Skills · category
Documents skills and plugins
Public Claude skills and plugins for documents, each with Waxell's security verdict and the findings behind it.
- 4,455 reviewed
- 3,471 no issues
- 900 to review
- 56 high risk
1,048 resultsDocuments
bmad-prfaqbmad-code-orgTest a product concept with Amazon's Working Backwards method: write the press release for the finished product first, then answer hard… No issuesDocumentsEngineering55k
bmad-reviewbmad-code-orgRuns one or more installed review lenses: adversarial critique, edge cases, verification gaps, structure, prose, and reports triaged… No issuesDocumentsEngineering55k
bmad-shard-probmad-code-orgMakes long documents easy for agents to navigate. Use when the user says "shard this document", "this file is too long for agents", "turn… No issuesDocumentsAI & agents55k
bmad-uxbmad-code-orgCapture the user's UX vision in two documents: DESIGN.md for how the product looks and EXPERIENCE.md for how it behaves. Use when the user… No issuesDocumentsDesign55k
memory-leak-debuggingchromedevtoolsDiagnoses and resolves memory leaks in JavaScript/Node.js applications. Use when a user reports high memory usage, OOM errors, or wants to… No issuesDocumentsEngineering55k
troubleshootingchromedevtoolsUses Chrome DevTools MCP and documentation to troubleshoot connection and target issues. Trigger this skill when list_pages, new_page, or… No issuesDocumentsAI & agents55k
animation-vocabularyemilkowalskiReverse-lookup glossary that turns a vague description of a web animation or motion effect into its exact term ("the bouncy thing when a… No issuesDocumentsImages, video & audio53k
nature-image2pptyuan1z0825Reconstruct slide images, screenshots, scanned PDFs, or image-only PPTX files as object-level editable PowerPoint. Use for… No issuesDocumentsImages, video & audio52k
nature-paper-to-patentyuan1z0825Turn research papers or inventor materials into evidence-grounded Chinese invention patent drafts and technical disclosures. Use for… Review findingsDocumentsResearch52k
nature-paper-transyuan1z0825将英文论文 PDF 的指定页面或全文逐页翻译为简体中文图片型 PDF,尽量保留原文的版式、分栏、图表和公式;最终仅交付中文 PDF。用于论文阅读翻译,不用于可编辑 Word 重建或逐字审校。 No issuesDocumentsResearch52k
nature-paper2pptyuan1z0825Create or improve a Chinese academic PPTX from a scientific paper or research reading notes, with source figures and speaker notes. Use… No issuesDocumentsResearch52k
nature-paper2wordyuan1z0825Compile an academic Markdown manuscript into a journal- or school-compliant Word (.docx): declared typography, native OMML equations,… Review findingsDocumentsResearch52k
researchwriteyuan1z0825Compose, revise, or audit research proposals, opening reports, and research plans from supporting evidence. Use for 研究计划、开题报告、科研项目申请书.… No issuesDocumentsResearch52k
nature-statisticsyuan1z0825Audit or improve manuscript statistical reporting, including experimental units, replication, uncertainty, tests, and figure statistics.… No issuesDocumentsData & analytics52k
knapkepanoRender Markdown from templates and structured data using Knap CLI. Use when the user asks to apply a Knap template, turn JSON or CSV data… Review findingsDocumentsData & analytics51k
slidevslidevjsCreate and present web-based slidedecks for developers using Slidev with Markdown, Vue components, code highlighting, animations, and… Review findingsDocumentsEngineering49k
hunt-oauthsickn33Hunting skill for oauth vulnerabilities. Built from 19 public bug bounty reports. Use when hunting oauth on any target. High riskDocumentsSecurity49k
src-huntersickn33Bug-bounty/SRC vulnerability-hunting workflow: five-phase methodology (intake, recon, enumeration, hunt, report) with attack playbooks for… High riskDocumentsSecurity49k
jev-auto-modedavila7A permission layer driven by a JSON policy: allow, ask or deny every tool call (Bash, edits, web, MCP, subagents, skills), every slash… High riskDocumentsEngineering33k
jev-vercel-sandboxdavila7A Vercel Sandbox Claude sends work to on purpose: long test runs in the background, someone else's repository, an installer of unknown… High riskDocumentsEngineering33k
fine-tuning-axolotldavila7Expert guidance for fine-tuning LLMs with Axolotl - YAML configs, 100+ models, LoRA/QLoRA, DPO/KTO/ORPO/GRPO, multimodal support High riskDocumentsEngineering33k
fine-tuning-unslothdavila7Expert guidance for fast fine-tuning with Unsloth - 2-5x faster training, 50-80% less memory, LoRA/QLoRA optimization High riskDocumentsEngineering33k
infrastructure-lambda-labsdavila7Reserved and on-demand GPU cloud instances for ML training and inference. Use when you need dedicated GPU instances with simple SSH… High riskDocumentsEngineering33k
using-neondavila7Guides and best practices for working with Neon Serverless Postgres. Covers getting started, local development with Neon, choosing a… High riskDocumentsEngineering33k
bun-developmentdavila7Modern JavaScript/TypeScript development with Bun runtime. Covers package management, bundling, testing, and migration from Node.js. Use… High riskDocumentsEngineering33k
cloudflare-deploydavila7Deploy applications and infrastructure to Cloudflare using Workers, Pages, and related platform services. Use when the user asks to… High riskDocumentsEngineering33k
alphafold-databasedavila7Access AlphaFold's 200M+ AI-predicted protein structures. Retrieve structures by UniProt ID, download PDB/mmCIF files, analyze confidence… High riskDocumentsData & analytics33k
Cloud Penetration Testingdavila7This skill should be used when the user asks to "perform cloud penetration testing", "assess Azure or AWS or GCP security", "enumerate… High riskDocumentsEngineering33k
Linux Privilege Escalationdavila7This skill should be used when the user asks to "escalate privileges on Linux", "find privesc vectors on Linux systems", "exploit sudo… High riskDocumentsEngineering33k
gitops-workflowdavila7Complete guide to implementing GitOps workflows with ArgoCD and Flux for automated Kubernetes deployments. High riskDocumentsEngineering33k
frontend-slideszarazhangruiCreate stunning, animation-rich HTML presentations from scratch or by converting PowerPoint files. Use when the user wants to build a… Review findingsDocumentsEngineering32k
frontend-slideszarazhangruiZero-dependency HTML presentation generator with safe presets, bold template-library styles, PPT conversion, and anti-AI-slop design… Review findingsDocumentsEngineering32k
frontend-slideszarazhangruiCreate stunning, animation-rich HTML presentations from scratch or by converting PowerPoint files. Use when the user wants to build a… Review findingsDocumentsEngineering32k
blog-postlangchain-aiWrites and structures long-form blog posts, creates tutorial outlines, and optimizes content for SEO with cover image generation. Use when… No issuesDocumentsWriting & content31k
coding-prefslangchain-aiRead the user's coding preferences from /memory/coding-prefs.md before making non-trivial style decisions, and append new preferences when… No issuesDocumentsEngineering31k
blog-postlangchain-aiWrite structured long-form blog posts with research, SEO optimization, and cover image generation. No issuesDocumentsWriting & content31k
social-medialangchain-aiCreate social media content including Twitter/X threads, LinkedIn posts, and short-form updates. No issuesDocumentsWriting & content31k
data-visualizationlangchain-aiUse for creating publication-quality charts and multi-panel analysis summaries. Triggers when tasks involve visualizing data, plotting… No issuesDocumentsData & analytics31k
gpu-document-processinglangchain-aiUse when processing large PDFs, document collections, or bulk text extraction tasks that benefit from GPU-accelerated processing. Triggers… No issuesDocumentsData & analytics31k
query-writinglangchain-aiWrites and executes SQL queries from simple SELECTs to complex multi-table JOINs, aggregations, and subqueries. Use when the user asks to… No issuesDocumentsData & analytics31k
rememberlangchain-aiReview the current conversation and capture valuable knowledge, best practices, coding conventions, architecture decisions, workflows, and… No issuesDocumentsEngineering31k
langgraph-docslangchain-aiFetches and references LangGraph Python documentation to build stateful agents, create multi-agent workflows, and implement… No issuesDocumentsEngineering31k
web-researchlangchain-aiSearches multiple web sources, synthesizes findings, and produces cited research reports using delegated subagents. Use when the user asks… No issuesDocumentsResearch31k
cmux-architecturemanaflow-aicmux package architecture, refactor layering, dependency inversion, file organization, DocC documentation, package design discipline,… No issuesDocumentsEngineering29k
cmux-capturemanaflow-aiScreenshot or record a cmux window from the CLI, for a pull request, a bug report, or to see what the app actually looks like right now.… No issuesDocumentsEngineering29k
cmux-diagnosticsmanaflow-aiRun end-user cmux diagnostics. Use when cmux hooks, notifications, session restore, settings, browser automation, socket access, CLI… No issuesDocumentsEngineering29k
cmux-ghosttymanaflow-aiGhostty submodule and GhosttyKit workflow rules for cmux. Use when modifying the ghostty submodule, rebuilding GhosttyKit.xcframework,… No issuesDocumentsProductivity29k
cmux-keyboard-shortcutsmanaflow-aiGuide and apply cmux keyboard shortcut customization. Use when the user asks to customize, rebind, unbind, reset, audit, or create… No issuesDocumentsDesign29k
See and control which skills your people use
Inside your organization, Waxell scans each skill and plugin before anyone installs it, approves what passes and publishes it to a private marketplace, and puts every MCP tool call behind one governed URL.
30 minutes. No commitment.
SOC 2 Type II attested · ISO/IEC 27001:2022 certified · HIPAA with a BAA · aligned to the EU AI Act and NIST AI RMF