Skills worth trusting.
Agent skills from Anthropic, OpenAI, skills.sh, ClawHub, SkillsMP and other reputable sources. Savant assesses them for security risks and evaluates model-generated test cases using independent scoring. Workspaces import any skill into their own repositories through a reviewed pull request. Every listing on each hub is enumerated; packages are fetched, scanned and evaluated most-popular first as daily capacity allows.
linkfox-temu-order-eu
Temu 欧洲站订单管理 API，经 LinkFox 网关转发 Partner EU 订单接口：订单列表/详情/收货地址/金额/合并发货/定制/SN鉴真上传(bg.order.*、temu.local.order.verification.upload)等。当用户提到 Temu EU 订单、Temu欧洲站订单、上传SN、IMEI、verification upload、定制商品、合并发货、parentOrderSn、site=eu order-shipping 时触发。商品管理用 linkfox-temu-manage-product-eu；价格用 linkfox-temu-price-eu；履约/发货用 linkfox-temu-fulfillment-eu；退货退款用 linkfox-temu-returns-refunds-eu；取消用 linkfox-temu-cancel-order-eu。
java-21
Java 21 language and runtime patterns for modern, safe code. Trigger: When writing Java 21 code using records, sealed types, or virtual threads.
non-fiction-revision
Diagnose and guide revisions in non-fiction books. Use for non-fiction book revision, when arguments feel weak, evidence is outdated, readers report confusion, thesis is unclear, or book structure has problems. Keywords: non-fiction, revision, thesis, argument, evidence, structure.
settlement
This skill should be used when the user needs to perform year-end closing adjustments (決算整理), review financial statements (決算書), compute depreciation, or review their trial balance. Trigger phrases include: "決算", "決算整理", "決算書を作る", "減価償却", "試算表", "残高試算表", "損益計算書", "貸借対照表", "BS", "PL", "期末処理", "棚卸し", "未払計上", "前払処理".
spark-recipe-draft-batch
Review and finalize multiple pending drafts in a batch session: read context, edit, or discard.
spark-recipe-notification-hygiene
Tame notification overload by reclassifying noisy senders, grouping repetitive notifications, and bulk-archiving cleared alerts.
competitive-intelligence-analyst
Use this skill when users need to analyze competitors, monitor market movements, benchmark features/pricing, identify market gaps, or understand competitive positioning. Activates for "what are competitors doing," market analysis, or differentiation strategy.
pentest-toolkit-pro-html
Single-file HTML pentesting toolkit with OWASP WSTG checklists, vulnerability tracking, CVSS scoring, and offline report generation
cn-last30days
中国社媒平台话题研究工具。从小红书、抖音、公众号三大平台搜索近30天真实讨论，跨平台对比分析舆情趋势。当用户需要研究中国社交媒体热点话题、分析舆情趋势、对比品牌口碑时使用。触发词：小红书热点、抖音趋势、公众号舆情、跨平台分析、社媒研究、话题分析、舆情监测。
swift-best-practices
| This skill should be used when writing or reviewing Swift code for iOS or macOS projects. Apply modern Swift 6+ best practices, concurrency patterns, API design guidelines, and migration strategies. Covers async/await, actors, MainActor, Sendable, typed throws, and Swift 6 breaking changes.
conference_call_takeaway_skill
提炼业绩会中的新信息、管理层语气变化、问答焦点与潜在警讯。适用于听完业绩会、阅读纪要后快速更新观点等场景。
cloudflare-agents
Build AI agents with Cloudflare Agents SDK on Workers + Durable Objects. Provides WebSockets, state persistence, scheduling, and multi-agent coordination. Prevents 23 documented errors. Use when: building WebSocket agents, RAG with Vectorize, MCP servers, or troubleshooting "Agent class must extend", "new_sqlite_classes", binding errors, WebSocket payload limits.
ai-writing-detox
Eliminates AI-generated writing patterns that erode reader trust. Use when writing or editing articles, docs, or press releases.
cloudflare-vectorize
Build semantic search with Cloudflare Vectorize V2. Covers async mutations, 5M vectors/index, 31ms latency, returnMetadata enum changes, and V1 deprecation. Prevents 14 errors including dimension mismatches, TypeScript types, testing setup. Use when: building RAG or semantic search, troubleshooting returnMetadata, V2 timing, metadata index, dimension errors, vitest setup, or wrangler --json output.
testing-for-open-redirect-vulnerabilities
Identifies and exploits open redirect vulnerabilities by analyzing URL redirection parameters (next, url, redirect, return, goto), applying bypass techniques, and chaining findings into phishing or token-theft exploits, using Burp Suite/OWASP ZAP and Burp Collaborator. Use when testing login/logout flows, OAuth redirect_uri handling, or SSO redirect validation.
github-code-review
Review PRs: diffs, inline comments via gh or REST.
bmad-validate-prd
Deprecated — forwards to bmad-prd (validate intent)
bad-example-skill
ANTI-PATTERN - Example showing violations of self-containment (DO NOT COPY)
gtm-qualify-prospects
Triggers when a user asks whether a named person or company, or a pasted list of them, fits the GTM workspace's personas or ICPs, with phrasings like "is this a fit", "check quillhr.com against our ICP", "score these leads", or "qualify this list". Owns in-conversation fit checks of supplied people or companies and writes nothing. Not for creating or editing ICPs or personas (gtm-icp, gtm-persona), the workspace itself (gtm-workspace), or recurring scoring of lists, which is a saved gtm-workflow.
llm-app-patterns
Production-ready patterns for building LLM applications. Covers RAG pipelines, agent architectures, prompt IDEs, and LLMOps monitoring. Use when designing AI applications, implementing RAG, building agents, or setting up LLM observability.
alphafold-database
Access AlphaFold's 200M+ AI-predicted protein structures. Retrieve structures by UniProt ID, download PDB/mmCIF files, analyze confidence metrics (pLDDT, PAE), for drug discovery and structural biology.
yahoo-finance
API no oficial de Yahoo Finance: precios, históricos, fundamentales, opciones, noticias en JSON puro sin wrappers.
webinar-content-repurposer
Transform webinar recordings into multiple content assets including blog post series, social media snippets, infographic ideas, email sequences, and sales one-pagers. Extracts key moments, quotes, and insights for maximum content ROI. Use when users need to repurpose webinars, video content, or live presentations into multi-channel marketing materials.
linkfox-temu-manage-product-us
Temu 美国站商品管理（Manage Product）API，经 LinkFox 网关转发 Partner US 24 个 bg.local/temu.local 接口：商品列表/详情/SKU查询、部分/全量编辑、删除、库存、上下架、预售、类目预检、属性模板、合规、外部编码、视频封面等。当用户提到 Temu US Manage Product、bg.local.goods、商品上下架、改库存、删除商品、合规编辑、Partner US 商品管理文档 时触发。发品用 linkfox-temu-add-product-us；**价格/供货价**用 **linkfox-temu-price-us**；**促销/营销活动**用 **linkfox-temu-promotion-us**；**广告 Ads**用 **linkfox-temu-ads-us**；**订单**用 **linkfox-temu-order-us**；**Self-Fulfilled Shipments**用 **linkfox-temu-fulfillment-us**；**买家取消**用 **linkfox-temu-cancel-order-us**；**卖家取消**用 **linkfox-temu-cancel-order-us**。
linkfox-temu-order-global
Temu 全球站（非 US/EU）订单管理 API，经 LinkFox 网关转发 9 个 bg.order.* / temu.order.* / temu.local.order.* 接口，默认 site=global、tokenPurpose=order-shipping。当用户提到 Temu Global 订单、全球站订单列表、parentOrderSn、订单金额 V2、temu.order.amount.v2.query、合并发货、SN鉴真、verification upload 时触发。美国站用 linkfox-temu-order-us；欧洲站用 linkfox-temu-order-eu；商品用 linkfox-temu-manage-product-global；价格用 linkfox-temu-price-global。
linkfox-temu-compliance-global
Temu 全球站电商合规（Compliance）API，经 LinkFox 网关转发 Partner Global 合规相关 OpenAPI（bg.compliance.*、bg.arbok.open.*、bg.flash.open.* 等，共 9 个接口）。当用户提到 Temu Global 合规、商品资质、GPSR、治理属性、实拍图、资质上传、bg.compliance.edit、arbok cert、site=global 合规 时触发。
linkfox-temu-fulfillment-eu
Temu 欧洲站电商履行/发货 API（合一）：Buy-Shipping购标面单、合作仓履约、卖家自发货、物流跟踪、自配送POD上传与审核等30个接口。当用户提到 Temu EU 发货、购标、POD、proof of delivery、self delivery pod、合作仓、自发货、tracking、order-shipping 时触发。订单用 linkfox-temu-order-eu。
linkfox-temu-ads-global
Temu 全球站电商广告 Ads API，经 LinkFox 网关转发 Partner Global Ads / 广告投放 相关 bg/temu 接口（广告计划、广告组、创意、报表、预算出价等，接口将按 Partner 文档逐条接入）。当用户提到 Temu Global 广告、Ads、广告投放、广告计划、广告组、创意、出价、预算、广告报表、ad campaign、product-inventory 广告 时触发。商品管理用 linkfox-temu-manage-product-global；促销用 linkfox-temu-promotion-global；订单用 linkfox-temu-order-global。
analyzing-financial-statements
This skill calculates key financial ratios and metrics from financial statement data for investment analysis
eachlabs-face-swap
Swap faces between images using EachLabs AI. Use when the user wants to replace or swap faces in photos.
performance-smell-detection
Detect potential code-level performance smells in Java - streams, collections, boxing, regex, object creation. Provides awareness, not absolutes - always measure before optimizing. For JPA/database performance, use jpa-patterns instead.
researching
Comprehensive codebase research skill. Documents codebase as-is by spawning parallel sub-agents and synthesizing findings into research documents.
tailscale
Comprehensive Tailscale VPN setup, configuration, and management for mesh networking, secure access, and zero-trust infrastructure. Covers installation, CLI commands, subnet routers, exit nodes, Tailscale SSH, ACL/grants configuration, MagicDNS, Tailscale Serve/Funnel, API automation, and production deployment best practices. Use when setting up Tailscale, configuring tailnet access controls, deploying subnet routers or exit nodes, enabling Tailscale SSH, exposing services with Serve/Funnel, automating via the Tailscale API, troubleshooting connectivity, or planning production Tailscale deployments.
langsmith
Route LangSmith work into one workflow packet before touching SDK code. Use when the user needs LangSmith tracing, offline evals, annotation/review queues, prompt-registry decisions, audit/gap review, or cross-service trace propagation for an LLM app or agent workflow. Choose one packet: trace-debug, eval, review, prompt-registry, propagation, or audit. Triggers on: LangSmith, LangChain tracing, `@traceable` / `traceable`, `wrap_openai` / `wrapOpenAI`, datasets, experiments, annotation queues, feedback criteria, Prompt Hub, run trees, trace IDs, or production confidence for an AI feature. Not for generic SLO/alert design, non-LangSmith deployment orchestration, or runtime guardrails outside LangSmith.
claude-api
Build with Claude Messages API using structured outputs for guaranteed JSON schema validation. Covers prompt caching (90% savings), streaming SSE, tool use, and model deprecations. Prevents 16 documented errors. Use when: building chatbots/agents, troubleshooting rate_limit_error, prompt caching issues, streaming SSE parsing errors, MCP timeout issues, or structured output hallucinations.
jupiter-lend
Interact with Jupiter Lend Protocol. Read-only SDK (@jup-ag/lend-read) for querying liquidity pools, lending markets (jlTokens), and vaults. Write SDK (@jup-ag/lend) for lending (deposit/withdraw) and vault operations (deposit collateral, borrow, repay, manage positions).
amazon-shopping
Use when the user asks to shop on Amazon, compare Amazon products, or research purchase options. Visits Amazon through the normal browser path available to the agent, verifies product-page ASIN/title/price data, and ranks options by user criteria with review count favored when ratings are close.
setup
This skill should be used when the user wants to set up shinkoku for the first time, initialize their configuration, or update their existing settings. Trigger phrases include: "セットアップ", "初期設定", "設定ファイルを作る", "shinkokuの設定", "config", "setup", "始め方", "使い方", "設定を更新", "configを作り直す".
identity-access-management
Set up and manage SSO, SCIM provisioning, and MFA for startup teams using Google Workspace, Okta, or Azure AD. Use when centralizing authentication, onboarding SSO, or meeting compliance requirements.
emergency-release-workflow
Emergency release workflow for critical bug fixes and security patches. Use when production issues require fast-track deployment.
code-review
Comprehensive code review checklist for pull requests
Bankr Agent - Sign & Submit API
This skill should be used when the user asks to "sign a message", "sign typed data", "sign a transaction", "submit a transaction", "submit raw transaction", "personal_sign", "EIP-712", "eth_signTypedData", "eth_signTransaction", or any direct signing or transaction submission operation. Covers the synchronous /agent/sign and /agent/submit endpoints.
bypassing-authentication-with-forced-browsing
Discovering and accessing unprotected pages, APIs, and administrative interfaces by enumerating URLs and bypassing authentication controls during authorized security assessments.
pyhealth
Comprehensive healthcare AI toolkit for developing, testing, and deploying machine learning models with clinical data. This skill should be used when working with electronic health records (EHR), clinical prediction tasks (mortality, readmission, drug recommendation), medical coding systems (ICD, NDC, ATC), physiological signals (EEG, ECG), healthcare datasets (MIMIC-III/IV, eICU, OMOP), or implementing deep learning models for healthcare applications (RETAIN, SafeDrug, Transformer, GNN).
scanpy
Single-cell RNA-seq analysis. Load .h5ad/10X data, QC, normalization, PCA/UMAP/t-SNE, Leiden clustering, marker genes, cell type annotation, trajectory, for scRNA-seq analysis.
gh-fix-ci
Inspect GitHub PR checks with gh, pull failing GitHub Actions logs, summarize failure context, then create a fix plan and implement after user approval. Use when a user asks to debug or fix failing PR CI/CD checks on GitHub Actions and wants a plan + code changes; for external checks (e.g., Buildkite), only report the details URL and mark them out of scope.
concept-workflow
End-to-end workflow for creating complete JavaScript concept documentation, orchestrating all skills from research to final review
linkfox-temu-returns-refunds-global
Temu 全球站电商退货与退款 API，经 LinkFox 网关转发 Partner Global Returns & Refunds / 售后退货退款 相关 bg/temu 接口（退货申请、退款、售后单查询与处理等，接口将按 Partner 文档逐条接入）。当用户提到 Temu Global 退货、退款、售后退货、return、refund、aftersales return、parentAfterSalesSn、退货单、退款单、order-shipping 售后 时触发。买家/卖家取消订单用 linkfox-temu-cancel-order-global / linkfox-temu-cancel-order-global；订单用 linkfox-temu-order-global。