gtm-offers
Step 8 of the GTM flow. Turn the chosen market, ICP, tiers and VP into concrete offers — an offer ladder (hook/free -> entry/paid pilot -> core -> continuity)…
Skills
Find an Agent Skill for your task. Read the guide and copy the install command.
Updated 11-09 00:13
General & other
53,666 results
gtm-positioning
Step 6 of the GTM flow (after competitor+GAP, before value prop). Builds the agency's positioning from the whitespace found in step 05, gated by the agency's…
gtm-stage-diagnostic
Step 2 of the GTM flow and CHECKPOINT 1. Diagnose an IT agency growth stage 0-5 from the Company Snapshot using the agency-path model, plus the…
prospect-list-run
End-to-end pipeline that turns a client's raw prospect list (CSV or Google Sheet) into a ready-to-send prospect list plus four working documents. Builds an…
glab-govern
Configure and diagnose GitLab AI agent governance hooks, fallback periodic sync, and explicitly approved Claude Code, OpenCode, Codex, or Cursor session audit…
session-events
Use when a session needs events from any polled system delivered as messages instead of polls, or when writing the source that polls it, so one daemon the…
doc-ctr-reviewer
Comprehensive content review and quality assurance for CTR documents - validates contract completeness, dual-file consistency, OpenAPI compliance, and…
arkcli-infer-endpoint
arkcli inference endpoint management and explicit raw CRUD creation capability. **Positive trigger: when the user explicitly requests scripted / CI / no-guardrail / raw raw CRUD creation of an Endpoint, this skill's `arkcli infer endpoint create` path must be used, and you must not switch to…
building-scala-projects
Sets up, tests, and publishes Scala projects — sbt build layout, scalafmt/scalafix as CI gates, Scala 2-vs-3 and cross-building, a test job that actually runs,…
building-swift-apps
Builds, tests, and ships native Swift/SwiftUI apps for Apple platforms (macOS/iOS) reliably in CI and locally — unsigned CI builds, the hand-maintained…
expression-language-injection
Expression Language (EL) injection methodology. Use when the target uses Spring (SpEL), Struts2 (OGNL), Confluence (OGNL), JSP/JSF (Java EL) and user-controllable expression evaluation exists. Covers multi-syntax probing and differentiation (${7*7}/#{7*7}/%{7*7}), SpEL…
http-host-header-attacks
HTTP Host Header attack methodology. Use when the target has password reset, caching mechanisms, reverse proxies, virtual hosts, or redirect functionality. Covers password reset poisoning (Host injection to steal reset token), Web cache poisoning (Host controls cache key), SSRF via Host routing, virtual host enumeration and cross-site reading, bypass techniques (X-Forwarded-Host/dual Host/abs…
ldap-injection
LDAP injection detection and exploitation. Use when the target has an LDAP authentication entry point (enterprise login/SSO/unified authentication), ports 389/636/3268/3269 are discovered, LDAP attribute names such as uid/cn/ou/dc appear in URL parameters, or the backend uses LDAP for user queries. LDAP injection is similar in concept to SQL injection but with different syntax—by injecting LDAP...
mongodb-attack
MongoDB unauthorized access and NoSQL injection exploitation. Use when the target is found to have port 27017 open, the MongoDB service has no authentication, a web application using a MongoDB backend has NoSQL injection, or data needs to be extracted from MongoDB. Covers unauthorized access, database enumeration and export, NoSQL...
php-file-audit
PHP source code file operation class vulnerability audit. Triggered when file-related vulnerabilities need to be detected in PHP white-box auditing. Covers 5 types of file risks: arbitrary file upload (type bypass/path traversal/secondary rendering), arbitrary file read (include/fread/path traversal), arbitrary file write (log injection/config overwrite), file system race (TOCTOU/symlink), archive extraction vulnerability (Zip...
php-injection-audit
PHP source code injection vulnerability audit. Triggered when injection-type vulnerabilities need to be detected in PHP white-box auditing. Covers 6 types of injection: SQL injection (PDO/MySQLi/ORM), NoSQL injection (MongoDB), command injection (system/exec/passthru), LDAP injection, expression injection (eval/preg_replace...
php-serialization-audit
PHP source code serialization and template class vulnerability audit. Triggered when deserialization, XML parsing, or template injection vulnerabilities need to be detected in PHP white-box auditing. Covers 3 types of risks: PHP deserialization (unserialize/phar deserialization/POP chain construction), XXE (XML external entity injection/libxml…
supply-chain-attack
Software supply chain attack methodology. Use when the target uses package managers such as npm/PyPI/Maven, has private repositories, or uses CI/CD Pipelines. Covers Dependency Confusion, Typosquatting, malicious package publishing, CI/CD poisoning, build server attacks
ads
Use this skill when the user needs to run Google Ads, write ad copy, select keywords, optimize CAC/LTV, or manage a small paid acquisition budget. Covers…
beautify
Use this skill when the user wants to make their app look better, says it looks like a template, asks how to achieve Stripe/Linear quality, or says something…
launch
Use this skill when the user needs to plan a product launch, prepare for Product Hunt, build a waitlist, coordinate a launch week, sequence go-to-market…
confluence-api-doc
Sync API documentation from a docs/api/ directory (multi-file structure generated by api-doc-gen) to Confluence pages using acli + REST API. Each endpoint file…
best-practice-guide
Analyze project documentation to identify missing context, then generate and store best practice guides using web search when available
distributed-tracing-logs
Implement distributed tracing using logs, including trace context propagation, span logging, correlation IDs, and OpenTelemetry integration for observability