Browse Skills

Learn runs a six-phase research workflow that turns unfamiliar domains, source bundles, or collected material into publish-ready output. Use it when you need to research, study, deep-dive, compile sources, or synthesize unfamiliar material into a coherent reference.

Read URLs and PDFs fetches source content from URLs and PDFs, defaulting to concise summaries for plain read requests and clean Markdown when asked to convert, save, quote, cite, or feed downstream work. Use it when users ask in any language to read, fetch, check, summarize, quote, cite, convert, or save a URL or PDF.

Think turns rough ideas into approved, decision-complete plans with validated structure before coding. Use it for planning, architecture, design direction, feasibility, value judgment, or deciding whether a feature is worth building before implementation.

UI produces distinctive, production-grade UI for pages, components, visual interfaces, typography, and screenshot-driven polish. Use it when a screen looks unclear, ugly, inconsistent, or visually wrong, or when users ask for UI, page, component, or frontend work.

Write rewrites and polishes prose in Chinese or English, removing AI-like wording and reviewing product localization copy while preserving intent. Use it when drafting, rewriting, proofreading, localizing, or polishing release notes, launch copy, and social posts.

Agentic Actions Auditor provides static security analysis guidance for GitHub Actions workflows that invoke AI coding agents, detecting attack vectors where attacker-controlled input reaches an AI agent. Use it when auditing CI/CD pipeline security for prompt injection risks or evaluating agentic action configurations.

Algorand Vulnerability Scanner scans TEAL and PyTeal smart contracts for 11 common Algorand vulnerabilities including rekeying attacks, unchecked transaction fees, missing field validations, and access control issues. Use it when auditing Algorand projects or training on Algorand-specific security patterns.

Audit Context Building analyzes an unfamiliar codebase to map functions, assumptions, guarantees, and dependencies before any vulnerability hunting. Use it at the start of an audit, threat model, or architecture review to produce dossiers and open questions that feed later phases.

Audit Prep Assistant prepares codebases for security reviews using Trail of Bits' checklist. It helps set review goals, runs static analysis tools, increases test coverage, removes dead code, ensures accessibility, and generates documentation.

Burp Suite Project Parser searches and explores Burp Suite project files (.burp) from the command line. Use it when searching response headers or bodies with regex patterns, extracting security audit findings, dumping proxy history or site map data, or analyzing HTTP traffic captured in a Burp project.

C/C++ Security Review performs comprehensive security audits of native C/C++ applications for memory corruption, integer overflows, race conditions, and platform-specific vulnerabilities. Use it when auditing userspace daemons, services, or applications for memory safety issues.

Cairo StarkNet Vulnerability Scanner scans Cairo smart contracts for 6 critical vulnerabilities including felt252 arithmetic overflow, L1-L2 messaging issues, address conversion problems, and signature replay. Use it when auditing StarkNet projects.