片"、"演示文稿"、"Keynote"、"slides"时使用。
pedrohcgs / slide-excellence
1.6kMulti-agent comprehensive slide review (visual + pedagogy + proofreading, plus TikZ / parity / substance conditionally)
silverstein / minutes-prep
1.5kInteractive meeting preparation — builds a relationship brief and talking points before a call
boyang-hu / website-rebuild
1.3k1:1 rebuild of award-winning creative websites (WebGL / scroll-animation / portfolio sites). Evidence-driven pipeline - mirror-first forensics, line-number-traceable reverse engineering of minified bundles, verbatim porting, quantitative verification gates
vibe-motion / pixel2motion
1.3kTurn a raster logo (PNG/JPG/WebP/screenshot) into a clean minimal SVG with edge smoothness as the primary hard gate and IoU optimized as high as reasonably possible without a fixed global threshold, then into a choreographed logo animation delivered as standalone JS-rendered HTML, applying Disney's…
conorluddy / ios-simulator-skill
1.3k29 production-ready scripts for iOS app testing, building, and automation. Provides semantic UI navigation, build automation, accessibility testing, and simulator lifecycle management. Optimized for AI agents with minimal token output.
AIPexStudio / wcag22-a11y-audit
1.3kWCAG 2.2 Accessibility Audit skill that systematically evaluates web pages against 8 core Success Criteria (1.1.1, 1.4.3, 1.4.11, 2.1.1, 2.1.2, 2.4.3, 2.4.7, 4.1.2) using accessibility tree inspection and visual analysis.
gooseworks-ai / ad-management-intake
1.2kThe intake stage of a Meta ad harness. Researches the brand first, states what it assumes, and asks only what it cannot infer and what would change money, claims or legal exposure if guessed wrong — at most four questions a turn, in plain business language.
gooseworks-ai / meta-ad-policy-checker
1.2kPre-flight policy check for Meta ads. Takes ad copy plus advertiser context, resolves and fetches the relevant Meta transparency-center policy pages at runtime, and returns a Pass / Fix Required / Block verdict with cited findings and rewrites.