Skills · category
AI & agents skills and plugins
Public Claude skills and plugins for ai & agents, each with Waxell's security verdict and the findings behind it.
- 9,580 reviewed
- 8,092 no issues
- 1,316 to review
- 130 high risk
1,451 resultsAI & agents
blocked-examplebytedance No issuesAI & agents85k- vague-helperbytedanceHelps with anything. No issuesAI & agents85k
- partial-package-examplebytedanceFixture for truncated package review. Invoke only in skill-reviewer calibration. No issuesAI & agents85k
- injection-examplebytedanceDemonstrates unsafe review data. Invoke only in reviewer prompt-injection calibration tests. No issuesAI & agentsData & analytics85k
- example-safe-skillbytedanceReviews a single Markdown troubleshooting note for clarity. Invoke when the user asks to improve a provided troubleshooting note. No issuesAI & agents85k
- zh-output-examplebytedanceReviews Chinese skill documentation for publication readiness. Invoke when the user asks in Chinese to review a skill. No issuesAI & agentsDocuments85k
- video-generationbytedanceUse this skill when the user requests to generate, create, or imagine videos. Supports structured prompts and reference image for guided… No issuesAI & agentsImages, video & audio85k
captions-overlayheygen-comOverlay doctrine for captions in HyperFrames videos, the caption MODEL (drop / rail / embed) and the rule that captions are an OVERLAY… No issuesAI & agentsImages, video & audio78k- cut-the-curveheygen-comThe technique catalog: five velocity-matched SEAMS (zoom-through, INVERSE zoom-through, cut-the-curve, waterfall cut, rack-focus blur-cut)… No issuesAI & agentsDocuments78k
- reverse-any-videoheygen-comRebuild any video file as an editable HyperFrames project - motion graphics, talking heads, live action or AI-generated footage. Measure… No issuesAI & agentsImages, video & audio78k
managed-pentesting-with-strixusestrixRun a managed pentest of a web app, API, repository, or local workspace on the app.strix.ai platform with the `strix cloud` CLI or REST… High riskAI & agentsEngineering74k
paywallscoreyhaines31When the user wants to create or optimize in-app paywalls, upgrade screens, upsell modals, or feature gates. Also use when the user… No issuesAI & agentsProductivity58k- pricingcoreyhaines31When the user wants help with pricing decisions, packaging, or monetization strategy. Also use when the user mentions 'pricing,' 'pricing… No issuesAI & agentsProductivity58k
bmad-agent-architectbmad-code-orgSystem architect and technical design leader. Use when the user asks to talk to Winston or requests the architect No issuesAI & agentsDesign55k- bmad-agent-devbmad-code-orgSenior software engineer who implements stories and code changes. Use when the user asks to talk to Amelia or requests the developer agent No issuesAI & agentsEngineering55k
- bmad-agent-pmbmad-code-orgProduct manager for PRD creation and requirements discovery. Use when the user asks to talk to John or requests the product manager No issuesAI & agents55k
- bmad-agent-ux-designerbmad-code-orgUX designer and UI specialist. Use when the user asks to talk to Sally or requests the UX designer No issuesAI & agentsDesign55k
- bmad-customizebmad-code-orgAuthors and updates customization overrides for installed BMad skills. Use when the user says 'customize bmad', 'override a skill',… No issuesAI & agentsProductivity55k
- bmad-evalbmad-code-orgRuns the evals of a BMad skill through the agent harness the user works in and reports what they show: baseline against the bare model,… No issuesAI & agentsDocuments55k
- bmad-party-modebmad-code-orgOrchestrates lively group discussions between installed BMAD agents or custom personas, and helps author custom parties. Use when the user… No issuesAI & agentsSales & marketing55k
- bmad-project-contextbmad-code-orgSet up, adopt, refresh, or audit a repository's agent instructions (the AGENTS.md block) so AI agents work well in that repo. Also records… No issuesAI & agentsProductivity55k
- bmad-shard-probmad-code-orgMakes long documents easy for agents to navigate. Use when the user says "shard this document", "this file is too long for agents", "turn… No issuesAI & agentsDocuments55k
- bmad-toolsmithbmad-code-orgSmithy the Toolsmith builds and maintains BMad skills, agents and modules. Use when the user asks for Smithy or says "build a skill",… No issuesAI & agents55k
chrome-devtools-mcpchromedevtoolsReliable automation, in-depth debugging, and performance analysis in Chrome using Chrome DevTools and Puppeteer Review findingsAI & agentsData & analytics55k- a11y-debuggingchromedevtoolsUses Chrome DevTools MCP for accessibility (a11y) debugging and auditing based on web.dev guidelines. Use when testing semantic HTML, ARIA… No issuesAI & agentsEngineering55k
- chrome-devtoolschromedevtoolsUses Chrome DevTools via MCP for efficient debugging, troubleshooting and browser automation. Use when debugging web pages, automating… No issuesAI & agentsResearch55k
- cookie-debuggingchromedevtoolsUses Chrome DevTools MCP for inspecting, debugging, and testing cookies, session state, authentication issues, and cookie consent… No issuesAI & agentsEngineering55k
- debug-optimize-lcpchromedevtoolsGuides debugging and optimizing Largest Contentful Paint (LCP) using Chrome DevTools MCP tools. Use this skill whenever the user asks… No issuesAI & agentsEngineering55k
- memory-leak-debuggingchromedevtoolsDiagnoses and resolves memory leaks in JavaScript/Node.js applications. Use when a user reports high memory usage, OOM errors, or wants to… No issuesAI & agentsDocuments55k
- troubleshootingchromedevtoolsUses Chrome DevTools MCP and documentation to troubleshoot connection and target issues. Trigger this skill when list_pages, new_page, or… No issuesAI & agentsDocuments55k
improve-animationsemilkowalskiSurvey a codebase's animation and motion code as a senior motion advisor, then produce a prioritized audit and self-contained… No issuesAI & agentsImages, video & audio53k
007sickn33Security audit, hardening, threat modeling (STRIDE/PASTA), Red/Blue Team, OWASP checks, code review, incident response, and infrastructure… High riskAI & agentsSecurity49k- apk-reversesickn33Android APK reverse engineering: unpacking, Java decompilation, smali modification, repacking and signing, Frida dynamic hooking, and… High riskAI & agentsData & analytics49k
- hunt-k8ssickn33Hunt Kubernetes & Docker High riskAI & agentsEngineering49k
- hunt-laravelsickn33Hunt Laravel specific vulnerabilities High riskAI & agentsSecurity49k
- hunt-nextjssickn33Hunt Next.js specific vulnerabilities High riskAI & agentsEngineering49k
- hunt-oauthsickn33Hunting skill for oauth vulnerabilities. Built from 19 public bug bounty reports. Use when hunting oauth on any target. High riskAI & agentsDocuments49k
- hunt-source-leaksickn33Hunt source code and build artifact leakage High riskAI & agentsEngineering49k
- hunt-springbootsickn33Hunt Spring Boot specific vulnerabilities High riskAI & agentsSecurity49k
- hunt-tls-networksickn33Hunt TLS/SSL and DNS misconfigurations High riskAI & agents49k
- ios-redteam-pipelinesickn33End-to-end iOS red-team pipeline High riskAI & agentsSales & marketing49k
- mac-mini-llm-labsickn33Configure a Mac mini as a reliable local LLM server with remote access, observability, and power-safe operation. Use when building an… High riskAI & agents49k
- okta-attacksickn33Okta-as-IdP red-team attack chain High riskAI & agents49k
- ollama-stacksickn33Run local LLM workloads with Ollama, Open WebUI, and GPU-aware tuning for private development environments. High riskAI & agents49k
- src-huntersickn33Bug-bounty/SRC vulnerability-hunting workflow: five-phase methodology (intake, recon, enumeration, hunt, report) with attack playbooks for… High riskAI & agentsSecurity49k
- reverse-engineeringsickn33General reverse-engineering methodology for compiled, obfuscated, packed, or virtualized targets: GDB, Frida, angr, Unicorn, and Qiling… High riskAI & agentsData & analytics49k
- web-scrapersickn33Web scraping inteligente multi-estrategia. Extrai dados estruturados de paginas web (tabelas, listas, precos). Paginacao, monitoramento e… High riskAI & agentsResearch49k
jev-auto-modedavila7A permission layer driven by a JSON policy: allow, ask or deny every tool call (Bash, edits, web, MCP, subagents, skills), every slash… High riskAI & agentsEngineering33k
See and control which skills your people use
Inside your organization, Waxell scans each skill and plugin before anyone installs it, approves what passes and publishes it to a private marketplace, and puts every MCP tool call behind one governed URL.
30 minutes. No commitment.
SOC 2 Type II attested · ISO/IEC 27001:2022 certified · HIPAA with a BAA · aligned to the EU AI Act and NIST AI RMF