Web3 与加密
区块链、加密货币与 Web3 开发
sast-spotbugs
vchirrav
Run SpotBugs with Find Security Bugs plugin on Java code. Detects injection flaws, XXE, insecure crypto, SSRF, deserialization, and other JVM security bugs.
massive-api
bruce-shi
Access Massive(Polygon) stock, crypto, forex, options, indices, futures, market data, and news APIs via CLI.
web3-testing
Krosebrook
Test smart contracts comprehensively using Hardhat and Foundry with unit tests, integration tests, and mainnet forking. Use when testing Solidity contracts, setting up blockchain test suites, or validating DeFi protocols.
sast-bandit
vchirrav
Run Bandit SAST scans on Python code. Detects common security issues like SQL injection, hardcoded passwords, exec usage, and insecure crypto.
glam
glamsystems
"Solana vault management via GLAM Protocol. Triggers: glam, glam-cli, glam-sdk, vault create/manage, tokenized vault, share class, DeFi vault, treasury, asset management, access control, delegate permissions, Jupiter swap, Drift perpetuals/spot/vaults, Kamino lending/borrow/vaults/farms, staking (Marinade/native/SPL/Sanctum/LST), cross-chain USDC (CCTP), timelock, subscription/redemption, NAV pricing, token transfer. Supports CLI and TypeScript SDK."
mobile-security-mobsf
vchirrav
Run MobSF (Mobile Security Framework) for automated static and dynamic analysis of Android and iOS apps. Detects insecure storage, weak crypto, hardcoded secrets, and permission issues.
Exoskeletons — AI Agent Identity Skill
Potdealer
CC0 — Creative Commons Zero. Built by potdealer & Ollie, February 2026.
owasp-top-10
yariv1025
"OWASP Top 10 web application security risks - prevention, detection, and remediation. Use when implementing or reviewing access control, authentication, crypto/sensitive data, input validation and injection, secure design, security configuration, dependency management, session/identity, deserialization or CI/CD integrity, logging and monitoring, or server-side requests (SSRF)."
Crypto Multi-Timeframe Price Action & Smart Money Analyzer (5m Focus)
zzy7517
融合经典价格行为、Smart Money Concepts与衍生品市场数据的多时间框架分析专家。每次必须从日线开始，自上而下分析日线→4H→1H→15m→5m→1m。涵盖市场结构、机构行为（Order Block/FVG/流动性扫荡）、多空力量对比、成交量确认、多空比/主动买卖/爆仓数据。最终在5分钟级别寻找高概率交易机会。客观分析，不直接给出买卖建议。
move-expert
Rahat-ch
Move language expert for Movement blockchain. Automatically triggered when working with .move files, discussing Move/Movement/Aptos concepts, debugging Move compiler errors, or building smart contracts.
alphavantage
luohy15
Alpha Vantage API documentation reference - provides comprehensive information about stock data, forex, crypto, technical indicators, and fundamental data APIs.
chainlens
brucey0017-cloud
"ChainLens - AI-powered on-chain intelligence agent on OKX OnchainOS. Aggregates market signals, audits tokens with multi-factor risk scoring, and outputs actionable research reports."
camp-registry
mramra
مشروع سجل أسر المخيم — SaaS/PWA لإدارة المخيمات الإنسانية. استخدم هذا الـ Skill في كل جلسة عمل على هذا المشروع لتجنب إعادة شرح التفاصيل.
blueagent-x402
madebyshun
Security OS for autonomous agents and builders on Base. 31 pay-per-use tools across Quantum Security, Agent Safety, Research, Data, and Earn. Built for AI agents, Zero-Human Companies (ZHC), and Base ecosystem builders. Pay USDC per call via x402 protocol — no subscription, no API key needed.
trading-vpa
thuong31415
Tự động lấy dữ liệu và phân tích một symbol bằng VPA đa khung thời gian trong repository trading-vpa. Hỗ trợ crypto Binance và cổ phiếu Việt Nam. Dùng khi người dùng yêu cầu xem, phân tích, refresh, hoặc tìm cơ hội giao dịch.
everclaw
profbernardoj
Open-source first AI inference — GLM-5 as default, Claude as fallback only. Own your inference forever via the Morpheus decentralized network. Stake MOR tokens, access GLM-5, GLM-4.7 Flash, Kimi K2.5, and 30+ models with persistent inference by recycling staked MOR. Open-source first model router routes all tiers to Morpheus by default — Claude only kicks in as an escape hatch when needed. Includes Morpheus API Gateway bootstrap for zero-config startup, OpenAI-compatible proxy with auto-session management, automatic retry with fresh sessions, OpenAI-compatible error classification to prevent cooldown cascades, multi-key auth rotation v2 with proactive DIEM balance monitoring and reactive 402 watchdog, Gateway Guardian v5 with direct curl inference probes (eliminates Signal spam), proactive Venice DIEM credit monitoring, circuit breaker for stuck sub-agents, nuclear self-healing restart, always-on proxy-router with launchd auto-restart, smart session archiver, three-shift cyclic execution engine (v2 with 15-minute execution loops), 24/7 always-on power configuration for macOS, bundled security skills, zero-dependency wallet management via macOS Keychain, x402 payment client for agent-to-agent USDC payments, ERC-8004 agent registry reader for discovering trustless agents on Base, and hardware-aware local Ollama fallback with auto model selection (Qwen3.5 family, 1.5B–72B based on available RAM/GPU).
solana-mobile
agentic-reserve
Solana Mobile development with Mobile Wallet Adapter (MWA), Seeker device integration, SeedVault secure storage, and React Native dApp patterns for building mobile-first Solana applications.
droyd
droyd-ai
Crypto Trading Crypto Search Crypto Token Filter Virality Analysis Agent File Management Skill & File Discovery Agent Discovery Scheduled Tasks -- AI crypto trading wallet via natural language. Use when the user wants to execute AI research tasks, trade crypto autonomously, search crypto content/news, filter projects by market criteria, analyze social virality and mention velocity, manage trading positions, follow/unfollow agents, upload/read/search/delete agent files, search agent skills, create new agents, discover and rank agents, manage scheduled tasks, or interact with DROYD agents. Supports agent chat (research, trading, data analysis), content search (semantic/recent/auto), project discovery (by name/symbol/address/concept), project filtering (market cap, momentum, technical indicators, RSI), watchlist management (agent/swarm/combined), virality analysis (mention velocity, z-scores, trend signals), autonomous trading with stop losses, take profits, quant-based strategies, agent file operations (read/write/search/remove), skill discovery (search across agent/swarm/droyd/paid), agent creation with wallet provisioning, agent discovery (filter/rank agents by PnL, revenue, followers; lookup by ID/name/wallet/token), and scheduled task management (create/update/delete/get tasks with cron scheduling). Works with Solana (trading) and Ethereum, Base, Arbitrum for token filtering + research.
trading-agent
nmime
Autonomous AI trading agent for Hyperliquid perpetual futures exchange. Use when user wants to trade crypto, set up trading automation, monitor positions, analyze markets, or manage a Hyperliquid account. Trigger on any trading-related message like "I want to trade", "What's my balance?", "Start trading", "Close positions", etc.
agent-wallet-cli
bvnk
Manage crypto wallets (Ethereum & Solana) — create wallets, check balances, send tokens, sign messages. Supports gasless ERC-20 transfers via relay and x402 HTTP payments.
coinpilot-hyperliquid-copy-trade
coinpilot-labs
"Automate copy trading on Hyperliquid via Coinpilot to discover, investigate, and mirror top on-chain traders in real time with low execution latency. This skill requires high-sensitivity credentials (Coinpilot API key, Privy user ID, and wallet private keys) and should be used only when users explicitly request setup, lead discovery, subscription start/stop, risk updates, or performance checks. Repo: https://github.com/coinpilot-labs/skills"
monad-development
portdeveloper
Builds dapps on Monad blockchain. Use when deploying contracts, setting up frontends with viem/wagmi, or verifying contracts on Monad testnet or mainnet.
codex-skills
velcrafting
Customizable files for deterministic hierarchy and governance of agents via various: SKILL.md, AGENTS.md, template files, and scripts
dump-detective
Noble2718
"Use this skill when the user asks to 'check if a token team is dumping', 'analyze token dump risk', 'is this token safe', '查某个代币是否出货', '分析项目方出货', '检测出货行为', '某代币安全吗', '创始人还持仓吗', or mentions detecting whether a token's project team has sold their holdings on BSC chain. Runs a 5-step automated pipeline: contract audit → market data → smart money signals → social hype → creator wallet forensics (auto-detected via BSCScan + BSC RPC). Outputs a unified risk rating (🔴 HIGH / 🟡 MEDIUM-HIGH / 🟢 LOW). Best for BSC chain tokens. No API key required."