AI Skills

web-cache-deception

Web cache deception and poisoning playbook

websocket-security

WebSocket handshake, CSWSH, tooling (wsrepl, ws-harness, Burp), and common flaws

windows-av-evasion

AV/EDR evasion playbook for Windows

windows-lateral-movement

Windows lateral movement playbook

windows-privilege-escalation

Windows local privilege escalation playbook

workflow

Creates durable, resumable workflows using Vercel's Workflow SDK

workflow-init

Install and configure Vercel Workflow SDK before it exists in node_modules

xslt-injection

XSLT injection testing: processor fingerprinting, XXE and document() SSRF

xss-cross-site-scripting

XSS playbook. Use when user-controlled content reaches HTML, attributes

xxe-xml-external-entity

XXE playbook. Use when XML, SVG, OOXML, SOAP

asc-app-create-ui

Create a new App Store Connect app record via browser automation

asc-subscription-localization

Bulk-localize subscription, subscription-group

asc-workflow

Define, validate, run, resume, and audit repo-local multi-step automations

blackforge

Answer crypto market-data questions with BlackForge

office-mcp

MCP server with 39 tools for Word, Excel, PowerPoint, PDF, OCR operations

optimize-for-ai

Optimize content for AI search engines

platform-apex-logs-debug

Salesforce debug log analysis and troubleshooting with 100-point scoring

query-address-info

Snapshot of a single wallet's token holdings on a specific chain

stock-analysis

Analyze stocks with fundamental and technical analysis

EdgarTools

Read and analyze SEC EDGAR filings in Python

apple-design

Cross-platform UI/UX design reviewer grounded in Apple's Human Interface

asc-notarization

Archive, export, and notarize macOS apps using xcodebuild and asc

build-links

Design a link building campaign

clickhouse-managed-postgres-rca

MUST USE when investigating performance issues on a ClickHouse-managed Postgres

mongodb-query-optimizer

Help with MongoDB query optimization and indexing

okx-security

Security scanning: check transaction safety, is this transaction safe

platform-metadata-deploy

Salesforce DevOps automation using sf CLI v2

platform-soql-query

SOQL/SOSL authoring or optimization: natural-language-to-query generation

research

Comprehensive research grounded in web data with explicit citations

tiktok-marketing

TikTok content strategy, video creation workflows, posting optimization

jCodemunch MCP

Cut AI token costs 95%+ on code exploration

apollographql/apollo-server

Build GraphQL servers using Apollo Server 5

angular-http

DEPRECATED - this skill is unmaintained

architect

Run /architect when choosing between approaches, designing a feature or page

audit

Run a comprehensive SEO audit on a website covering technical health

brief

Produce an editor-ready content brief for a target keyword or topic

decision-records

Draft, promote, archive, and supersede ADR-style decision records

finance-expert

Designs, reviews, operates and audits systems

instagram-api

An Instagram API alternative on fetcher.sh

jobs-to-be-done

Discover what customers truly need

landing-page-copywriter

Writes conversion-focused landing page copy

loki

Grafana Loki log aggregation and LogQL query language

mongodb-schema-design

MongoDB schema design patterns and anti-patterns

okx-audit-log

Export audit logs, find audit log location, view command history, 导出日志, 查看日志

platform-docs-get

Official Salesforce documentation retrieval skill

platform-metadata-retrieve

ALWAYS USE THIS SKILL to retrieve metadata from an org

tiktok-api

A TikTok API alternative on fetcher.sh

unity-package-management

Adds, removes, upgrades, and discovers Unity

medplum

Medplum is a healthcare platform

37signals-way

Build lean, opinionated products