Skills · category
Engineering skills and plugins
Public Claude skills and plugins for engineering, each with Waxell's security verdict and the findings behind it.
- 11,535 reviewed
- 8,333 no issues
- 2,885 to review
- 229 high risk
2,738 resultsEngineering
agent-experiencebrowserbaseAudit the developer experience of a product, SDK, docs site, or SKILL.md by dropping multiple Claude subagents at it with only a tiny task… Review findingsEngineeringDocuments3.7k- browserbrowserbaseAutomate web browser interactions using natural language via CLI commands. Use when the user asks to browse websites, navigate web pages,… Review findingsEngineeringResearch3.7k
- browser-to-apibrowserbaseTurn a website's observable HTTP traffic into a best-effort OpenAPI 3.1 spec by analyzing a `browser-trace` capture. Use when the user… No issuesEngineeringResearch3.7k
- browser-tracebrowserbaseCapture a full DevTools-protocol trace of any browser automation, CDP firehose, screenshots, and DOM dumps, then bisect the stream into… Review findingsEngineeringResearch3.7k
- browser-use-to-stagehandbrowserbaseMigrate browser-use (Python) browser-automation scripts to Stagehand v3 (TypeScript) on Browserbase. Use when the user wants to convert,… Review findingsEngineeringResearch3.7k
- cookie-syncbrowserbaseSync cookies from local Chrome to a Browserbase persistent context so the browse CLI can access authenticated sites. Use when the user… No issuesEngineeringResearch3.7k
- fetchbrowserbaseUse this skill when the user wants to retrieve a URL without a full browser session: fetch HTML or JSON from static pages, inspect status… Review findingsEngineeringResearch3.7k
- functionsbrowserbaseDeploy serverless browser automation as cloud functions using Browserbase. Use when the user wants to deploy browser automation to run on… Review findingsEngineeringProductivity3.7k
- optimize-agent-promptbrowserbaseBuilds and improves Browserbase Agent API demos through an Autobrowse-style outer loop: run a fixed task, collect Agent messages and… No issuesEngineeringProductivity3.7k
- safe-browserbrowserbaseBuild local constrained-browser agents with a safe_browser tool that owns CDP, enforces a domain allowlist with Fetch interception, and… No issuesEngineeringResearch3.7k
- ui-testbrowserbaseAI-powered adversarial UI testing via the browse CLI. Analyzes git diffs to test only what changed, or explores the full app to find bugs.… Review findingsEngineeringDesign3.7k
- webmcp-genbrowserbaseCreate, compile, and validate site-specific WebMCP init scripts from a target URL and desired tool capability. Use when the user wants to… Review findingsEngineering3.7k
ctf-pwnljagielloProvides binary exploitation techniques for CTF challenges. Use when you already have a vulnerable native target or service and need to… Review findingsEngineeringSecurity3.6k- ctf-similar-searchljagielloSearches for similar CTF challenge writeups using Tavily API for search and content extraction. Use when the user requests finding related… Review findingsEngineeringResearch3.6k
- ctf-webljagielloProvides web exploitation techniques for CTF challenges. Use when the target is primarily an HTTP application, API, browser client,… Review findingsEngineeringResearch3.6k
finance-sentimenthimself65Fetch normalized stock sentiment across Reddit, X.com, financial news, and Polymarket from the Adanos Finance API: buzz score, bullish… No issuesEngineeringFinance3.5k- hyperliquid-readerhimself65Read Hyperliquid (app.hyperliquid.xyz) perp and spot market data through opencli and Hyperliquid's public info API: mark, oracle, and mid… Review findingsEngineeringData & analytics3.5k
- discord-readerhimself65Read Discord for financial research through opencli connected to the Discord desktop app: servers, channels, members, recent messages in… Review findingsEngineeringFinance3.5k
- telegram-readerhimself65Read Telegram channels and groups for financial news and market research with the tdl CLI: list chats and channels, find a channel by… High riskEngineeringFinance3.5k
- yc-readerhimself65Look up Y Combinator companies and batches from the public yc-oss API, a static JSON dataset refreshed daily: company profiles, batch… No issuesEngineeringFinance3.5k
ccf-experiment-designermikubaka88Design and interpret CCF experiments: datasets, baselines, metrics, ablations, run requirements, observed feedback, and result-table… No issuesEngineeringDesign3.4k- ccf-pipeline-orchestratormikubaka88Plan or coordinate CCF research stages, goals, gates, artifacts, and ccfa.yaml state. Use for 任务拆解, 流程规划, project status, end-to-end… No issuesEngineeringProductivity3.4k
- ccf-research-engineermikubaka88Implement and debug research code, select suitable codebases, reproduce baselines, map mechanisms into model architecture, and optimize… No issuesEngineeringResearch3.4k
aws-agentsawsBuild, deploy, and operate AI agents on AWS. Skills for scaffolding agents with Amazon Bedrock AgentCore (Strands, LangGraph), connecting… High riskEngineeringDocuments3.4k- aws-agents-for-devsecopsawsInvestigate incidents, review code and execute UAT for release readiness, scan code for vulnerabilities, and run penetration tests with… High riskEngineeringSecurity3.4k
- setup-devops-agentawsSetup and diagnostics for the AWS DevOps Agent MCP connection. Triggers when aws-devops-agent is missing from .mcp.json, when the… High riskEngineeringAI & agents3.4k
- agents-debugawsUse when your agent or environment is broken: wrong answers, errors, timeouts, tool failures, or CLI issues. Reads traces and logs to… High riskEngineeringAI & agents3.4k
- rds-db2awsProvisions, connects, migrates, and operates Amazon RDS for Db2. Applies when provisioning with IBM customer and site IDs (License… High riskEngineeringData & analytics3.4k
- aws-transformawsPerforms code upgrades, migrations, and transformations using the AWS Transform (ATX) CLI. Use when upgrading language versions, migrating… High riskEngineeringData & analytics3.4k
ASRjjyaoaoImplement speech-to-text (ASR/automatic speech recognition) capabilities using the z-ai-web-dev-sdk. Use this skill when the user needs to… No issuesEngineeringImages, video & audio3.3k- financejjyaoaoComprehensive Finance API integration skill for real-time and historical financial data analysis, market research, and investment… No issuesEngineeringFinance3.3k
- frontend-designjjyaoaoTransform UI style requirements into production-ready frontend code with systematic design tokens, accessibility compliance, and creative… Review findingsEngineeringDesign3.3k
- image-generationjjyaoaoImplement AI image generation capabilities using the z-ai-web-dev-sdk. Use this skill when the user needs to create images from text… No issuesEngineeringImages, video & audio3.3k
- LLMjjyaoaoImplement large language model (LLM) chat completions using the z-ai-web-dev-sdk. Use this skill when the user needs to build… No issuesEngineeringResearch3.3k
- Podcast GeneratejjyaoaoGenerate podcast episodes from user-provided content or by searching the web for specified topics. If user uploads a text file/article,… No issuesEngineeringImages, video & audio3.3k
- TTSjjyaoaoImplement text-to-speech (TTS) capabilities using the z-ai-web-dev-sdk. Use this skill when the user needs to convert text into… No issuesEngineeringImages, video & audio3.3k
- Video GenerationjjyaoaoImplement AI-powered video generation capabilities using the z-ai-web-dev-sdk. Use this skill when the user needs to generate videos from… No issuesEngineeringImages, video & audio3.3k
- video-understandjjyaoaoImplement specialized video understanding capabilities using the z-ai-web-dev-sdk. Use this skill when the user needs to analyze video… No issuesEngineeringImages, video & audio3.3k
- VLMjjyaoaoImplement vision-based AI chat capabilities using the z-ai-web-dev-sdk. Use this skill when the user needs to analyze images, describe… No issuesEngineeringData & analytics3.3k
- web-readerjjyaoaoImplement web page content extraction capabilities using the z-ai-web-dev-sdk. Use this skill when the user needs to scrape web pages,… No issuesEngineeringResearch3.3k
- web-searchjjyaoaoImplement web search capabilities using the z-ai-web-dev-sdk. Use this skill when the user needs to search for real-time information from… No issuesEngineeringResearch3.3k
wecomcli-calendarwecomteam企业微信日程管理。当用户需要预约日程、预订会议室、查看/更新/取消日程或查忙闲时触发。本技能负责『日程』, , 即不含在线会议链接的安排（也涵盖纯线下面对面碰头）；若用户要的是『在线会议』（含会议号/入会链接、可远程或视频参会），改用 wecomcli-meeting… No issuesEngineeringProductivity3.3k- wecomcli-contactwecomteam使用 wecom-cli 按姓名、拼音、英文名或别名搜索企业微信通讯录中的人员，并查询匹配人员的 userid、部门和职务。适用于查找联系人、区分同名人员、获取用户 userid，以及列出全部同名人员。 No issuesEngineering3.3k
- wecomcli-diskwecomteam企业微信微盘（Disk / 网盘）文件操作技能。承接"微盘 / 网盘"里的文件列出、搜索、读取元信息、上传、下载、重命名、新建文件夹操作。用户明确提到"微盘"/"网盘"/"共享空间"时必须先读取本技能获取完整指引，不得凭记忆处理。用户说"上传到微盘"、"帮我在微盘里搜一下… No issuesEngineering3.3k
- wecomcli-docwecomteam企业微信在线 doc 文档技能。能够新建 doc、导入本地 .doc/.docx/.txt 为 doc、读取 doc 内容、向 doc 追加或覆盖写入。仅当用户明确出现「doc」「docx」「word」「在线文档」「office 文档」等强类型词，或提供… No issuesEngineeringDocuments3.3k
- wecomcli-doc-managewecomteam企业微信文档公共管理：搜索文档（最近浏览/创建）、文档改名、添加文档成员权限、设置文档加入规则。适用于所有文档类型（doc文档 / 在线表格 / 智能表格 / 智能文档）。新建或导入doc文档请使用 wecomcli-doc；新建或导入在线表格请使用… No issuesEngineering3.3k
- wecomcli-emailwecomteam企业微信邮件：发送/回复/转发邮件、搜索邮件列表、获取邮件详情（正文、附件、内嵌图片解析），支持通过邮件发送日程邀约和会议预定。当用户涉及内部邮件收发、邮件查询、邮件管理等需求时使用。注意：日程和会议有单独的技能，仅当用户明确提到"邮箱"或"邮件"时（如"通过邮箱发送会议邀请"… No issuesEngineeringWriting & content3.3k
- wecomcli-mediawecomteam企业微信媒体文件上传/下载技能。承接基于 media_id 下载媒体文件到本地，以及上传本地文件获取 media_id 两类操作。当其他技能（微盘、邮件等）返回了 media_id 需要落地为本地文件，或已有本地文件需要转换为 media_id… No issuesEngineering3.3k
See and control which skills your people use
Inside your organization, Waxell scans each skill and plugin before anyone installs it, approves what passes and publishes it to a private marketplace, and puts every MCP tool call behind one governed URL.
30 minutes. No commitment.
SOC 2 Type II attested · ISO/IEC 27001:2022 certified · HIPAA with a BAA · aligned to the EU AI Act and NIST AI RMF