Browse skills

Deep analysis of any EVM wallet address: token holdings with USD values, NFT inventory, DeFi positions (lending, staking, LP), transaction history patterns, gas spending analysis, counterparty mapping, and risk flags (interaction with known scam contracts, approval exposure). Works across Base, Ethereum, Arbitrum, Optimism. Essential for portfolio review, counterparty due diligence, or pre-trade wallet assessment.

Analyze DeFi yield opportunities across Base, Ethereum, Arbitrum, and Optimism. Given a portfolio amount and risk tolerance, identifies optimal yield strategies across lending (Aave, Compound), DEX LPs (Uniswap, Aerodrome), liquid staking (Lido, Rocket Pool), and vaults (Yearn, Beefy). Calculates real APY after fees, IL risk, protocol risk scores, and gas costs. Returns ranked strategies with step-by-step execution instructions.

Comprehensive smart contract security analysis for EVM chains (Base, Ethereum, Arbitrum, Optimism). Given a contract address or source code, identifies rug pull patterns, privilege escalation risks, token honeypot mechanics, liquidity lock status, holder concentration, and common vulnerability classes (reentrancy, flash loan, oracle manipulation, access control). Returns a severity-rated security report with risk score, specific findings, and actionable recommendations. Essential pre-investment due diligence for any agent interacting with DeFi protocols or tokens.

Comprehensive cloud infrastructure configuration reviewer that audits Terraform, CloudFormation, Pulumi, Kubernetes manifests, Docker Compose, and Helm charts for security misconfigurations, cost optimization opportunities, reliability risks, and compliance violations. Checks against CIS benchmarks and AWS/GCP/Azure best practices. Identifies over-provisioned resources, missing encryption, open security groups, absent backup configurations, and single points of failure. Produces a structured severity-rated report with affected resources, remediation code snippets, and estimated monthly cost impact. Supports multi-cloud and hybrid deployments.

Generate comprehensive, ready-to-run test suites from any source code — API routes, React/Vue components, backend services, CLI tools, database models. Supports Jest, Vitest, Pytest, Go testing, Playwright, Cypress. Produces unit, integration, E2E, and API tests with edge cases, error paths, security checks, mocking, fixtures, and test data factories. The complete test-writing replacement for any codebase.

Validate .env files and environment variable configurations — detect missing required vars, type mismatches, malformed values, duplicate keys, and insecure patterns. Returns a structured report with errors, warnings, and auto-fix suggestions. The guard rail before any deploy, docker-compose up, or CI pipeline runs.

Validate and auto-repair YAML syntax errors — fix bad indentation, duplicate keys, trailing whitespace, missing colons, unclosed quotes, tab characters, and anchor/alias issues. Returns the corrected YAML plus a change log of every fix applied. The reliable cleanup step before any K8s manifest, CI config, or Docker Compose file is consumed.

Convert natural language scheduling descriptions into valid cron expressions. Supports standard 5-field cron (minute hour day month weekday), extended 6-field (with seconds), and common variants (AWS EventBridge, Kubernetes CronJob, systemd timer). Returns the expression, a human-readable explanation, and the next 5 scheduled run times. Deterministic: same input always yields same output.

Generate conventional commit messages from git diffs or change descriptions. Outputs type(scope): subject with optional body and footer. Follows the Conventional Commits spec (feat, fix, docs, chore, refactor, test, ci, perf, build, style). Deterministic: same diff always yields same message. Detects breaking changes, multiple scopes, and co-authors.

Analyze SQL queries and EXPLAIN plans to identify performance bottlenecks, then produce optimized rewrites with index recommendations. Supports PostgreSQL, MySQL, SQLite, and SQL Server dialects. Covers full table scans, N+1 patterns, missing indexes, subquery flattening, join optimization, and query plan interpretation. Returns optimized query, index DDL, and estimated improvement.

Generate complete mock API servers from OpenAPI/Swagger specs, example request/response pairs, or natural language descriptions. Produces runnable mock server code (Node.js Express or Python Flask) with realistic fake data, configurable latency, error simulation, request validation, and stateful CRUD operations. Perfect for frontend development, integration testing, and CI pipelines when the real API isn't ready.

Generate comprehensive, well-structured pull request descriptions from git diffs and commit history. Analyzes code changes to produce human-readable summaries with context, motivation, testing notes, and reviewer guidance. Supports conventional commits, multi-language codebases, and team-specific templates.

Scan project dependencies for known vulnerabilities (CVEs), license risks, and outdated packages. Supports npm, pip, Go, Rust, Ruby, Java. Returns structured vulnerability report with severity ratings, CVSS scores, remediation commands, and risk score for CI/CD gates.

Deep-analyze error messages, stack traces, crash logs, and unexpected behavior to identify root causes. Supports Python, JavaScript/TypeScript, Go, Rust, Java, C/C++, Ruby, and shell errors. Examines the full causal chain from symptom to root cause, identifies the exact failing line, explains WHY it fails, suggests multiple fix strategies ranked by safety, and flags related code that may have the same bug pattern.

Generate comprehensive unit tests, integration tests, and E2E tests for any codebase. Supports Python (pytest), JavaScript/TypeScript (Jest, Vitest, Mocha), Go (testing), Rust (cargo test), and Java (JUnit). Analyzes source code to identify testable units, edge cases, error paths, and boundary conditions. Generates structured test suites with descriptive names, proper mocking, parameterized tests, and coverage-maximizing assertions. Includes mutation testing suggestions and property-based test hints.

An example skill for generating sample outputs.

Generate comprehensive API documentation from source code, OpenAPI specs, or example requests. Produces structured Markdown docs with endpoint descriptions, request/response examples, authentication guides, error catalogs, and SDK usage snippets.

Build, explain, test, and debug regular expressions for any language. Generates optimized regex from natural language, reverse-engineers existing patterns, identifies edge cases and ReDoS risks, provides multi-language syntax.

A skill for transforming data between formats with configurable options.

Extract structured data from any unstructured text — invoices, emails, contracts, resumes, support tickets, medical records, legal filings, receipts, meeting notes. Returns schema-valid JSON with typed fields, normalized dates/currencies/units, per-field confidence scores, and explicit nulls. Handles multi-entity extraction, nested objects, and array detection. Zero hallucination guarantee with source spans.

Deep security audit of source code — detect vulnerabilities (OWASP Top 10, CWE-25), find secrets/credentials, flag injection vectors, identify insecure dependencies, analyze authentication/authorization flaws, and produce a prioritized remediation report with severity ratings (Critical/High/Medium/Low), CWE IDs, and fix suggestions. Supports Python, JavaScript/TypeScript, Go, Rust, Solidity, Java, C/C++, Ruby, PHP.

Comprehensive API health checker: probe endpoints, validate responses against schemas, measure latency, check SSL certs, detect rate limits, and generate a structured health report (JSON or markdown). Works with REST, GraphQL, and WebSocket APIs. Outputs actionable diagnostics.

Parse, search, and analyze application logs: auto-detect format (JSON, syslog, Apache/Nginx, custom), extract error patterns, compute frequency stats, find correlated events, and generate incident summaries. Handles multi-GB logs efficiently via streaming.

Validate YAML, JSON, TOML, and .env configuration files — auto-detect format, check structure, find anti-patterns, detect hardcoded secrets, and score health 0-100. Supports Kubernetes manifests, Docker Compose, GitHub Actions, Terraform, and CI/CD configs.

Analyze and optimize Dockerfiles: reduce image size, improve build cache usage, fix security issues (running as root, secrets in layers), apply multi-stage patterns, pin versions, and lint against best practices. Returns optimized Dockerfile + explanation of every change.

Generate structured changelogs and release notes from git history. Parses conventional commits, detects breaking changes, recommends semver bumps, supports monorepo scoping, and outputs Markdown CHANGELOG, GitHub Release notes, or JSON.

Validate YAML, JSON, TOML, and .env configuration files — auto-detect format, check structure, find anti-patterns, detect hardcoded secrets, and score health 0-100. Supports Kubernetes manifests, Docker Compose, GitHub Actions, Terraform, and CI/CD configs.

Analyze and optimize Dockerfiles: reduce image size, improve build cache usage, fix security issues (running as root, secrets in layers), apply multi-stage patterns, pin versions, and lint against best practices. Returns optimized Dockerfile + explanation of every change.

Parse, search, and analyze application logs: auto-detect format (JSON, syslog, Apache/Nginx, custom), extract error patterns, compute frequency stats, find correlated events, and generate incident summaries. Handles multi-GB logs efficiently via streaming.

Comprehensive API health checker: probe endpoints, validate responses against schemas, measure latency, check SSL certs, detect rate limits, and generate a structured health report (JSON or markdown). Works with REST, GraphQL, and WebSocket APIs. Outputs actionable diagnostics.

Reviews mechanic repair estimates, explains recommended work, flags possible overpricing or upsells, ranks urgency, evaluates bundled failures, and suggests practical maintenance while the car is in the shop.

Generates a structured business analysis for building a paid AI agent that monitors USDC transactions on Base and produces plain‑English activity reports.

Generates a plain‑English due‑diligence report for any cryptocurrency token, covering purpose, team, technology, tokenomics, market data, and risk factors.

Decide the next semantic version from a current version plus a list of changes. Applies the SemVer rules — a breaking change bumps major, a feature bumps minor, a fix bumps patch, and the highest-severity change wins — and returns the bump level and the exact next version. Deterministic release automation for agents.

Inspect a SQL statement before it runs. Flags unscoped DELETE/UPDATE, DROP and TRUNCATE, missing WHERE clauses, and full-table scans; classifies the risk; and returns a safer rewrite (a WHERE guard or a LIMIT). Stops an agent from nuking a table by accident.

Turn malformed JSON into valid JSON. Fixes trailing commas, single quotes, unquoted keys, // and /* */ comments, Python literals (True/False/None), and output truncated mid-structure — then reports exactly what it changed. The dependable cleanup step for any agent parsing another model's output.

Pull schema-valid JSON out of messy free text — emails, invoices, chat logs, receipts. Typed fields, ISO-normalized dates and numbers, a confidence score per field, and explicit nulls instead of invented values. The reliable bridge from prose to a typed object an agent can trust.

Audit a wallet's ERC-20 approvals on Base. Flags unlimited and stale allowances, identifies the risky and unverified spenders, and returns a prioritized revoke plan with ready-to-send calldata. Stops a drained-approval exploit before it costs an agent its balance.

Turn any URL into clean, LLM-ready Markdown. Strips nav, ads, cookie banners, and boilerplate, keeps the main article, and returns title, byline, published date, and a short fact list. The reliable way for an agent to read the web without drowning in markup.

Provides a step‑by‑step guide to quote and route the cheapest token swap on the Base L2 network, adding a slippage guard to protect against price impact.

Provides a step‑by‑step guide to quote and route the cheapest token swap on the Base network while protecting against slippage.

Use this skill for any cryptocurrency or blockchain-related task. Triggers include crypto price lookups, portfolio tracking, DeFi analysis, token research, blockchain explanations, wallet security, NFT evaluation, trading strategies, market analysis, on-chain data, tokenomics breakdowns, smart contract overviews, crypto tax basics, exchange comparisons, and Web3 concepts. Use whenever the user mentions Bitcoin, Ethereum, altcoins, DeFi, NFTs, staking, yield farming, wallets, gas fees, Layer 2, DAOs, airdrops, or any blockchain/Web3 topic.

Generates Playwright test scripts from a target URL and a concise test specification.

Provides a step‑by‑step guide to query the cheapest token swap on the Base network, construct a transaction with a slippage guard, and submit it via a public RPC.

Run a prompt or command on a recurring interval, or self-paced, until a condition is met — for polling status, babysitting long jobs, or repeating a task.

Run a persistent Jupyter kernel for interactive data science: execute cells, keep state across steps, inspect dataframes, and render plots — without re-running the world.

Review pull requests and local changes before pushing: read diffs, leave inline comments via the gh CLI or the GitHub REST API, and flag correctness and quality issues.

Interact with and test local web applications using Playwright: verify frontend functionality, debug UI behavior, capture browser screenshots, and read browser logs.