AGENT SKILLS · EQUIPAMENTO DE MISSÃO
Agent Skills úteis classificados pelo uso real
Compare Skills verificados por finalidade, conteúdo do pacote, instalações e evidências da fonte antes de adicioná-los.
- ESCOPO DO CATÁLOGO
- VERIFICADO
- Skills
- 22.847
- repositórios
- 3523
- última sincronização
- 3 de nov. de 2026
riekeltdocumenting-legacy-codebases
Use when documenting an existing codebase whose documentation is missing, stale, or untrusted - an inherited system, a legacy application, a repo where the docs lie - or when regrounding a documentation tree against the code, or when someone asks what a system actually does. Encodes the survey-first inventory, the writer-side evidence hierarchy, depth-per-surface rules, the refactor test, dead-or-alive proofs, the quirks-and-findings split, the coverage ledger, the parallel campaign, and the doc
- Instalações / 1h
- 14
- GitHub Stars
- 36
- Atualizado
- 13 de set.
riekeltrecording-decisions
Use when a decision needs recording - an ADR, a decision log entry, or when someone asks to write down why something was chosen, rejected, or superseded. Encodes the ADR and decision-log formats. Use whenever a choice was made that would otherwise live only in chat, even if nobody says "ADR".
- Instalações / 1h
- 14
- GitHub Stars
- 36
- Atualizado
- 13 de set.
riekeltwriting-changelogs
Use when writing a changelog entry, release notes, or a "what shipped" summary after completing work. Encodes the entry shape, the handover template, and the honesty conventions. Use after shipping meaningful work, even if the user just says "summarize what we did".
- Instalações / 1h
- 14
- GitHub Stars
- 36
- Atualizado
- 13 de set.
riekeltwriting-issues
Use when writing or refining tracker items - epics, stories, tasks, bug reports, spikes, or acceptance criteria - or when turning a discussion, review finding, or plan into tickets. Encodes the survives-without-you test, the issue-type glossary, and the story and bug skeletons. Use whenever work is written into a tracker, even from a rough verbal dump.
- Instalações / 1h
- 14
- GitHub Stars
- 36
- Atualizado
- 13 de set.
riekeltwriting-postmortems
Use when writing a postmortem, incident report, or root-cause analysis after an outage, a defect that reached users, a data issue, or a near miss - or when turning an incident channel, alert log, or war-room thread into a durable document. Encodes the blameless framing, the evidence-only timeline, contributing factors, and owned action items. Use whenever something broke and the write-up must outlive the incident.
- Instalações / 1h
- 14
- GitHub Stars
- 36
- Atualizado
- 13 de set.
elevenlabssound-effects
Generate sound effects from text descriptions using ElevenLabs. Use when creating sound effects, generating audio textures, producing ambient sounds, cinematic impacts, UI sounds, or any audio that isn't speech. Supports looping, duration control, and prompt influence tuning.
- Instalações / 1h
- 14
- GitHub Stars
- 528
- Atualizado
- 28 de out.
elevenlabstext-to-speech
Convert text to speech using ElevenLabs voice AI. Use when generating audio from text, creating voiceovers, building voice apps, or synthesizing speech in 90+ languages.
- Instalações / 1h
- 14
- GitHub Stars
- 528
- Atualizado
- 28 de out.
usestrixapi-security-testing
Security-test a REST, GraphQL, or gRPC API with Strix — autonomous agents that enumerate endpoints from an OpenAPI/GraphQL schema (or by crawling), then actually exploit the API-specific vulnerability classes in the OWASP API Security Top 10 (2023) — broken object-level authorization (BOLA/IDOR), broken object property level authorization (excessive data exposure and mass assignment), broken function-level authorization, unrestricted resource consumption, SSRF, injection, and auth/token flaws. E
- Instalações / 1h
- 14
- GitHub Stars
- 73 mil
- Atualizado
- 30 de out.
usestrixapplication-security-testing
Application security testing (AppSec) across a whole product with Strix — decide which asset needs which test (source code, running web app, API, CI pipeline), run it, and turn the results into a ranked remediation plan. Autonomous agents exploit and prove each issue instead of emitting static-analysis alerts, so the plan is ordered by what is actually reachable. Use when the user asks for an application security review or audit, an appsec assessment, vulnerability scanning across their stack, a
- Instalações / 1h
- 14
- GitHub Stars
- 73 mil
- Atualizado
- 30 de out.
usestrixci-security-scanning-with-strix
Add security scanning to CI/CD with Strix — GitHub Actions, GitLab CI, or any pipeline — so every pull request gets a diff-scoped AI pentest that blocks vulnerable code before it merges, with results as PR comments and SARIF uploaded to code scanning. Covers both the self-hosted open-source CLI (runs in your runner) and the managed app.strix.ai platform (GitHub/GitLab app or API, no runner infra). Use when the user asks to add security scanning, SAST/DAST, pentesting, vulnerability checks, or au
- Instalações / 1h
- 14
- GitHub Stars
- 73 mil
- Atualizado
- 30 de out.
usestrixfind-security-vulnerabilities-in-code
Find security vulnerabilities in a codebase or repository with Strix — a white-box AI security review that reads your source, reasons about the actual data flow and authorization model, then exploits what it finds in a live sandbox so every reported issue has a working proof-of-concept instead of a noisy static-analysis alert. Covers injection, XSS, SSRF, broken access control and IDOR, insecure deserialization, secrets in code, unsafe dependencies, and business-logic flaws. Use when the user as
- Instalações / 1h
- 14
- GitHub Stars
- 73 mil
- Atualizado
- 30 de out.
usestrixfix-security-vulnerabilities-with-strix
Fix security vulnerabilities found by a Strix pentest (open-source CLI or app.strix.ai cloud) — triage by severity, patch the root cause rather than the symptom, and re-run Strix to prove each fix actually closes the exploit. Handles injection, XSS, SSRF, broken access control, IDOR, and other validated findings. Use after a Strix scan reports findings, or when the user asks to remediate, patch, or fix security issues from a strixruns report, vulnerabilities.json, findings.sarif, or a cloud scan
- Instalações / 1h
- 14
- GitHub Stars
- 73 mil
- Atualizado
- 30 de out.
usestrixowasp-top-10-testing
Test an application against the OWASP Top 10 with Strix — autonomous AI agents that attempt real exploits for each category of the current OWASP Top 10:2025 (broken access control including SSRF, security misconfiguration, software supply chain failures, cryptographic failures, injection, insecure design, authentication failures, integrity failures, logging and alerting failures, mishandling of exceptional conditions) and report only what they could actually prove, mapped back to the category wi
- Instalações / 1h
- 14
- GitHub Stars
- 73 mil
- Atualizado
- 30 de out.
usestrixweb-app-penetration-testing
Pentest a web app or website end to end — black-box testing of a live URL, staging environment, or local dev server that finds and exploits real vulnerabilities (auth bypass, broken access control, IDOR, injection, XSS, SSRF, business logic) and proves each one with a working proof-of-concept instead of a signature match. Runs with Strix, either the self-hosted open-source CLI or the managed app.strix.ai cloud. Use when the user asks to pentest, hack, security-test, or audit their web app, websi
- Instalações / 1h
- 14
- GitHub Stars
- 73 mil
- Atualizado
- 30 de out.
usestrixmanaged-pentesting-with-strix
Run a managed pentest of a web app, API, repository, or local workspace on the app.strix.ai platform with the strix cloud CLI or REST API — no local Docker or LLM key needed. Safely review and upload local source, register assets, launch and poll scans, triage vulnerabilities, export SARIF, download compliance reports, start PR reviews, buy credits, and set up schedules or webhooks. Use for managed, continuous, scheduled, team-tracked, or sandboxed-agent security testing.
- Instalações / 1h
- 14
- GitHub Stars
- 73 mil
- Atualizado
- 30 de out.
usestrixpenetration-testing-with-strix
Pentest a web app, API, codebase, repository, URL, domain, or IP with Strix — autonomous AI penetration testing that exploits and proves vulnerabilities (OWASP Top 10 and beyond — injection, XSS, SSRF, auth/access-control flaws, IDOR, business logic) instead of just flagging them. Runs self-hosted with the open-source CLI or via the managed app.strix.ai cloud, and returns validated findings with proof-of-concept exploits (Markdown, JSON, CSV, SARIF). Use when the user asks to pentest, hack, secu
- Instalações / 1h
- 14
- GitHub Stars
- 73 mil
- Atualizado
- 30 de out.
gamedev-skillsgodot-3d-essentials
Set up a Godot 4.7 3D scene: Node3D transforms, Camera3D, lighting (DirectionalLight3D/OmniLight3D), WorldEnvironment for sky/ambient/tonemap/post, MeshInstance3D materials, and GridMap for tile-based 3D levels. Use when building a 3D scene in a Godot project, placing cameras/lights, configuring environment and post-processing, or working with Node3D/.tscn 3D content and GridMap.
- Instalações / 1h
- 14
- GitHub Stars
- 6,3 mil
- Atualizado
- 28 de out.
gamedev-skillslevel-design
Design and build playable levels — the blockout/whitebox-to-playable workflow, player metrics and grid layout, pacing and flow (tension/rest curve), gating and the critical path, and encounter design. Engine-neutral practice. Use when the user mentions level design, blockout/whitebox/greybox, level layout, level pacing, encounter design, or the critical path through a level.
- Instalações / 1h
- 14
- GitHub Stars
- 6,3 mil
- Atualizado
- 28 de out.
wshobsonmodern-javascript-patterns
Master ES6+ features including async/await, destructuring, spread operators, arrow functions, promises, modules, iterators, generators, and functional programming patterns for writing clean, efficient JavaScript code. Use when refactoring legacy code, implementing modern patterns, or optimizing JavaScript applications.
- Instalações / 1h
- 14
- GitHub Stars
- 42 mil
- Atualizado
- 26 de out.
wshobsonpython-performance-optimization
Profile and optimize Python code using cProfile, memory profilers, and performance best practices. Use when debugging slow Python code, optimizing bottlenecks, or improving application performance.
- Instalações / 1h
- 14
- GitHub Stars
- 42 mil
- Atualizado
- 26 de out.
actionbookm15-anti-pattern
Use when reviewing code for anti-patterns. Keywords: anti-pattern, common mistake, pitfall, code smell, bad practice, code review, is this an anti-pattern, better way to do this, common mistake to avoid, why is this bad, idiomatic way, beginner mistake, fighting borrow checker, clone everywhere, unwrap in production, should I refactor, 反模式, 常见错误, 代码异味, 最佳实践, 地道写法
- Instalações / 1h
- 14
- GitHub Stars
- 1,6 mil
- Atualizado
- 23 de ago.
gamedev-skillsgame-feel
Add "juice" and game feel that makes actions satisfying — screen shake, hit-stop/freeze frames, tweened/eased motion, squash & stretch, knockback, and layered audio-visual feedback — as engine-neutral techniques that pair with the detected engine's tween, particle, and camera APIs. Use when the user mentions game feel, juice, "make it feel good/punchy", screen shake, hit stop, screen freeze, easing, squash and stretch, impact frames, or feedback/polish on hits, jumps, pickups, and deaths.
- Instalações / 1h
- 14
- GitHub Stars
- 5,5 mil
- Atualizado
- 28 de out.
t3dotggfile-pr
File a concise pull request. Use when the user asks to file, open, or create a PR.
- Instalações / 1h
- 14
- GitHub Stars
- 2,2 mil
- Atualizado
- 28 de out.
t3dotggleaving-pr-comments
Use whenever leaving comments on GitHub.
- Instalações / 1h
- 14
- GitHub Stars
- 2,2 mil
- Atualizado
- 28 de out.