Security First

📄 SKILL.mdclaude codecodex

Snapshots, restores and reconciles Claude Code / Codex sessions inside Ghostty tabs across reboots

daymade / marketplace-health-check

Runs an evidence-based health audit of this skills marketplace repo — code safety, docs/SSOT, security/PII, PR/issue triage, manifest integrity — via a parallel workflow, then verifies findings by priority.

📄 SKILL.mdclaude code

skillsecurity

daymade / prompt-optimizer

Transforms vague prompts or feature requests into precise, testable specifications using EARS (Easy Approach to Requirements Syntax) grounded in relevant domain theories (GTD, BJ Fogg, Gestalt)

daymade / promptfoo-evaluation

Configures and runs LLM evaluation using Promptfoo framework

skilltestingpython

daymade / stepfun-tts

Generates Chinese/Japanese speech with StepFun's Contextual TTS — default stepaudio-2.5-tts, stepaudio-3-tts for whisper/inline-() prosody. Replaces step-tts-2's voice_label with natural-language instruction.

skillvoice

daymade / claude-md-progressive-disclosurer

📄 SKILL.mdclaude codecodex

Optimizes or restructures CLAUDE.md/AGENTS.md with progressive disclosure and zero information loss

daymade / devils-advocate

结构化压力测试一个论点（devil's advocate / 魔鬼代言人）：把论点拆成显性断言与隐性假设（A1/A2 编号），逐条在用户给定的证据材料里检索带出处的反方论证，标 High/Medium/Low 风险等级，补基础比率外部视角，最后给出「可监测的证伪信号」清单；输出结构化 findings + 人读叙事双层结果。找不到反证时如实声明「未找到」，绝不编造。复刻自 LinqAlpha（对冲基金 AI 产品）公开的 Devil's Advocate 架构，叠加 CIA 结构化分析技术与 RAND 假设规划。当用户要「压力测试 / 唱反调 / 找盲点 / 拆假设 / 挑战这个论点 /…

daymade / skill-governance

📄 SKILL.mdclaude codecodex

Governs the Claude Code/Codex Skill surface: reconciles source/install/catalog-visibility drift without losing cold capability

coldteadotai / pr-lens

PR Lens draws code as visually rich animated diagrams. It can represent diffs, architecture, data flows, and more.

skillaws

CloudAI-X / error-handling

Implements error handling patterns, structured logging, retry strategies, circuit breakers, and graceful degradation

skilldesign

CloudAI-X / security-patterns

Implements authentication, authorization, encryption, secrets management, and security hardening patterns

skillapidesign+1

jtydhr88 / ozu-screenplay-style

Writing screenplays in the style of Ozu Yasujiro and Noda Kogo (小津安二郎・野田高梧) — distilled from six complete screenplays (晚春 Late Spring, 麦秋 Early Summer, 东京物语 Tokyo Story, 浮草 Floating Weeds, 秋日和 Late Autumn, 秋刀鱼之味 An Autumn Afternoon).

skillreact

jtydhr88 / sw-story-structure

Story structure for screenplays and stage plays (故事结构) — merged from Syd Field's paradigm and plot points, Blake Snyder's Save the Cat beat sheet and board, Robert McKee's Story (event/scene/sequence/act, inciting incident, progressive complications, crisis-climax-resolution, subplots, story triangl…

OpenRaiser / ideation

⚡ Claude Commandsclaude code

You are the Ideation Agent for NanoResearch. Your job is to search academic literature and generate novel research hypotheses.

claude

OpenRaiser / writing

⚡ Claude Commandsclaude code

You are the Writing Agent for NanoResearch. Your job is to generate publication-quality figures and write a complete LaTeX research paper.

claude

jsmastery-pro / develop

Run /develop to build a feature, UI or backend, from an approved design, a page, component, API, service, or data slice. If something load bearing is undecided and no spec records it, it stops and routes you to /architect; otherwise it reads the spec plus AGENTS.md, builds, and advances the scope.

📄 SKILL.mdcodex

skillapidesign

jsmastery-pro / document

Run /document `pr` | `changelog` | `release-note` | `postmortem` (or let it ask) to write the human facing prose about a change. Drafts from the real commits and diff, writing to the right place. Does not write code, tests, or specs.

jsmastery-pro / sync

Run /sync as the last step after a change is complete, around merge, to keep durable knowledge current. Updates root and nested AGENTS.md, reconciles the scope from repo evidence, and flags specs the change made stale. Surgical edits only: it adds lines, and rewrites single lines it owns.

📄 SKILL.mdcodex

uphiago / deep-invade

Deep pentest WP: SSRF, plugin CVE, JS mine, port scan chain.

skillpython

uphiago / firebase-supabase-attack

Exploit Firebase/Supabase for data via JS config leak probe.

skillapipython+2

uphiago / xmlrpc-exploitation

Exploit XMLRPC multicall, pingback for brute force and SSRF.

skillpython

uphiago / cors-chain-automation

Use when a bounded list of authorized API endpoints needs consistent CORS triage before browser validation.

skillapiautomation+1

AI-Builder-Club / crabbox-setup

Scaffold an isolated CLOUD dev box per agent (via crabbox + Daytona) for any codebase — the parallel-safe counterpart to dev-local-setup. Each agent gets its own full stack (own DB + dev server) and an in-box browser for e2e, so concurrent loops never collide on ports/state.

skilltestingimage

GanyuanRan / requesting-code-review

Use when requesting independent code review, after implementation slices, before merging high-risk work, or when verification exposes evidence, baseline, architecture, compatibility, or retirement uncertainty.

skillreview

GanyuanRan / using-git-worktrees

Use when a coding task needs a concurrent checkout, unrelated dirty state blocks safe branch switching, or the user or repository explicitly requires a worktree.

skillgit

GanyuanRan / verification-before-completion

Use when about to claim work is complete, fixed, passing, verified, release-ready, or ready to commit, merge, publish, or hand off.

GanyuanRan / writing-plans

Use when you have an approved spec or written requirements for a multi-step task that needs a durable plan document before touching code. Small, single-owner, or fast-path tasks do not need this skill.

vibe-motion / colorize

Turn photos, videos, and Live Photos into a black-and-white to color reveal clip (单彩渐变 + 动感模糊 + 丁达尔旋焦). The frame starts monochrome and spun, color sweeps in from the left under a horizontal motion blur, and the spin settles from the center outward into a softly glowing full-color frame

skillimage

AIPexStudio / ux-audit-walkthrough

Minimalist UX/Interaction Audit Expert that deconstructs complex interactions through cognitive load and operational efficiency lenses.

skilldesign

langchain-ai / eval-engineering

Inspect an agent repository and optional traces, interview the user, write reviewed Task Specs, build and audit Harbor tasks, and bootstrap reusable project World Knowledge Skills.

skilldesignreview

langchain-ai / langchain-fundamentals

Create LangChain agents with create_agent, define tools, and use middleware for human-in-the-loop and error handling.

AvdLee / xcode-build-orchestrator

Orchestrate Xcode build optimization by benchmarking first, running the specialist analysis skills, prioritizing findings, requesting explicit approval, delegating approved fixes to xcode-build-fixer, and re-benchmarking after changes

gooseworks-ai / run-memory

Shared step of the marketing playbooks (analyze-performance, run-paid-campaigns, research-competitors, email-lifecycle): reads the last run's record, checks whether its recommendations were done and whether they worked, and saves a short record of this run for the next one.

skillautomation

gooseworks-ai / ad-lead-quality-analyzer

For paid lead-gen and participant-recruitment ads, replaces vanity CPA with true CAC per qualified lead by joining ad-platform data with downstream funnel events, surfaces tracking gaps, and classifies every creative into Scale / Keep / Investigate / Cut.

gooseworks-ai / brand-research

Research a company or brand from its website and produce a reusable Brand Core covering products, audience, competitors, positioning, offers, messaging evidence, voice, and visual identity. Use before growth, ad, content, creator, or product work when reliable brand context is missing.

skillvoiceredis

gooseworks-ai / meta-ads-analyzer

Diagnose Meta Ads campaign performance and account gaps using Meta's actual system mechanics — including customer-journey coverage, Breakdown Effect, Learning Phase, Auction Overlap, Pacing, and Creative Fatigue.

gooseworks-ai / render-hand-swipe-flavor-listicle

Render a 'hand-swipe flavor listicle' video from a config — the brand's REAL product cutouts each float on a flat flavor-matched color field under a persistent title and slide RIGHT-TO-LEFT one to the next like a phone-feed scroll, while a green-screen hand clip (back of hand toward camera, index fi…

gooseworks-ai / render-imessage-chat

Render a configurable iMessage conversation inside a properly framed phone, then a brand end card. Uses the original send/receive sounds and a shared frame timeline for text, typing, scrolling and sound.

skillimage

gooseworks-ai / render-ios-keyboard

Render a static iOS QWERTY keyboard as inline HTML+CSS sized for the 750-wide 9:16 stage. Includes the 3-suggestion bar, alpha keys, shift/backspace, 123/emoji/space/return row, and the bottom globe+mic strip.

skillaws

gooseworks-ai / review-finished-ad

Final QC gate for a rendered 9:16 video ad, run before it is published. One script checks what a machine can decide — exact 1080x1920 size, a hook that moves and speaks in the first second, no frozen stretches, no dead air, no black frames, the brand's real logo on the end card (never a favicon, nev…

skillreviewimage

huytieu / auto-research

Deep strategic research engine — decomposes questions into parallel research threads, spawns multiple agents, and synthesizes into actionable strategic analysis

huytieu / comprehensive-analysis

Deep-dive 7-day analysis across all data sources for weekly reviews, board prep, and strategic planning

skillgitreview+2

huytieu / daily-brief

Generate personalized news intelligence with verified sources (7-day freshness requirement)

huytieu / onboarding

Personalize COG for your workflow - creates profile, interests, and watchlist files with guided setup (run this first!)

huytieu / slop-gate

Deterministic pre-publish scan that refuses AI-slop tells in anything about to be written, published, or sent: files, artifacts, slide titles, table headers, diagram labels, chat messages, commit messages.

📄 SKILL.mdclaude code

huytieu / url-dump

Quick capture URLs with automatic content extraction, insights, and categorization into knowledge booklets

BankrBot / 0xwork

Base chain wallet address — required for read-only mode, auto-set by init or Bankr

skilldevelopmentgit+1

BankrBot / botcoin-miner

Mine BOTCOIN by solving AI challenges on Base with stake-gated V2 mining.

skillapi

BankrBot / ai2human-task-router

Create and track AI2Human human-execution tasks from an agent prompt

BankrBot / twitter-agent

Build and run a Twitter/X agent with a distinct personality and automated workflows

skillapiautomation+1

BankrBot / bankr

Bankr is an AI crypto agent with its own wallets, a direct Wallet API and a pay-as-you-go LLM gateway, driven by the `bankr` CLI or the REST API.

skillapirest

BankrBot / berry-juicer

Single-sided token-supply yield on Base, paid as AI inference

skillsecurity

BankrBot / grantr

Use Grantr MCP for account-safe Grantr backend workflows: Grantr vaults, Morpho savings, Bankr wallet interop, Fileverse documents, portfolio and balance reads, and agent-safe DeFi action preparation.

skillmcp

BankrBot / hermesone

Install, update, and manage the Hermes One desktop app via the `hermesone` npm package

skillgitreview+1

BankrBot / nexus

Non-custodial perpetual DEX on Arbitrum with an autonomous trading agent

BankrBot / nookplot

Decentralized coordination network for AI agents on Base (Ethereum L2)

BankrBot / onair-shoutout

Submit a sponsor message to be read live on air on the GM Farcaster show, via the paid On-Air Shoutout API. Use this when the user wants to buy/book/submit a sponsor read, shoutout, or live ad on GM Farcaster.

📄 SKILL.mdcline

skillapireview

BankrBot / starchild-dao

Read, propose, and vote in the Starchild DAO — the hold-to-govern commons for the $STARCHILD token on Base. Voting weight is simply how much $STARCHILD a wallet holds (no staking, no locking). Proposals and votes are gasless EIP-712 signatures.

BankrBot / zyfai

Earn yield on any Ethereum wallet on Base, Arbitrum, and Plasma

BankrBot / opensea-api

API key for all OpenSea services (REST API, CLI, SDK, and MCP server)

skillgitapi+3