New Checked the same way as MCP servers
Agent Skills, and what they let an agent do
Read straight from each publisher's repository. For every skill: what it allows the agent to do, the scripts it ships, and what fixed checks matched. Nothing is run.
All skills54
Clear filters- accessAnthropicManage Discord channel access — approve pairings, edit allowlists, set DM/group policy. Use when the user asks to pair, approve someone, check who's allowed, or change policy for the Discord channel.OfficialRuns commandsEdits files
- accessAnthropicManage iMessage channel access — approve pairings, edit allowlists, set DM/group policy. Use when the user asks to pair, approve someone, check who's allowed, or change policy for the iMessage channel.OfficialRuns commandsEdits files
- accessAnthropicManage Telegram channel access — approve pairings, edit allowlists, set DM/group policy. Use when the user asks to pair, approve someone, check who's allowed, or change policy for the Telegram channel.OfficialRuns commandsEdits files
- claude-securityAnthropicClaude Security: scan the codebase (the whole repository or a scoped part of it), scan changes (this branch's or a pull request's diff, or one commit), or suggest patches (findings turned into targeted patch files, each verified by a panel of agents, that you …OfficialRuns commandsEdits files
- configureAnthropicSet up the Discord channel — save the bot token and review access policy. Use when the user pastes a Discord bot token, asks to configure Discord, asks "how do I set this up" or "who can reach me," or wants to check channel status.OfficialRuns commandsEdits files1 finding
- configureAnthropicSet up the Telegram channel — save the bot token and review access policy. Use when the user pastes a Telegram bot token, asks to configure Telegram, asks "how do I set this up" or "who can reach me," or wants to check channel status.OfficialRuns commandsEdits files1 finding
- siegeAnthropic · 1 scriptWork on one hard mathematics problem in rounds: each round a judge writes a few self-contained questions, independent workers answer them, and the judge keeps a ledger of what is proved, refuted and open, until the judge concludes or the rounds run out, and th…OfficialRuns commandsEdits files
- soloAnthropicWork on one hard mathematics problem in this session yourself, with no sub-agents: reason in stages, record each settled step in a notes file so that nothing written is lost if a response is cut off, and end with a self-contained proof.md. Usage: /math-proof:s…OfficialRuns commandsEdits files
- design-mdGoogleAnalyze Stitch projects and synthesize a semantic design system into DESIGN.md filesOfficialEdits files
- enhance-promptGoogleTransforms vague UI ideas into polished, Stitch-optimized prompts. Enhances specificity, adds UI/UX keywords, injects design system context, and structures output for better generation results.OfficialEdits files
- react-vite-dashboardGoogleConvert Stitch designs into production React + Vite dashboards with TanStack Query, accessible tokens from DESIGN.md, and Web3-ready patterns (ethers/viem).OfficialRuns commandsEdits files
- remotionGoogle · 1 scriptGenerate walkthrough videos from Stitch projects using Remotion with smooth transitions, zooming, and text overlaysOfficialReaches the networkRuns commands
- shadcn-uiGoogle · 1 scriptExpert guidance for integrating and building applications with shadcn/ui components, including component discovery, installation, customization, and best practices.OfficialReaches the networkRuns commands
- site-mdGoogleAnalyze a project description or site requirements and synthesize a project constitution into SITE.md for the Stitch Build LoopOfficialEdits files
- stitch-loopGoogleTeaches agents to iteratively build websites using Stitch with an autonomous baton-passing loop patternOfficialReaches the networkRuns commands
- stitch::code-to-designGoogleConvert frontend code (Vite, React, Angular, Vue, etc.) to a Stitch Design by chaining static HTML extraction, design system extraction, and file upload. **ALWAYS** use this skill when the user's intent is to move existing web apps or React/Angular/Vue compone…OfficialRuns commandsEdits files
- stitch::extract-design-mdGoogleExtract a comprehensive design system (DESIGN.md) directly from frontend source code — React, Vue, Svelte, Angular, plain HTML/CSS, or any web framework. Analyzes component files, stylesheets, Tailwind configs, theme definitions, and design tokens to produce a…OfficialRuns commandsEdits files
- stitch::extract-static-htmlGoogle · 3 scriptsExtract self-contained static HTML from a built web application or React components by inlining CSS and images. Use this skill whenever you need to capture a specific UI state, share a static version of a page, or prepare assets for Stitch upload, even if the …OfficialReaches the networkRuns commands2 high findings
- stitch::generate-designGoogleGenerate new screens from text prompts or images, edit existing screens with prompts and design system tokens, and generate design variants using Stitch MCP. Includes prompt enhancement pipeline, design mappings, professional UI/UX terminology, design tokens a…OfficialRuns commandsEdits files
- stitch::manage-design-systemGoogleManage design systems in Stitch using MCP tools. Includes retrieval of assets, creating/updating design systems in Stitch, and applying them to screens.OfficialRuns commandsEdits files
- stitch::react-componentsGoogle · 2 scriptsConverts Stitch designs into modular Vite and React components, or syncs/updates existing React components to align with the latest Stitch designs, using system-level networking and AST-based validation.OfficialReaches the networkRuns commands
- stitch::react-nativeGoogle · 2 scriptsConvert Stitch HTML designs to React Native components, or syncs/updates existing native components to align with the latest Stitch designs, using StyleSheet.OfficialReaches the networkRuns commands
- stitch::upload-to-stitchGoogle · 1 scriptUpload local assets (images, mockups, extracted HTML, design markdown) to a Stitch project. ALWAYS use this skill when you need to upload visual assets, HTML pages, or design docs to Stitch, particularly when direct MCP tool calls fail or truncate due to base6…OfficialReaches the networkRuns commands
- taste-designGoogleSemantic Design System Skill for Google Stitch. Generates agent-friendly DESIGN.md files that enforce premium, anti-generic UI standards — strict typography, calibrated color, asymmetric layouts, perpetual micro-motion, and hardware-accelerated performance.OfficialEdits files
- add-webmcpBrowserbase · 6 scriptsAnalyze an existing web application, identify safe user-visible capabilities across routes, forms, server actions, handlers, and schemas, then implement first-party WebMCP tools and validate discovery and invocation with Stagehand. Use when the user asks to ma…OfficialReaches the networkRuns commands2 findings
- agent-experienceBrowserbaseAudit the developer experience of a product, SDK, docs site, or SKILL.md by dropping multiple Claude subagents at it with only a tiny task prompt and real tools (WebFetch, Bash, Write). Agents must discover the docs themselves, install deps, ask for credential…OfficialDestructive commandsReaches the network1 high finding
- autobrowseBrowserbase · 6 scriptsSelf-improving browser automation via the auto-research loop. Iteratively runs a browsing task, reads the trace, and improves the navigation skill (strategy.md) until it reliably passes. Supports parallel runs across multiple tasks using sub-agents. Use when y…OfficialReaches the networkRuns commands1 high finding
- browser-use-to-stagehandBrowserbaseMigrate browser-use (Python) browser-automation scripts to Stagehand v3 (TypeScript) on Browserbase. Use when the user wants to convert, port, rewrite, or migrate a browser-use Agent script to Stagehand, map browser-use features/APIs to Stagehand primitives (a…OfficialRuns commandsEdits files
- functionsBrowserbaseDeploy serverless browser automation as cloud functions using Browserbase. Use when the user wants to deploy browser automation to run on a schedule or cron, create a webhook endpoint for browser tasks, run automation in the cloud instead of locally, or asks a…OfficialReaches the networkRuns commands1 high finding
- optimize-agent-promptBrowserbase · 1 scriptBuilds and improves Browserbase Agent API demos through an Autobrowse-style outer loop: run a fixed task, collect Agent messages and session logs, score the result, revise one system-prompt heuristic, and confirm convergence. Use when creating a Browserbase Ag…OfficialReaches the networkRuns commands
- safe-browserBrowserbase · 1 scriptBuild local constrained-browser agents with a safe_browser tool that owns CDP, enforces a domain allowlist with Fetch interception, and lets a runtime Claude Agent SDK agent complete browsing tasks without raw browser, shell, or CDP access. Use when the user w…OfficialReaches the networkRuns commands2 high findings
- webmcp-genBrowserbase · 4 scriptsCreate, compile, and validate site-specific WebMCP init scripts from a target URL and desired tool capability. Use when the user wants to author WebMCP tools for a website, produce a webmcp.init.js artifact, or test WebMCP registration and invocation through S…OfficialRuns commandsEdits files1 finding
- eas-workflowsExpo · 1 scriptHelps understand and write EAS workflow YAML files for Expo projects. Use this skill when the user asks about CI/CD or workflows in an Expo or EAS context, mentions .eas/workflows/, or wants help with EAS build pipelines or deployment automation.OfficialReaches the networkRuns commands
- expo-skill-evalExpo · 9 scriptsEvaluate Expo skills in this repo end-to-end - trigger accuracy, generated code quality, and runtime screenshots on iOS simulator and Android emulator via Expo Go (web optional). Use when the user wants to eval an Expo skill, test that a skill produces working…OfficialDestructive commandsReaches the network2 high findings
- ai-release-hunterDaniel AvilaDaily digest of AI releases from Anthropic, Meta, Vercel Labs, OpenAI and Google GitHub repos, the Claude Cowork changelog, the claude.dev blog and Hacker News, deduplicated against a local state file and sent by email. Use when the user asks for a daily AI ne…Reaches the networkRuns commandsEdits files
- app-builderDaniel AvilaMain application building orchestrator. Creates full-stack applications from natural language requests. Determines project type, selects tech stack, coordinates agents.Runs commandsEdits files
- codeqlTrail of Bits · 15 scriptsScans a codebase for security vulnerabilities using CodeQL's interprocedural data flow and taint tracking analysis. Triggers on "run codeql", "codeql scan", "build codeql database", "SAST scan", "taint analysis", "dataflow analysis", or "find vulnerabilities i…Runs commandsEdits files
- differential-reviewTrail of BitsPerforms security-focused differential review of code changes. Adapts analysis depth to codebase size, uses git blame for context, calculates blast radius by counting callers, checks test coverage of modified code, and generates a markdown report. Use when rev…Runs commandsEdits files
- dimensional-analysisTrail of BitsAudits code for unit and decimal-scaling bugs and annotates it with dimensional comments recording the units of each value. Use when someone asks to audit or review code for unit confusion, decimals or scaling mismatches, WAD/RAY scale errors, or the wrong tok…Edits files
- dwarf-expertTrail of BitsAnalyzes DWARF debug information in compiled binaries. Use when inspecting .debug_* sections, DIE trees, or DW_TAG_/DW_AT_ entries with dwarfdump/llvm-dwarfdump or readelf, verifying debug info with llvm-dwarfdump --verify, answering DWARF standard questions, …Reaches the networkRuns commandsEdits files
- fp-checkTrail of BitsSystematically verifies suspected security bugs to eliminate false positives, producing a TRUE POSITIVE or FALSE POSITIVE verdict with documented evidence for each. Use when asked whether a specific finding is real, exploitable, or a false positive, or to veri…Runs commandsEdits files
- github-triageTrail of BitsTriages a repository's open GitHub issues and pull requests via the gh CLI. Optionally reviews and merges ready PRs — incrementally merging passing automated/bot PRs and maintainer-approved ones, and spawning review subagents for never-reviewed ones — then clo…Runs commandsEdits files
- goal-promptTrail of Bits · 2 scriptsDrafts copy-paste-ready /goal commands for goal mode in Claude Code and Codex. Use when the user asks to create, write, rewrite, improve, compress, clean up, or prepare a goal prompt, goal condition, /goal command, goal-mode objective, or copy-ready long-runni…Runs commandsEdits files
- interpreting-culture-indexTrail of Bits · 7 scriptsInterprets Culture Index (CI) surveys, behavioral profiles, and personality assessment data. Supports individual profile interpretation, team composition analysis (gas/brake/glue), burnout detection, profile comparison, hiring profiles, manager coaching, inter…Reaches the networkRuns commandsEdits files3 high findings
- mutation-testingTrail of BitsConfigures mewt or muton campaigns, analyzes surviving mutants, and investigates bugs exposed by testing gaps. Use when setting up mutation testing, reviewing campaign results, identifying equivalent mutants, or finding bugs from surviving mutations.Runs commandsEdits files
- post-patch-validationTrail of Bits · 1 scriptValidates security patches with reproducible baseline-versus-patched evidence, including original exploits, root-cause variants, behavior preservation, regressions, and newly introduced security failures. Use after a patch exists and before accepting, merging,…Runs commandsEdits files
- rust-reviewTrail of BitsPerforms comprehensive Rust security review for safe/unsafe boundary issues, memory safety in unsafe blocks, concurrency hazards, panic-induced DoS, FFI safety, and async runtime mistakes. Use when auditing Rust crates, services, or libraries — particularly th…Runs commandsEdits files
- semgrep-rule-creatorTrail of BitsCreates custom Semgrep rules for detecting security vulnerabilities, bug patterns, and code patterns. Use when writing Semgrep rules or building custom static analysis detections.Reaches the networkRuns commandsEdits files
Labels come from the skill's own files, read on the date shown: the tools its frontmatter allows and the scripts it ships. They are not a safety rating, and no finding is not a safety guarantee. How skills are checked.