1,817 skills found · Page 9 of 61
github / convert-excel-to-mdConverts Excel (.xlsx) workbooks into Markdown so their contents can be accurately analyzed, summarized, searched, or extracted from. Use this skill whenever the user shares, references, or asks about a .xlsx file — even if they don''t say "convert" or "markdown" explicitly.
github / convert-pdf-to-mdConverts PDF (.pdf) documents into Markdown so their contents can be accurately analyzed, summarized, searched, or extracted from. Use this skill whenever the user shares, references, or asks about a .pdf file — even if they don''t say "convert" or "markdown" explicitly.
github / docs-sync-auditRun a read-only documentation drift audit for a feature, PR, branch, release, API, configuration change, workflow, CLI, package, or repository area
github / azure-developer-cliDesign, create, review, migrate, or troubleshoot Azure Developer CLI (azd) projects using current Microsoft guidance. Use for azd, azure.yaml, AZD templates, Bicep or Terraform under infra, AZD environments and secrets, hooks, deployment workflows, and azd-managed CI/CD.
github / github-actions-hardeningSecurity hardening reviewer for GitHub Actions workflow files (.github/workflows/*.yml). Reasons about the Actions threat model that pattern matchers and general code linters miss — untrusted-input script injection, privileged triggers running fork code, mutable action references, and over-scoped to…
github / copilot-pr-autopilotCopilot left 14 review comments on your PR — half are nits. Hours of fix → reply → resolve → re-request, and each round lands MORE comments.
github / dotnet-mcp-builderBuild Model Context Protocol (MCP) servers in C#/.NET against the current ModelContextProtocol 2.x NuGet packages. Helps with cases the model gets wrong without guidance — stale versions (0.x preview or 1.x-era defaults), the v2 stateless-by-default HTTP flip, the 2026-07-28 spec deprecations (roots…
github / em-dashExpert on the history, origin, and correct use of the em dash
github / ai-prompt-engineering-safety-reviewComprehensive AI prompt engineering safety review and improvement prompt. Analyzes prompts for safety, bias, security vulnerabilities, and effectiveness while providing detailed improvement recommendations with extensive frameworks, testing methodologies, and educational content.
github / apple-appstore-reviewerServes as a reviewer of the codebase with instructions on looking for Apple App Store optimizations or rejection reasons.
github / gdpr-compliantApply GDPR-compliant engineering practices across your codebase. Use this skill whenever you are designing APIs, writing data models, building authentication flows, implementing logging, handling user data, writing retention/deletion jobs, designing cloud infrastructure, or reviewing pull requests f…
github / bench-readRead artifacts from the shared bench — the workspace where desks leave findings, verdicts, and work products for each other and the operator.
github / breakdown-feature-implementationPrompt for creating detailed feature implementation plans, following Epoch monorepo structure.
github / agent-architectureDesign AI agent architectures through requirements discovery, or audit and diagnose architectural flaws in existing agents. Architecture only; excludes implementation and general code review.
github / ai-team-orchestrationBootstrap and run a lightweight multi-agent development team
github / anti-ui-slopStop coding agents from shipping generic UI. Use UIZZE''s 800,000+ real web and iOS screens to build product-specific interfaces, define a design contract, cover required states, and run a hard finish gate
github / bigquery-pipeline-auditAudits Python + BigQuery pipelines for cost safety, idempotency, and production readiness. Returns a structured report with exact patch locations.
github / email-drafterDraft and review professional emails that match your personal writing style. Analyzes your sent emails for tone, greeting, structure, and sign-off patterns via WorkIQ, then generates context-aware drafts for any recipient.
github / gem-devops-guidelinesDesign or review infrastructure, deployment, CI/CD, Docker, Kubernetes, health checks, rollback, feature flags, production readiness, and mobile release workflows. Use for DevOps, platform, container, pipeline, or release tasks.
github / gen-specs-as-issuesThis workflow guides you through a systematic approach to identify missing features, prioritize them, and create detailed specifications for implementation.
github / audit-integrityEnforce output quality, evidence verification, and quality gates across security audits. Use this skill when you perform SAST, SCA, threat modeling, or security code reviews. Use this skill to verify code locations and taint traces for all findings.
github / cloud-design-patternsCloud design patterns for distributed systems architecture covering 42 industry-standard patterns across reliability, performance, messaging, security, and deployment categories
github / build-evidence-mapBuild an auditable evidence map for a contested technical choice, research synthesis, proposal review, or consequential decision
github / dotnet-design-pattern-reviewReview the C#/.NET code for design pattern implementation and suggest improvements.
mukul975 / auditing-kubernetes-rbac-privilege-escalationFinds over-permissive RBAC roles and service-account token abuse paths in a Kubernetes cluster using kubectl auth can-i, rbac-police, kubectl-who-can, and rakkess, tracing which subjects can escalate toward cluster-admin
mukul975 / auditing-foundry-smart-contract-securityPre-deployment security audit of Solidity smart contracts in a Foundry project. Combines static analysis (Slither, Aderyn), symbolic execution (Mythril), and property-based testing (forge fuzz + invariant tests with handlers) to catch reentrancy, access-control, oracle/price manipulation, and arithm…
mukul975 / auditing-mcp-servers-for-tool-poisoningAudit MCP servers for tool poisoning, tool shadowing, rug pulls, SSRF, and unauthenticated exposure using Invariant Labs' mcp-scan for static/runtime scanning plus manual SSRF/auth checks and description pinning.
mukul975 / building-patch-tuesday-response-processEstablish a repeatable operational process for triaging, testing, and
mukul975 / conducting-post-incident-lessons-learnedFacilitate structured post-incident reviews to identify root causes,
mukul975 / analyzing-malware-sandbox-evasion-techniquesDetect sandbox and VM evasion techniques in malware samples by analyzing