912 skills found · Page 1 of 31
morluto / reaReverse engineer anything with agents, from app behavior down to native binaries.
affaan-m / ECCThe agent harness performance optimization system. Skills, instincts, memory, security, and research-first development for Claude Code, Codex, Opencode, Cursor and beyond.
DietrichGebert / ponytail-gainShow ponytail's measured savings (code, cost, speed) from the benchmark. One-shot display. Use for /ponytail-gain, "what does ponytail save", "ponytail impact".
addyosmani / code-review-and-qualityConducts multi-axis code review. Use before merging any change
addyosmani / doubt-driven-developmentSubjects every non-trivial decision to a fresh-context adversarial review before it stands
addyosmani / deprecation-and-migrationManages deprecation and migration
addyosmani / security-and-hardeningHardens code against vulnerabilities
google-gemini / code-reviewerUse this skill to review code. It supports both local changes (staged or working tree) and remote Pull Requests (by ID or URL). It focuses on correctness, maintainability, and adherence to project standards.
nexu-io / brandkitPremium brand-kit image generation skill for creating high-end brand-guidelines boards, logo systems, identity decks, and visual-world presentations. Trained for minimalist, cinematic, editorial, dark-tech, luxury, cultural, security, gaming, developer-tool, and consumer-app brand systems.
nexu-io / html-ppt-zhangzara-retro-windowsAn IT security-awareness training on spotting phishing — the tells, the drill, and what to do in the first 60 seconds. Built as a decision-grade professional training deck for all employees.
nexu-io / html-ppt-taste-brutalist16:9 HTML deck in tactical-telemetry / CRT-terminal taste. Deactivated-CRT charcoal slides, white-phosphor monospace, hazard-red accent, scanline overlay, ASCII syntax, density over decoration. Distilled from Leonxlnx/taste-skill `brutalist-skill` (Tactical Telemetry mode).
nexu-io / html-ppt-obsidian-claude-gradientOpenDesign's enterprise AI-adoption brief: local-first agents at work, the risk controls, the ROI, and the rollout plan. Built as a decision-grade AI literacy deck for leadership, IT, security.
code-yeongyu / review-workPost-implementation gate review: run manual QA on the real surface yourself, then launch ONE gate reviewer (never a panel) to audit goal, constraints, code quality, security, missed context, and QA evidence. Use before a PR handoff or when the user explicitly asks to review completed work.
code-yeongyu / security-researchTeam Mode security research skill. Orchestrates 3 vulnerability hunters and 2 PoC engineers to audit a codebase in parallel, prove exploitability, classify root causes, and calibrate severity by actual exploitability.
cathrynlavery / diagram-designCreate branded architecture, architecture delta, IT current-state, flowchart, sequence, state machine, ER/data model, timeline, swimlane, quadrant, radar/spider, polar chart (polar/radial lollipop), loop/flywheel, nested, tree, org chart, layer stack, exploded axonometric, axonometric plan, Venn, py…
sickn33 / active-directory-attacksAssess Active Directory attack paths using scoped configuration review and controlled synthetic lab validation; identify prerequisites, evidence and mitigations.
sickn33 / agy-autoConfigure agy-auto PreToolUse security gate to run Antigravity CLI (agy) unattended with layered policy controls instead of --dangerously-skip-permissions.
sickn33 / api-endpoint-builderBuilds reviewable REST API endpoint scaffolds with validation, error handling, authentication, and documentation. Follows best practices for security and scalability.
sickn33 / api-fuzzing-bug-bountyProvide comprehensive techniques for testing REST, SOAP, and GraphQL APIs during bug bounty hunting and penetration testing engagements. Covers vulnerability discovery, authentication bypass, IDOR exploitation, and API-specific attack vectors.
sickn33 / access-reviewConduct periodic access reviews and certifications. Implement access
sickn33 / agent-evalsBuild automated evaluation suites for AI agents using golden datasets,
sickn33 / ai-agent-securitySecure AI agents against prompt injection, tool abuse, and data exfiltration
sickn33 / ai-coding-agent-guardrailsSecure AI coding agents (Claude Code, Cursor, Codex, Copilot) with permission
sickn33 / ai-engineering-toolkitOverview of six AI engineering workflows: prompt evaluation (8-dimension scoring), context budget planning, RAG pipeline design, agent security audit (65-point checklist), eval harness building, and product sense coaching.
sickn33 / ai-red-teamingRun structured AI red team exercises for jailbreak resistance, data exfiltration
sickn33 / ai-sre-incident-responseBuild AI-focused SRE incident response practices for LLM outages, degraded
sickn33 / api-security-best-practicesImplement secure API design patterns including authentication, authorization, input validation, rate limiting, and protection against common API vulnerabilities
sickn33 / aegisops-aiAutonomous DevSecOps & FinOps Guardrails. Guide to reviewing Linux kernel patches, Terraform cost changes and Kubernetes policy with a separately reviewed upstream tool and configured model.
sickn33 / agent-observabilityInstrument AI agents with tracing, token metrics, latency, and cost visibility.
sickn33 / ai-code-generation-guardrailsUse when reviewing AI-generated code before merge or execution: plan AST/security checks, isolated behavior tests and evidence, with language-specific coverage limits.
