Trusted skills for AI agents from official vendors and established maintainers. Every skill is attributed to its author, scanned, and comes with install steps for your AI tool.
5813 skills
Trail of BitsOfficial
Automates the porting of Semgrep rules to new languages through a structured, test-driven workflow.
Trail of BitsOfficial
A structured workflow for reproducing, patching, and verifying single bugs in a local Git repository.
Trail of BitsOfficial
Automated security scanner for identifying Firebase misconfigurations in Android APK files.
Trail of BitsOfficial
Standard fuzzing tool for Cargo-based Rust projects using libFuzzer.
Trail of BitsOfficial
Validate cryptographic implementations against a comprehensive collection of known attack vectors and edge cases.
Trail of BitsOfficial
Automated security audit tool for detecting missing or compiler-optimized zeroization of sensitive data in C, C++, and Rust codebases.
Trail of BitsOfficial
A systematic workflow for mapping codebase architecture, assumptions, and dependencies before beginning a security audit.
Trail of BitsOfficial
Static security analysis tool for identifying AI agent vulnerabilities in GitHub Actions workflows.
Trail of BitsOfficial
Orchestrates mutation testing campaigns using mewt or muton to identify testing gaps and uncover hidden bugs.
Trail of BitsOfficial
A coverage-guided fuzzer for Python code and C extensions based on libFuzzer.
Trail of BitsOfficial
Expands a confirmed vulnerability into a list of graph-derived variant candidates for security review.
Trail of BitsOfficial
Provides independent code reviews for uncommitted changes, branch diffs, and commits using Codex or Antigravity.
Trail of BitsOfficial
Automates the creation of standardized, secure development environments using devcontainers.
Trail of BitsOfficial
A workflow for delegating focused code analysis tasks to subagents using graph-informed source slices.
Trail of BitsOfficial
Integrate AddressSanitizer (ASan) into your build process to detect memory corruption bugs like buffer overflows and use-after-free errors.
Trail of BitsOfficial
Automated security scanning for Cosmos SDK modules and CosmWasm contracts to detect consensus-critical vulnerabilities.
Trail of BitsOfficial
A structured workflow for preparing and documenting source code states to investigate software regressions.
Trail of BitsOfficial
Enforces the use of the authenticated gh CLI for GitHub interactions instead of unauthenticated fetch methods.
OpenAIOfficial
Use when sizing Public Equity Investing positions, finding equity hedges, or building an integrated position-and-hedge risk plan from a listed-equity thesis. Do not use for thesis construction, standalone event underwriting, trade execution, personal investment advice, or credit-instrument risk.
OpenAIOfficial
Diagnose why a metric changed or differs from expectation. Use when the task is to identify likely drivers of a metric movement, anomaly, gap, or discrepancy.
OpenAIOfficial
Produce Public Equity Investing comparable-company valuation in report or workbook mode. Use for peer selection, multiple analysis, valuation read-throughs, implied prices, comps dashboards, Excel or Sheets comps, refreshable peer tables, model updates, and comps workbook QA. Do not use for DCF-only, credit-security, or generic market commentary requests.
OpenAIOfficial
Stripe payments integration guidance — native Vercel Marketplace setup, checkout sessions, webhook handling, subscription billing, and the Stripe SDK. Use when implementing payments, subscriptions, or processing transactions.
OpenAIOfficial
Configure automatic conversation capture and routing with Twilio Conversation Orchestrator. Covers Configuration creation, channel capture rules, grouping types, status timeouts, Memory Store linkage, Intelligence linkage, and conversation lifecycle. Use this skill to automatically capture SMS, voice, WhatsApp, RCS, and web chat traffic into unified conversations without manually creating conversations or participants.
OpenAIOfficial
A rigorous framework for processing code review feedback with technical verification and objective communication.