Skills.
Give your AI a better way to work.
A skill is a set of written instructions that teaches an AI how to do one job the way it should be done: review a pull request, plan a migration, write the release notes.
Install one here and it travels with your account into Claude, Claude Code, Cursor and every other client you sign in with.
Filter by category
54,017 results · page 178 of 1,801
- View details
cloud-iam-deepSkillCloud & infra
Lets your agent analyze what exposed cloud credentials can access and find ways attackers could escalate privileges in AWS, Azure, and GCP.
Ready to connect★ 4k
- View details
enterprise-vpn-attackSkillSecurity
Lets your agent fingerprint enterprise VPN appliances and check them against a matrix of known CVEs and exploits.
Ready to connect★ 4k
- View details
evidence-hygieneSkillCommunication
Guides your agent to redact cookies and personal data from screenshots and reports for bug-bounty submissions.
Ready to connect★ 4k
- View details
hunt-api-misconfigSkillSecurity
Lets your agent test APIs for security flaws like privilege escalation via mass assignment and JWT forgery.
Ready to connect★ 4k
- View details
hunt-aspnetSkillAI & models
Lets your agent hunt for ASP.NET web app vulnerabilities like ViewState deserialization flaws and exposed debug endpoints.
Ready to connect★ 4k
- View details
hunt-atoSkillCommunication
Lets your agent systematically check an app for 9 kinds of account takeover flaws like weak password resets and MFA bypasses.
Ready to connect★ 4k
- View details
hunt-auth-bypassSkillSecurity
Lets your agent hunt for authentication bypass flaws like SAML signature stripping and parser-differential tricks.
Ready to connect★ 4k
- View details
hunt-brute-forceSkillCommunication
Lets your agent probe apps for missing rate limits and weak protections against login and OTP brute-force attacks.
Ready to connect★ 4k
- View details
hunt-business-logicSkillSecurity
Lets your agent hunt business logic bugs like coupon stacking and price tampering using patterns from bug bounty reports.
Ready to connect★ 4k
- View details
hunt-cache-poisonSkillCloud & infra
Guides your agent to hunt web cache poisoning vulnerabilities using techniques from real bug bounty reports.
Ready to connect★ 4k
- View details
hunt-captcha-bypassSkillAI & models
Lets your agent test websites for six common CAPTCHA bypass flaws during security audits.
Ready to connect★ 4k
- View details
hunt-cicdSkillFiles & storage
Lets your agent find security flaws in CI/CD pipelines like GitHub Actions injection, runner poisoning, and Jenkins RCE.
Ready to connect★ 4k
- View details
hunt-clickjackingSkillSecurity
Lets your agent check websites for missing protection headers that allow clickjacking attacks.
Ready to connect★ 4k
- View details
hunt-cloud-misconfigSkillFiles & storage
Lets your agent scan your cloud setup for security mistakes like public buckets and exposed credentials.
Ready to connect★ 4k
- View details
hunt-corsSkillCommunication
Lets your agent scan websites for CORS misconfigurations that could expose credentialed data to attackers.
Ready to connect★ 4k
- View details
hunt-csrfSkillSecurity
Lets your agent hunt for CSRF vulnerabilities using patterns from public bug bounty reports.
Ready to connect★ 4k
- View details
hunt-deserializationSkillAI & models
Lets your agent find and test insecure deserialization flaws like ysoserial, phpggc, pickle, and Log4Shell.
Ready to connect★ 4k
- View details
hunt-dispatchSkillAI & models
Lets your agent load the right set of security-testing skills after choosing a bug-hunting mode.
Ready to connect★ 4k
- View details
hunt-domSkillCommunication
Lets your agent scan web pages for client-side vulnerabilities like DOM clobbering, postmessage hijacking, and CSS exfiltration.
Ready to connect★ 4k
- View details
hunt-exceptional-conditionsSkillFiles & storage
Lets your agent probe an endpoint with malformed inputs to find error leaks like stack traces or server details.
Ready to connect★ 4k
- View details
hunt-fintech-graphqlSkillSecurity
Guides your agent through probing fintech GraphQL APIs for money-moving bugs like double-spend, IDOR, and KYC leaks.
Ready to connect★ 4k
- View details
hunt-forgot-passwordSkillCommunication
Lets your agent test a site's password reset flow for common security flaws like token leaks and username enumeration.
Ready to connect★ 4k
- View details
hunt-graphqlSkillSecurity
Guides your agent to find GraphQL security flaws like IDOR, SSRF, and auth bypass using patterns from bug bounty reports.
Ready to connect★ 4k
- View details
hunt-grpcSkillFiles & storage
Guides your agent through testing gRPC servers for security holes like open reflection, missing authentication, and exposed internal services.
Ready to connect★ 4k
- View details
hunt-host-headerSkillSecurity
Guides your agent through testing websites for Host header injection flaws like password reset poisoning and cache poisoning.
Ready to connect★ 4k
- View details
hunt-html-injectionSkillSecurity
Lets your agent hunt for HTML injection flaws where user input is rendered as raw HTML, enabling phishing or form spoofing.
Ready to connect★ 4k
- View details
hunt-http-smugglingSkillAI & models
Lets your agent test websites for HTTP request smuggling flaws where proxies and servers disagree on request boundaries.
Ready to connect★ 4k
- View details
hunt-idorSkillSecurity
Guides your agent through finding IDOR access-control bugs using patterns from 26 real bug bounty reports.
Ready to connect★ 4k
- View details
hunt-jwt-cryptoSkillSecurity
Lets your agent find JWT security flaws, like missing signatures or key-confusion tricks, that let attackers forge tokens.
Ready to connect★ 4k
- View details
hunt-k8sSkillCloud & infra
Lets your agent scan Kubernetes and Docker setups for common security weaknesses and misconfigurations.
Ready to connect★ 4k
What is a skill?
A skill is plain text, usually a SKILL.md file and the scripts it refers to, written for an AI rather than for a person. It carries the steps, the house rules and the examples a good answer needs, so you stop pasting the same briefing into every new chat.
53,585 of the 54,017 skills listed here can be served through ahel today, and they come from public repositories. Each one has its own page with the instructions themselves on it, so you can read what a skill will tell your AI to do before you install it.
Install one and every AI you use gets it
Installing a skill adds it to your gateway and turns it on in the same step. Claude Code surfaces it as a slash command; any client can read the full instructions with the skill_read tool.
Nothing is copied into a project folder. The instructions are served from your account, so the same skill is there in every AI you connect, and turning it off removes it from all of them at once.