Agent skills
Skills you can use with AI coding agents, indexed from public GitHub repositories.
-
brainstorming
You MUST use this before any creative work - creating features, building components, adding functionality, or modifying behavior. Explores user intent, requirements and design before implementation.
6BNBN/FlowPilot 127
-
test-driven-development
Use when implementing any feature or bugfix, before writing implementation code
6BNBN/FlowPilot 127
-
using-superpowers
Use when starting any conversation to discover relevant skills and open the right SKILL.md files before responding, including before clarifying questions.
6BNBN/FlowPilot 127
-
ui-ux-pro-max
UI/UX design intelligence. 50 styles, 21 palettes, 50 font pairings, 20 charts, 9 stacks (React, Next.js, Vue, Svelte, SwiftUI, React Native, Flutter, Tailwind, shadcn/ui). Actions: plan, build, create, design, implement, review, fix, improve, optimize, enhance, refactor, check UI/UX code. Projects: website, landing page, dashboard, admin panel, e-commerce, SaaS, portfolio, blog, mobile app, .html, .tsx, .vue, .svelte. Elements: button, modal, navbar, sidebar, card, table, form, chart. Styles: glassmorphism, claymorphism, minimalism, brutalism, neumorphism, bento grid, dark mode, responsive, skeuomorphism, flat design. Topics: color palette, accessibility, animation, layout, typography, font pairing, spacing, hover, shadow, gradient. Integrations: shadcn/ui MCP for component search and examples.
6BNBN/FlowPilot 127
-
requesting-code-review
Use when completing tasks, implementing major features, or before merging to verify work meets requirements.
6BNBN/FlowPilot 127
-
superpowers
Use when starting any conversation to discover relevant skills and open the right SKILL.md files before responding, including before clarifying questions.
6BNBN/FlowPilot 127
-
writing-plans
Use when you have a spec or requirements for a multi-step task, before touching code
6BNBN/FlowPilot 127
-
systematic-debugging
Use when encountering any bug, test failure, or unexpected behavior, before proposing fixes
6BNBN/FlowPilot 127
-
subagent-driven-development
Use when executing implementation plans with independent tasks in the current session
6BNBN/FlowPilot 127
-
executing-plans
Use when you have a written implementation plan to execute in a separate session with review checkpoints
6BNBN/FlowPilot 127
-
code-review
Use when the user asks to review a pull request or diff with a structured Codex CLI workflow using parallel review passes and filtered actionable findings.
6BNBN/FlowPilot 127
-
verification-before-completion
Use when about to claim work is complete, fixed, or passing, before committing or creating PRs - requires running verification commands and confirming output before making any success claims; evidence before assertions always
6BNBN/FlowPilot 127
-
writing-skills
Use when creating new skills, editing existing skills, or verifying skills before deployment in Codex CLI.
6BNBN/FlowPilot 127
-
dispatching-parallel-agents
Use when facing 2+ independent tasks that can be worked on without shared state or sequential dependencies.
6BNBN/FlowPilot 127
-
feature-dev
Use when the user asks to build a new feature and wants a structured Codex CLI workflow with discovery, clarifying questions, architecture comparison, implementation, and review.
6BNBN/FlowPilot 127
-
finishing-a-development-branch
Use when implementation is complete, all tests pass, and you need to decide how to integrate the work - guides completion of development work by presenting structured options for merge, PR, or cleanup
6BNBN/FlowPilot 127
-
sql-injection-union
Guide UNION-based SQL injection exploitation during authorized penetration testing.
blacklanternsecurity/red-run 126
-
ldap-injection
Exploit LDAP injection vulnerabilities during authorized penetration testing.
blacklanternsecurity/red-run 126
-
race-condition
Exploit race conditions and TOCTOU vulnerabilities in web applications during authorized penetration testing.
blacklanternsecurity/red-run 126
-
deserialization-php
Exploit PHP deserialization vulnerabilities during authorized penetration testing.
blacklanternsecurity/red-run 126
-
ajp-ghostcat
Exploit Apache JServ Protocol (AJP) misconfigurations and Ghostcat (CVE-2020-1938) for file read and remote code execution on Apache Tomcat. Use when port 8009 is open or AJP connector is exposed.
blacklanternsecurity/red-run 126
-
nosql-injection
Guide NoSQL injection exploitation during authorized penetration testing.
blacklanternsecurity/red-run 126
-
xxe
Guide XML External Entity (XXE) injection exploitation during authorized penetration testing.
blacklanternsecurity/red-run 126
-
sql-injection-blind
Guide blind SQL injection exploitation (boolean-based, time-based, and out-of-band) during authorized penetration testing.
blacklanternsecurity/red-run 126