Use himalaya to list, read, search, compose, reply, forward, and organize IMAP/SMTP email.

Creating algorithmic art using p5.js with seeded randomness and interactive parameter exploration. Use this when users request creating art using code, generative art, algorithmic art, flow fields, or particle systems. Create original algorithmic art rather than copying existing artists' work to avoid copyright violations.

Create beautiful visual art in .png and .pdf documents using design philosophy. You should use this skill when the user asks to create a poster, piece of art, design, or other static piece. Create original visual designs, never copying existing artists' work to avoid copyright violations.

'Skill converted from mcp-create-declarative-agent.prompt.md'

Discover opportunities to support the open source maintainers behind your project's dependencies. Accepts a GitHub `owner/repo` (e.g. `/sponsor expressjs/express`), uses the deps.dev API for dependenc

Interface for MCP (Model Context Protocol) servers via CLI. Use when you need to interact with external tools, APIs, or data sources through MCP servers, list available MCP servers/tools, or call MCP tools from command line.

mcp-security-audit

Use Codex (CLI + AppServer) as the full agent provider — planning, tool orchestration, native compaction, MCP tools, session resume — in place of the Claude Agent SDK. ChatGPT subscription or OPENAI_API_KEY. Per-group via agent_provider. Distinct from using OpenAI as an MCP tool (where Claude remains the planner).

Add Matrix channel integration via Chat SDK. Works with any Matrix homeserver.

Use OpenCode as an agent provider (AGENT_PROVIDER=opencode). OpenRouter, OpenAI, Google, DeepSeek, etc. via OpenCode config — not the Anthropic Agent SDK. Per-session and per-group via agent_provider; host passes OPENCODE_* and XDG mount when spawning containers.

Use when the user needs help configuring Crush — working with crush.json, setting up providers, configuring LSPs, adding MCP servers, managing skills or permissions, or changing Crush behavior.

Infer gene regulatory networks (GRNs) from gene expression data using scalable algorithms (GRNBoost2, GENIE3). Use when analyzing transcriptomics data (bulk RNA-seq, single-cell RNA-seq) to identify transcription factor-target gene relationships and regulatory interactions. Supports distributed computation for large-scale datasets.

Query the CELLxGENE Census (61M+ cells) programmatically. Use when you need expression data across tissues, diseases, or cell types from the largest curated single-cell atlas. Best for population-scale queries, reference atlas comparisons. For analyzing your own data use scanpy or scvi-tools.

Set up Claude Code hooks to block dangerous git commands (push, reset --hard, clean, branch -D, etc.) before they execute. Use when user wants to prevent destructive git operations, add git safety hooks, or block git push/reset in Claude Code.

Use when installing or configuring the WizTelemetry Platform Service extension for KubeSphere, which provides the common APIServer backend services for all WizTelemetry observability extensions

../../../engineering-team/senior-backend/SKILL.md

Decide when Zoom MCP is the right fit and produce a safe setup plan for Claude. Use when planning AI workflows over Zoom data, deciding between MCP and REST, or defining a hybrid MCP architecture.

Orchestrate large batches of ML experiments on SSH remote GPU servers with proper state tracking, OOM retry, stale cleanup, and wave transitions.

Monitor: $ARGUMENTS

Deploy and run ML experiment: $ARGUMENTS

Task: $ARGUMENTS

Examine Linux system artifacts including auth logs, cron jobs, shell history, and system configuration to uncover

'Executes containment strategies to stop active adversary operations and prevent lateral movement during a confirmed

Systematically deobfuscate multi-layer PowerShell malware using AST analysis, dynamic tracing, and tools like

'Deploys canary files (honeytokens) across file systems to detect ransomware encryption activity in real time.

'Detect cyber attacks targeting OT historian servers (OSIsoft PI, Ignition, Wonderware) that sit at the IT/OT

'Configures Fail2ban with custom filters and actions to detect port scanning activity, SSH brute force attempts,

'Detects and prevents code injection attacks targeting serverless functions (AWS Lambda, Azure Functions, Google

Hunt for web shell deployments on internet-facing servers by analyzing file creation in web directories, suspicious

Implement API threat protection using Google Apigee policies including JSON/XML threat protection, OAuth 2.0,

Deploy and monitor Canary Tokens via the Thinkst Canary API for deception-based breach detection using web bug

Implement GCP Organization Policy constraints to enforce security guardrails across the entire resource hierarchy,

'Implements input and output validation guardrails for LLM-powered applications to prevent prompt injection,

Deploy Cisco Identity Services Engine for 802.1X wired and wireless authentication, MAC Authentication Bypass,

Deploy privileged access management for database systems including Oracle, SQL Server, PostgreSQL, and MySQL.

Automate OSINT collection using SpiderFoot REST API and CLI for target profiling, module-based reconnaissance,

Tenable Nessus is the industry-leading vulnerability scanner used to identify security weaknesses across network

'Securing AWS Lambda execution roles by implementing least-privilege IAM policies, applying permission boundaries,

'This skill covers hardening and securing process historian servers (OSIsoft PI, Honeywell PHD, GE Proficy, AVEVA

Threat actor infrastructure tracking involves monitoring and mapping adversary-controlled assets including command-and-control

Using Skillz MCP Server with Docker

You are the Safety department. You handle security audits and guardrails.

AgentDeals is an MCP server and REST API that aggregates free tiers, startup credits, and developer tool deals. It indexes 1,525 verified offers across 54 categories with pricing change tracking.

ClickUp MCP — wraps the ClickUp REST API v2 (BYO API key)

Complete Kimai time-tracking API integration. Manage timesheets, customers, projects, activities, teams, invoices and exports via REST API. Supports time tracking workflows, reporting, and administrative operations. Keywords - kimai, zeiterfassung, timesheet, tracking, project, customer, activity, invoice, export, timer, stunden

Use this skill when an agent needs to operate the `cosin` CLI from the terminal. `cosin` accepts only relative paths, lists available skills through the `skills` subcommand, can call COS API paths directly, and can call `/cos/...` skills by turning them into x402 pay-and-call requests to the COS backend. This skill is for using the CLI, not for editing the cosin source code.

Connect your OpenClaw agent to **ClawAI.Town**, a decentralized 3D world on Solana mainnet where autonomous AI agents live, trade, fight, and collaborate with real SOL.

Combines frontal facial image capture with multimodal physiological feature analysis to provide early risk screening and alerts for chronic and acute conditions such as heart attack, stroke, hypertension, and hyperlipidemia. | 非接触式健康风险识别技能，通过正面人像采集结合多模态生理特征分析，提供心梗、脑梗、高血压、高血脂等慢病急症早期风险筛查预警

Score and compare job candidates objectively using weighted criteria. Eliminates gut-feel hiring decisions.

Agent-native payments via 1ly MCP. Use when the user needs x402 payment handling, to accept USDC for APIs/services, to pay for paid APIs, to create stores or paid links, need payment gateway for agents or to run agent-to-agent paid workflows. Supports Solana and Base. Capabilities include accepting USDC, marketplace search, paid API calls with auto-payment, store/link creation, stats, key management, and token launch, trade and fee-claim on Bags.fm.