Recently Added

Fresh skills just added to the collection. Be the first to try them out!

Showing 2233-2256 of 2400 skills

vuln-research

by AlexanderMattTurner

How to find, confirm, and report a security vulnerability with an AI session — in this repo's own sandbox boundary, in a dependency, or upstream. Activate when the user asks to "find vulnerabilities", "look for a bypass", "attack the sandbox", "audit this for security bugs", "is this exploitable", "write up this finding", or when a scanner, eval, or audit produces a candidate finding you are about to escalate. Also activate before you open a security advisory, file an upstream security report, or claim a boundary is bypassable. Covers a /goal bug hunt, reproduce-before-report, scoring a candidate against THIS threat model instead of a generic pattern, corroborating with the classical tools already wired into this tree, independent refutation before escalation, the maintainer-burden rule that bounds what you send upstream, and why a human sees every finding before anyone outside does. The load-bearing rule is that a finding you cannot reproduce is not a finding.

Code Review 68 9d ago

stress-test

by AlexanderMattTurner

Generates comprehensive smoke and stress tests for infrastructure components (sandbox runtimes, container orchestration, firewall rules, etc.), prioritizing end-to-end realism that catches real setup issues across platforms. Activate when the user asks to "stress test", "smoke test", "test the sandbox", "verify isolation", or wants comprehensive infrastructure testing for a component.

Code Review 68 19d ago

run-ctf

by AlexanderMattTurner

How to run and report the live-fire breakout CTF — glovebox's containment test, where a real autonomous agent attacks the production sandbox stack and a judge grades whether it was contained. Covers the dispatch inputs, the postures (guarded, automode, control), the verdict vocabulary and what each verdict does NOT claim, and the results table a round set is reported as. Activate whenever the user asks to "run the CTF", "run the breakout CTF", "run N rounds on <model>", "check containment / does the sandbox hold", "summarize the CTF results", or wants a CTF transcript. Distinct from run-control-tower, which is the Control Tower / LinuxArena ΔS/ΔU benchmark — a different harness with a different question.

Finance 68 16d ago

run-control-tower

by AlexanderMattTurner

How to run the external Control Tower / LinuxArena eval (glovebox's marginal-defense benchmark) — dispatching the live Kata-microVM e2e, building the cells JSON, picking the agent model + budget, and pulling the .eval transcripts back. Activate whenever the user asks to "run CT", "run the Control Tower eval", "smoke test the CT harness / all CT environments", "run a guarded-condition eval", "dispatch the CT e2e suite", "measure marginal defense / ΔS / ΔU", or wants to scan CT eval transcripts. Covers dispatch mechanics; the honesty rules live in .claude/rules/control-tower-eval.md and load with the CT tree.

Code Review 68 13d ago

pr-creation

by AlexanderMattTurner

Creates high-quality pull requests with an iterative compress-critique-fix loop before submission. Activate this skill whenever you are asked to create, open, submit, or push a pull request, OR whenever a new feature, fix, or refactor is complete and ready to ship. Also activate when the user says "make a PR", "open a PR", "submit this for review", "push and create a PR", "I'm done, create the PR", "the feature is done", "I'm finished", or any variation of completing work / requesting a pull request. Also activate to update, fix, or add to an existing PR — "update the PR", "fix the PR", "add this to the PR" (see "Updating an existing PR"). Always activate before opening or editing a PR, whatever the route — CLI or API tool.

Comments 68 8d ago

peer-review

by AlexanderMattTurner

Runs a fresh, unbiased review of pending changes by delegating to the read-only code-reviewer subagent, then triages and fixes the findings. Activate when the user asks to "review this", "peer review", "get a second opinion", "review my changes/diff/branch", or wants a review pass before opening a PR. Distinct from the built-in /code-review and /review skills: this one drives the project's code-reviewer agent to a fixed point.

Code Review 67 1mo ago

parallel-audit

by AlexanderMattTurner

Runs a broad, multi-dimension codebase audit by fanning out parallel read-only subagents (one per dimension x file-area), independently confirms their findings, then groups the survivors into one fix plan with partitioned commits, on as few PRs as the footprint bound allows, and self-critiques it before delivery. Activate when the user asks to "find dozens of issues", "audit the codebase", "find security/ robustness/testing/UX deficiencies", "use subagents to audit and confirm", "find bugs and missed opportunities", or "make a plan to fix all of these". Distinct from peer-review (which reviews a pending diff) and security-review (single-pass, current branch): this audits the WHOLE codebase along several axes at once and ends in a vetted fix plan, not edits.

Code Review 68 12d ago

markdown-block

by AlexanderMattTurner

Outputs content inside a copyable fenced markdown code block so the user can copy the raw markdown verbatim. Activate whenever the user asks for "copyable markdown", "raw markdown", "the markdown source", "give me the markdown", "as a code block I can copy", or any variation of requesting markdown they can paste elsewhere (READMEs, docs, issues, PR descriptions, chat messages).

Docs Gen 68 1mo ago

handoff

by AlexanderMattTurner

How to write the end-of-session handoff — the residue this session neither owned nor could fix. Activate when the user asks for a handoff, when a session is ending with a known failure still standing, or when you are about to call something "pre-existing", "unrelated" or "not mine". The load-bearing rule is that a handoff is what remains AFTER you fixed what root CLAUDE.md's scope rule makes yours and handed each shared failure to its one owner, never an alternative to either.

File Ops 68 1mo ago

git-workflow

by AlexanderMattTurner

The mechanics of committing, pushing, and resolving merge conflicts in this repo. Activate before you commit or push, when a PR reports a merge conflict or a dirty mergeable_state, when a merge-conflict label or an auto-resolve bot comment arrives, when you must audit a bot's merge resolution or answer a merge-delta finding thread, when you are about to push work that belongs to an already-open PR, and when you are tempted to re-run the suite locally after a push. The load-bearing rule is that a conflict belongs to the auto-resolve workflow, not to you.

Comments 68 8d ago

polymarket

by magnusthovsland

"Query Polymarket: markets, prices, orderbooks, history."

API Dev 0 4mo ago

obliteratus

by magnusthovsland

"OBLITERATUS: abliterate LLM refusals (diff-in-means)."

CLI Tools 0 4mo ago

macos-computer-use

by magnusthovsland

Drive the macOS desktop in the background — screenshots, mouse, keyboard, scroll, drag — without stealing the user's cursor, keyboard focus, or Space. Works with any tool-capable model. Load this skill whenever the computer_use tool is available.

Automation 0 4mo ago

llm-wiki

by magnusthovsland

"Karpathy's LLM Wiki: build/query interlinked markdown KB."

Research 0 4mo ago

llama-cpp

by magnusthovsland

llama.cpp local GGUF inference + HF Hub model discovery.

CLI Tools 0 4mo ago

kanban-worker

by magnusthovsland

Pitfalls, examples, and edge cases for Hermes Kanban workers. The lifecycle itself is auto-injected into every worker's system prompt as KANBAN_GUIDANCE (from agent/prompt_builder.py); this skill is what you load when you want deeper detail on specific scenarios.

Agents 0 4mo ago

kanban-orchestrator

by magnusthovsland

Decomposition playbook + anti-temptation rules for an orchestrator profile routing work through Kanban. The "don't do the work yourself" rule and the basic lifecycle are auto-injected into every kanban worker's system prompt; this skill is the deeper playbook when you're specifically playing the orchestrator role.

Code Review 0 4mo ago