Skill Catalog
Browse 5,478 curated AI agent skills. No account needed.
Task Creator
Creates implementation, refactoring, and test tasks from templates. Use when an approved task plan needs tasks created via the configured tracker provider and reflected in kanban.
by levnikolaevich/claude-code-skills / plugins/agile-workflow/skills/ln-301-task-creator
Taskflow
Coordinate multi-step detached tasks as one durable TaskFlow job with owner context, state, waits, and child tasks.
by openclaw/openclaw / skills/taskflow
TaskFlow inbox triage
Example TaskFlow pattern for inbox triage, intent routing, waiting on replies, and later summaries.
by openclaw/openclaw / skills/taskflow-inbox-triage
Task Management
Simple task management using a shared TASKS.md file. Reference this when the user asks about their tasks, wants to add/complete tasks, or needs help tracking commitments.
by anthropics/knowledge-work-plugins / productivity/skills/task-management
Task Plan Implementation Instructions
Instructions for implementing task plans with progressive tracking and change record - Brought to you by microsoft/edge-ai
by github/awesome-copilot / instructions/task-implementation.instructions.md
Task Planner Instructions
Task planner for creating actionable implementation plans - Brought to you by microsoft/edge-ai
by github/awesome-copilot / agents/task-planner.agent.md
Task Researcher Instructions
Task research specialist for comprehensive project analysis - Brought to you by microsoft/edge-ai
by github/awesome-copilot / agents/task-researcher.agent.md
Task Rework Executor
Fixes tasks in To Rework by applying reviewer feedback, then returns to To Review. Use when task was rejected during review.
by levnikolaevich/claude-code-skills / plugins/agile-workflow/skills/ln-403-task-rework
tasks (v1)
Google Tasks: Manage task lists and tasks.
by googleworkspace/cli / skills/gws-tasks
TaskSync V5 Protocol
TaskSync V5 - Allows you to give the agent new instructions or feedback after completing a task using terminal while agent is running.
by github/awesome-copilot / instructions/tasksync.instructions.md
Tavily
Tavily web search, content extraction, and research tools.
by openclaw/openclaw / extensions/tavily/skills/tavily
tavily-web
Web search, content extraction, crawling, and research capabilities using Tavily API. Use when you need to search the web for current information, extracting content from URLs, or crawling websites.
by sickn33/antigravity-awesome-skills / plugins/antigravity-awesome-skills-claude/skills/tavily-web
TaxCore Technical Writer
A domain-expert technical writer for the TaxCore electronic fiscal invoicing ecosystem. Use this agent to create, improve, or review documentation for TaxCore applications — including the Secure Element Reader, smart card workflows, fiscal invoicing concepts, audit processes, and PKI/SE security topics. Covers end-user guides, developer docs, reference material, and setup guides across all TaxCore-related surfaces.
by github/awesome-copilot / agents/taxcore-technical-writer.agent.md
Tax Document Organizer & Deduction Finder
Creates a tax document checklist, organizes receipts and forms by category, identifies common deductions via Brave Search, and generates a tax prep summary for your accountant. Prerequisites: brave-search MCP, python3.
by AgentArmory
Tax Efficiency
Maximizes after-tax returns through strategic asset location, gain/loss management, and withdrawal sequencing. Use when the user asks about asset location, Roth conversions, tax-efficient withdrawals, tax lot selection, or charitable giving with appreciated securities. Also trigger when users mention 'which account should I hold bonds in', 'tax drag', 'Roth vs Traditional', 'RMD planning', 'bracket stuffing', 'HIFO vs FIFO', or ask how to minimize taxes on investments. For tax-loss harvesting execution and wash-sale mechanics, see the tax-loss-harvesting skill.
by JoelLewis/finance_skills / plugins/wealth-management/skills/tax-efficiency
Tax Loss Harvesting
Execute a complete tax-loss harvesting workflow from candidate identification through post-harvest monitoring. Use when the user asks about finding TLH candidates, gain/loss budgeting, replacement security selection, wash-sale compliance, or harvest execution planning. Also trigger when users mention 'unrealized losses in my portfolio', 'swap ETFs for tax purposes', 'harvest losses before year-end', 'substantially identical security', 'wash-sale window', 'NIIT offset', 'loss carryforward', or ask how much tax they can save by harvesting.
by JoelLewis/finance_skills / plugins/wealth-management/skills/tax-loss-harvesting
Tcm Constitution Analyzer
分析中医体质数据、识别体质类型、评估体质特征,并提供个性化养生建议。支持与营养、运动、睡眠等健康数据的关联分析。
by huifer/WellAlly-health / .claude/skills/tcm-constitution-analyzer
Tdd
Test-driven development. Use when the user wants to build features or fix bugs test-first, mentions "red-green-refactor", or wants integration tests.
by mattpocock/skills / skills/engineering/tdd
TDD Green Phase - Make Tests Pass Quickly
Implement minimal code to satisfy GitHub issue requirements and make failing tests pass without over-engineering.
by github/awesome-copilot / agents/tdd-green.agent.md
Tdd Guide
Test-first development route for TDD, writing failing tests first, RED -> GREEN -> REFACTOR, and behavior-changing feature/bug/refactor work. Do not use for already-failing test root-cause debugging, test-report packaging, or final completion evidence.
by foryourhealth111-pixel/Vibe-Skills / bundled/skills/tdd-guide
TDD Guide
Test-driven development skill for writing unit tests, generating test fixtures and mocks, analyzing coverage gaps, and guiding red-green-refactor workflows across Jest, Pytest, JUnit, Vitest, and Mocha. Use when the user asks to write tests, improve test coverage, practice TDD, generate mocks or stubs, or mentions testing frameworks like Jest, pytest, or JUnit.
by alirezarezvani/claude-skills / engineering-team/skills/tdd-guide
TDD Red Phase - Write Failing Tests First
Guide test-first development by writing failing tests that describe desired behaviour from GitHub issue context before implementation exists.
by github/awesome-copilot / agents/tdd-red.agent.md
TDD Refactor Phase - Improve Quality & Security
Improve code quality, apply security best practices, and enhance design whilst maintaining green tests and GitHub issue compliance.
by github/awesome-copilot / agents/tdd-refactor.agent.md
Teach
Deep pedagogical guidance - learn technology by doing with Socratic teaching. Use when learning a new framework or wanting to understand WHY, not just HOW.
by TaylorHuston/local-life-manager / .claude/skills/teach
Team Communication Protocols
Structured messaging protocols for agent team communication including message type selection, plan approval, shutdown procedures, and anti-patterns to avoid. Use this skill when establishing communication norms for a newly spawned team, when deciding whether to send a direct message or a broadcast, when a team-lead needs to review and approve an implementer's plan before work begins, when orchestrating a graceful team shutdown after all tasks are complete, or when debugging why teammates are not coordinating correctly at integration points.
by wshobson/agents / plugins/agent-teams/skills/team-communication-protocols
Team Composition Analysis
Design optimal team structures, hiring plans, compensation strategies, and equity allocation for early-stage startups from pre-seed through Series A. Use this skill when planning headcount, determining which roles to hire next, setting compensation or equity ranges, designing org structure, or building a hiring budget aligned to funding milestones.
by wshobson/agents / plugins/startup-business-analyst/skills/team-composition-analysis
Team Composition Patterns
Design optimal agent team compositions with sizing heuristics, preset configurations, and agent type selection. Use this skill when deciding how many agents to spawn for a task, when choosing between a review team versus a feature team versus a debug team, when selecting the correct subagent_type for each role to ensure agents have the tools they need, when configuring display modes (tmux, iTerm2, in-process) for a CI or local environment, or when building a custom team composition for a non-standard workflow such as a migration or security audit.
by wshobson/agents / plugins/agent-teams/skills/team-composition-patterns
Team Coordination
Multi-person projects - shared state, todo claiming, handoffs
by alinaqi/maggy / skills/team-coordination
Team Lead
Lead a team — run standups, coordinate tasks, and communicate.
by googleworkspace/cli / skills/persona-team-lead
Team Manager
GitHub organization team command center -- create and manage teams, add and remove members, handle member onboarding and offboarding workflows, synchronize access across repos, and report on team composition and permissions.
by Community-Access/accessibility-agents / codex-skills/team-manager
Teams Channel Post Writer
Creates educational Teams channel posts for internal knowledge sharing about Claude Code features, tools, and best practices. Applies when writing posts, announcements, or documentation to teach colleagues effective Claude Code usage, announce new features, share productivity tips, or document lessons learned. Provides templates, writing guidelines, and structured approaches emphasizing concrete examples, underlying principles, and connections to best practices like context engineering. Activates for content involving Teams posts, channel announcements, feature documentation, or tip sharing.
by daymade/claude-code-skills / teams-channel-post-writer
Teams Meeting Pipeline
Operate the Teams meeting summary pipeline via Hermes CLI — summarize meetings, inspect pipeline status, replay jobs, manage Microsoft Graph subscriptions.
by NousResearch/hermes-agent / skills/productivity/teams-meeting-pipeline
Teams Migration
Migrate MS Teams chat content to channels or between chats. USE WHEN teams migration, migrate chat, copy messages, teams channel, move chat history, teams backup, chat to channel. SkillSearch('teamsmigration') for docs.
by julianobarbosa/claude-code-skills / skills/teams-migration
Teams Migration Skill
Teams Migration Skill linked from Juliano Barbosa Claude Code Skills, with the upstream skill instructions available on GitHub.
by julianobarbosa/claude-code-skills / skills/teams-migration-skill
Technical Analyst
This skill should be used when analyzing weekly price charts for stocks, stock indices, cryptocurrencies, or forex pairs. Use this skill when the user provides chart images and requests technical analysis, trend identification, support/resistance levels, scenario planning, or probability assessments based purely on chart data without consideration of news or fundamental factors.
by tradermonty/claude-trading-skills / skills/technical-analyst
Technical Content Evaluator
Elite technical content editor and curriculum architect for evaluating technical training materials, documentation, and educational content. Reviews for technical accuracy, pedagogical excellence, content flow, code validation, and ensures A-grade quality standards.
by github/awesome-copilot / agents/technical-content-evaluator.agent.md
Technical Debt Remediation Plan
Generate technical debt remediation plans for code, tests, and documentation.
by github/awesome-copilot / agents/tech-debt-remediation-plan.agent.md
Technical Doc Creator
Create HTML technical documentation with code blocks, API workflows, system architecture diagrams, and syntax highlighting. Use when users request technical documentation, API docs, API references, code examples, or developer documentation.
by mhattingpete/claude-skills-marketplace / visual-documentation-plugin/skills/technical-doc-creator
Technical Documentation Writer
Generates comprehensive technical documentation from code. Prerequisites: pandoc.
by AgentArmory
Technical Documentation Writer for GitHub Actions
AI technical documentation writer for GitHub Actions library using GitHub Docs voice
by github/gh-aw / .github/agents/technical-doc-writer.agent.md
Technical spike research mode
Systematically research and validate technical spike documents through exhaustive investigation and controlled experimentation.
by github/awesome-copilot / agents/research-technical-spike.agent.md
Technology Stack Blueprint Generator
Comprehensive technology stack blueprint generator that analyzes codebases to create detailed architectural documentation. Automatically detects technology stacks, programming languages, and implementation patterns across multiple platforms (.NET, Java, JavaScript, React, Python). Generates configurable blueprints with version information, licensing details, usage patterns, coding conventions, and visual diagrams. Provides implementation-ready templates and maintains architectural consistency for guided development.
by github/awesome-copilot / skills/technology-stack-blueprint-generator
Tech Resume Optimizer
Optimize resumes for software engineering, PM, and technical roles
by Paramchoudhary/ResumeSkills / skills/tech-resume-optimizer
Telegram Bot
Telegram bot development - chatbots, notifications, AI assistants, and group automation
by claude-office-skills/skills / telegram-bot
Telegram Reader
Read Telegram channels and groups for financial news and market research using tdl (read-only). Use this skill whenever the user wants to read Telegram channels, export messages from financial Telegram groups, list their Telegram chats, search for news in Telegram channels, or gather market intelligence from Telegram. Triggers include: "check my Telegram", "read Telegram channel", "Telegram news", "what's new in my Telegram channels", "export messages from", "list my Telegram chats", "financial news on Telegram", "crypto Telegram", "market news Telegram", any mention of Telegram in context of reading financial news, crypto signals, or market research. This skill is READ-ONLY — it does NOT support sending messages, joining channels, or any write operations.
by himself65/finance-skills / plugins/social-readers/skills/telegram-reader
Telephony
Give Hermes phone capabilities without core tool changes. Provision and persist a Twilio number, send and receive SMS/MMS, make direct calls, and place AI-driven outbound calls through Bland.ai or Vapi.
by NousResearch/hermes-agent / optional-skills/productivity/telephony
Template Builder
Interactive guided wizard for creating GitHub issue templates, PR templates, and discussion templates. Answer simple questions and get production-ready YAML templates -- no manual YAML writing required.
by Community-Access/accessibility-agents / codex-skills/template-builder
Template Engine
Auto-fill document templates with data - mail merge for any format
by claude-office-skills/skills / template-engine
Tempo
Guide for implementing Grafana Tempo - a high-scale distributed tracing backend for OpenTelemetry traces. Use when configuring Tempo deployments, setting up storage backends (S3, Azure Blob, GCS), writing TraceQL queries, deploying via Helm, understanding trace structure, or troubleshooting Tempo issues on Kubernetes.
by julianobarbosa/claude-code-skills / skills/tempo
Tempo
Designing scheduling and time-aware logic for cron, timezone/DST, retry/backoff, and business-calendar systems. Use when schedule design is needed.
by simota/agent-skills / tempo
Temporal Python Testing
Test Temporal workflows with pytest, time-skipping, and mocking strategies. Covers unit testing, integration testing, replay testing, and local development setup. Use when implementing Temporal workflow tests or debugging test failures.
by wshobson/agents / plugins/backend-development/skills/temporal-python-testing
Temporary Id Safe Output
Temporary Id Safe Output linked from GitHub Agentic Workflows skills and agent definitions, with the upstream skill instructions available on GitHub.
by github/gh-aw / skills/temporary-id-safe-output
Temporary ID Safe Output
Add temporary ID support to safe-output jobs end to end.
by github/gh-aw / .github/skills/temporary-id-safe-output
Tempo Skill
Tempo Skill linked from Juliano Barbosa Claude Code Skills, with the upstream skill instructions available on GitHub.
by julianobarbosa/claude-code-skills / skills/tempo-skill
Tensorboard
Visualize training metrics, debug models with histograms, compare experiments, visualize model graphs, and profile performance with TensorBoard - Google's ML visualization toolkit
by foryourhealth111-pixel/Vibe-Skills / bundled/skills/tensorboard
Tensorrt LLM
Optimizes LLM inference with NVIDIA TensorRT for maximum throughput and lowest latency. Use for production deployment on NVIDIA GPUs (A100/H100), when you need 10-100x faster inference than PyTorch, or for serving models with quantization (FP8/INT4), in-flight batching, and multi-GPU scaling.
by NousResearch/hermes-agent / optional-skills/mlops/tensorrt-llm
Terminal Helper
Fast terminal syntax and command helper for PowerShell and Bash
by github/awesome-copilot / agents/terminal-helper.agent.md
Termination Review
Termination review — high-risk flag detection, severance + release, and final pay timing by jurisdiction. Jurisdiction-specific rules and release consideration periods are researched per review, not stored. Use when the user says "reviewing a termination", "can we fire this person", "term review", or describes a termination scenario.
by anthropics/claude-for-legal / employment-legal/skills/termination-review
Terraform Agent
Terraform infrastructure specialist with automated HCP Terraform workflows. Leverages Terraform MCP server for registry integration, workspace management, and run orchestration. Generates compliant code using latest provider/module versions, manages private registries, automates variable sets, and orchestrates infrastructure deployments with proper validation and security practices.
by github/awesome-copilot / agents/terraform.agent.md
Terraform Azurerm Set Diff Analyzer
Analyze Terraform plan JSON output for AzureRM Provider to distinguish between false-positive diffs (order-only changes in Set-type attributes) and actual resource changes. Use when reviewing terraform plan output for Azure resources like Application Gateway, Load Balancer, Firewall, Front Door, NSG, and other resources with Set-type attributes that cause spurious diffs due to internal ordering changes.
by github/awesome-copilot / skills/terraform-azurerm-set-diff-analyzer
Terraform Conventions
Terraform Conventions and Guidelines
by github/awesome-copilot / instructions/terraform.instructions.md
Terraform Engineer
Use when implementing infrastructure as code with Terraform across AWS, Azure, or GCP. Invoke for module development (create reusable modules, manage module versioning), state management (migrate backends, import existing resources, resolve state conflicts), provider configuration, multi-environment workflows, and infrastructure testing.
by Jeffallan/claude-skills / skills/terraform-engineer
Terraform IaC Reviewer
Terraform-focused agent that reviews and creates safer IaC changes with emphasis on state safety, least privilege, module patterns, drift detection, and plan/apply discipline
by github/awesome-copilot / agents/terraform-iac-reviewer.agent.md
Terraform Module Library
Build reusable Terraform modules for AWS, Azure, GCP, and OCI infrastructure following infrastructure-as-code best practices. Use when creating infrastructure modules, standardizing cloud provisioning, or implementing reusable IaC components.
by wshobson/agents / plugins/cloud-infrastructure/skills/terraform-module-library
Terraform on SAP BTP – Best Practices & Conventions
Terraform conventions and guidelines for SAP Business Technology Platform (SAP BTP).
by github/awesome-copilot / instructions/terraform-sap-btp.instructions.md
Terraform Search Import
Discover existing cloud resources using Terraform Search queries and bulk import them into Terraform management. Use when bringing unmanaged infrastructure under Terraform control, auditing cloud resources, or migrating to IaC.
by hashicorp/agent-skills / terraform/code-generation/skills/terraform-search-import
Terraform Skill
Operational traps for Terraform provisioners, multi-environment isolation, and zero-to-deployment reliability. Use when writing null_resource / remote-exec / local-exec / file provisioners, setting up fresh instances with cloud-init, or any IaC code that SSHs into remote hosts; when creating multi-environment Terraform setups (DNS record duplication, snapshot cross-contamination); or when debugging containers that are Restarting/unhealthy after terraform apply. Also when the user mentions terraform plan/apply errors, provisioner failures, infrastructure drift, TLS certificate errors, Cloudflare credential format, or Caddy/gateway / Caddyfile / compose configuration.
by daymade/claude-code-skills / terraform-skill
Terraform Stacks
Comprehensive guide for working with HashiCorp Terraform Stacks. Use when creating, modifying, or validating Terraform Stack configurations (.tfcomponent.hcl, .tfdeploy.hcl files), working with stack components and deployments from local modules, public registry, or private registry sources, managing multi-region or multi-environment infrastructure, or troubleshooting Terraform Stacks syntax and structure.
by hashicorp/agent-skills / terraform/module-generation/skills/terraform-stacks
Terraform Style Guide
Generate Terraform HCL code following HashiCorp's official style conventions and best practices. Use when writing, reviewing, or generating Terraform configurations.
by hashicorp/agent-skills / terraform/code-generation/skills/terraform-style-guide
Terraform Test
Comprehensive guide for writing and running Terraform tests. Use when creating test files (.tftest.hcl), writing test scenarios with run blocks, validating infrastructure behavior with assertions, mocking providers and data sources, testing module outputs and resource configurations, or troubleshooting Terraform test syntax and execution.
by hashicorp/agent-skills / terraform/code-generation/skills/terraform-test
Terratest Module Testing
Generate and refactor Go Terratest suites for Terraform modules, including CI-safe patterns, staged tests, and negative-path validation.
by github/awesome-copilot / agents/terratest-module-testing.agent.md
Testcafe Skill
Generates TestCafe automation tests in JavaScript or TypeScript. Supports local and TestMu AI cloud. Triggers on: "TestCafe", "test cafe", "fixture/test".
by LambdaTest/agent-skills / testcafe-skill
Testcontainers Dotnet
A comprehensive guide for using Testcontainers for .NET (4.10.0+) to write reliable integration tests with Docker containers in .NET projects. Supports 65+ pre-configured modules for databases, message queues, cloud services, and more.
by testcontainers/claude-skills / plugins/testcontainers/skills/testcontainers-dotnet
Testcontainers Go
A comprehensive guide for using Testcontainers for Go to write reliable integration tests with Docker containers in Go projects. Supports 62+ pre-configured modules for databases, message queues, cloud services, and more. Use this skill when writing Go integration tests, setting up test databases (PostgreSQL, MySQL, Redis, MongoDB), testing with message queues (Kafka, RabbitMQ), or creating container-based test infrastructure. Covers modules, generic containers, networking, cleanup, wait strategies, CI/CD integration, and common anti-patterns.
by testcontainers/claude-skills / plugins/testcontainers/skills/testcontainers-go
Test Driven Development
Use when implementing any feature or bugfix, before writing implementation code
by guanyang/antigravity-skills / skills/test-driven-development
Test Driven Development
Drives development with tests. Use when implementing any logic, fixing any bug, or changing any behavior. Use when you need to prove that code works, when a bug report arrives, or when you're about to modify existing functionality.
by addyosmani/agent-skills / skills/test-driven-development
Test Driven Development
TDD: enforce RED-GREEN-REFACTOR, tests before code.
by NousResearch/hermes-agent / skills/software-development/test-driven-development
Test Fixing
Run tests and systematically fix all failing tests using smart error grouping. Use when user asks to fix failing tests, mentions test failures, runs test suite and failures occur, or requests to make tests pass.
by mhattingpete/claude-skills-marketplace / engineering-workflow-plugin/skills/test-fixing
Test Framework Migration Skill
Migrates and converts test automation scripts between Selenium, Playwright, Puppeteer, and Cypress. Use when the user asks to migrate, convert, or port tests from one framework to another; rewrite tests in a different framework; or switch from Selenium to Playwright, Playwright to Selenium, Puppeteer to Playwright, Cypress to Playwright, or vice versa. Triggers on: "migrate", "convert", "port", "selenium to playwright", "playwright to selenium", "puppeteer to playwright", "cypress to playwright", "rewrite tests in", "switch from [framework] to [framework]".
by LambdaTest/agent-skills / test-framework-migration-skill
Test Generation with Playwright MCP
Generate a Playwright test based on a scenario using Playwright MCP
by github/awesome-copilot / skills/playwright-generate-test
Testing Android Intents For Vulnerabilities
Tests Android inter-process communication (IPC) through intents for vulnerabilities including intent injection, unauthorized component access, broadcast sniffing, pending intent hijacking, and content provider data leakage. Use when assessing Android app attack surface through exported components, testing intent-based data flows, or evaluating IPC security. Activates for requests involving Android intent security, IPC testing, exported component analysis, or Drozer assessment.
by mukul975/Anthropic-Cybersecurity-Skills / skills/testing-android-intents-for-vulnerabilities
Testing API Authentication Weaknesses
Tests API authentication mechanisms for weaknesses including broken token validation, missing authentication on endpoints, weak password policies, credential stuffing susceptibility, token leakage in URLs or logs, and session management flaws. The tester evaluates JWT implementation, API key handling, OAuth flows, and session token entropy to identify authentication bypasses. Maps to OWASP API2:2023 Broken Authentication. Activates for requests involving API authentication testing, token validation assessment, credential security testing, or API auth bypass.
by mukul975/Anthropic-Cybersecurity-Skills / skills/testing-api-authentication-weaknesses
Testing API For Broken Object Level Authorization
Tests REST and GraphQL APIs for Broken Object Level Authorization (BOLA/IDOR) vulnerabilities where an authenticated user can access or modify resources belonging to other users by manipulating object identifiers in API requests. The tester intercepts API calls, identifies object ID parameters (numeric IDs, UUIDs, slugs), and systematically replaces them with IDs belonging to other users to determine if the server enforces per-object authorization. This is OWASP API Security Top 10 2023 risk API1. Activates for requests involving BOLA testing, IDOR in APIs, object-level authorization testing, or API access control bypass.
by mukul975/Anthropic-Cybersecurity-Skills / skills/testing-api-for-broken-object-level-authorization
Testing API For Mass Assignment Vulnerability
Tests APIs for mass assignment (auto-binding) vulnerabilities where clients can modify object properties they should not have access to by including additional parameters in API requests. The tester identifies writable endpoints, adds undocumented fields to request bodies (role, isAdmin, price, balance), and checks if the server binds these to the data model without filtering. Part of OWASP API3:2023 Broken Object Property Level Authorization. Activates for requests involving mass assignment testing, parameter binding abuse, auto-binding vulnerability, or API over-posting.
by mukul975/Anthropic-Cybersecurity-Skills / skills/testing-api-for-mass-assignment-vulnerability
Testing API Security With Owasp Top 10
Systematically assessing REST and GraphQL API endpoints against the OWASP API Security Top 10 risks using automated and manual testing techniques.
by mukul975/Anthropic-Cybersecurity-Skills / skills/testing-api-security-with-owasp-top-10
Testing Coach
Accessibility testing coach for web applications. Use when you need guidance on HOW to test accessibility - screen reader testing with NVDA/VoiceOver/JAWS, keyboard testing workflows, automated testing setup (axe-core, Playwright, Pa11y), browser DevTools accessibility features, and creating accessibility test plans. Does not write product code - teaches and guides testing practices.
by Community-Access/accessibility-agents / codex-skills/testing-coach
Testing Compose In Release Mode
Use this skill to ensure Jetpack Compose performance numbers reflect production reality by measuring against a release variant with R8 enabled, Live Literals disabled, and Compose Compiler reports read from the release output directory. Covers why debug builds lie (interpreted Compose runtime, JIT warmup, Live Literals constant-getters), how to set up a release-with-symbols measurement build, and how to wire Macrobenchmark, Compose Compiler reports, Layout Inspector, simpleperf, and Android Studio Profiler against it. Cited result is roughly 75 percent startup gain and 60 percent frame-render gain debug to release. Use when the developer reports "slow startup", "jank", "dropped frames", "high recomposition count", or quotes timings from `assembleDebug`, Layout Inspector, or `CompilationMode.None`. Use when reviewing a perf bug, setting up a CI perf gate, or before filing a perf regression.
by skydoves/compose-performance-skills / measurement/testing-compose-in-release-mode
Testing Cors Misconfiguration
Identifying and exploiting Cross-Origin Resource Sharing misconfigurations that allow unauthorized cross-domain data access and credential theft during security assessments.
by mukul975/Anthropic-Cybersecurity-Skills / skills/testing-cors-misconfiguration
Testing For Broken Access Control
Systematically testing web applications for broken access control vulnerabilities including privilege escalation, missing function-level checks, and insecure direct object references.
by mukul975/Anthropic-Cybersecurity-Skills / skills/testing-for-broken-access-control
Testing For Business Logic Vulnerabilities
Identifying flaws in application business logic that allow price manipulation, workflow bypass, and privilege escalation beyond what technical vulnerability scanners can detect.
by mukul975/Anthropic-Cybersecurity-Skills / skills/testing-for-business-logic-vulnerabilities
Testing For Email Header Injection
Test web application email functionality for SMTP header injection vulnerabilities that allow attackers to inject additional email headers, modify recipients, and abuse contact forms for spam relay.
by mukul975/Anthropic-Cybersecurity-Skills / skills/testing-for-email-header-injection
Testing For Host Header Injection
Test web applications for HTTP Host header injection vulnerabilities to identify password reset poisoning, web cache poisoning, SSRF, and virtual host routing manipulation risks.
by mukul975/Anthropic-Cybersecurity-Skills / skills/testing-for-host-header-injection
Testing For JSON Web Token Vulnerabilities
Test JWT implementations for critical vulnerabilities including algorithm confusion, none algorithm bypass, kid parameter injection, and weak secret exploitation to achieve authentication bypass and privilege escalation.
by mukul975/Anthropic-Cybersecurity-Skills / skills/testing-for-json-web-token-vulnerabilities
Testing For Open Redirect Vulnerabilities
Identify and test open redirect vulnerabilities in web applications by analyzing URL redirection parameters, bypass techniques, and exploitation chains for phishing and token theft.
by mukul975/Anthropic-Cybersecurity-Skills / skills/testing-for-open-redirect-vulnerabilities
Testing For Sensitive Data Exposure
Identifying sensitive data exposure vulnerabilities including API key leakage, PII in responses, insecure storage, and unprotected data transmission during security assessments.
by mukul975/Anthropic-Cybersecurity-Skills / skills/testing-for-sensitive-data-exposure
Testing For XML Injection Vulnerabilities
Test web applications for XML injection vulnerabilities including XXE, XPath injection, and XML entity attacks to identify data exposure and server-side request forgery risks.
by mukul975/Anthropic-Cybersecurity-Skills / skills/testing-for-xml-injection-vulnerabilities
Testing For Xss Vulnerabilities
Tests web applications for Cross-Site Scripting (XSS) vulnerabilities by injecting JavaScript payloads into reflected, stored, and DOM-based contexts to demonstrate client-side code execution, session hijacking, and user impersonation. The tester identifies all injection points and output contexts, crafts context-appropriate payloads, and bypasses sanitization and CSP protections. Activates for requests involving XSS testing, cross-site scripting assessment, client-side injection testing, or JavaScript injection vulnerability testing.
by mukul975/Anthropic-Cybersecurity-Skills / skills/testing-for-xss-vulnerabilities
Testing For Xss Vulnerabilities With Burpsuite
Identifying and validating cross-site scripting vulnerabilities using Burp Suite's scanner, intruder, and repeater tools during authorized security assessments.
by mukul975/Anthropic-Cybersecurity-Skills / skills/testing-for-xss-vulnerabilities-with-burpsuite
Testing For Xxe Injection Vulnerabilities
Discovering and exploiting XML External Entity injection vulnerabilities to read server files, perform SSRF, and exfiltrate data during authorized penetration tests.
by mukul975/Anthropic-Cybersecurity-Skills / skills/testing-for-xxe-injection-vulnerabilities
Testing JWT Token Security
Assessing JSON Web Token implementations for cryptographic weaknesses, algorithm confusion attacks, and authorization bypass vulnerabilities during security engagements.
by mukul975/Anthropic-Cybersecurity-Skills / skills/testing-jwt-token-security