Top Agent Skills

Analyzes malicious PDF files using PDFiD, pdf-parser, and peepdf to identify embedded JavaScript, shellcode, exploits, and suspicious objects without opening the document. Determines the attack vector and extracts embedded payloads for further analysis.

Analyze Rust-compiled malware binaries using IDA Pro and Ghidra, with techniques for extracting crate dependencies, non-null-terminated strings, and Rust-specific control flow patterns.

Detect unauthorized modifications to running containers by monitoring for binary execution drift, file system changes, and configuration deviations from the original container image.

Exploit JWT algorithm confusion vulnerabilities by manipulating the alg header to switch from RS256 to HS256, set alg to none, or inject kid/jku/x5u headers to bypass signature verification.

Perform systematic alert triage in Elastic Security SIEM to rapidly classify, prioritize, and investigate security alerts for SOC operations.

Extract and analyze Chromium-based browser artifacts using Hindsight to reconstruct user web activity for forensic investigations.

Write custom Semgrep SAST rules in YAML to detect application-specific vulnerabilities, enforce coding standards, and integrate into CI/CD pipelines.

Create and apply Kubernetes NetworkPolicies to enforce pod-level network segmentation, restrict traffic between pods and namespaces, and block access to cloud metadata endpoints.

Uncover customer jobs, pains, and gains in a structured JTBD format to clarify unmet needs, reposition products, or improve discovery and messaging.

Guides configuration of n8n nodes with operation-aware field requirements, property dependencies, and progressive discovery patterns.

Generate videos with synchronized audio using ByteDance Seedance 2.0 via the inference.sh CLI, supporting text-to-video, image-to-video, and reference-to-video modes up to 1080p.

Draft privacy policies, terms of service, disclaimers, and legal notices with GDPR, CCPA, and other regulatory compliance.

Master of defensive Bash scripting for production automation, CI/CD pipelines, and system utilities. Expert in safe, portable, and testable shell scripts.

Merges mature lessons from a domain memory file into its instruction file, preserving knowledge with minimal redundancy.

Automate SEO research with Ahrefs — analyze backlink profiles, research keywords, track domain metrics history, audit organic rankings, and perform batch URL analysis through the Composio Ahrefs integration.

Run SEMrush SEO analytics directly from Claude Code to research keywords, analyze domain organic rankings, audit backlinks, assess keyword difficulty, and discover related terms.

Searches local, marketplace, GitHub, and web sources for existing skills before creating a new one to avoid duplication.

Guides test-driven development for Spring Boot services using JUnit 5, Mockito, MockMvc, Testcontainers, and JaCoCo to achieve 80%+ coverage.

Guide for continuous improvement, error proofing, and standardization in code and processes. Use when improving code quality, refactoring, or discussing process improvements.

Designs, reviews, and scales backend systems with detailed blueprints, trade-off analysis, and technology recommendations.

Automates the entire software development lifecycle from PRD to production with zero human intervention, using multi-agent orchestration and memory systems.

Add governance, safety, and trust controls to AI agent systems with policy enforcement, intent classification, and audit trails.

Create annotated animated GIF demos and screen recordings for pull requests and documentation. Covers frame capture, timing, imageio-based GIF creation, and per-frame annotation workflows.

Identifies high-quality leads by analyzing your business, searching for target companies, and providing actionable contact strategies.

Execute Python code in a safe sandboxed environment with 100+ pre-installed libraries for data processing, web scraping, image manipulation, video creation, 3D model processing, PDF generation, API calls, and automation.

Create explainer videos from script to final cut using AI tools for voiceover, visuals, and assembly.

Records daily activities, progress, decisions, and learnings in structured chronological markdown files.

Design search experiences that help users find what they need, recover from failure, and refine results.

Enforces a strict efficiency ladder—YAGNI, reuse, stdlib, native platform, existing deps—before writing any new code, preventing over-engineering and unnecessary dependencies.

Provides curated color palettes and font pairings for presentations and design tasks, including a complete design system with color tokens.

Generate structured documentation templates for components, patterns, or guidelines within a design system.

Port an existing Remotion (React) composition's source to HyperFrames HTML. Use only on explicit requests to migrate from Remotion; for new compositions or uncertainty, use the general HyperFrames skill.

Enforces production-grade Python and AI engineering standards for FastAPI, LangChain/LangGraph, RAG pipelines, and LLM integrations, covering type safety, error handling, testing, and security.

Forces AI agents to investigate before editing or running destructive commands, improving code quality by requiring concrete facts like importers, data schemas, and user instructions.

Audits images on a webpage for SEO and performance, checking alt text, file sizes, formats, responsive images, lazy loading, and CLS prevention.

Generate comprehensive Product Requirements Documents (PRDs) for software systems and AI-powered features, including executive summaries, user stories, technical specifications, and risk analysis.

Establish SAML 2.0 identity federation between on-premises Active Directory and Azure AD (Microsoft Entra ID) for cross-domain authentication and SSO to cloud applications.

Enrich malware file hashes using the VirusTotal API to retrieve detection rates, behavioral analysis, YARA matches, and contextual threat intelligence for incident triage and IOC validation.

Create systematic QA checklists to verify that design implementations match specifications across visual accuracy, layout, interaction, content, accessibility, and cross-platform categories.

Generates a comprehensive brand design guide with color palette, typography pairings, UI component previews, and real-world mockups using AI image generation.

Calculate and model paid-media financial metrics including CPA, CPL, CPC, CPM, ROAS, MER, break-even targets, contribution margin, LTV:CAC, impression-share opportunity, budgets, forecasts, and experiment economics.

Audits Google Ads accounts across measurement, Search, Shopping, Performance Max, Demand Gen, YouTube-linked inventory, keywords, search terms, negative keywords, creative assets, bidding, budgets, settings, and policy.

Verifies that fix commits properly address security audit findings without introducing new bugs or vulnerabilities.

Analyzes the downstream impact (blast radius) when a BigQuery table or view is broken, stale, or modified, identifying all affected downstream tables, dashboards, and processes.

Generate an llms.txt file from repository structure, following the llms.txt specification to help LLMs navigate and understand the project.

Optimize PostgreSQL databases with advanced features, performance tuning, and best practices for JSONB, full-text search, window functions, and indexing.

Build and scale partner ecosystems that drive revenue and platform adoption, covering program design, tiering, co-marketing, build-vs-partner decisions, and structured deployment.

Coverage-guided fuzzing for Ruby code and C extensions using libFuzzer and sanitizers.

Searches and extracts data from Burp Suite project files (.burp) using the burpsuite-project-file-parser extension, enabling regex searches on response headers and bodies, extraction of security audit findings, and analysis of proxy history and site map data.

Scans Cairo/StarkNet smart contracts for 6 critical vulnerability patterns including arithmetic overflow, L1-L2 messaging issues, and signature replay. Use when auditing StarkNet projects.

Ports existing Semgrep rules to new target languages with applicability analysis and test-driven validation.

Convert and quantize models to GGUF format for efficient CPU/GPU inference with llama.cpp, supporting 2-8 bit quantization and Apple Silicon acceleration.

Train reinforcement learning models using torchforge, Meta's PyTorch-native RL library for scalable, algorithm-focused experimentation with GRPO, DAPO, and custom loss functions.

Detects leaked secrets in Git repositories by scanning full commit history with Gitleaks rules and the GitHub Secret Scanning API, identifying exposed API keys, tokens, and credentials.

Quickly refreshes project state when resuming work by reporting git status, recent commits, environment, memory staleness, pending tasks, and red flags.

Secure-by-default environment variable management for Claude Code sessions.

Analyzes campaign performance with multi-touch attribution, funnel conversion analysis, and ROI calculation for marketing optimization.

Generates phrase-grounded bounding box annotations from image-caption pairs using a VLM, producing cleaned captions, referring expressions, and pixel-space bounding boxes.

Deploy the behavior-analytics service standalone with a chosen entrypoint, config source, and optional calibration, without the full warehouse stack.

Convert static HTML pages to Edge Delivery Services while preserving original design and enabling content authoring in Document Authoring.