Plugins

12 plugins
curated
Security
Security audits, vulnerability scanning and secure coding.
30 skills · plugin
@dotnet
Dotnet Template Engine
.NET Template Engine skills: template discovery, project scaffolding, and template authoring.
6 skills · plugin
curated
Create and Share Agent Skills
Scaffold, build, verify, and share a new agent skill with the team.
11 skills · plugin
curated
Publish Mobile-First Page
Scaffold and publish a mobile-first page with responsive layout and design tokens.
4 skills · plugin
curated
Build Spring Boot REST API
Scaffold a Spring Boot project and implement REST API following best practices.
3 skills · plugin
curated
PR Review Pipeline
Install this pack to review a PR with structured analysis, security scanning, and quality enforcement.
11 skills · plugin
curated
Quarkus Release Pipeline
Install this pack to run build, static analysis, security scan, and diff review before a Quarkus release.
3 skills · plugin
@microsoft
Microsoft 365 Agents Toolkit
Toolkit for building and evaluating Microsoft 365 Copilot declarative agents — scaffolding, JSON manifest development, capability configuration, and eval workflows.
6 skills · plugin
curated
Analyze Single-Cell RNA-Seq
Analyze single-cell RNA-seq data using Scanpy, including quality control, normalization, clustering, marker gene identification, and visualization.
9 skills · plugin
@klotzkette
Betreuungsrecht
Betreuungsrechtliche Skills für ehrenamtliche Familienbetreuer, Berufs- und Vereinsbetreuer: Kaltstart, Scan-Akte, Kalender, Gerichtskommunikation, Jahresbericht, Vermögensverzeichnis, Genehmigungspflichten, Wunschermittlung, Kontoanalyse und Schutzplan nach BtOG und BGB.
2 skills · plugin
@trailofbits
Building Secure Contracts
Comprehensive smart contract security toolkit based on Trail of Bits' Building Secure Contracts framework. Includes vulnerability scanners for 6 blockchains and 5 development guideline assistants.
11 skills · plugin
curated
Build MVP from Spec
Turn a design or spec document into a working MVP by planning thin vertical slices, scaffolding, then building iteratively with TDD and gated commits.
5 skills · plugin

Results for “sca”

1,240 skills
mukul975
Implementing Pci Dss Compliance Controls
Implement PCI DSS 4.0.1 compliance controls across all 12 requirements, including scoping, network security, data protection, access controls, monitoring, and governance.
24.6k · bundle
mukul975
Implementing Velociraptor For Ir Collection
Deploy and configure Velociraptor for scalable endpoint forensic artifact collection during incident response using VQL queries, hunts, and pre-built artifact packs across Windows, Linux, and macOS environments.
24.6k · bundle
orchestra-research
Ml Training Recipes
Provides battle-tested PyTorch training recipes for LLMs, vision, diffusion, and biomedical domains, covering training loops, optimizer selection, LR scheduling, mixed precision, and debugging.
10.4k · bundle
antigravity
Ad Creative
Generate, iterate, and scale paid ad creative for Google Ads, Meta, LinkedIn, TikTok, and Twitter/X, using performance data to optimize headlines, descriptions, and primary text.
42.4k · bundle
joshuashepherd
Icon System
Establishes or validates a canonical Icon wrapper component, size token scale, stroke weight conventions, and illustration usage standards for a project, creating src/components/ui/icon.tsx and documenting the system.
1
nickgallick
Nick Tech Debt
Practical technical debt scanning and prioritization for Nick's projects. Use during maintenance reviews, when a codebase feels slow to work in, or when checking what debt is actually hurting development velocity. Focus on high-impact debt, not style nitpicks.
0 · bundle
thatrebeccarae
Safe Push
Pre-push hygiene check for GitHub repositories. Scans for PII, secrets, and sensitive data before pushing. Audits commit messages, enforces repo-specific blocklists, and rate-limits pushes to avoid GitHub abuse detection. Use before any git push, especially to public repos.
105 · bundle
shenxingy
Skill New
Scaffold a new Clade skill end-to-end — interviews for use cases and trigger phrases, generates SKILL.md + prompt.md with spec-validated frontmatter (bilingual triggers, NOT-for disambiguation), wires golden-set routing tests, and runs the lint gate before committing
8 · bundle
francostino
Offers
When the user wants to design, construct, or improve an offer — the thing they actually sell — including value framing, bonus stacking, guarantee design, scarcity/urgency, naming, and payment structure. Also use when the user mentions 'offer,' 'offer design,' 'build an offer,' 'grand...
63 · bundle
saranskumar
Skill Generator
Use when the user wants to create a new Antigravity skill pack or add a focused skill folder with SKILL.md, references, examples, or scripts. Trigger on requests to generate a skill, scaffold a skill, or expand the local skill library.
0 · bundle
26bb
Offers
When the user wants to design, construct, or improve an offer — the thing they actually sell — including value framing, bonus stacking, guarantee design, scarcity/urgency, naming, and payment structure. Also use when the user mentions 'offer,' 'offer design,' 'build an offer,' 'grand...
0 · bundle
theheavenlyd3mon
Narrative
Full-novel craft + anti-slop pipeline with project mode (ledger, characters, foreshadow, worldbuilding bible), draft→review→revise gates, and stability-trap enforcement at scene/chapter/manuscript scale. Single-scene mode retained. Use for fiction, lore, character docs, dialogue, worldbuilding, or book projects.
28 · bundle
sickn33
Offers
When the user wants to design, construct, or improve an offer — the thing they actually sell — including value framing, bonus stacking, guarantee design, scarcity/urgency, naming, and payment structure. Also use when the user mentions 'offer,' 'offer design,' 'build an offer,' 'grand...
45.1k · bundle
jasoncarreira
Social CLI
Bluesky + X social loop. The bundled notifications poller runs `social-cli sync` on cron (default `*/15`), parses the per-platform `inbox-<platform>.yaml` files, and wakes the agent in batches of up to 3 never-seen notifications per turn. The optional feed poller runs `social-cli feed` every 2h for timeline scanning. Agent reads inbox, writes `outbox-<platform>.yaml`, runs `social-cli dispatch`. Also supports one-shot commands (post/reply/thread/like). Opt-in: install the skill, drop `.env` credentials into `<home>/state/pollers/social-cli-notifications/`. Companion to the `pollers` framework skill and the `world-scanning` skill.
6 · bundle
nvidia
Tao Train Deformable Detr
Train, evaluate, export, quantize, and run inference for a Deformable DETR 2D object detection model using TAO, with deformable attention for efficient multi-scale feature processing.
2.2k · bundle
k-dense-ai
Glycoengineering
Analyze and engineer protein glycosylation by scanning sequences for N-glycosylation sequons, predicting O-glycosylation hotspots, and accessing curated glycoengineering tools for therapeutic antibody optimization and vaccine design.
30.2k · bundle
mukul975
Defending Llms With Guardrails
Deploy Llama Guard, NeMo Guardrails, and LLM Guard as runtime input/output scanners to block jailbreaks, prompt injection, and toxic content in production LLM applications.
24.6k · bundle
mukul975
Exploiting Ipv6 Vulnerabilities
Identifies and exploits IPv6-specific vulnerabilities including SLAAC spoofing, Router Advertisement flooding, and IPv6 tunneling during authorized assessments to test dual-stack security controls and IPv6-aware network defenses.
24.6k · bundle
lingxling
Scvelo
Analyze RNA velocity in single-cell RNA-seq data with scVelo, estimating cell state transitions from unspliced/spliced mRNA dynamics, inferring trajectory directions, computing latent time, and identifying driver genes.
253 · bundle
bdm-15
Capture Brief
Create or enrich a pursuit capture brief from USASpending bulk data, optional SAM live intel, and optional LLM narrative. Use when opening a recompete workspace, scaffolding admin paperwork, or when the user asks for a one-page pursuit snapshot with citations.
0
fivebucksventures
Trend Radar
Daily live-trend scan for any active brand — surfaces timely topics, launches, news, and community pain points in the brand's niche, scored for relevance and timeliness, deduplicated against a rolling log, and written as candidate topics the social calendar can pull.
0
yanacuti1121
Leak Check
Scan codebase and git history for leaked secrets — API keys, tokens, passwords, private keys. Uses whispers-style regex patterns + gitleaks. Run as /leak-check before any git push. Alerts on Claude API keys, GitHub tokens, AWS credentials, and generic high-entropy strings.
2
herdiansah
Design System Architect
Expert design system architect specializing in design tokens, component libraries, theming infrastructure, and scalable design operations. Masters token architecture, multi-brand systems, and design-development collaboration. Use PROACTIVELY when building design systems, creating token architectures, implementing theming, or establishing component libraries.
23
tianhao909
Distributed LLM Pretraining Torchtitan
Provides PyTorch-native distributed LLM pretraining using torchtitan with 4D parallelism (FSDP2, TP, PP, CP). Use when pretraining Llama 3.1, DeepSeek V3, or custom models at scale from 8 to 512+ GPUs with Float8, torch.compile, and distributed checkpointing.
1 · bundle
qcmuu
Distributed LLM Pretraining Torchtitan
Provides PyTorch-native distributed LLM pretraining using torchtitan with 4D parallelism (FSDP2, TP, PP, CP). Use when pretraining Llama 3.1, DeepSeek V3, or custom models at scale from 8 to 512+ GPUs with Float8, torch.compile, and distributed checkpointing.
0 · bundle
kevinpbuckley
Project Settings
Configure Unreal Engine project settings and editor preferences — UI appearance, toolbar icons, scale, colors, and any UDeveloperSettings subclass (ProjectSettingsService). Use when the user asks to change a project setting or editor preference, configure a UDeveloperSettings category, or read/write project config values.
605 · bundle
dsouzaanush
Heroku App Ops
Operate running Heroku apps with a read-only-first workflow. Use when the agent needs to inspect app status, app info, current process state, dynos, releases, logs, one-off commands, maintenance mode, scaling, restarts, or rollback behavior for a Heroku app.
0 · bundle
eliferjunior
D3
Assists with building custom interactive data visualizations using D3.js. Use when creating charts, graphs, maps, force layouts, or hierarchical diagrams that require fine-grained control beyond what charting libraries provide. Trigger words: d3, data visualization, chart, svg, scales, force graph, treemap, choropleth.
0
seb1n
Security Audit
Perform a broad, authorized security audit across application, infrastructure, identity, dependencies, and operations. Use when the user needs a scoped security posture review; use the SAST, DAST, dependency-scanning, or threat-modeling skill when the request is limited to one specialist activity.
159
alirezarezvani
API Test Suite Builder
Scans API route definitions across frameworks (Next.js, Express, FastAPI, Django REST) and auto-generates comprehensive test suites covering auth, input validation, error codes, pagination, file uploads, and rate limiting.
20.4k · bundle
browser-act
X Dm Auto Chat
Automates X (Twitter) DM workflows: scan inbox, read conversations, generate persona-based replies, and send messages. Also supports searching users and starting new conversations with rate control and E2E passcode unlock.
3.7k · bundle
mukul975
Securing Container Registry Images
Scan container images for vulnerabilities with Trivy and Grype, generate SBOMs, sign images with Cosign and Sigstore, configure registry access controls, and enforce security gates in CI/CD pipelines.
24.6k · bundle
mukul975
Detecting Supply Chain Attacks In CI CD
Scans GitHub Actions workflows and CI/CD pipeline configurations for supply chain attack vectors including unpinned actions, script injection via expressions, dependency confusion, and secrets exposure.
24.6k · bundle
mukul975
Performing Dark Web Monitoring For Threats
Scan Tor hidden services, underground forums, paste sites, and dark web marketplaces to identify threats targeting an organization, including leaked credentials, data breaches, and threat actor discussions.
24.6k · bundle
mukul975
Performing Cryptographic Audit Of Application
Systematically reviews an application's use of cryptographic primitives, protocols, and key management to identify vulnerabilities such as weak algorithms, insecure modes, hardcoded keys, insufficient entropy, and protocol misconfigurations.
24.6k · bundle
mukul975
Building Automated Malware Submission Pipeline
Automates the collection of suspicious files from endpoints and email gateways, submission to sandbox and multi-engine scanners, and generation of verdicts with IOCs for SIEM integration.
24.6k · bundle