Skillget

skills

agent
Security Audit
Pass
Health Pass
  • License — License: Apache-2.0
  • Description — Repository has a description
  • Active repo — Last push 0 days ago
  • Community trust — 58 GitHub stars
Code Pass
  • Code scan — Scanned 12 files during light audit, no dangerous patterns found
Permissions Pass
  • Permissions — No dangerous permissions requested

No AI report is available for this listing yet.

SUMMARY

A collection of skills for AI agents (Kiro, Cursor, Windsurf, Claude Code, and others). Each skill is a reusable module that teaches the agent to perform complex tasks with context, structure, and best practices.

README.md

🇧🇷 Versao em Portugues do Brasil

skills.sh
Cloudflare
Astro
Coolify
Google Analytics
Google Search Console
Substack
SEO
AI Agents
LGPD
Security

🧠 Agent Skills by ft.ia.br

A collection of Agent Skills for AI agents (Kiro, Cursor, Codex, Claude Code, and others). Each skill is a reusable module that teaches the agent to perform complex tasks with context, structure, and best practices.

Agent Skills are a lightweight, open format for extending AI agent capabilities with specialized knowledge and workflows. Each skill is a folder with a SKILL.md file containing metadata and instructions that agents load on demand via progressive disclosure. Learn more at agentskills.io.

Available Skills

🔍 GEO Optimization (Generative Engine Optimization) · code-quality-and-review

Optimizes digital content and marketing strategies for Generative Engines (LLMs, AI agents) to maximize citations in AI responses.

When to use: improve visibility in AI responses (ChatGPT, Perplexity, Google AI Overview), measure citation rate, align terminology for LLMs, audit pages for AI, create optimized roundups and FAQs.

Improvements in v1.1 (Mar 2026):

  • Moved Guiding Principles and case study context to references/guiding-principles.md
  • Fixed second-person language to imperative form throughout
  • Added explicit default action (Full GEO Audit) when no specific request is made
  • Converted Edge Cases section into a structured Quality Checklist with checkboxes
  • Description optimized to be more concise and actionable (Mar 8)

📄 View full documentation

📰 Substack Expert · library-and-api-reference

Substack platform expert. Guides post formatting, SEO optimization (titles, slugs, meta descriptions), native engagement strategies (Notes, Chat), and conversion to paid subscriptions.

When to use: format and optimize Substack posts, improve newsletter SEO (titles, slugs, meta descriptions), grow audience with Notes and recommendations, convert free readers to paid subscribers, customize homepage and welcome emails.

Improvements in v1.1 (Mar 2026):

  • Removed duplicate Overview section and stray Portuguese artifact/orphaned code fence
  • Moved formatting tips to references/formatting-best-practices.md
  • Moved Input/Output Examples to references/seo-output-example.md
  • Added Parameters table with defaults for topic, goal, and language
  • Added explicit Clarify Scope step for ambiguous requests
  • Added Quality Checklist with 8 pre-delivery verification points

📄 View full documentation

☁️ Pier Cloud API · library-and-api-reference

Complete guide to consuming the Pier Cloud (Lighthouse) API with authentication, context management, workspaces, and data views.
Note: The documentation for this skill is in Portuguese, but it can be used in any language.

When to use: authenticate with Pier Cloud, list available contexts (AWS, etc), manage workspaces, access cost analysis views, run FinOps scripts.

Improvements in v1.1 (Mar 2026):

  • Rewrote description to third-person trigger format
  • Removed verbatim Overview section that duplicated the frontmatter description
  • Fixed broken and incomplete Prerequisites section
  • Converted second-person language to imperative form throughout
  • Cleaned up workflow links to properly defer to references/REFERENCE.md
  • Added Quality Checklist

📄 View full documentation

🎨 Ultimate Design System Master · code-scaffolding-and-templates

Generates Apple/Pentagram/frog/Vercel/Figma-level design deliverables using 10 specialized role-play prompts. Covers Design Systems, Brand Identity, UI/UX Patterns, Marketing Assets, Figma Specs, Design Critique, Trend Analysis, Accessibility Audit, Design-to-Code, and Executive Presentations.

When to use: create a design system, build brand identity, generate UI/UX patterns, produce marketing assets, write Figma specs, get design critique, analyze design trends, run accessibility audit, translate design to code, create presentation decks.

Improvements in v2.1 (Mar 2026):

  • Rewrote description to third-person trigger format
  • Moved 18-question Briefing Questionnaire to references/briefing-questionnaire.md
  • Added Quality Checklist with 5 concrete verification conditions
  • Removed intro sentence that duplicated frontmatter description

Improvements in v2.2 (Mar 8, 2026):

  • Description rewritten with user-spoken trigger phrases for better skill activation
  • License Apache 2.0 added to metadata
  • Full compliance with Official Anthropic Guide for Agent Skills achieved

📄 View full documentation

🗂️ Front-End Checklist (moved)

This skill has been retired. The original project now offers 385 self-contained skills (one per rule) covering HTML, CSS, JavaScript, Performance, Accessibility, SEO, Security, Images, Testing, Privacy, and Internationalization — far more complete than what we maintained here.

👉 Install directly from: https://github.com/thedaviddias/Front-End-Checklist/tree/main/skills

npx skills add frontendchecklist/skills

🚀 Coolify Operator · ci-cd-and-deployment

Master operator for Coolify — the self-hosted open-source deployment platform (alternative to Heroku/Vercel/Netlify). Complete coverage of the official CLI with 100+ commands for managing applications, servers, databases, services, GitHub Apps, and cloud provider integrations.

When to use: connect to Coolify instances, create/deploy/restart/stop applications, manage environment variables and storage, configure database backups, list servers and databases, monitor deployment logs, manage multiple environments (dev/staging/prod), integrate with GitHub Apps, provision servers on Hetzner/DigitalOcean/Vultr.

Key features:

  • Application creation (5 methods): public repo, GitHub App, deploy key, Dockerfile, Docker image
  • Full lifecycle management: start, stop, restart, delete, move between environments
  • Environment variables: list, create, update, delete, sync from .env files
  • Storage management: persistent volumes, file mounts, directory mounts
  • Database backups: scheduled backups with S3/local retention, trigger on-demand
  • Deploy module: deploy by UUID, name, or batch multiple resources at once
  • GitHub Apps: create integrations, list accessible repos and branches
  • Services (one-click): WordPress, Ghost, n8n, and 50+ more with sub-resource management
  • Infrastructure: destinations, cloud tokens (Hetzner/DO/Vultr), private keys, tags

New in v2.0 (Aug 15, 2026):

  • Complete rewrite covering 100% of official Coolify CLI commands
  • Added app create (5 variants: public, github, deploy-key, dockerfile, dockerimage)
  • Added app storage, app deployments, app previews, app tags
  • Added database create/backup/storage/env/tags with full backup management
  • Added service create --list-types, service application, service database sub-resources
  • Added deploy uuid/name/batch module with deploy list/get/cancel
  • Added github list/get/create/update/delete/repos/branches for GitHub Apps
  • Added projects, resources, tags, destinations, cloud-token, private-key
  • Added LLM/AI Agent integration section with llms.txt references
  • Updated to match latest CLI documentation

📄 View full documentation

📄 Resume ATS Beater + LinkedIn Optimizer · code-scaffolding-and-templates

Rewrites resumes for ATS compatibility and audits LinkedIn profiles for professional positioning. Covers CV optimization for Brazilian ATS platforms (Gupy, Vagas.com, PandaPé, Sólides) and LinkedIn audit with heuristic scoring, SSI analysis, fix prompts, and LLM rewrite mega-prompts. Works for any specialized profession — not dev-only.

When to use: optimize resume for ATS, audit LinkedIn profile (headline, about, experiences, SSI), adapt CV to target role/industry, generate fix prompts per finding, align CV and LinkedIn in unified mode, improve bullets with measurable outcomes. Integrates with humanizar skill for narrative sections.

Improvements in v2.0 (Jun 2026):

  • Added modo_linkedin (full profile audit with scoring) and modo_unificado (CV + LinkedIn with consistency check)
  • LinkedIn audit: headline format enforcement (Position | Areas | Tools·), about structure, experience bullets, language, skills, featured, SSI
  • Punitive scoring system: 100 - (critical×15 + warning×6 + info×2)
  • SSI analysis with 4 pillars, classification by tier, and actionable tips
  • Fix prompts per finding (standalone prompts for any LLM)
  • Mega-prompt for full profile rewrite by LLM
  • 18 career presets across tech, data, marketing, finance, engineering, legal, sales, HR, product
  • Integration with humanizar skill (scoped to About/Summary sections)
  • 3 new reference files: auditoria-linkedin.md, ssi.md, presets-formatos.md

📄 View full documentation

🤖 Agent Ready — Cloudflare Scanner · product-verification

Audits any website for AI agent readiness using the Cloudflare isitagentready.com scanner. Scans 18 checks across 5 categories (Discoverability, Content, Bot Access Control, API/Auth/MCP Discovery, Commerce), assigns a level (0–5), and generates copy-paste fix prompts for every failing check. Includes 20 implementation sub-skills covering robots.txt, sitemap, Markdown for Agents, Content Signals, MCP Server Card, A2A Agent Card, Agent Skills Index, OAuth, WebMCP, and more.

When to use: scan a site for agent readiness, check agent-ready score, fix failing checks, implement MCP Server Card, add Content Signals, publish Agent Skills index, set up Markdown for Agents, batch scan multiple domains, improve AI agent discoverability.

📄 View full documentation

✅ DESIGN.md Validator · product-verification

Validates DESIGN.md files against the official Google design.md specification using the @google/design.md CLI linter. Works with local files and remote URLs. Always uses npx to run the latest published version — never stale.

When to use: lint a DESIGN.md for spec compliance, check WCAG contrast ratios, find broken token references, diff two design system versions, export tokens to Tailwind v3/v4 or W3C DTCG format, audit frontmatter schema.

📄 View full documentation

🔁 Ralph Loop for Kiro Specs · code-scaffolding-and-templates

Automated iterative agent runner for spec-based development in Kiro. Wraps kiro-cli in a self-correcting bash loop that picks up tasks from a Kiro spec, implements them one at a time, verifies against exit criteria, and accumulates corrections and codebase patterns across iterations. Based on ralph-loop-kiro-specs by mreferre.

When to use: automate Kiro spec task implementation, run kiro-cli in a loop, drive a spec to completion through repeated agent iterations, set up or troubleshoot the Ralph Loop workflow, understand progress tracking, corrections, codebase patterns, and the summary dashboard.

📄 View full documentation

🏗️ Loop Architect — Agent Loop Design Coach · code-scaffolding-and-templates

Design well-structured agent loops with best-practice coaching and cross-model review gates before you run them. Interviews you, critiques your design against built-in rubrics, wires in reviewers/judges, and emits portable artifacts (loop.yaml, RUN_IN_SESSION.md, run-loop.py). Integrates natively with Kiro CLI's /goal and subagent review loops. Based on Looper by Kevin Simback.

When to use: design an agent loop, set up a self-review or LLM-as-judge loop, build a multi-model council, create review-gated iterative workflows, or scaffold a /goal-driven process with typed verification and termination guards.

📄 View full documentation

👑 Pstack Skill — Rigorous Engineering Orchestrator · code-quality-and-review

Self-contained port of Lauren Tan's pstack (poteto-mode) as a single skills.sh-compatible skill — no plugin install, no Cursor required. One orchestrator that reads your task, picks one of 23 playbooks (bug fix, feature, refactoring, perf, investigation, prototype, babysit, shipping, autonomous run, orchestrate), routes to 21 bundled procedures (how, why, architect, arena, swarm, interrogate, unslop, technical-writing, show-me-your-work, tdd), and applies 21 engineering principles. Cursor-specific mechanics (cloud agents, Graphite, vendor model slugs) are translated to platform-agnostic equivalents: plain git/gh, subagents in isolated worktrees, and four model roles (worker, builder, judge, peer) bound once via config.

When to use: any task that needs rigor — nontrivial code changes, architecture decisions, debugging with repro-first discipline, adversarial reviews, PR babysitting and shipping, long autonomous runs — or "poteto-mode", "work like poteto", "pstack". Works single-model; panels degrade to fresh-context passes without weakening any verification gate.

📄 View full documentation

✍️ Humanizar — AI Text Humanizer for Brazilian Portuguese · code-quality-and-review

Rewrites Brazilian Portuguese text to sound human, natural, and undetectable by AI detection tools. Removes AI slop patterns, restores semantic entropy, and injects voice and personality. Born from the English humanizer skill but evolved into something far more complete — with 55+ patterns specific to PT-BR that no other source has cataloged.

Origin story: I started from the English humanizer skill by @blader (based on Wikipedia's "Signs of AI writing"), researched what makes AI text detectable specifically in Brazilian Portuguese, discovered there was zero consolidated material on PT-BR AI patterns, cataloged 55+ patterns from scratch (including 10 exclusive to Brazilian Portuguese like gerundismo, officialese, and ENEM-style hedging), incorporated the tropes.fyi directory and the concept of semantic ablation (The Register, 2026), and built a skill that doesn't just remove bad patterns — it restores the entropy that AI strips away.

Why it's better for PT-BR than the original:

  • 55+ patterns vs 25 (including 10 that only exist in Brazilian Portuguese)
  • Semantic entropy restoration with explicit alerts (not just removal)
  • 6 voice presets calibrated for Brazilian contexts (crônica, journalistic, academic, corporate, social media, WhatsApp)
  • Examples are culturally Brazilian, not translations from English
  • Preserves naturalized foreign words (feedback, deploy, churn) — fighting linguistic purism is itself a humanization signal
  • Uses the Brazilian crônica literary tradition as the gold standard for natural writing

When to use: humanize PT-BR text, remove AI slop, rewrite with voice, fix generic/bureaucratic tone, review text from another agent, "tirar cara de IA", "dar vida ao texto".

Improvements in v1.2 (Jun 2026):

  • Added automatic document type detection with fallback (Step 0.5) — auto-selects the best voice preset
  • Added post-rewrite scoring with 5 weighted dimensions (Step 5.5) — quantifiable quality gate
  • Added iterative loop with strategy fallback — retries with different approaches when score < 60
  • Loop protocol compatible with external orchestrator skills (ralph-wiggum, goal)
  • Inspired by humanize-it by @smallnest

New in v1.3 (Jul 2026):

  • Added 📋 Português Simplificado voice profile — accessible writing inspired by PorSimples (NILC/USP) and Brazil's Lei 15.263/2025 (National Plain Language Policy)
  • 7 syntactic simplification operations based on PorSimples research (sentence splitting, passive→active, SVO reordering, discourse marker substitution, apposition removal, lexical simplification, subject explicitation)
  • New reference file references/padroes-portugues-simplificado.md with ~50 lexical substitutions, quantitative metrics from NILC-Metrix (ASL, TTR, syntactic complexity), 15 writing rules in 3 priority levels, and 4 application domains (government, health, tech, education)
  • Integration with TRAVA FACTUAL: explicit rules for when NOT to simplify (modality, causality, exceptions)
  • Now 10 voice profiles (was 9): Crônica, Jornalístico, Acadêmico, Corporativo Informal, Post de Rede Social, WhatsApp, Jurídico, Didático, Português Simplificado, and Voz Neutra

📄 View full documentation

🌐 Human-AI — AI Text Humanizer for English · code-quality-and-review

Rewrites English text to sound human, natural, and undetectable by AI detection tools. Combines pattern detection (43 patterns across 3 tiers), statistical measurement (burstiness, TTR, entropy), and voice injection into a single iterative skill. Built on research from the RAID Benchmark (ACL 2024), NeurIPS 2023, and real-world testing that proved vocabulary bans alone FAIL — structural paraphrasing is what actually beats detectors.

Origin story: Companion to the PT-BR humanizar skill, but 100% original English work. Synthesizes the best of three open-source humanizer skills: blader/humanizer (10.6K stars, 29 patterns), brandonwise/humanizer (560-term vocab filter, statistical signals), and Aboudjem/humanizer-skill (43 patterns, P31-P43 emerging 2026 discoveries). Goes beyond all three by adding: research-calibrated empirical baselines, iterative scoring with strategy fallback, 7 voice presets, a scripts/measure.py for deterministic metrics, and the critical insight that synonym-swapping hurts while structural paraphrasing drops detector accuracy from 70.3% to 4.6%.

Why it's different from the existing humanizer skills:

  • 43 patterns (including P31-P43 emerging patterns from 2026 community research)
  • Research-backed metrics: TTR human 0.553 vs AI 0.455 (SSRN), burstiness +0.70 vs 0.00 (GPTZero)
  • scripts/measure.py — deterministic TTR/burstiness/entropy calculation (zero dependencies)
  • 7 voice presets calibrated for English contexts (essay, journalistic, academic, corporate, social, casual, legal, instructional)
  • Anti-synonym-swap enforcement: Step 2 requires full sentence restructuring, not word replacement
  • 7 documented gotchas from real-world humanizer skill failures
  • Iterative loop with scoring (0-100) and strategy fallback table
  • Composes with external loop skills (ralph-wiggum, goal)

When to use: humanize English text, remove AI slop, de-slop content, make text sound human, add voice, fix bland/generic tone, bypass AI detection, pass GPTZero/Originality.ai, review text from another agent, rewrite naturally.

📄 View full documentation

🔐 auth.md — Agent Authentication Protocol · library-and-api-reference

Generates, validates, and explains auth.md files — the open protocol that lets AI agents register for services on behalf of users without signup forms. Supports the Agent Verified flow (ID-JAG identity assertions via trusted providers like OpenAI, Anthropic, Cursor) and the User Claimed flow (OTP-based registration with anonymous start or email required entrypoints). Extends RFC 9728 (Protected Resource Metadata) with CIMD support.

When to use: make your app agent-ready by publishing an auth.md, generate Protected Resource Metadata and Authorization Server metadata with agent_auth block, validate an existing auth.md against the protocol spec, implement agent registration endpoints (/agent/auth, /agent/auth/claim, /agent/auth/revoke), understand how the auth.md protocol works, configure ID-JAG verification and trust lists, set up OTP claim ceremonies.

📄 View full documentation | 🌐 auth-md.com

📦 OKF — Open Knowledge Format · library-and-api-reference

Create, validate, and enrich Open Knowledge Format bundles — the open spec (v0.1, announced June 12, 2026 by Sam McVeety & Amir Hormati at Google Cloud) that formalizes the "LLM Wiki" pattern into a portable, interoperable format for organizational knowledge. Markdown files with YAML frontmatter, consumable by any AI agent without SDK. Includes bash validator, conversion guides (Notion, Obsidian, CSV), and integration with Google Cloud Knowledge Catalog via kcmd CLI/MCP.

When to use: create OKF bundles, validate conformance, enrich concepts with schema/citations/cross-links, convert existing knowledge (Notion exports, Obsidian vaults, spreadsheets) to OKF, structure a knowledge base for AI agent consumption, generate index.md and log.md files, push bundles to Knowledge Catalog via kcmd.

📄 View full documentation | 🌐 okf.md

🌐 Website Spec (moved)

This skill has been retired. The original project now offers a more complete skill with 140+ topics, live updates via MCP server, delta re-audits, and MDN pairing — far beyond what we maintained here.

👉 Use the official skill: https://specification.website/.well-known/agent-skills/specification-website/SKILL.md

MCP endpoint: https://mcp.specification.website/mcp

🔒 LGPD Check

Migrated → This skill moved to github.com/lgpd-app/skills

Audits websites for compliance with Brazil's LGPD (Lei 13.709/2018).

📊 Skill Evaluation · code-quality-and-review

Evaluate any agent skill against a merged framework — Anthropic's Claude Code best practices plus Matt Pocock's writing-great-skills methodology — across 4 axes (Trigger, Structure, Steering, Pruning). Produces an evidence-cited scorecard (0–100), a weighted overall score, and diagnosed failure modes with prioritized fixes.

v2.2 — Trigger Eval (empirical): now includes an empirical trigger-testing step inspired by Philipp Schmid's (Google DeepMind) talk "Don't Ship Skills Without Evals". Generates 5 should-trigger + 5 should-not-trigger prompts, runs them via independent sub-agents, and measures whether the skill's description actually causes invocation — bridging the gap between static quality analysis and runtime validation.

When to use: evaluate a skill, rate skill quality, audit SKILL.md, compare two skills, skill scorecard, review best practices compliance, or check if a skill is production-ready.

18 scored criteria across 4 axes: Invocation design · Description quality · Steps vs. reference clarity · Branch-aware disclosure · Conciseness · Coherent scope · Leading words · Completion criteria · Gotchas · Grounded in expertise · Avoids railroading · No-ops · Single source of truth · Relevance & sediment + 4 conditional (Setup flow · Memory · Scripts · Hooks)

5 bonus patterns (measured, not scored): Validation loops · Output templates · Procedures over declarations · Defaults over menus · Trace-checkable steering

How it differs from agentskills.io evals and skill-creator benchmark:

This skill agentskills.io evals skill-creator benchmark
Evaluates Skill structure quality + trigger empirically Skill output quality Output + regression + obsolescence
Method Static inspection + sub-agent trigger eval Run test cases + grade A/B blind comparison + multi-agent
When Is it well-built? Does it trigger correctly? Does it work? Did it regress? Still needed?
Output Scorecard + grade A-F + trigger hit/leak rates pass_rate, tokens, time benchmark.json + comparator verdict
Platform Any agent Any agent Claude Code only (plugin)

Use in sequence: skill-evaluation (design review + trigger testing) → evals (functional validation) → benchmark (ongoing monitoring).

📄 View full documentation

🧹 Slop Eval — Design Slop Evaluator · code-quality-and-review

Objectively evaluates a UI/web design against the pols.dev anti-slop design law: sweeps an ID'd catalog of slop tells across 6 families (color & light, typography, components, layout, motion, execution), checks 6 absolute execution rules, and scores 8 weighted axes — including a 3x-weighted Signature axis with a hard gate, so a "clean but empty" page can't hide behind restraint. Emits a Slop Report with a 0–100 Slop Index and grade A–F. Every finding follows cite-or-cut: no concrete evidence (hex value, font name, file:line, screenshot region), no tell.

How it evaluates: live URL (browser-automation SOP: dual-viewport full-page captures, interaction pass, zoom crops), static screenshots, code path (grep-led sweep), or Figma export — anything not observable is marked Unverifiable, never guessed. Deterministic scoring via scripts/score.py, with a --fail-below CI gate for blocking PRs on preview-deploy design quality.

When to use: evaluate design slop, generate a slop report, check if a design looks AI-generated or generic, audit a landing page design, de-slop review, compare two designs (before/after), track design evolution over time.

New in v1.1.0 (Aug 2026):

  • Section Ledger: per-section verdicts (CLEAN/SUSPICIOUS/INFLATED/CRITICAL) with tell density bands and action recommendations
  • Design Contexts: context-aware evaluation for landing pages, SaaS dashboards, editorial, and e-commerce — adjusts priority tells and tolerances per design type
  • Exclusion System: formalized // BRIEF:, // DESIGN DECISION:, // CONTEXT:, // PREMIUM PAIR: tags for documenting excluded tells with audit trail
  • Tracking Mode: temporal evolution analysis with tells resolved/introduced, regressions, velocity metrics, and recommendations for next iteration
  • Adding Soul Guide: prescription-oriented guide for injecting personality into each axis — not just "remove tell X" but "replace with premium alternative Y"
  • Expanded Quality Checklist: 25+ checks across 6 phases (pre-sweep, during-sweep, exclusion, post-sweep, report, self-audit) including portability and defense tests

Companions: method inspired by skill-evaluation; for text (not design), human-ai and humanizar do the de-slopping.

📄 View full documentation

🛡️ Security Specialist · runbooks

Full-stack application security agent — performs SAST (static code analysis), DAST (dynamic testing against running apps), threat modeling, vulnerability triage, remediation, and penetration testing. Combines source code review with live testing against local dev servers or production targets for complete evidence correlation.

When to use: security scan a repository, review a PR for security issues, build a threat model, triage vulnerability findings, fix a security bug, pentest a web application, validate a security fix, track findings to GitHub/Jira/Linear, generate a security report.

Key features:

  • Input-driven SOP: path only → SAST + dev DAST; path + URL → SAST + dev + prod; URL only → DAST
  • 12 steering workflows: full-scan, diff-review, pentest, hunting, threat-model, attack-paths, discovery, triage, remediation, tracking, validation, reporting
  • 6-phase pipeline (full-scan): Recon → Hunt → Validate → Report → Schema → Verify — with parallel agents and adversarial validation
  • 9 attack classes: Injection, Access Control, Resource/File, Cryptography, Business Logic, Feature Abuse, Chained Attacks, Wildcard, Obvious Things
  • 12-angle hunting methodology: sad path, boundaries, component assumptions, wrong ordering, concurrency, parser disagreements, round-trip fidelity, config control, privilege tracing, leaked context, parameter overrides, unverified claims
  • Adversarial validation: separate agents try to DISPROVE findings (5 gates: exploitation, impact, baseline, mitigation, parser/runtime)
  • Structured JSON output: findings.json validated against JSON schema with trace (entrypoint→propagation→sink), conditions, execution, confidence
  • Schema validator: zero-dependency Node.js script (validate-findings.cjs) for CI integration
  • Multi-run additive coverage: each run targets gaps from prior runs; single run finds ~50% of total vulnerabilities
  • 5 utility scripts: SQLite scan DB, file ranker, report finalizer, pentest automation, schema validator
  • Pentest tool cascade: nmap → python-nmap → socket scan; nikto → wapiti3 → header checks; gobuster → dirsearch → urllib brute
  • Three-layer correlation: source finding → dev exploit → prod confirmation
  • Dynamic baseline calibration: compares patterns against industry-standard comparable applications

Architecture:

security-specialist/
├── SKILL.md              (router + core principles + anti-patterns)
├── steering/             (12 workflow docs including hunting methodology)
├── scripts/              (5 tools: Python + Node.js validator)
└── references/           (5 spec docs: finding format, report format, severity policy, artifacts, report-schema.json)

Improvements in v2.0 (Jun 2026):

  • Added 6-phase audit pipeline with parallel agents (inspired by Cloudflare security-audit-skill)
  • Added steering/hunting.md with 9 attack classes and 12-angle hunting methodology
  • Added adversarial validation (Phase 3) and independent verification (Phase 6)
  • Added references/report-schema.json for structured findings with trace, conditions, execution, confidence
  • Added scripts/validate-findings.cjs zero-dependency JSON schema validator
  • Added multi-run additive coverage strategy
  • Added 10 anti-patterns to avoid in security audits
  • Added dynamic baseline calibration to severity policy
  • Enhanced finding format: simple (SQLite) + structured (JSON pipeline) dual format

📄 View full documentation

🚀 Astro Sites Manager · ci-cd-and-deployment

Comprehensive skill for building, migrating, and maintaining Astro v7 projects. Covers the full lifecycle: best practices, v6→v7 migration with structured plan, validation of breaking/deprecated patterns, AI-enhanced dev server (background mode, JSON logging), advanced routing with src/fetch.ts, route caching, Sätteri Markdown, Rust compiler, Starlight docs, Pagefind search, SEO, testing, and deployment to 8+ platforms including Coolify.

When to use: build Astro sites, upgrade to v7, deploy on Coolify/Vercel/Netlify/Cloudflare, validate breaking changes, configure Starlight docs, set up Pagefind search, use background dev server as AI agent, configure route caching.

Key features:

  • MCP Astro Docs integration (real-time docs access)
  • 10 reference files covering migration, validation, testing, deployment, Starlight, and more
  • Coolify-specific deployment guide with 17-project battle-tested patterns
  • Feature detection: v7 features activate only when available (safe on v6)

📄 View full documentation

🔌 Agent Plugin Eval · product-verification

Audits, scores, and compares repositories containing portable Agent Plugins against the official Agent Plugins specification. Produces an evidence-cited 0–100 scorecard with conformance gate (PASS/PARTIAL/FAIL), identifies release blockers, and compares two plugins side by side. Works with any agent client — evaluates portable conformance, not client-specific features.

When to use: audit a plugin repo, check plugin.json or mcp.json conformance, validate bundled Agent Skills, assess MCP server configurations, produce a plugin scorecard, identify release blockers, compare two agent plugins.

Key features:

  • Static-only audit (never executes plugin code, MCP servers, or scripts)
  • 18-criterion rubric across 4 axes: Portable conformance, Components & integration, Safety & resilience, Product quality
  • Conformance gates: PASS (no cap), PARTIAL (capped at 59), FAIL (capped at 39)
  • Deterministic scoring via scripts/score.py
  • Comparison mode for evaluating two plugins side by side
  • Client-agnostic: evaluates against portable spec, not Codex/Claude/Cursor-specific features

📄 View full documentation

💰 Revenue-Centric Design · runbooks

Playbook of 101 evidence-backed principles for designing SaaS and startup products that convert, retain, and monetize — landing pages & CRO, onboarding/activation, churn reduction, pricing psychology, behavioral science, feature discipline, positioning/ICP, go-to-market, and AI-era differentiation. Every principle names its mechanism (decoy effect, Zeigarnik, Schwartz awareness levels…) and links back to its source post. Ships with revenue-math scripts (A/B sample size, churn→LTV, CAC per closed deal), an audit output template, per-project memory (rcd-log.md), and license-enforcing guardrail hooks.

Origin story: Richard (@richardrx, "Design for startups" — ex-Volkswagen, PayPal, IBM) published these principles as 101 posts in Portuguese on X. Helio Costa obtained the author's permission, extracted the posts via the X API, translated them to English, and distilled them into the original skill (heliocosta-dev/revenue-centric-design). This repository hosts an evolved derivative of that work.

Evolution measured with skill-evaluation: the as-downloaded skill scored 60/100 (B, borderline C); one improvement pass later, 73/100 (B):

Criterion before after
Scripts & libraries 0 75
Gotchas section 35 88
Coherent scope 55 72
Progressive disclosure 78 90
Description for trigger 78 90
Repo footprint 39 MB 176 KB

After the compared run, the skill also gained the audit template, the project log, full license compliance, and hook-based guardrails — each closing a finding the scorecard had prioritized. This is exactly the loop skill-evaluation was built for: evaluate → fix the top findings → re-evaluate → compare.

When to use: improve conversion on a landing page, fix activation/onboarding, reduce churn, design pricing tables and upgrade paths, sharpen ICP/positioning, apply behavioral-science mechanisms, sanity-check A/B tests, differentiate in the AI era.

⚠️ License: source-available, not Apache 2.0 — attribution to @richardrx required, and gambling/betting/casino use is prohibited (enforced at runtime by bundled hooks). See the skill's LICENSE.

📄 View full documentation

Skills revised in March 2026 following the Anthropic standard for Agent Skills structure and quality.
Source: Improving Skill Creator: Test, Measure and Refine Agent Skills

Installation

You can install these skills using any compatible installer or manually. Below are the most popular options.

Via Skills.sh

npx skills add https://github.com/fabricioctelles/skills

Or install a specific skill:

npx skills add https://github.com/fabricioctelles/skills -s geo-optimization
npx skills add https://github.com/fabricioctelles/skills -s substack-expert
npx skills add https://github.com/fabricioctelles/skills -s pier-cloud
npx skills add https://github.com/fabricioctelles/skills -s ultimate-design-system-master
npx skills add https://github.com/fabricioctelles/skills -s resume-ats-beater
npx skills add https://github.com/fabricioctelles/skills -s coolify-operator
npx skills add https://github.com/fabricioctelles/skills -s agent-ready-cloudflare
npx skills add https://github.com/fabricioctelles/skills -s ralph-loop-kiro-specs
npx skills add https://github.com/fabricioctelles/skills -s loop-architect
npx skills add https://github.com/fabricioctelles/skills -s humanizar
npx skills add https://github.com/fabricioctelles/skills -s auth-md
npx skills add https://github.com/fabricioctelles/skills -s astro-sites-manager
npx skills add https://github.com/fabricioctelles/skills -s security-specialist
npx skills add https://github.com/fabricioctelles/skills -s slop-eval
npx skills add https://github.com/fabricioctelles/skills -s pstack-skill
npx skills add https://github.com/fabricioctelles/skills -s revenue-centric-design
npx skills add https://github.com/fabricioctelles/skills -s agent-plugin-eval

Via Agent Skills CLI

npm install -g agent-skills-cli

Then install the skills:

skills add https://github.com/fabricioctelles/skills

Or use without global install:

npx agent-skills-cli install https://github.com/fabricioctelles/skills

Manual Installation

  1. Clone this repository:
git clone https://github.com/fabricioctelles/skills.git
  1. Copy the desired skill folder to your agent's skills directory:
# Example for Cursor
cp -r skills/geo-optimization .cursor/skills/
cp -r skills/substack-expert .cursor/skills/
cp -r skills/pier-cloud .cursor/skills/
cp -r skills/ultimate-design-system-master .cursor/skills/
cp -r skills/resume-ats-beater .cursor/skills/
cp -r skills/coolify-operator .cursor/skills/
cp -r skills/agent-ready-cloudflare .cursor/skills/
cp -r skills/ralph-loop-kiro-specs .cursor/skills/
cp -r skills/loop-architect .cursor/skills/
cp -r skills/humanizar .cursor/skills/
cp -r skills/auth-md .cursor/skills/
cp -r skills/astro-sites-manager .cursor/skills/
cp -r skills/agent-plugin-eval .cursor/skills/

# Example for Claude Code
cp -r skills/geo-optimization .claude/skills/
cp -r skills/substack-expert .claude/skills/
cp -r skills/pier-cloud .claude/skills/
cp -r skills/ultimate-design-system-master .claude/skills/
cp -r skills/resume-ats-beater .claude/skills/
cp -r skills/coolify-operator .claude/skills/
cp -r skills/agent-ready-cloudflare .claude/skills/
cp -r skills/ralph-loop-kiro-specs .claude/skills/
cp -r skills/loop-architect .claude/skills/
cp -r skills/humanizar .claude/skills/
cp -r skills/auth-md .claude/skills/
cp -r skills/astro-sites-manager .claude/skills/
cp -r skills/agent-plugin-eval .claude/skills/

# Example for Kiro
cp -r skills/geo-optimization .kiro/skills/
cp -r skills/substack-expert .kiro/skills/
cp -r skills/pier-cloud .kiro/skills/
cp -r skills/ultimate-design-system-master .kiro/skills/
cp -r skills/resume-ats-beater .kiro/skills/
cp -r skills/coolify-operator .kiro/skills/
cp -r skills/agent-ready-cloudflare .kiro/skills/
cp -r skills/ralph-loop-kiro-specs .kiro/skills/
cp -r skills/loop-architect .kiro/skills/
cp -r skills/humanizar .kiro/skills/
cp -r skills/auth-md .kiro/skills/
cp -r skills/astro-sites-manager .kiro/skills/
cp -r skills/agent-plugin-eval .kiro/skills/

The Agent Skills format is universal and works with any compatible agent. See the official specification for details.

Repository Structure

skills/
├── geo-optimization/
│   ├── SKILL.md
│   └── references/        # guiding principles and case studies
├── substack-expert/
│   ├── SKILL.md
│   └── references/        # formatting best practices, SEO output example
├── pier-cloud/
│   ├── SKILL.md
│   ├── scripts/           # Python scripts for API consumption
│   └── references/        # API reference, troubleshooting guide
├── resume-ats-beater/
│   ├── SKILL.md
│   └── references/        # diagnostic templates, output structure
├── coolify-operator/
│   ├── SKILL.md
│   └── evals/             # 8 test scenarios
└── ultimate-design-system-master/
    ├── SKILL.md
    └── references/        # briefing questionnaire, 10 specialized prompt files
├── agent-ready-cloudflare/
│   ├── README.md          # human-readable documentation with examples
│   ├── SKILL.md           # main skill (API docs, operational flow, prompt templates)
│   └── */SKILL.md         # 20 implementation sub-skills (robots-txt, mcp-server-card, etc.)
├── ralph-loop-kiro-specs/
│   ├── SKILL.md
│   ├── scripts/           # bash loop runner script
│   └── references/        # Ralph agent prompt template
├── loop-architect/
│   ├── SKILL.md           # loop design coach (adapted from Looper by ksimback)
│   ├── scripts/           # compiler and model detection
│   ├── templates/         # portable Python runner
│   ├── references/        # rubrics (goal, verification, council, control)
│   ├── schemas/           # loop.yaml JSON schema
│   └── examples/          # ai-workflow-mapping example
├── humanizar/
│   ├── SKILL.md
│   └── references/        # 55+ AI patterns specific to Brazilian Portuguese (6 files)
├── auth-md/
│   ├── SKILL.md
│   └── references/        # protocol template, validation rules, metadata schema, example, implementation guide
├── pstack-skill/
│   ├── README.md          # human-readable guide: install, use cases, model roles
│   ├── SKILL.md           # the orchestrator (playbook router, principles index, autonomy rules)
│   ├── playbooks/         # 23 step-by-step workflows copied verbatim onto todolists
│   ├── references/        # 21 principles, 21 bundled procedures, plan + bot-review triage
│   └── scripts/           # decision-log helper, worktree audit
│   ├── SKILL.md
│   └── references/        # 6 compliance check modules (privacy policy, cookies, data minimization, transfers, rights, scripts)

Author

Created by ft.ia.br

References

License

Apache 2.0 — see LICENSE for details — except where a skill directory contains its own LICENSE file, which governs that skill instead.

⚠️ Exception: skills/revenue-centric-design/ is source-available, not open-source. The underlying ideas are the intellectual property of Richard (@richardrx), used with permission, and may not be used for gambling, betting, or casino products. That restriction survives any copy or derivative and is not waived by this repository's Apache 2.0 license.

Reviews (0)

No results found