New skills

Your knowledge of the MCP SDK and Cloudflare Workers integration may be outdated. Prefer retrieval over pre-training for any MCP server task.

Fast, modern JavaScript/TypeScript development with the Bun runtime, inspired by oven-sh/bun .

Security-focused code review for PRs, commits, and diffs.

Essential tools and frameworks for modern product management, from discovery to delivery.

Run a Semgrep scan with automatic language detection, parallel execution via Task subagents, and merged SARIF output.

This skill provides guidance for quality focused software development and architecture. It is based on Clean Architecture and Domain Driven Design principles.

Source provenance, compatibility, automated checks, and current evidence depth are available on the full page.

Comprehensive guidance for creating accessible web experiences that comply with WCAG standards and serve users of all abilities effectively.

Agents are autonomous subprocesses that handle complex, multi-step tasks independently. Understanding agent structure, triggering conditions, and system prompt design enables creating powerful autonomous capabilities.

Provide comprehensive techniques for testing REST, SOAP, and GraphQL APIs during bug bounty hunting and penetration testing engagements. Covers vulnerability discovery, authentication bypass, IDOR exploitation, and API-specific attack vectors.

Expert guidance for integrating external APIs into applications with production-ready patterns, security best practices, and comprehensive error handling.

Identify and exploit authentication and session management vulnerabilities in web applications. Broken authentication consistently ranks in the OWASP Top 10 and can lead to account takeover, identity theft, and unauthorized access to sensitive systems. This skill covers testing methodologies for password policies,...

Execute comprehensive web application security testing using Burp Suite's integrated toolset, including HTTP traffic interception and modification, request analysis and replay, automated vulnerability scanning, and manual testing workflows. This skill enables systematic discovery and exploitation of web application...

Source provenance, compatibility, automated checks, and current evidence depth are available on the full page.

To provide a comprehensive reference for configuring and using Claude Code (the agentic coding tool) to its full potential. This skill synthesizes best practices, configuration templates, and advanced usage patterns.

Slash commands are frequently-used prompts defined as Markdown files that Claude executes during interactive sessions. Understanding command structure, frontmatter options, and dynamic features enables creating powerful, reusable workflows.

Source provenance, compatibility, automated checks, and current evidence depth are available on the full page.

Source provenance, compatibility, automated checks, and current evidence depth are available on the full page.

Execute comprehensive client-side injection vulnerability assessments on web applications to identify XSS and HTML injection flaws, demonstrate exploitation techniques for session hijacking and credential theft, and validate input sanitization and output encoding mechanisms. This skill enables systematic detection and...

Comprehensive guidance for implementing data privacy compliance across GDPR, CCPA, HIPAA, and other global data protection regulations.

This skill provides comprehensive desktop automation capabilities through PyAutoGUI, allowing AI agents to control the mouse, keyboard, take screenshots, and interact with the desktop environment.

Provide context and purpose, and I'll draft an appropriate email.

A first-principle approach to diagnosing and resolving errors across all languages and frameworks.

Source provenance, compatibility, automated checks, and current evidence depth are available on the full page.