Development

Programming, frameworks, implementation, frontend, backend, and app development

skills in category: 66,240
pages available: 2,760

Security grades appear on each card once the skill has been scanned. Newly imported skills may briefly show without a grade until the backfill job runs.

Open in full browser

Browse development skills

Showing 13,753–13,776 of 66,240 skills

Advanced Debugging AssistantBSystematic debugging methodology and language-specific debugging commands.developmentjavascripttypescriptVotes: 0GitHub stars: 19
Adaptive SuiteAA continuously adaptive skill suite that empowers Clawdbot to act as a versatile coder, business analyst, project manager, web developer, data analyst, and NAS metadata scraper. It intelligently discovers free resources, adapts to user context, and ensures reliable, proven guida…developmentrustgoVotes: 0GitHub stars: 19
Ad CreativeAWhen the user wants to generate, iterate, or scale ad creative — headlines, descriptions, primary text, or full ad variations — for any paid advertising platform. Also use when the user mentions 'ad copy variations,' 'ad creative,' 'generate headlines,' 'RSA headlines,' 'bulk ad copy,' 'ad iterations,' 'creative testing,' 'ad performance optimization,' 'write me some ads,' 'Facebook ad copy,' 'Google ad headlines,' 'LinkedIn ad text,' or 'I need more ad variations.' Use this whenever someone ...developmenttypescriptpythonVotes: 0GitHub stars: 19
Acuity Scheduling IntegrationBAcuity Scheduling API integration with managed OAuth. Manage appointments, calendars, clients, and availability. Use this skill when users want to schedule, reschedule, or cancel appointments, check availability, or manage clients and calendars. For other third party apps, use t…developmentjavascriptpythonVotes: 0GitHub stars: 19
Activecampaign IntegrationBActiveCampaign API integration with managed OAuth. Marketing automation, CRM, contacts, deals, and email campaigns. Use this skill when users want to manage contacts, deals, tags, lists, automations, or campaigns in ActiveCampaign. For other third party apps, use the api-gateway…developmentjavascriptpythonVotes: 0GitHub stars: 19
Spec LintALint the project's specification docs (requirements / design / plan / task markdown): orphan specs, dead cross-doc links, index and naming drift, empty sections, stale TODOs, and — most importantly — reverse consistency between layers (design must cover its requirements, plans must cover their design). Auto-detects which spec-driven framework is in use — Kiro IDE, Superpowers, OpenSpec, GitHub spec-kit, BMad Method, GSD, or a generic default profile — and applies that profile's rules. Use whe...developmentgoshellVotes: 0GitHub stars: 5
Skills DirectorySkills Directory Look up any of 103,619 scanned skills — grade, score, and every finding. Free.Check a skill
Spec CompactACompact a spec plan (or design doc) markdown file after the implementation has shipped: strip the transient how — code snippets, step-by-step walkthroughs, file-by-file diffs — that the codebase now owns, keep the why — design decisions, key file references, changelog. Use when the user wants to compact, shrink, or trim a plan/spec file post-implementation, says the plan is bloated or too long now that the feature shipped, or invokes `/spec-compact`. Renaming files, fixing dead links, and ind...developmentrustgoVotes: 0GitHub stars: 5
Spec CodingAGuide users through spec-driven development — from goal clarification through requirements, design, task planning, and incremental execution. Use this skill whenever a user wants to build a new feature with upfront planning, asks for a structured development workflow, mentions "spec-driven", wants to create requirements or a design doc before coding, or invokes /spec-coding. Also trigger when a user has existing spec files (requirements.md, design.md, tasks.md) and wants to continue or execut...developmentgotestingVotes: 0GitHub stars: 5
Research Plan ImplementAComplete Research \u2192 Plan \u2192 Implement workflow for complex tasks. Use this skill whenever the user faces: complex features spanning multiple files, bug investigations requiring root cause analysis, refactoring with architectural implications, or any non-trivial work where understanding the codebase first will prevent wasted effort. Also use when the user says things like 'help me figure out how to...', 'I need to understand before building...', or 'let\u2019s research this before cod...developmentgotestingVotes: 0GitHub stars: 5
Code Review ExpertAExpert code review with a senior engineer lens — covers architecture, SOLID principles, security vulnerabilities, performance, error handling, testing gaps, and API contract changes. Use this skill whenever the user asks to review code, check changes, audit a diff, look over a PR, find bugs in their work, or wants feedback on code quality. Also trigger when the user says things like 'review my changes', 'check this before I push', 'what do you think of this code', 'any issues with this?', 'co...developmentgosqlVotes: 0GitHub stars: 5
Architecture DiagramAUse when the user needs an architecture or system diagram, a CI/CD, build, or release pipeline, an ETL or data pipeline, a deployment flow, a left-to-right component or stage flow, or any diagram inline in a Markdown wiki or page. This skill applies even when Mermaid or ASCII seems more compatible.developmentpythongoVotes: 0GitHub stars: 5
Writing PlansAUse when you have a spec or requirements for a multi-step task, before touching codedevelopmentpythongoVotes: 0GitHub stars: 2
asterframeABuild, redesign, audit, or polish frontend interfaces with Asterframe when explicitly requested; route only the relevant specialist concerns.developmentpythonrustVotes: 0GitHub stars: 3
gongwen-formatA把 Word 文档（.docx 或 .doc）排版成国企体制内通用的标准化公文格式：标题方正小标宋简体小二号、正文三号仿宋、一级标题黑体、二级标题楷体、全文 1.25 倍行距、A4 公文页边距。当用户提到「公文格式」「套格式」「套用模板」「标准化 Word 模板」「调整公文格式」「按集团模板排版」，或要求把一份已写好的工作汇报、报告、通知、请示、总结等文档的字体、字号、行距、页边距、首行缩进调整成符合集团规范时，都要使用本技能。即使用户没有明说「公文格式」，只要是把中文公文类文档规范成「三号仿宋正文＋黑体/楷体多级标题」的标准排版，也应触发。developmentpythongoVotes: 0GitHub stars: 2
Web Nosql InjectionAYou are helping a penetration tester exploit NoSQL injection vulnerabilities.developmentjavascriptpythonVotes: 0GitHub stars: 2
Offensive XssBCross-Site Scripting testing checklist: stored/reflected/DOM/blind XSS discovery, polyglot payloads, CSP bypass, XSS filter bypass, event handler injection, DOM clobbering, mutation XSS, and impact escalation (session hijack, phishing, keylogging). Use for web app XSS testing and bug bounty.developmentjavascriptrustVotes: 0GitHub stars: 2
Offensive SstiCSSTI exists wherever user-controlled input is concatenated into a server-sidedevelopmentjavascriptpythonVotes: 0GitHub stars: 2
Offensive Parameter PollutionBHTTP parameter pollution (HPP) checklist: duplicate parameter injection, backend vs frontend parsing differences, WAF bypass via HPP, server-side vs client-side HPP, and practical exploitation patterns. Use when testing web applications for parameter handling flaws.developmentpythonrustVotes: 0GitHub stars: 2
Offensive Open RedirectAOpen redirect vulnerability checklist: parameter identification, bypass techniques (URL encoding, double slashes, CRLF injection, protocol handlers), chaining with OAuth/SSRF, and impact escalation paths. Use for web app testing and bug bounty open redirect discovery.developmentjavascriptpythonVotes: 0GitHub stars: 2
Offensive File UploadBFile upload vulnerability checklist: MIME type bypass, extension bypass, magic byte manipulation, path traversal in filenames, stored XSS via SVG/HTML upload, server-side processing attacks, and race conditions. Use for assessing file upload endpoints in web app pentests or bug bounty.developmentjavascriptpythonVotes: 0GitHub stars: 2
Hunt XxeBHunting skill for xxe vulnerabilities. Built from 10 public bug bounty reports including SVG-upload XXE, Office-doc (PPTX/DOCX) XXE, SOAP XXE, SAML AssertionConsumer XXE, blind OOB XXE via DTD callback, parameter-entity XXE, XXE-to-LFI, XXE-to-SSRF, and XXE-to-RCE chains (Adobe Commerce CosmicSting CVE-2024-34102). Use when hunting XXE on any target — emphasis on OOB-Or-It-Didn't-Happen Gate for blind cases.developmentjavascriptpythonVotes: 0GitHub stars: 2
Hunt Spa ApiADiscover a single-page-app's hidden backend API from its public JS bundle, then test that API for broken access control / missing authentication. One of the highest-yield web plays in modern recon — SPAs ship their entire backend route map to the browser, and the API behind them is frequently missing the auth middleware the login page implies. Built from an authorized engagement where this play found an unauthenticated financial API that an ASM scan reporting hundreds of 'Criticals' completel...developmentrustgoVotes: 0GitHub stars: 2
Hunt Race ConditionAHunting skill for race condition vulnerabilities. Built from 12 public bug bounty reports including modern HTTP/2 single-packet attack cases (James Kettle DEF CON 2023 'Smashing the State Machine'; RyotaK / Flatt Security 10,000-request first-sequence-sync expansion 2024). Covers coupon double-redemption, gift-card double-spend, MFA-OTP-validate race, account-create race, faucet/crypto token double-mint, email-activation race, vote/upvote inflation, password-reset token race, rate-limit bypas...developmentjavascriptpythonVotes: 0GitHub stars: 2
Hunt GraphqlAHunting skill for graphql vulnerabilities. Built from 12 public bug bounty reports across IDOR via node() / GID, mutation IDOR including AI/LLM features, cross-tenant IDOR, SSRF via argument, batching-DoS, query-cost-bypass, SQLi via argument, broken-object-level-authz, auth-bypass via unscoped mutations, and PII exposure from missing field-level authz. Use when hunting graphql on any target.developmentjavascriptpythonVotes: 0GitHub stars: 2