Agent skills
Skills you can use with AI coding agents, indexed from public GitHub repositories.
-
skill-name
[REQUIRED] Comprehensive description of what this skill does and when to use it. Include: (1) Primary functionality, (2) Specific use cases, (3) Security operations context. Must include specific "Use when:" clause for skill discovery. Example: "SAST vulnerability analysis and remediation guidance using Semgrep and industry security standards. Use when: (1) Analyzing static code for security vulnerabilities, (2) Prioritizing security findings by severity, (3) Providing secure coding remediation, (4) Integrating security checks into CI/CD pipelines." Maximum 1024 characters.
aiskillstore/marketplace 232
-
api-mitmproxy
Interactive HTTPS proxy for API security testing with traffic interception, modification, and replay capabilities. Supports HTTP/1, HTTP/2, HTTP/3, WebSockets, and TLS-protected protocols. Includes Python scripting API for automation and multiple interfaces (console, web, CLI). Use when: (1) Intercepting and analyzing API traffic for security testing, (2) Modifying HTTP/HTTPS requests and responses to test API behavior, (3) Recording and replaying API traffic for testing, (4) Debugging mobile app or thick client API communications, (5) Automating API security tests with Python scripts, (6) Exporting traffic in HAR format for analysis.
aiskillstore/marketplace 232
-
dast-zap
Dynamic application security testing (DAST) using OWASP ZAP (Zed Attack Proxy) with passive and active scanning, API testing, and OWASP Top 10 vulnerability detection. Use when: (1) Performing runtime security testing of web applications and APIs, (2) Detecting vulnerabilities like XSS, SQL injection, and authentication flaws in deployed applications, (3) Automating security scans in CI/CD pipelines with Docker containers, (4) Conducting authenticated testing with session management, (5) Generating security reports with OWASP and CWE mappings for compliance.
aiskillstore/marketplace 232
-
dast-nuclei
Fast, template-based vulnerability scanning using ProjectDiscovery's Nuclei with extensive community templates covering CVEs, OWASP Top 10, misconfigurations, and security issues across web applications, APIs, and infrastructure. Use when: (1) Performing rapid vulnerability scanning with automated CVE detection, (2) Testing for known vulnerabilities and security misconfigurations in web apps and APIs, (3) Running template-based security checks in CI/CD pipelines with customizable severity thresholds, (4) Creating custom security templates for organization-specific vulnerability patterns, (5) Scanning multiple targets efficiently with concurrent execution and rate limiting controls.
aiskillstore/marketplace 232
-
para-skill
PARA method knowledge management for Obsidian vaults. Use this skill whenever the user wants to organize notes using PARA (Projects, Areas, Resources, Archive), classify a note into a PARA category, route a note to the right vault folder, normalize frontmatter fields, run a PARA hygiene review, suggest archiving, audit vault structure, or process new knowledge inputs into an existing PARA-based vault. Also trigger when the user mentions inbox processing, vault cleanup, note classification, PARA review, or asks "where does this note belong?". Works with existing Obsidian skills (obsidian-markdown, obsidian-cli) — never replaces them.
aiskillstore/marketplace 232
-
db-migration
Use when setting up Alembic migrations or making database schema changes.
Triggers for: initializing Alembic, generating migrations, applying upgrades,
rolling back changes, or creating data migrations.
NOT for: raw SQL execution outside migration context or non-database schema updates.
aiskillstore/marketplace 232
-
db-connection
Use when setting up database connections, especially for Neon PostgreSQL.
Triggers for: Neon Postgres connection, connection pooling configuration,
connection string management, SSL configuration, or SQLAlchemy engine setup.
NOT for: CRUD operations (use @sqlmodel-crud) or migration scripts (use @db-migration).
aiskillstore/marketplace 232
-
context7-integration
Use when integrating Context7 (knowledge/context store) for document ingestion,
semantic search, or scoped context retrieval.
Triggers for: uploading documents, searching knowledge base, filtering by role/tenant,
or providing AI with document-grounded context.
NOT for: general database queries, file storage without context semantics, or non-document content.
aiskillstore/marketplace 232
-
api-client
Use when setting up API clients - TanStack Query, Axios, JWT token management, error handling, or response parsing.
NOT when plain fetch calls, non-API data handling, or unrelated UI logic.
Triggers: "API client", "data fetching", "JWT token", "error handling", "paginated list", "TanStack Query".
aiskillstore/marketplace 232
-
api-testing
Use when writing tests for backend APIs or frontend flows.
Triggers for: unit tests, integration tests, E2E tests, pytest fixtures,
TestClient setup, mock data factories, or test coverage analysis.
NOT for: testing business logic that doesn't involve API endpoints.
aiskillstore/marketplace 232
-
sqlmodel-crud
Use when creating SQLModel database models, CRUD operations, queries with joins, or relationships.
NOT when non-database operations, plain SQL, or unrelated data handling.
Triggers: "SQLModel", "database model", "CRUD", "create/read/update/delete", "query", "ForeignKey", "relationship".
aiskillstore/marketplace 232
-
creating-skills
Guides creation of effective Agent Skills with proper structure and validation.
Use when users want to create a new skill, update an existing skill, or need
guidance on skill design patterns, SKILL.md format, or verify.py implementation.
NOT when just using existing skills (use those skills directly).
aiskillstore/marketplace 232
-
jwt-auth
Use when implementing JWT authentication in FastAPI or Python projects.
Triggers for: token generation, verification middleware, current user extraction,
access token creation, token decoding, or role-based auth.
NOT for: OAuth2 provider setup, OpenID Connect, or non-Python backends.
aiskillstore/marketplace 232
-
env-config
Use when setting up environment configuration, loading .env files, or managing
application settings across environments.
Triggers for: .env setup, loading environment variables, Pydantic BaseSettings,
configuration validation, or secret management.
NOT for: code-specific logic, feature flags, or runtime feature toggles.
aiskillstore/marketplace 232
-
fastapi-app
Use when creating FastAPI backend applications - route handlers, dependencies, CORS config, or Pydantic models.
NOT when frontend logic, non-Python backends, or unrelated server-side code.
Triggers: "FastAPI", "student endpoint", "API route", "dependency injection", "CORS", "Pydantic model".
aiskillstore/marketplace 232
-
tailwind-css
Use when styling UI components or layouts with Tailwind CSS - mobile-first design, responsive utilities, custom themes, or component styling.
NOT when plain CSS, CSS-in-JS (styled-components), or non-Tailwind frameworks are involved.
Triggers: "style component", "responsive design", "mobile-first", "dark theme", "tailwind classes", "dashboard grid".
aiskillstore/marketplace 232
-
react-component
Use when creating UI components in React - functional components, hooks, custom hooks, or component composition patterns.
NOT when backend logic, API routes, or non-React frameworks are involved.
Triggers: "create component", "build widget", "KPI card", "form", "modal", "custom hook", "useContext", "useState", "useEffect".
aiskillstore/marketplace 232
-
api-route-design
Use when designing RESTful API endpoints in FastAPI or Python projects.
Triggers for: creating GET/POST/PUT/DELETE endpoints, request validation with Pydantic,
response formatting with JSON schemas, status code selection, pagination, filtering,
or sorting parameters.
NOT for: GraphQL APIs, WebSocket handlers, or non-RESTful endpoints.
aiskillstore/marketplace 232
-
frontend-nextjs-app-router
Use when working with Next.js App Router tasks - creating pages in /app/, setting up dynamic routes ([id]/page.tsx), implementing nested layouts/templates (layout.tsx), optimizing Server/Client components, or building ERP role-based pages (admin/teacher/student dashboards). Auto-use for all /app/ directory operations, dynamic routing, and App Router-specific features.
aiskillstore/marketplace 232
-
chatkit-widget
Use when integrating OpenAI/ChatKit chat widgets into Next.js/React applications.
Triggers for: embedding chat widgets, configuring widget appearance, implementing event handlers,
setting up authenticated chat access, or customizing widget branding.
NOT for: building custom chat UIs from scratch or backend AI model configuration.
aiskillstore/marketplace 232
-
vercel-deploy
Use when deploying Next.js applications to Vercel.
Triggers for: vercel.json configuration, build optimization, environment variable setup,
custom domain configuration, API proxy setup, or deployment troubleshooting.
NOT for: backend-only deployments, non-Vercel hosting, or local development setup.
aiskillstore/marketplace 232
-
data-validation
Use when implementing data validation for API payloads, form inputs, or database writes.
Triggers for: Pydantic models, Zod schemas, input sanitization, type validation,
field constraints, or request/response schemas.
NOT for: business logic (use domain services) or authentication/authorization.
aiskillstore/marketplace 232
-
error-handling
Use when implementing structured error handling in backend or frontend code.
Triggers for: try-catch patterns, custom exception classes, global error handlers,
error logging, user-friendly error messages, or API error responses.
NOT for: business logic validation (use domain exceptions) or unrelated error types.
aiskillstore/marketplace 232
-
auth-integration
Use when implementing authentication - login/signup forms, session management, protected routes, or role-based access control.
NOT when non-auth UI, plain data fetching, or unrelated backend logic.
Triggers: "login page", "signup form", "auth setup", "protected route", "role-based access", "Better Auth", "NextAuth".
aiskillstore/marketplace 232