Skills.
Give your AI a better way to work.
A skill is a set of written instructions that teaches an AI how to do one job the way it should be done: review a pull request, plan a migration, write the release notes.
Install one here and it travels with your account into Claude, Claude Code, Cursor and every other client you sign in with.
Filter by category
54,017 results · page 179 of 1,801
- View details
hunt-laravelSkillSecurity
Lets your agent scan Laravel apps for known vulnerabilities like debug mode leaks and Ignition RCE.
Ready to connect★ 4k
- View details
hunt-ldapSkillSearch
Guides your agent to test logins and directory search features for LDAP and XPath injection flaws.
Ready to connect★ 4k
- View details
hunt-lfiSkillFiles & storage
Lets your agent test web apps for file inclusion and path traversal vulnerabilities, including reads, writes, and deletes.
Ready to connect★ 4k
- View details
hunt-llm-aiSkillWeb & browsing
Lets your agent find AI-specific security bugs like prompt injection and data exfiltration using known attack patterns.
Ready to connect★ 4k
- View details
hunt-mfa-bypassSkillCommunication
Lets your agent test login flows for seven ways a site's MFA or 2FA check can be skipped or bypassed.
Ready to connect★ 4k
- View details
hunt-miscSkillSecurity
Guides your agent through finding miscellaneous security vulnerabilities like access control bugs and token leaks using methods from 225 bug bounty reports.
Ready to connect★ 4k
- View details
hunt-nextjsSkillSecurity
Lets your agent scan a Next.js app for known vulnerabilities like SSRF, auth bypass, and cache poisoning.
Ready to connect★ 4k
- View details
hunt-nodejsSkillFiles & storage
Guides your agent through testing Node.js apps for prototype pollution, template injection, command injection, and proxy trust flaws.
Ready to connect★ 4k
- View details
hunt-nosqliSkillDatabases & data
Lets your agent test apps using MongoDB, CouchDB, or Redis for NoSQL injection and auth bypass flaws.
Ready to connect★ 4k
- View details
hunt-ntlm-infoSkillAI & models
Lets your agent probe web servers for NTLM authentication responses that leak internal Windows domain details.
Ready to connect★ 4k
- View details
hunt-oauthSkillSecurity
Lets your agent review a target's OAuth setup for common vulnerabilities drawn from public bug bounty reports.
Ready to connect★ 4k
- View details
hunt-open-redirectSkillSecurity
Lets your agent find and analyze open redirect vulnerabilities, including chains that lead to account takeover.
Ready to connect★ 4k
- View details
hunt-race-conditionSkillSecurity
Lets your agent hunt for race condition bugs, where duplicate requests slip past limits like one-time coupons.
Ready to connect★ 4k
- View details
hunt-rag-vectorSkillDatabases & data
Guides your agent to test RAG chatbots for poisoned documents, cross-tenant data leaks, and vector database weaknesses.
Ready to connect★ 4k
- View details
hunt-rceSkillSecurity
Lets your agent hunt remote code execution vulnerabilities in a target using patterns from bug bounty reports.
Ready to connect★ 4k
- View details
hunt-samlSkillAI & models
Lets your agent analyze SAML single sign-on responses for known attack patterns like signature wrapping and comment injection.
Ready to connect★ 4k
- View details
hunt-sessionSkillCommunication
Guides your agent through testing websites for session management flaws like sessions surviving logout or password changes.
Ready to connect★ 4k
- View details
hunt-sharepointSkillSecurity
Lets your agent probe on-prem Microsoft SharePoint farms for known vulnerabilities like login bypasses and unpatched CVEs.
Ready to connect★ 4k
- View details
hunt-source-leakSkillFiles & storage
Lets your agent scan websites for leaked source code, source maps, .env/.git files, API docs, and hardcoded secrets.
Ready to connect★ 4k
- View details
hunt-spa-apiSkillWeb & browsing
Lets your agent find a web app's hidden backend API from its JavaScript and test it for missing authentication.
Ready to connect★ 4k
- View details
hunt-springbootSkillSecurity
Lets your agent scan Spring Boot apps for known vulnerabilities like exposed actuator endpoints and remote code execution flaws.
Ready to connect★ 4k
- View details
hunt-sqliSkillDatabases & data
Lets your agent hunt for SQL and NoSQL injection vulnerabilities using patterns from real bug bounty reports.
Ready to connect★ 4k
- View details
hunt-ssrfSkillDatabases & data
Lets your agent hunt for SSRF vulnerabilities using patterns from real bug bounty reports.
Ready to connect★ 4k
- View details
hunt-sstiSkillAI & models
Lets your agent test websites for server-side template injection bugs across many template engines.
Ready to connect★ 4k
- View details
hunt-subdomainSkillCommunication
Guides your agent through finding subdomain takeover vulnerabilities in websites by checking DNS records and provider fingerprints.
Ready to connect★ 4k
- View details
hunt-tls-networkSkillCommunication
Lets your agent scan a domain for TLS certificate, cipher, and DNS security misconfigurations.
Ready to connect★ 4k
- View details
hunt-websocketSkillCommunication
Guides your agent through testing WebSocket endpoints for hijacking, origin checks, and authorization flaws.
Ready to connect★ 4k
- View details
hunt-xxeSkillDocs & knowledge
Guides your agent to find XML external entity vulnerabilities in web apps and file uploads.
Ready to connect★ 4k
- View details
ios-redteam-pipelineSkillSecurity
Lets your agent analyze iOS apps for security flaws, from downloading the app package to extracting secrets and bypassing protections.
Ready to connect★ 4k
- View details
m365-entra-attackSkillWeb & browsing
Gives your agent a reference playbook for testing Microsoft 365 and Entra ID logins during authorized security assessments.
Ready to connect★ 4k
What is a skill?
A skill is plain text, usually a SKILL.md file and the scripts it refers to, written for an AI rather than for a person. It carries the steps, the house rules and the examples a good answer needs, so you stop pasting the same briefing into every new chat.
53,585 of the 54,017 skills listed here can be served through ahel today, and they come from public repositories. Each one has its own page with the instructions themselves on it, so you can read what a skill will tell your AI to do before you install it.
Install one and every AI you use gets it
Installing a skill adds it to your gateway and turns it on in the same step. Claude Code surfaces it as a slash command; any client can read the full instructions with the skill_read tool.
Nothing is copied into a project folder. The instructions are served from your account, so the same skill is there in every AI you connect, and turning it off removes it from all of them at once.