AI & ML
AI & ML agent skills cover the machine-learning workflow itself: writing and evaluating prompts, building RAG pipelines, running evals, and wiring up model APIs. Each one is a SKILL.md file your agent loads on demand, so the know-how travels across Claude Code, Cursor, and 60+ agents.
-
k-dense-ai Bundle Statistical AnalysisGuides statistical hypothesis testing with assumption checks, effect sizes, power analysis, Bayesian alternatives, and APA-formatted reporting for research data.
30.2k -
k-dense-ai Bundle Hypothesis GenerationFormulate testable hypotheses from observations, design experiments, and generate predictions using a structured scientific method framework.
30.2k -
k-dense-ai Bundle Scientific SchematicsCreate publication-quality scientific diagrams using AI generation with smart iterative refinement and quality review.
Audited 30.2k -
k-dense-ai Bundle Protocolsio IntegrationIntegrates with the protocols.io API v3 to search, create, update, and publish scientific protocols, manage steps and materials, handle discussions, organize workspaces, and upload files.
30.2k -
mcollina Bundle InitCreates, updates, or optimizes an AGENTS.md file for a repository with minimal, high-signal instructions covering non-discoverable coding conventions, tooling quirks, workflow preferences, and project-specific rules that agents cannot infer from reading the codebase.
Audited 1.9k -
mcollina Bundle OctocatHandles git and GitHub operations using the gh CLI, triggered by any github.com URL. Covers creating and reviewing PRs, watching CI checks, interactive rebasing, branch cleanup, submodule management, and repository archaeology.
1.9k -
mcollina Bundle Skill OptimizerImproves AI skills for activation, clarity, and cross-model reliability through benchmarking, salience tuning, and regression triage.
Audited 1.9k -
mcollina Bundle Typescript MagicianDesigns complex generic types, refactors `any` types to strict alternatives, creates type guards and utility types, and resolves TypeScript compiler errors.
Audited 1.9k -
mukul975 Bundle Red Teaming Llms With GarakRun NVIDIA garak probe suites against an LLM endpoint to test for jailbreaks, prompt injection, data leakage, and toxic generation, then interpret the hit-rate report for triage and reporting.
24.6k -
mukul975 Bundle Modeling Threats With OpenctiModel threat actors, intrusion sets, campaigns, and TTPs as a STIX 2.1 knowledge graph in OpenCTI using the pycti Python client, connectors, and import workers for structured cyber threat intelligence.
24.6k -
mukul975 Bundle Defending Llms With GuardrailsDeploy Llama Guard, NeMo Guardrails, and LLM Guard as runtime input/output scanners to block jailbreaks, prompt injection, and toxic content in production LLM applications.
24.6k -
mukul975 Bundle Testing For System Prompt LeakageTest LLM applications for system prompt leakage using manual payloads, garak, and Promptfoo to extract embedded secrets and routing logic.
24.6k -
mukul975 Bundle Detecting Data And Model PoisoningDetect poisoned training data and backdoored models across the ML pipeline using statistical analysis, activation clustering, and spectral signatures.
24.6k -
mukul975 Bundle Detecting Model Extraction AttacksDetect model stealing, model inversion, and membership inference performed through inference-API abuse by monitoring query patterns, applying output perturbation, and red-teaming your own model's extractability.
24.6k -
mukul975 Bundle Detecting Indirect Prompt InjectionDetect and defend against prompt injection hidden in documents, web pages, and images consumed by an agent.
24.6k -
mukul975 Bundle Implementing Diamond Model AnalysisProvides a structured framework for analyzing cyber intrusions by examining four core features: Adversary, Capability, Infrastructure, and Victim. Covers implementing the Diamond Model programmatically to classify and correlate intrusion events, build activity threads, and generate pivot-ready intelligence.
Audited 24.6k -
mukul975 Bundle Performing Clickjacking Attack TestTest web applications for clickjacking vulnerabilities by assessing frame embedding controls and crafting proof-of-concept overlay attacks during authorized security assessments.
24.6k -
mukul975 Bundle Securing Agentic AI Tool InvocationApply least-privilege tool allowlisting, identity binding, and human-in-the-loop controls for agent tool calls.
24.6k -
mukul975 Bundle Deploying Edr Agent With CrowdstrikeDeploys and configures CrowdStrike Falcon EDR sensors across Windows, macOS, and Linux endpoints, sets prevention and response policies, validates deployment, and integrates with SIEM platforms.
24.6k -
mukul975 Bundle Orchestrating LLM Attacks With PyritAutomate multi-turn adversarial conversations against LLM agents using Microsoft PyRIT, including Crescendo and Tree-of-Attacks-with-Pruning (TAP) attack chains with scorer feedback loops.
24.6k -
mukul975 Bundle Implementing Iec 62443 Security ZonesDesign and implement security zones and conduits for industrial automation and control systems per IEC 62443-3-2, including zone partitioning, firewall configuration, and validation through traffic analysis and penetration testing.
24.6k -
mukul975 Bundle Detecting Command And Control Over DnsDetects command-and-control (C2) communications tunneled through DNS protocol, including DNS tunneling tools, domain generation algorithms, and encoded payload delivery via TXT/CNAME records.
24.6k -
mukul975 Bundle Executing Red Team Engagement PlanningDefines scope, objectives, rules of engagement, threat model selection, and operational timelines for red team engagements before any offensive testing begins.
Audited 24.6k -
mukul975 Bundle Extracting Config From Agent Tesla RatExtract embedded configuration from Agent Tesla RAT samples including SMTP/FTP/Telegram exfiltration credentials, keylogger settings, and C2 endpoints using .NET decompilation and memory analysis.
24.6k -
mukul975 Bundle Performing AI Driven Osint CorrelationCorrelate findings across OSINT sources—username enumeration, email lookups, social media profiles, domain records, breach databases, and dark-web mentions—into unified intelligence profiles with confidence scoring and link analysis.
24.6k -
mukul975 Bundle Auditing MCP Servers For Tool PoisoningScan Model Context Protocol servers and tool metadata for poisoning, SSRF, and unauthenticated exposure.
24.6k -
mukul975 Bundle Implementing LLM Guardrails For SecurityBuilds input and output validation guardrails for LLM-powered applications to prevent prompt injection, data leakage, toxic content generation, and hallucinated outputs using NeMo Guardrails, Presidio, and Guardrails AI.
24.6k -
mukul975 Bundle Implementing Network Segmentation For OtDesign and implement network segmentation in Operational Technology environments using VLANs, industrial firewalls, data diodes, and software-defined networking, following the Purdue Model and IEC 62443 standards.
24.6k -
mukul975 Bundle Assessing Vector And Embedding WeaknessesTest vector stores for embedding inversion, cross-tenant leakage, and poisoning.
24.6k -
mukul975 Bundle Configuring Active Directory Tiered ModelImplement Microsoft's Enhanced Security Admin Environment (ESAE) tiered administration model for Active Directory, covering Tier 0/1/2 separation, privileged access workstations, and credential theft mitigation.
Audited 24.6k -
mukul975 Bundle Continuous LLM Red Teaming With PromptfooWire Promptfoo and DeepTeam into CI/CD for automated regression red-teaming of LLM apps against OWASP LLM Top 10 and OWASP Agentic presets, failing the build when jailbreak or injection vulnerabilities regress.
24.6k -
mukul975 Bundle Performing Ot Network Security AssessmentConduct comprehensive security assessments of Operational Technology (OT) networks including SCADA systems, DCS architectures, and industrial control system communication paths, addressing the Purdue Reference Model layers and identifying IT/OT convergence risks.
24.6k -
mukul975 Bundle Testing Prompt Injection In RAG PipelinesProbe RAG applications for prompt injection via poisoned retrieved context and embedding manipulation.
24.6k -
mukul975 Bundle Implementing Endpoint Detection With WazuhDeploy and configure Wazuh SIEM/XDR for endpoint detection including agent management, custom decoder and rule XML creation, alert querying via the Wazuh REST API, and automated response actions.
Audited 24.6k -
mukul975 Bundle Implementing Privileged Access WorkstationDesign and implement Privileged Access Workstations (PAWs) with device hardening, just-in-time access, and integration with CyberArk or BeyondTrust for secure administrative operations.
Audited 24.6k -
mukul975 Bundle Detecting AI Model Prompt Injection AttacksDetects prompt injection attacks targeting LLM-based applications using regex pattern matching, heuristic scoring, and DeBERTa transformer classification.
24.6k
Frequently asked questions
What are AI & ML agent skills?
AI & ML agent skills cover the machine-learning workflow itself: writing and evaluating prompts, building RAG pipelines, running evals, and wiring up model APIs. Each one is a SKILL.md file your agent loads on demand, so the know-how travels across Claude Code, Cursor, and 60+ agents.
Which AI & ML skills are most installed?
Popular AI & ML skills on SkillMD right now include executing-red-team-engagement-planning, scientific-schematics, red-teaming-llms-with-garak. Rankings shift as installs change; sort this page by "Most installs" for the live list.
Do AI & ML skills work with Claude Code and Cursor?
Yes. Every skill here ships as a SKILL.md file, an open format that works in Claude Code, Claude.ai, Cursor, Codex, Windsurf, and 60+ other agents. Install one with npx skillmds@latest add <owner>/<name>, or copy the file into your agent's skills directory.