Trending Agent Skills

Determine what tests a change needs and review whether a diff's tests are sufficient, ensuring behavior changes are accompanied by tests.

Find security vulnerabilities in a codebase or repository with Strix, a white-box AI security review that validates findings with working proof-of-concept exploits in a live sandbox.

Pentest a web app or website end to end with Strix, finding and exploiting real vulnerabilities and proving each with a working proof-of-concept.

Doubao Seedream AI image generation Skill, exclusive for Volcengine Ark Agent Plan, supporting coherent image sets, streaming output, prompt optimization, and web search.

Bring your installed paperthin skills up to the full current catalog in one step: retire renames, add missing, refresh the rest, all shown and confirmed before changes.

Manage your AI team through the Agentix platform—create roles, assign tasks, spawn workers, and monitor progress.

Framework (OSS) guidelines for upgrading Expo SDK versions and fixing dependency issues.

Fix security vulnerabilities found by a Strix pentest, triage by severity, patch root causes, and re-run Strix to verify each fix closes the exploit.

Run a managed pentest of a web app or API through the app.strix.ai REST API — no local Docker, LLM key, or install needed.

Suite of tools for creating elaborate, multi-component claude.ai HTML artifacts using modern frontend web technologies (React, Tailwind CSS, shadcn/ui).

Run application security testing across a whole product with Strix, choosing the right test per asset and producing a remediation plan ranked by proven exploitability.

Create and edit Obsidian Flavored Markdown with wikilinks, embeds, callouts, properties, and other Obsidian-specific syntax.

Test an application against the OWASP Top 10:2025 and API Security Top 10 with Strix autonomous AI agents that attempt real exploits and report only provable findings.

Security-test a REST, GraphQL, or gRPC API with Strix, which enumerates endpoints and exploits OWASP API Security Top 10 vulnerabilities.

A specialized skill for creating buckets on Huawei Cloud OBS, supporting bucket property settings, access permission configuration, and batch creation.

Switch OpenViking's embedding model to a local llama-server or any OpenAI-compatible embedding endpoint, with automatic config update, vectordb index rebuild, and sandbox-safe restart.

Manage the full lifecycle of Huawei Cloud CCI (Cloud Container Instance) using hcloud CLI, covering namespaces, networks, workloads, pods, EIPPool, logs, and metrics.

Create and configure scheduled TIMER triggers for Huawei Cloud FunctionGraph functions using Quartz Cron expressions.

Configure Huawei Cloud OBS static website hosting with Python SDK and a custom domain, including index/error pages and DNS resolution.

Build native UI with @expo/ui: real SwiftUI on iOS and Jetpack Compose on Android, with universal components and drop-in replacements.

Navigation and routing for Expo Router, covering file-based routes, groups, dynamic routes, tabs, modals, sheets, headers, and search bars.

Expo data fetching skill: covers fetch API, React Query, SWR, error handling, caching, offline support, and Expo Router data loaders.

Technical writing skill for composing, restructuring, or revising any technical document, encoding house style, truth and sourcing rules, and banned constructions.

Google Calendar connector skill for listing and creating events on a user's own Google Calendar in Caffeine AI builds.

Use when reviewing, rewriting, or editing someone else's technical text, when writing a review report on a document, or as the final check before delivering any document.

Provides general file/object storage for Caffeine AI, supporting large files, browser-cached HTTP URL access, and on-chain references.

The HTTP Outcalls skill provides bounded HTTP request support for Caffeine AI backend canisters, covering GET, HEAD, POST, PUT, DELETE, and PATCH methods, with mandatory local curl verification and API compliance checks.

Authorization system with role-based access control for apps managing personal or access-restricted data.

Quick reference for the Caffeine Data Intelligence agent to query an OQL-exposing canister via the icp CLI, covering schema discovery, JSON query construction, Candid result parsing, and edge traversal.

Adds web-camera support to Caffeine AI with a prefabricated React hook for photo capture, camera switching, and error handling.

Adds invite-link generation and RSVP collection to Caffeine AI, allowing guests to submit responses without login while admins can view responses with login.

Payment support based on Stripe, supporting credit cards and debit cards.

Make a canister's data queryable by the Caffeine Data Intelligence agent by adding a discoverable schema() and JSON execute() query endpoint via the caffeineai-oql mops package's Expose mixin.

Send personalized marketing emails to subscribers with an unsubscribe link.

Harvest every `ponytail:` comment in the codebase into a debt ledger, so deliberate shortcuts and deferrals get tracked instead of rotting into permanent debt.

Caffeine AI skill for posting to X (Twitter), mandating the x-client mops package with OAuth 2.0 PKCE flow.

Use a five-fold filter to find benchmarks worth imitating, filtering out noise caused by subject differences.

Support for sending service/transactional emails from the backend canister, not for marketing or verification emails.

Approval-based user management extension that lets users request access and admins approve or reject, controlling access to protected features.

Mandatory recipe for every Caffeine build that calls OpenAI (ChatGPT, GPT-4o, an LLM, a chatbot, embeddings), supporting only the openai-client mops package with a canister-side API-key bearer.

Experimental skill for posting messages to a Slack workspace from a Caffeine canister using the slack-client package.

QR code scanner using the camera.

Adds email address verification by sending a clickable link to prove ownership of the email address.

Provides Gmail integration for Caffeine AI builds, enabling sending email through the user's own Gmail account via googlemail-client and google-oauth packages.

Core infrastructure extension providing backend connection configuration, storage client, and React app entry point.

Send an email with multiple to, cc, and bcc addresses.

Calendar events extension for organizing events/meetings and sending email invitations.

dbs is the main entry point of the dontbesilent business toolkit, handling onboarding, pre-task routing, and post-task navigation to guide users to the appropriate Skill.