1,118 skills found ¡ Page 1 of 38
openclaw / ACTIVITY_ICON_SOURCESEach plugin owns `assets/activity.svg` for compact chat activity. Optional `assets/activity/<tool-name>.svg` files describe individual actions. Package branding remains in `assets/icon.png`. Activity assets use a transparent background and monochrome geometry.
openclaw / apple-notesCreate, view, edit, delete, search, move, or export Apple Notes via the memo CLI on macOS.
affaan-m / ECCThe agent harness performance optimization system. Skills, instincts, memory, security, and research-first development for Claude Code, Codex, Opencode, Cursor and beyond.
mattpocock / writing-beatsWriting, exploit; assemble raw material into a journey of beats, grounding each term before a beat leans on it.
mattpocock / writing-shapeWriting, exploit: shape raw material into an article, paragraph by paragraph.
mattpocock / writing-fragmentsWriting, explore: mine raw fragments, no structure yet.
DietrichGebert / ponytail-gainShow ponytail's measured savings (code, cost, speed) from the benchmark. One-shot display. Use for /ponytail-gain, "what does ponytail save", "ponytail impact".
anthropics / Writing Hookify RulesThis skill should be used when the user asks to "create a hookify rule", "write a hook rule", "configure hookify", "add a hookify rule", or needs guidance on hookify rule syntax and patterns.
anthropics / Agent DevelopmentThis skill should be used when the user asks to "create an agent", "add an agent", "write a subagent", "agent frontmatter", "when to use description", "agent examples", "agent tools", "agent colors", "autonomous agent", or needs guidance on agent structure, system prompts, triggering conditions, orâĻ
anthropics / Command DevelopmentThis skill should be used when the user asks to "create a slash command", "add a command", "write a custom command", "define command arguments", "use command frontmatter", "organize commands", "create command with file references", "interactive command", "use AskUserQuestion in command", or needs guâĻ
anthropics / Hook DevelopmentThis skill should be used when the user asks to "create a hook", "add a PreToolUse/PostToolUse/Stop hook", "validate tool use", "implement prompt-based hooks", "use ${CLAUDE_PLUGIN_ROOT}", "set up event-driven automation", "block dangerous commands", or mentions hook events (PreToolUse, PostToolUse,âĻ
anthropics / MCP IntegrationThis skill should be used when the user asks to "add MCP server", "integrate MCP", "configure MCP in plugin", "use .mcp.json", "set up Model Context Protocol", "connect external service", mentions "${CLAUDE_PLUGIN_ROOT} with MCP", or discusses MCP server types (SSE, stdio, HTTP, WebSocket).
anthropics / Plugin SettingsThis skill should be used when the user asks about "plugin settings", "store plugin configuration", "user-configurable plugin", ".local.md files", "plugin state files", "read YAML frontmatter", "per-project plugin settings", or wants to make plugin behavior configurable.
google-gemini / code-reviewerUse this skill to review code. It supports both local changes (staged or working tree) and remote Pull Requests (by ID or URL). It focuses on correctness, maintainability, and adherence to project standards.
addyosmani / code-review-and-qualityConducts multi-axis code review. Use before merging any change
addyosmani / doubt-driven-developmentSubjects every non-trivial decision to a fresh-context adversarial review before it stands
addyosmani / deprecation-and-migrationManages deprecation and migration
addyosmani / security-and-hardeningHardens code against vulnerabilities
nexu-io / brandkitPremium brand-kit image generation skill for creating high-end brand-guidelines boards, logo systems, identity decks, and visual-world presentations. Trained for minimalist, cinematic, editorial, dark-tech, luxury, cultural, security, gaming, developer-tool, and consumer-app brand systems.
nexu-io / html-ppt-zhangzara-retro-windowsAn IT security-awareness training on spotting phishing â the tells, the drill, and what to do in the first 60 seconds. Built as a decision-grade professional training deck for all employees.
nexu-io / html-ppt-taste-brutalist16:9 HTML deck in tactical-telemetry / CRT-terminal taste. Deactivated-CRT charcoal slides, white-phosphor monospace, hazard-red accent, scanline overlay, ASCII syntax, density over decoration. Distilled from Leonxlnx/taste-skill `brutalist-skill` (Tactical Telemetry mode).
nexu-io / html-ppt-obsidian-claude-gradientOpenDesign's enterprise AI-adoption brief: local-first agents at work, the risk controls, the ROI, and the rollout plan. Built as a decision-grade AI literacy deck for leadership, IT, security.
tt-a1i / archifyCreate polished, validated architecture, workflow, sequence, data-flow, and lifecycle/state diagrams as explorable standalone HTML with inline SVG, dark/light themes, optional trace motion, and PNG/JPEG/WebP/SVG/WebM export.
code-yeongyu / review-workPost-implementation gate review: run manual QA on the real surface yourself, then launch ONE gate reviewer (never a panel) to audit goal, constraints, code quality, security, missed context, and QA evidence. Use before a PR handoff or when the user explicitly asks to review completed work.
code-yeongyu / security-researchTeam Mode security research skill. Orchestrates 3 vulnerability hunters and 2 PoC engineers to audit a codebase in parallel, prove exploitability, classify root causes, and calibrate severity by actual exploitability.
sickn33 / active-directory-attacksProvide comprehensive techniques for attacking Microsoft Active Directory environments. Covers reconnaissance, credential harvesting, Kerberos attacks, lateral movement, privilege escalation, and domain dominance for red team operations and penetration testing.
sickn33 / agy-autoConfigure agy-auto PreToolUse security gate to run Antigravity CLI (agy) unattended with layered policy controls instead of --dangerously-skip-permissions.
sickn33 / api-endpoint-builderBuilds production-ready REST API endpoints with validation, error handling, authentication, and documentation. Follows best practices for security and scalability.
sickn33 / api-fuzzing-bug-bountyProvide comprehensive techniques for testing REST, SOAP, and GraphQL APIs during bug bounty hunting and penetration testing engagements. Covers vulnerability discovery, authentication bypass, IDOR exploitation, and API-specific attack vectors.
sickn33 / access-reviewConduct periodic access reviews and certifications. Implement access
