Browse 181,320 skills across 14 categories.
Fetch web content with automatic fallback from WebFetch to WebSearch
Feature or feature-change playbook for React, Next.js and TypeScript web apps: intake, pattern discovery, plan, implemen...
Como escrever hooks de feature no web do Smaug com TanStack Query v5 — query key em const de módulo, staleTime 30_000, m...
Como escrever services de feature no web do Smaug — objeto const de arrow functions async, apiClient, payload como tipo...
Fetch and extract clean content from URLs using Jina Reader API. Use when users need to read webpage content, extract ar...
Fetch and extract one public web source, optionally restrict its hosts, and return the content by digest with full prove...
Fetch and extract readable content from web pages. Use for lightweight page access without browser automation.
Turn a file upload into RCE or stored XSS/SSRF. Load on any upload: avatars, attachments, import CSV/XML, profile images...
File upload patterns - drag-drop dropzones, chunked/resumable uploads, S3 presigned URLs, file validation (MIME type, ma...
Client-side image handling - preview generation, Canvas API resizing, compression, EXIF orientation, format conversion,...
Filters and truncates large web search results from Exa to reduce token usage.
When the user needs to fill out web forms with data from memory or structured sources, this skill automates the entire w...
React Hook Form patterns - useForm, Controller, useFieldArray, validation resolver, performance optimization
VeeValidate v4 patterns - useForm, useField, defineField, useFieldArray, schema validation with Composition API
Zod schema validation patterns for TypeScript - schema definitions, type inference, refinements, transforms, discriminat...
Angular 17-19 standalone components, signals, control flow, dependency injection patterns
Next.js 15 App Router patterns - file-based routing, Server/Client Components, streaming, Suspense, metadata API, parall...
Server Actions patterns for mutations, revalidation, and form handling in Next.js App Router
Nuxt 3 patterns - file-based routing, data fetching (useFetch/useAsyncData), useState, server routes, middleware, auto-i...
Component architecture, hooks, patterns
File-based routing, loaders, actions, defer streaming, useFetcher, error boundaries, progressive enhancement
SolidJS fine-grained reactivity patterns - signals, effects, memos, stores, createResource, control flow components, Sus...
Svelte 5 Runes reactivity - $state, $derived, $effect, $props, $bindable, components, snippets, event handling, context...
Vue 3 Composition API patterns, reactivity primitives, composables, lifecycle hooks
Build with Next.js (App Router, RSC, SSR, ISR), Turborepo monorepos. Use for React apps, server rendering, build optimiz...
Build modern full-stack web applications with Next.js (App Router, Server Components, RSC, PPR, SSR, SSG, ISR), Turborep...
Next.js App Router, Server/Client components, shadcn/ui patterns, Tailwind CSS conventions
Guidelines for building minimal, professional, and concise frontend components in the /web project using TypeScript, Rea...
(ePost) Use when working with .tsx/.jsx files, React components, hooks, state management, or frontend UI
Develop and test the Vite React TypeScript SPA for the FinOps platform
Scaffold frontend architecture, components, routing, and UI dependencies from project config and wireframes.
Run frontend functional, accessibility, visual, and performance test planning with structured reports.
Scaffolds a browser-based game with Phaser 3, PixiJS, or Three.js including game loop, asset pipeline, responsive canvas...
Expert guide for modern web-based game development. Covers PlayCanvas, Babylon.js Havok, Three.js/R3F Rapier & Jolt Phys...
Web browser game development principles. Framework selection, WebGPU, optimization, PWA.
Step-by-step guidance for web games.
Web browser game development principles.
Web browser game development with Phaser 4, Three.js, Babylon.js 7, and WebGPU. Use when building HTML5 games, canvas op...
Host header injection — abuse a trusted Host/X-Forwarded-Host to poison password-reset links, routing, and caches. Load...
HTML5: semantic markup, ARIA/WCAG accessibility, forms, Web Components, Shadow DOM, SEO
Build accessible, semantic, and responsive web user interfaces using modern HTML5 and CSS3. Use when structuring semanti...
Send the same parameter more than once so the WAF/validator and the backend disagree on which value wins — bypassing fil...
(ePost) Use when working with translations, locale routing, next-intl configuration, or internationalization patterns
Type-safe i18n for Next.js App Router
ICU message format internationalization
Type-safe i18n for Vue 3 Composition API
You are helping a penetration tester exploit Insecure Direct Object Reference
Insecure Direct Object Reference / broken access control on web objects. Load when a request references an object by id...
Write image prompts with crop/placement intent.
Implement web application with best practices, start's with "web" template, built with a fixed technology stack React, e...
给需反复查阅的网站 / 文档站建本地网页索引（.web-index/{site}/）：抓 llms.txt / sitemap.xml / 导航，产出「要做什么 → 去哪一页（含锚点）」的路由表；已索引站点按路由表直接查（消费模式），只做链...
Статус Apache и веб-публикаций 1С — запущен ли сервер, какие базы опубл…
Статус Apache и веб-публикаций 1С — запущен ли сервер, какие базы опубликованы, ошибки. Используй когда пользователь спр...
Camada infra do web do Smaug — api-client (baseURL "/api", Bearer, renovação silenciosa, só 401 encerra sessão), auth-re...
Regulatory Compliance & Sanctions Guardian. Conducts real-time oversight of multinational corporate registries, statutor...
Build and deploy a Next.js web interface for the Voice Assistant with real-time voice/chat capabilities. Use this skill...
Review web UI code against Vercel's Web Interface Guidelines. Use for an explicit interface review or before shipping a...
Review UI files against accessibility, UX, and performance rules, then output terse findings grouped by file. Use when:...
处理网页自动化中的弹窗、登录墙及 Cookie 授权等中断干扰。
Turn an attacker-controllable database connection string / JDBC URL into RCE via the driver itself. Load when an app let...
Pre-launch audit for any website. Verifies privacy policy, ToS, cookie consent, sessions, sitemap, robots.txt, SEO meta...
Web and Storybook layout and sizing guidance. Use when centering or sizing UI elements, reviewing positioning code, or c...
Capture web page layout summaries and scraping notes from live sites. Use when asked to document page structure, identif...
You are helping a penetration tester exploit LDAP injection vulnerabilities.
Local File Inclusion / path traversal → read files, sometimes RCE. Load when a param names a file/path/template/page: ?f...
Loads and extracts all content from web URLs. Use when the user asks to fetch, load, or retrieve content from a website...
Create web app manifests for PWA configuration. TRIGGERS - Use when user needs help with web-manifest related tasks.
Leaflet interactive maps - map setup, tile layers, markers, popups, GeoJSON, custom controls, plugins, clustering, event...
Mapbox GL JS interactive maps - map initialization, markers, popups, sources, layers, expressions, clustering, 3D terrai...
Rendering Markdown to styled HTML in a browser page with Marked, Highlight.js, and the Catppuccin palette. Use when a fr...
One query across free image/video/GIF APIs (stock, historical/archival, GIF engines) with license-tagged, attributed res...
One query across free image / video / GIF APIs (stock + historical/archival + GIF engines), returning normalized, licens...
Beginner-friendly reverse-engineering workflow for Web Meituan Mtgsig. Use it to collect evidence, choose static or dyna...
Catppuccin Mocha themed Mermaid diagrams in a browser page. Use when a frontend renders flowcharts, sequence diagrams, g...
Nuxt patterns - file-based routing, data fetching (useFetch/useAsyncData), useState, server routes, middleware, auto-imp...
Qwik resumable framework - zero hydration, $ lazy boundaries, signals, Qwik City file-based routing, routeLoader$, route...
Defeat a second authentication factor — OTP/TOTP, SMS, push, or backup codes. Load when login has a 2FA/MFA step and you...
MSW handlers, browser/server workers, test data. Use when setting up API mocking for development or testing, creating mo...
(ePost) Use when integrating a component into a B2B module — adding screens, binding APIs, wiring stores, setting up rou...
Monitor web pages for content changes and get alerts. Track URLs, detect updates, view diffs. Use when asked to watch a...
This skill should be used when the user wants to monitor a website for changes, availability, or specific conditions. Us...
Use when reviewing web animations, UI transitions, scroll effects, hover states, loading states, GIF/video captures, red...
Use when building CSS animations, JavaScript transitions, React/Vue motion, or any browser-based animation work.
Navigation and routing patterns for React web applications. Use when implementing React Router, Next.js routing, deep li...
Next.js best practices - file conventions, RSC boundaries, data patterns, async APIs, metadata, error handling, route ha...
Next.js 15: App Router, server actions, ISR/SSG/SSR, middleware, turbopack, Vercel deployment
(ePost) Use when working with Next.js App Router, Server Components, Server Actions, or page/layout routing
You are helping a penetration tester exploit NoSQL injection vulnerabilities.
网文写作 (网文写作 (Chinese Web Novel Writing) — 中国网络文学的「连载长篇商业小说创作工艺」认知操作系统：从「定方向（频道/流派/题材）→ 立意与金手指设计 → 大纲与人物设定 → 开局黄金三章 → 日更连载...
Attack OAuth 2.0 / OIDC / SSO flows for account takeover. Load on "Login with Google/GitHub", /authorize, /callback, red...
Web 线上展览开发 (虚拟展厅) (Web 线上展览 / 虚拟展厅开发 (从业者/工程视角) — 用 web 技术开发线上展览、虚拟展厅、云展会、数字展馆，覆盖 3D 空间、全景漫游、WebXR、文博数字化、营销云展厅、3D 商品展示等形...
SSRF through link-preview / URL-unfurl / oEmbed features. Load when the app generates a preview card for a user-supplied...
Open redirect — abuse a redirect param to send users to attacker sites, and chain it (OAuth token theft, SSRF filter byp...
One page, by url — the plain-url harvester behind a job that names no channel unit.
Default Web API patterns for bElement architecture, including modern HTML features, performance optimizations, and Shado...
Stripe Checkout, subscriptions, webhooks, customer portal
Use when pentesting a web application or API — injection, XSS/CSP, SSRF/cloud-metadata, HTTP desync & cache poisoning, S...
Analyzes web performance using Chrome DevTools MCP. Measures Core Web Vitals (FCP, LCP, TBT, CLS, Speed Index), identifi...
Analyzes web performance using Chrome DevTools MCP. Measures Core Web Vitals (LCP, INP, CLS) and supplementary metrics (...
Audit, diagnose, or optimize website loading and interaction performance, Core Web Vitals, and Lighthouse performance sc...