agent-toolkit

In the author's own words, from each skill's SKILL.md — showing the first 30 of 494 files.

• review

  WCAG 2.2 AA curated accessibility review — distinguishes automatically detectable, browser-assisted, and manual/human-judgment findings with evidence citations and SC mapping. Composes with design-assessment/design-improvement/frontend-design-review.

  skills/accessibility/review/SKILL.md on GitHub (opens in a new tab)

• mcp-audit

  MCP config + implementation security audit — config secrets/auth, unpinned versions, remote vs local, OAuth, env exposure; implementation command injection, SSRF, unsafe args, tool poisoning. Static, evidence-cited.

  skills/agentic-security/mcp-audit/SKILL.md on GitHub (opens in a new tab)

• owasp-agentic-review

  OWASP-mapped agentic security review — prompt injection, tool poisoning, identity, excessive agency, credential exposure, supply-chain, insecure output handling, overreliance, data leakage, insecure plugin/MCP design. Evidence-cited, severity-ranked.

  skills/agentic-security/owasp-agentic-review/SKILL.md on GitHub (opens in a new tab)

• supply-chain-audit

  Inspect agent supply chain — skills/plugins/MCP/npm/py packages, hooks, scripts, remote prompts, provenance, version pins, hashes, licenses, network and dangerous permissions — before adopting.

  skills/agentic-security/supply-chain-audit/SKILL.md on GitHub (opens in a new tab)

• threat-modeling

  STRIDE + agentic threat modeling — architecture discovery → assets/trust boundaries/data flows/actors → STRIDE + agentic threats → risk-ranked mitigations → incremental review → security acceptance criteria. Swarm-friendly.

  skills/agentic-security/threat-modeling/SKILL.md on GitHub (opens in a new tab)

• architecture-diagram

  WHAT — Create polished dark-themed architecture diagrams as self-contained HTML+SVG files (inline SVG, CSS styling, PNG/PDF export toolbar). Use when the user asks for system, infrastructure, cloud, security, or network topology diagrams rendered as a shareable visual artifact rather than code.

  skills/architecture/architecture-diagram/SKILL.md on GitHub (opens in a new tab)

• c4-model

  WHAT — C4 model methodology (Context, Container, Component, Code) guidance — what to draw at each level, when, and how to render C4-inspired diagrams via Mermaid (PlantUML/Structurizr optional advanced). Methodology not renderer.

  skills/architecture/c4-model/SKILL.md on GitHub (opens in a new tab)

• aws-well-architected-review

  WHAT — AWS Well-Architected Framework review (6 pillars) — operational excellence, security, reliability, performance, cost, sustainability + WAR process. Checklist for workload evaluation on AWS; complementary to official AWS MCP for live account data.

  skills/cloud/aws-well-architected-review/SKILL.md on GitHub (opens in a new tab)

• cloud-design-patterns

  WHAT — Vendor-neutral distributed cloud patterns (Retry, Bulkhead, Circuit Breaker, CQRS, Event Sourcing, etc.) abstracted from AWS/Azure/GCP sources — when to apply, tradeoffs, mapping to AWS/GCP/Azure primitives. Offline checklist, no live account required.

  skills/cloud/cloud-design-patterns/SKILL.md on GitHub (opens in a new tab)

• assistant

  Assistant — on any repo, scan README→docs→AGENTS→CONTRIBUTING→PR templates→task runners→devcontainer→CI→configs before code; cite sources; prefer AGENTS.md for agent behavior; portable across Cursor/Copilot/Claude; use agent-toolkit CLI when needed.

  skills/core/assistant/SKILL.md on GitHub (opens in a new tab)

• dev-companion

  WHAT — Dev Companion (general): layered companion for client delivery; modes, gates, delegation to assistant and workflow-generic-project; no CLI matrices.

  skills/core/dev-companion/SKILL.md on GitHub (opens in a new tab)

• onboarding

  Getting started guide for new users. Walks through setup validation, the skill/agent hierarchy, and the three most useful commands per role (developer, PM, tech lead). Use when someone is new to the workstation or asks "where do I start?"

  skills/core/onboarding/SKILL.md on GitHub (opens in a new tab)

• output-handshake

  WHAT — Default gate for any deliverable: confirm where the final artifact will be stored and that a human will review, before writing PRDs, TRDs, ADRs, or PR bodies. Repository paths, wikis, and ticket tools differ by engagement; never assume a single location.

  skills/core/output-handshake/SKILL.md on GitHub (opens in a new tab)

• pr-fallback

  WHAT — When the repo has no GitHub PR template, structure the pull-request body using the default in references/pr-body-default.md. Pair with output-handshake and github-cli-workflow. Does not open the PR; HOW stays in the forge skill.

  skills/core/pr-fallback/SKILL.md on GitHub (opens in a new tab)

• project

  Clone, index, and orchestrate multi-repo work via agent-toolkit project — symlinks, quick access, and swarm workspaces.

  skills/core/project/SKILL.md on GitHub (opens in a new tab)

• workspace-knowledge-sync

  Syncs knowledge to the agentic-harness knowledge base and AGENTS.md learned facts. Use when the assistant discovers new patterns, learns user preferences, workspace facts, or identifies information worth preserving for future sessions. Integrates with platform-engineer (formerly tech-assistant) for automatic trigger points.

  skills/core/workspace-knowledge-sync/SKILL.md on GitHub (opens in a new tab)

• workspace

  Scaffold and manage the stateless AI workspace — context, packs, repos, and knowledge for multi-repo orchestration.

  skills/core/workspace/SKILL.md on GitHub (opens in a new tab)

• dbt-validation

  HOW — Run dbt checks as documented in the target repo (parse, compile, test, selective run). Does not configure Snowflake accounts or change cloud security.

  skills/data/dbt-validation/SKILL.md on GitHub (opens in a new tab)

• snowflake-validation

  HOW — Read-only Snowflake validation patterns: use repo-documented CLI (snowflake/sql) or SQL checks. Never claim success without working credentials and evidence.

  skills/data/snowflake-validation/SKILL.md on GitHub (opens in a new tab)

• adr

  WHAT — Create and maintain Architecture Decision Records (ADRs) per the process. Covers when to write an ADR, required sections, review, and linking to epics/PRs. English for cross-team artifacts unless the user asks otherwise.

  skills/delivery/adr/SKILL.md on GitHub (opens in a new tab)

• agreement

  WHAT - Capture explicit agreements, terms, parties involved, dates, validity, and linked work items using the Agreement Document structure.

  skills/delivery/agreement/SKILL.md on GitHub (opens in a new tab)

• bug

  WHAT - Draft and review bugs using the Bug Template; classifies whether an issue should be escalated to incident based on production/user impact.

  skills/delivery/bug/SKILL.md on GitHub (opens in a new tab)

• decision-log

  WHAT - Capture lightweight project, product, or operational decisions that do not require a full ADR; includes rationale, date, owner, and references.

  skills/delivery/decision-log/SKILL.md on GitHub (opens in a new tab)

• development-workflow

  WHAT - Default development workflow, task lifecycle, DoR, DoD, validation, and evidence model when a project has no explicit override. Repository instructions still take precedence.

  skills/delivery/development-workflow/SKILL.md on GitHub (opens in a new tab)

• epic

  WHAT - Draft and review epics using the Best Practices Epic Template; includes objectives, success criteria, related tasks, stakeholders, and effort metadata.

  skills/delivery/epic/SKILL.md on GitHub (opens in a new tab)

• incident

  WHAT - Draft and review incident reports and RCA notes using Incident Management guidance; includes detection, impact, timeline, RCA, resolution, and follow-ups.

  skills/delivery/incident/SKILL.md on GitHub (opens in a new tab)

• management-unit-assessment

  WHAT - Evidence-based management unit assessment for governance, delivery, collaboration, culture, and AI-native management readiness. Interactive and source-driven before any score is assigned.

  skills/delivery/management-unit-assessment/SKILL.md on GitHub (opens in a new tab)

• meeting-minutes

  WHAT - Create structured meeting minutes from notes or transcripts using meeting templates, with redaction, action items, decisions, and traceability.

  skills/delivery/meeting-minutes/SKILL.md on GitHub (opens in a new tab)

• planning

  WHAT - Planning, estimation, task breakdown, and iteration capacity fallback based on Best Practices. Use before finalizing backlog scope, story/task estimates, or iteration commitments.

  skills/delivery/planning/SKILL.md on GitHub (opens in a new tab)

• prd

  WHAT — Draft and review a Product Requirements Document (PRD) using the template. Business-level requirements, acceptance criteria, and traceability. Does not replace the product owner. English for tickets, PRs, and client-facing text unless the user asks otherwise.

  skills/delivery/prd/SKILL.md on GitHub (opens in a new tab)

No skill matches that filter.

Similar skills

• claude-codex-settingsby fcakyon Battle-tested Claude Code, OpenAI Codex, Cursor configs, plugins, hooks and agents with Kimi, MiniMax and GLM API support. 1.2k stars · 30 skills
• agentfilesby Railly Browse, create, and edit AI agent files across Claude Code, Cursor, Codex, and 12 coding tools — from Obsidian. 862 stars
• ECCby affaan-m The agent harness performance optimization system. Skills, instincts, memory, security, and research-first development for Claude Code, Cod… 301k stars · 30 skills
• ponytailby DietrichGebert Makes your AI agent think like the laziest senior dev in the room. The best code is the code you never wrote. 188k stars · 6 skills
• graphifyby Graphify-Labs Turn any codebase, with its docs, SQL schemas, configs, and PDFs, into a queryable knowledge graph. A /graphify skill for Claude Code, Curs… 146k stars · 1 skill
• taste-skillby Leonxlnx Agent skills that give coding agents taste: art direction, reference images and a browser check instead of generic AI pages 113k stars · 1 skill