Skills · category
Engineering skills and plugins
Public Claude skills and plugins for engineering, each with Waxell's security verdict and the findings behind it.
- 11,535 reviewed
- 8,333 no issues
- 2,885 to review
- 229 high risk
2,738 resultsEngineering
frontend-designbytedanceCreate distinctive, production-grade frontend interfaces with high design quality. Use this skill when the user asks to build web… No issuesEngineeringDesign85k- github-deep-researchbytedanceConduct multi-round deep research on any GitHub Repo. Use when users request comprehensive analysis, timeline reconstruction, competitive… No issuesEngineeringResearch85k
- music-generationbytedanceUse this skill when the user requests to generate, create, compose, or produce music or songs, background music, theme songs, jingles, or… No issuesEngineeringImages, video & audio85k
- skill-creatorbytedanceCreate new skills, modify and improve existing skills, and measure skill performance. Use when users want to create a skill from scratch,… No issuesEngineeringData & analytics85k
- injection-examplebytedanceDemonstrates unsafe review data. Invoke only in reviewer prompt-injection calibration tests. No issuesEngineeringData & analytics85k
- vercel-deploybytedanceDeploy applications and websites to Vercel. Use this skill when the user requests deployment actions such as "Deploy my app", "Deploy this… No issuesEngineeringSecurity85k
seam-craftheygen-comRender-correctness doctrine for scene-to-scene seams in HyperFrames launch videos, the prerequisites that make transitions composite… No issuesEngineeringImages, video & audio78k- code-slice-heroheygen-comA tiled headline surface flips cell by cell under a sweeping depth field to reveal the rear headline. HyperFrames block, 1920×1080, 8s, 18… No issuesEngineering78k
- hyperframes-cliheygen-comThe HyperFrames CLI by job - scaffold, check, look at frames, edit the timeline, preview, render locally or in the cloud, publish, project… No issuesEngineeringImages, video & audio78k
- remotion-to-hyperframesheygen-comBring existing video code or footage into HyperFrames and verify it frame by frame against the original - Remotion first, also Motion… Review findingsEngineeringImages, video & audio78k
api-security-testingusestrixSecurity-test a REST, GraphQL, or gRPC API with Strix, autonomous agents that enumerate endpoints from an OpenAPI/GraphQL schema (or by… No issuesEngineeringSecurity74k- application-security-testingusestrixApplication security testing (AppSec) across a whole product with Strix, decide which asset needs which test (source code, running web… No issuesEngineeringSecurity74k
- ci-security-scanning-with-strixusestrixAdd security scanning to CI/CD with Strix: GitHub Actions, GitLab CI, or any pipeline, so every pull request gets a diff-scoped AI pentest… High riskEngineeringSecurity74k
- find-security-vulnerabilities-in-codeusestrixFind security vulnerabilities in a codebase or repository with Strix, a white-box AI security review that reads your source, reasons about… No issuesEngineeringSecurity74k
- fix-security-vulnerabilities-with-strixusestrixFix security vulnerabilities found by a Strix pentest (open-source CLI or app.strix.ai cloud), triage by severity, patch the root cause… No issuesEngineeringSecurity74k
- managed-pentesting-with-strixusestrixRun a managed pentest of a web app, API, repository, or local workspace on the app.strix.ai platform with the `strix cloud` CLI or REST… High riskEngineeringSecurity74k
- owasp-top-10-testingusestrixTest an application against the OWASP Top 10 with Strix, autonomous AI agents that attempt real exploits for each category of the current… No issuesEngineeringSecurity74k
- penetration-testing-with-strixusestrixPentest a web app, API, codebase, repository, URL, domain, or IP with Strix, autonomous AI penetration testing that exploits and proves… High riskEngineeringSecurity74k
- web-app-penetration-testingusestrixPentest a web app or website end to end: black-box testing of a live URL, staging environment, or local dev server that finds and exploits… No issuesEngineeringSecurity74k
last30daysmvanhornResearch what people actually say about any topic in the last 30 days. Pulls posts and engagement from Reddit, X, YouTube, TikTok, Hacker… High riskEngineeringResearch66k
diagram-designcathrynlaveryCreate branded architecture, architecture delta, IT current-state, flowchart, sequence, state machine, ER/data model, timeline, swimlane,… No issuesEngineeringData & analytics65k
ab-testingcoreyhaines31When the user wants to plan, design, or implement an A/B test or experiment, or build a growth experimentation program. Also use when the… No issuesEngineeringData & analytics58k- directory-submissionscoreyhaines31When the user wants to submit their product to startup, SaaS, AI, agent, MCP, no-code, or review directories for backlinks, domain rating,… No issuesEngineeringProductivity58k
- smscoreyhaines31When the user wants to plan, build, or optimize SMS, MMS, or WhatsApp marketing, including welcome flows, abandoned cart texts,… No issuesEngineeringSales & marketing58k
ggetk-dense-aiQueries 20+ bioinformatics resources through CLI/Python. Supports quick lookups of gene info, BLAST/BLAT, viral sequence downloads,… High riskEngineeringData & analytics56k- paperclipk-dense-aiSearches and reads biomedical papers, FDA/PMDA/EMA documents, clinical trials, and protein records with the GXL Paperclip CLI and Python… High riskEngineeringResearch56k
- pi-agentk-dense-aiBuilds with and operates Pi, the minimal terminal coding harness. Use for installing Pi, configuring providers/models/settings/environment… High riskEngineeringDocuments56k
bmad-agent-devbmad-code-orgSenior software engineer who implements stories and code changes. Use when the user asks to talk to Amelia or requests the developer agent No issuesEngineeringAI & agents55k- bmad-architecturebmad-code-orgWork out and record the architecture decisions that keep separately built parts of a system consistent, in a short architecture document.… No issuesEngineeringDesign55k
- bmad-buildbmad-code-orgImplements a story, feature, or bug fix end to end: plan, code, review, verify. Use when the user hands one over and leaves the edits to… No issuesEngineeringProductivity55k
- bmad-build-autobmad-code-orgImplements one story, feature, or bug fix end to end without human interaction: plan, code, review, verify, report status. Use when… No issuesEngineeringDocuments55k
- bmad-code-reviewbmad-code-orgReview code changes with several independent reviewers in parallel, then triage and present the findings. Use when the user says "run code… No issuesEngineering55k
- bmad-deep-reconbmad-code-orgDecision-grade research on a topic or this repository. Use when the user says "deep recon", "research this", "draft a research prompt",… No issuesEngineeringResearch55k
- bmad-evalbmad-code-orgRuns the evals of a BMad skill through the agent harness the user works in and reports what they show: baseline against the bare model,… No issuesEngineeringDocuments55k
- bmad-forge-ideabmad-code-orgTest a half-formed idea in a questioning conversation, with different personas probing its weak points, until the user can act on it or… No issuesEngineeringProductivity55k
- bmad-prfaqbmad-code-orgTest a product concept with Amazon's Working Backwards method: write the press release for the finished product first, then answer hard… No issuesEngineeringDocuments55k
- bmad-project-contextbmad-code-orgSet up, adopt, refresh, or audit a repository's agent instructions (the AGENTS.md block) so AI agents work well in that repo. Also records… No issuesEngineeringProductivity55k
- bmad-qa-generate-e2e-testsbmad-code-orgAdd end-to-end and API tests for features that already work, following the project's existing test harness. Use when the user asks for e2e… No issuesEngineeringProductivity55k
- bmad-retrospectivebmad-code-orgReview a finished epic folder in the ticket tree against the evidence it left behind, the epic file, each ticket's story file and plan,… No issuesEngineeringProductivity55k
- bmad-reviewbmad-code-orgRuns one or more installed review lenses: adversarial critique, edge cases, verification gaps, structure, prose, and reports triaged… No issuesEngineeringDocuments55k
- bmad-walkthroughbmad-code-orgGuide a human review of a commit, PR, file, or directory. Use when invoked by name No issuesEngineering55k
- deprecated-shimbmad-code-orgDEPRECATED: consolidated into bmad-foo; this skill will be removed in v7 in favor of `bmad-foo`. No issuesEngineering55k
- missing-triggerbmad-code-orgGenerates a thing and writes it to disk for the user. No issuesEngineering55k
- with-triggerbmad-code-orgGenerates a thing and writes it to disk. Use when the user asks to scaffold a thing. No issuesEngineering55k
chrome-devtools-mcpchromedevtoolsReliable automation, in-depth debugging, and performance analysis in Chrome using Chrome DevTools and Puppeteer Review findingsEngineeringData & analytics55k- a11y-debuggingchromedevtoolsUses Chrome DevTools MCP for accessibility (a11y) debugging and auditing based on web.dev guidelines. Use when testing semantic HTML, ARIA… No issuesEngineeringAI & agents55k
- chrome-devtools-clichromedevtoolsUse this skill to write shell scripts or run shell commands to automate tasks in the browser or otherwise use Chrome DevTools via CLI. Review findingsEngineeringProductivity55k
- cookie-debuggingchromedevtoolsUses Chrome DevTools MCP for inspecting, debugging, and testing cookies, session state, authentication issues, and cookie consent… No issuesEngineeringAI & agents55k
See and control which skills your people use
Inside your organization, Waxell scans each skill and plugin before anyone installs it, approves what passes and publishes it to a private marketplace, and puts every MCP tool call behind one governed URL.
30 minutes. No commitment.
SOC 2 Type II attested · ISO/IEC 27001:2022 certified · HIPAA with a BAA · aligned to the EU AI Act and NIST AI RMF