███████╗██╗ ██╗██╗██╗ ██╗ ██████╗ █████╗ ███╗ ██╗██╗ ██╗
██╔════╝██║ ██╔╝██║██║ ██║ ██╔══██╗██╔══██╗████╗ ██║██║ ██╔╝
███████╗█████╔╝ ██║██║ ██║ ██████╔╝███████║██╔██╗ ██║█████╔╝
╚════██║██╔═██╗ ██║██║ ██║ ██╔══██╗██╔══██║██║╚██╗██║██╔═██╗
███████║██║ ██╗██║███████╗███████╗ ██║ ██║██║ ██║██║ ╚████║██║ ██╗
╚══════╝╚═╝ ╚═╝╚═╝╚══════╝╚══════╝ ╚═╝ ╚═╝╚═╝ ╚═╝╚═╝ ╚═══╝╚═╝ ╚═╝
Agent Skills 排行榜 · 关键词 + 语义搜索
| # | Skill | 仓库 | 描述 | 安装量 |
|---|---|---|---|---|
| 4601 | api-authorization-and-bola | yaklang/hack-skills |
SKILL: API Authorization and BOLA — Object Access, Function Access, and Mass Assignment AI LOAD INSTRUCTION : Use this skill when an API exposes object IDs, nested resources, or role-sensitive functions and you need a focused authorization test path: BOLA, BFLA, method abuse, and hidden field control. 1. CORE TEST LOOP Create Account A and Account B. As Account A, capture create, read, update, and delete flows. Replay with Account B's token. Test sibling endpoints, nested endpoints, and alternat...
|
1.3K |
| 4602 | oauth-oidc-misconfiguration | yaklang/hack-skills |
SKILL: OAuth and OIDC Misconfiguration — Redirects, PKCE, Scopes, and Token Binding AI LOAD INSTRUCTION : Use this skill when the target uses OAuth 2.0 or OpenID Connect and you need a focused misconfiguration checklist: redirect URI validation, state and nonce handling, PKCE enforcement, token audience, and account binding mistakes. 1. WHEN TO LOAD THIS SKILL Load when: The app supports Login with Google , GitHub, Microsoft, Okta, or other IdPs You see authorize , callback , redirect_uri , code...
|
1.3K |
| 4603 | csrf-cross-site-request-forgery | yaklang/hack-skills |
SKILL: CSRF — Cross-Site Request Forgery — Expert Attack Playbook AI LOAD INSTRUCTION : Expert CSRF techniques. Covers modern bypass vectors (SameSite gaps, custom header flaws, tokenless bypass patterns), JSON CSRF, multipart CSRF, chaining with XSS. Base models often present only basic CSRF without covering SameSite edge cases and common broken token implementations. 0. RELATED ROUTING Also load: cors cross origin misconfiguration when JSON endpoints become readable cross-origin oauth oidc mis...
|
1.3K |
| 4604 | cors-cross-origin-misconfiguration | yaklang/hack-skills |
SKILL: CORS Misconfiguration — Credentialed Origins, Reflection, and Trust Boundary Errors AI LOAD INSTRUCTION : Use this skill when browsers can access authenticated APIs cross-origin. Focus on reflected origins, credentialed requests, wildcard trust, parser mistakes, and origin allowlist bypasses. For JSONP hijacking deep dives, same-origin policy internals, honeypot de-anonymization, and CORS vs JSONP comparison, load the companion SCENARIOS.md . Extended Scenarios Also load SCENARIOS.md when...
|
1.3K |
| 4605 | business-logic-vuln | yaklang/hack-skills |
Business Logic Router This is the routing entry point for business-logic and state-machine issues. When to Use The target involves coupons, inventory, payment, approvals, quotas, invites, trials, or state transitions The issue is not parser-level; it is about when checks happen and which business conditions are checked You suspect race conditions, workflow bypass, price tampering, negative values, stacked discounts, or multi-step flaws Skill Map Business Logic Vulnerabilities Recommended Flow Fi...
|
1.3K |
| 4606 | heap-exploitation | yaklang/hack-skills |
SKILL: Heap Exploitation — Expert Attack Playbook AI LOAD INSTRUCTION : Expert glibc heap exploitation techniques. Covers ptmalloc2 internals, bin structures, tcache mechanics, libc/heap leak methods, and attack selection by glibc version. Distilled from ctf-wiki heap sections, how2heap, and real-world exploitation. Base models often confuse glibc version constraints and miss safe-linking (PROTECT_PTR) introduced in 2.32. 0. RELATED ROUTING stack-overflow-and-rop — when the overflow is on the st...
|
1.3K |
| 4607 | dashboarding | grafana/skills |
Grafana Dashboard Authoring Dashboards are JSON documents stored in Grafana. Every dashboard has panels, variables, time range, and refresh settings. Understanding the JSON schema lets you programmatically create and modify dashboards via the API or Grafana Assistant tools. Dashboard JSON structure { "title" : "My Dashboard" , "uid" : "my-dashboard-v1" , "tags" : [ "service" , "production" ] , "time" : { "from" : "now-1h" , "to" : "now" } , "refresh" : "30s" , "timezone" : "browser" , "schemaVer...
|
1.3K |
| 4608 | nature-writing | yuan1z0825/nature-skills |
Nature-Style Scientific Writing Use this skill when the user needs help creating or rebuilding manuscript prose, not merely polishing existing sentences. Core stance Author evidence comes first. Do not invent results, mechanisms, references, methods, novelty, sample sizes, statistics or limitations. Write the argument before writing the sentences. Make the paper easy to judge: relevance, novelty, trust, reuse and meaning. Use ambitious but bounded claims. If essential evidence is missing, write ...
|
1.3K |
| 4609 | langgraph-cli | langchain-ai/langchain-skills |
No SKILL.md available for this skill. View on GitHub Installs 463 Repository langchain-ai/la…n-skills GitHub Stars 743 First Seen 8 days ago
|
1.3K |
| 4610 | testing-agentforce | forcedotcom/sf-skills |
ADLC Test Automated testing for Agentforce agents with smoke tests, batch execution, and iterative fix loops. Overview This skill provides comprehensive testing capabilities for Agentforce agents, including automated utterance derivation from agent subagents, preview-based smoke testing, trace analysis, and an iterative fix loop for identified issues. It bridges the gap between initial development and production deployment. Platform Notes Shell examples below use bash syntax. On Windows, use Pow...
|
1.3K |
| 4611 | proto-persona | deanpeters/product-manager-skills |
Purpose Create an initial, assumption-based persona profile that synthesizes available user research, market data, and stakeholder knowledge into a working hypothesis about your target user. Use this to align teams early in product development, guide initial design decisions, and identify gaps in understanding that require validation through research. This is not a validated persona—it's a "proto" (prototype) persona that evolves as you learn more. Think of it as a structured placeholder that pr...
|
1.3K |
| 4612 | video-report | remotion-dev/remotion |
When a user reports a video not working, we should download the URL and put it as the src in packages/example/src/NewVideo.tsx. Then, in packages/example, we should run bunx remotion render NewVideo --log=verbose.
|
1.3K |
| 4613 | cisco-ios-patterns | affaan-m/everything-claude-code |
Cisco IOS Patterns Use this skill when reviewing Cisco IOS or IOS-XE snippets, building a change-window checklist, or explaining how to collect evidence from a router or switch without making the incident worse. When to Use Reviewing IOS or IOS-XE configuration before a planned change. Choosing read-only show commands for troubleshooting. Checking ACL wildcard masks and interface direction. Explaining global, interface, routing process, and line configuration modes. Verifying that a change lande...
|
1.3K |
| 4614 | seo-sxo | agricidaniel/claude-seo |
Search Experience Optimization (SXO) SXO bridges the gap between SEO (what Google rewards) and UX (what users need). Traditional SEO audits check technical health. SXO asks: "Does this page deserve to rank for this keyword based on what Google is actually rewarding in the SERP?" Core Insight A page can score 95/100 on technical SEO and still fail to rank because it is the wrong page type for the keyword. If Google shows 8 product pages and 2 comparison pages for your keyword, your blog post will...
|
1.3K |
| 4615 | literature-search | lingzhi227/agent-research-skills |
Literature Search Search multiple academic databases to find relevant papers. Input $ARGUMENTS — The search query (natural language) Scripts Semantic Scholar (primary — best for ML/AI, has BibTeX) python ~/.claude/skills/deep-research/scripts/search_semantic_scholar.py \ --query "QUERY" --max-results 20 --year-range 2022 -2026 \ --api-key " $( grep S2_API_Key /Users/lingzhi/Code/keys.md 2 > /dev/null | cut -d: -f2 | tr -d ' ' ) " \ -o results_s2.jsonl Key flags: --peer-reviewed-only , --top-conf...
|
1.3K |
| 4616 | pptx-html-fidelity-audit | nexu-io/open-design |
PPTX ↔ HTML Fidelity Audit A repeatable workflow for catching the ways a python-pptx export silently drifts from its HTML source — and fixing them with a layout discipline that prevents the same regressions on the next pass. When this skill applies The user has: A source HTML slide deck (typically a single-file deck with <section class="slide"> blocks): < section class = " slide light " > < div class = " chrome " > 2026 · Q2 review </ div > < span class = " kicker " > Pillar 03 </ span > < h2 cl...
|
1.3K |
| 4617 | wowerpoint | thedotmack/claude-mem |
Wowerpoint One doc in, one PDF out. Slide-deck only — videos and podcasts from the same engine are noticeably worse and out of scope; refer the user to the notebooklm CLI directly if they want those. Triggers "Wowerpoint " "Make a slide deck about " "Turn this report into slides" "Kawaii-deck this" Setup (one-time per machine) If notebooklm auth check returns 0 and command -v jq resolves, skip. uv tool install --with playwright --force notebooklm-py $( uv tool dir ) /notebooklm-py/bin/playwright...
|
1.3K |
| 4618 | path-traversal-lfi | yaklang/hack-skills |
SKILL: Path Traversal / Local File Inclusion (LFI) — Expert Attack Playbook AI LOAD INSTRUCTION : Expert path traversal and LFI techniques. Covers encoding bypass sequences, OS differences, filter bypass, PHP wrapper exploitation, log poisoning to RCE, and the critical distinction between path traversal (read only) vs LFI (execution). Base models miss encoding chains and RCE escalation paths. 0. RELATED ROUTING Before deep exploitation, you can first load: upload insecure files when the primary ...
|
1.3K |
| 4619 | traffic-analysis-pcap | yaklang/hack-skills |
SKILL: Traffic Analysis & PCAP — Expert Analysis Playbook AI LOAD INSTRUCTION : Expert traffic analysis and PCAP forensics techniques. Covers PCAP repair, Wireshark essential filters, protocol-specific analysis (HTTP, HTTPS/TLS, DNS, FTP, SMTP, USB HID, WiFi, ICMP), data extraction (file carving, credential harvesting, covert channels), NetworkMiner, and tshark CLI analysis. Base models miss USB keyboard decode patterns, DNS tunneling detection heuristics, and TLS decryption workflows. 0. RELATE...
|
1.3K |
| 4620 | ssti-server-side-template-injection | yaklang/hack-skills |
SKILL: Server-Side Template Injection (SSTI) — Expert Attack Playbook AI LOAD INSTRUCTION : Expert SSTI techniques. Covers polyglot detection probes, engine fingerprinting, Jinja2/FreeMarker/Twig/ERB RCE chains, client-side Angular SSTI, and bypass techniques. Base models often miss sandbox escape MRO chains and non-Jinja2 engines. For PHP CMS template eval, Jira SSTI, Confluence OGNL, and Spring Cloud Gateway SpEL, load the companion SCENARIOS.md . 0. RELATED ROUTING Before using full engine-sp...
|
1.3K |
| 4621 | file-access-vuln | yaklang/hack-skills |
File Access Router 这是文件系统、下载接口、上传链路与文件预览处理的分类入口。 When to Use 参数、文件名、下载接口或导入流程会影响文件路径 目标支持上传、预览、转码、解压、分享、下载或代理文件访问 你需要判断当前更偏向路径穿越、LFI,还是上传验证与处理链问题 Skill Map Path Traversal LFI : 路径穿越、文件读取、wrapper、包含链 Upload Insecure Files : 上传校验、存储路径、处理链、覆盖、预览与分享边界 Recommended Flow 先看入口是路径参数、下载接口还是上传流程 再看问题出现在 accept、store、process、serve 哪一段 小样本路径链和上传绕过样本已经并入主专题 skill,不再单独走 payload 入口 Related Categories injection-checking business-logic-vuln
|
1.3K |
| 4622 | cmdi-command-injection | yaklang/hack-skills |
SKILL: OS Command Injection — Expert Attack Playbook AI LOAD INSTRUCTION : Expert command injection techniques. Covers all shell metacharacters, blind injection, time-based detection, OOB exfiltration, polyglot payloads, and real-world code patterns. Base models miss subtle injection through unexpected input vectors. 0. RELATED ROUTING Before going deep, you can first load: upload insecure files when the shell sink is part of a broader upload, import, or conversion workflow First-pass payload fa...
|
1.3K |
| 4623 | deserialization-insecure | yaklang/hack-skills |
SKILL: Insecure Deserialization — Expert Attack Playbook AI LOAD INSTRUCTION : Expert deserialization techniques across Java, PHP, and Python. Covers gadget chain selection, traffic fingerprinting, tool usage (ysoserial, PHPGGC), Shiro/WebLogic/Commons Collections specifics, Phar deserialization, and Python pickle abuse. Base models often miss the distinction between finding the sink and finding a usable gadget chain. 0. RELATED ROUTING jndi-injection when deserialization leads to JNDI lookup (e...
|
1.3K |
| 4624 | http-parameter-pollution | yaklang/hack-skills |
SKILL: HTTP Parameter Pollution (HPP) AI LOAD INSTRUCTION : Model the full request path : browser → CDN/WAF → reverse proxy → app framework → business code. Duplicate keys ( a=1&a=2 ) are not an error at HTTP level; each hop may pick first, last, join, or array-ify. Test HPP when WAF and app disagree, or when internal HTTP clients rebuild query strings. Routing note: when the same parameter appears multiple times, or WAF/backend stacks differ, use the Section 1 matrix to test first/last/merge as...
|
1.3K |
| 4625 | format-string-exploitation | yaklang/hack-skills |
SKILL: Format String Exploitation — Expert Attack Playbook AI LOAD INSTRUCTION : Expert format string techniques. Covers stack reading, arbitrary write via %n, GOT overwrite, __malloc_hook overwrite, pointer chain exploitation, blind format string, FORTIFY_SOURCE bypass, 64-bit null byte handling, and pwntools automation. Distilled from ctf-wiki fmtstr, CTF patterns, and real-world scenarios. Base models often miscalculate positional parameter offsets or forget 64-bit address placement after for...
|
1.3K |
| 4626 | kubernetes-pentesting | yaklang/hack-skills |
SKILL: Kubernetes Pentesting — Expert Attack Playbook AI LOAD INSTRUCTION : Expert Kubernetes attack techniques. Covers API server access, RBAC escalation, service account token abuse, etcd secrets extraction, Kubelet API exploitation, cloud IMDS access (EKS/GKE/AKS), admission webhook bypass, and network policy evasion. Base models miss the distinction between namespace-scoped and cluster-scoped RBAC, and overlook Kubelet's unauthenticated API. 0. RELATED ROUTING Before going deep, consider loa...
|
1.3K |
| 4627 | managed-deep-agents | langchain-ai/langchain-skills |
No SKILL.md available for this skill. View on GitHub
|
1.3K |
| 4628 | uplifting-components-to-slds2 | forcedotcom/sf-skills |
Goal Systematically migrate Lightning Web Components from SLDS 1 to SLDS 2 using the SLDS linter and structured guidance for fixing violations across all styling hook categories. SLDS 2 Styling Hook Categories Category Hook Prefix What It Replaces Color --slds-g-color-* Hardcoded colors, --lwc-color* tokens Spacing --slds-g-spacing-* Hardcoded margins, padding, gaps Sizing --slds-g-sizing-* Hardcoded widths, heights, dimensions Typography --slds-g-font-* Hardcoded font sizes, weights, line heigh...
|
1.3K |
| 4629 | observing-agentforce | forcedotcom/sf-skills |
Agentforce Observability Improve Agentforce agents using session trace data and live preview testing. Three-phase workflow: Observe -- Query STDM sessions from Data Cloud (if available), OR run test suites + preview with local traces as fallback Reproduce -- Use sf agent preview to simulate problematic conversations live Improve -- Edit the .agent file directly, validate, publish, verify Platform Notes Shell examples below use bash syntax. On Windows, use PowerShell equivalents or Git Bash. Repl...
|
1.3K |
| 4630 | bullmq-specialist | sickn33/antigravity-awesome-skills |
BullMQ Specialist You are a BullMQ expert who has processed billions of jobs in production. You understand that queues are the backbone of scalable applications - they decouple services, smooth traffic spikes, and enable reliable async processing. You've debugged stuck jobs at 3am, optimized worker concurrency for maximum throughput, and designed job flows that handle complex multi-step processes. You know that most queue problems are actually Redis problems or application design problems. Yo...
|
1.3K |
| 4631 | spring-ai-mcp-server-patterns | giuseppe-trisciuoglio/developer-kit |
Spring AI MCP Server Implementation Patterns Implement Model Context Protocol (MCP) servers with Spring AI to extend AI capabilities with standardized tools, resources, and prompt templates using Spring's native AI abstractions. Overview The Model Context Protocol (MCP) is a standardized protocol for connecting AI applications to external data sources and tools. Spring AI provides native support for building MCP servers that expose Spring components as callable tools, resources, and prompt templ...
|
1.3K |
| 4632 | tinystruct-patterns | affaan-m/everything-claude-code |
tinystruct Development Patterns Architecture and implementation patterns for building modules with the tinystruct Java framework – a lightweight, high-performance framework that treats CLI and HTTP as equal citizens, requiring no main() method and minimal configuration. Core Principle CLI and HTTP are equal citizens. Every method annotated with @Action should ideally be runnable from both a terminal and a web browser without modification. This "dual-mode" capability is the core design philosophy...
|
1.3K |
| 4633 | scholar-evaluation | affaan-m/everything-claude-code |
Scholar Evaluation Use this skill to evaluate academic or scientific work with a repeatable rubric. When to Use Reviewing a research paper, proposal, thesis chapter, or literature review. Checking whether claims are supported by cited evidence. Evaluating methodology, study design, analysis, or limitations. Comparing two or more papers for quality or relevance. Producing structured feedback for revision. Evaluation Scope Start by identifying the artifact: Show more
|
1.3K |
| 4634 | production-audit | affaan-m/everything-claude-code |
Production Audit Use this skill when the user asks whether an application is ready to ship, what could break in production, or what must be fixed before a launch. This is a maintainer-safe rewrite of the stale community production-audit idea: it keeps the useful production-readiness lens and removes unpinned external execution and third-party data sharing. When to Use The user asks "is this production-ready", "what would break in prod", "what did we miss", "audit this repo", or "ready to ship?" ...
|
1.3K |
| 4635 | sentry-php-sdk | getsentry/sentry-for-ai |
All Skills > SDK Setup > PHP SDK Sentry PHP SDK Opinionated wizard that scans your PHP project and guides you through complete Sentry setup. Invoke This Skill When User asks to "add Sentry to PHP" or "setup Sentry" in a PHP app User wants error monitoring, tracing, profiling, logging, metrics, or crons in PHP User mentions sentry/sentry , sentry/sentry-laravel , sentry/sentry-symfony , or Sentry + any PHP framework User wants to monitor Laravel routes, Symfony controllers, queues, scheduled task...
|
1.3K |
| 4636 | reddit-posts | kostja94/marketing-skills |
Platforms: Reddit Guides Reddit post and comment creation. Use for generating publish-ready posts that follow subreddit norms. Suitable for copy agents. Design agents can use for image post context. When invoking : On first use , if helpful, open with 1-2 sentences on what this skill covers and why it matters, then provide the main output. On subsequent use or when the user asks to skip, go directly to the main output. Output: Publish-Ready Copy This skill enables agents to generate Reddit post ...
|
1.3K |
| 4637 | seo-drift | agricidaniel/claude-seo |
SEO Drift Monitor (April 2026) Git for your SEO. Capture baselines, detect regressions, track changes over time. Commands Command Purpose /seo drift baseline <url> Capture current SEO state as a "known good" snapshot /seo drift compare <url> Compare current page state to stored baseline /seo drift history <url> Show change history and past comparisons What It Captures Every baseline records these SEO-critical elements: Element Field Source Title tag title parse_html.py Meta description meta_desc...
|
1.3K |
| 4638 | content-rewrite | zc277584121/marketing-skills |
Content Rewrite Adapt a piece of source content (article, blog post, announcement, etc.) into platform-specific versions for distribution across social media and content platforms. When to Use Use this skill when the user provides source content and wants it rewritten or adapted for one or more target platforms. Confirm Before Writing Before starting, always ask the user : Perspective / voice — Should the content use first person ("I", telling a personal story) or third person (stating facts obj...
|
1.3K |
| 4639 | xxe-xml-external-entity | yaklang/hack-skills |
SKILL: XML External Entity Injection (XXE) — Expert Attack Playbook AI LOAD INSTRUCTION : Expert XXE techniques. Covers all injection contexts (SOAP, REST JSON→XML parsers, Office files, SVG), OOB exfiltration (critical when direct read fails), blind XXE detection, and XXE-to-SSRF chain. Base models often miss OOB and non-XML context XXE. For real-world CVE chains, Office docx XXE step-by-step, PHP expect:// RCE, and Solr XXE+RCE, load the companion SCENARIOS.md . 0. RELATED ROUTING Also load: u...
|
1.3K |
| 4640 | race-condition | yaklang/hack-skills |
SKILL: Race Conditions — Testing & Exploitation Playbook AI LOAD INSTRUCTION : Treat race conditions as authorization/state integrity issues: non-atomic read-then-write lets multiple requests observe stale state. Prioritize one-time or balance-like operations. Combine parallel transport (HTTP/1.1 last-byte sync, HTTP/2 single-packet, Turbo Intruder gates) with application evidence (duplicate success responses, inconsistent balances, duplicate ledger rows). Authorized testing only. Routing note: ...
|
1.3K |
| 4641 | graphql-and-hidden-parameters | yaklang/hack-skills |
SKILL: GraphQL and Hidden Parameters — Introspection, Batching, and Undocumented Fields AI LOAD INSTRUCTION : Use this skill when GraphQL exists or when REST documentation suggests optional, deprecated, or undocumented fields. Focus on schema discovery, hidden parameter abuse, and batching as a force multiplier. 1. GRAPHQL FIRST PASS query { __typename } query { __schema { types { name } } } If introspection is restricted, continue with: field suggestions and error-based discovery known type pro...
|
1.3K |
| 4642 | crlf-injection | yaklang/hack-skills |
SKILL: CRLF Injection — Expert Attack Playbook AI LOAD INSTRUCTION : CRLF injection (HTTP response splitting) techniques. Covers header injection, response body injection via double CRLF, XSS escalation, cache poisoning, and encoding bypass. Often overlooked by scanners but chains into XSS, session fixation, and cache attacks. 1. CORE CONCEPT CRLF = \r\n (Carriage Return + Line Feed, %0D%0A ). HTTP headers are separated by CRLF. If user input is reflected in a response header without sanitizatio...
|
1.3K |
| 4643 | open-redirect | yaklang/hack-skills |
SKILL: Open Redirect — Expert Attack Playbook AI LOAD INSTRUCTION : Open redirect techniques. Covers parameter-based redirects, JavaScript sinks, filter bypass, and chaining with phishing, CSRF Referer bypass, OAuth token theft, and SSRF. Often underrated but critical for phishing and as a building block in multi-step exploit chains. 1. CORE CONCEPT Open redirect occurs when an application redirects users to a URL derived from user input without validation. The trusted domain acts as a "launchpa...
|
1.3K |
| 4644 | launchdarkly-experiment-setup | launchdarkly/agent-skills |
LaunchDarkly Experiment Setup You're using a skill that will guide you through setting up and running experiments in LaunchDarkly. Your job is to design the experiment, create it with the right metrics and treatments, start data collection, and verify it's running. Prerequisites This skill requires the remotely hosted LaunchDarkly MCP server to be configured in your environment. Required MCP tools: create-experiment -- create a new experiment with metrics and treatments start-experiment-iteratio...
|
1.3K |
| 4645 | launchdarkly-guarded-rollout | launchdarkly/agent-skills |
LaunchDarkly Guarded Rollouts You're using a skill that will guide you through configuring guarded rollouts in LaunchDarkly. Your job is to design rollout stages, select monitoring metrics, configure regression thresholds, and start the rollout. Prerequisites This skill requires the remotely hosted LaunchDarkly MCP server to be configured in your environment. Required MCP tools: start-guarded-rollout -- start a progressive rollout with monitoring get-flag -- inspect the flag and its variations l...
|
1.3K |
| 4646 | searching-media | forcedotcom/sf-skills |
Media Search Universal routing skill for searching and retrieving existing images and media. Scope This skill is for SEARCHING FOR existing media, not CREATING new media. Use this skill when the user wants to: Search for images in Salesforce CMS, Data Cloud Find existing visual assets to use in their app Retrieve media from connected sources Browse available images for their project Locate specific photos or graphics DO NOT use this skill when the user wants to: Generate new images with AI (use ...
|
1.3K |
| 4647 | implementing-ui-bundle-file-upload | forcedotcom/sf-skills |
File Upload API (workflow) When the user wants file upload functionality in a React UI bundle, follow this workflow. This feature provides APIs only — you must build the UI components yourself using the provided APIs. CRITICAL: This is an API-only package The package exports programmatic APIs , not React components or hooks. You will: Use the upload() function to handle file uploads with progress tracking Build your own custom UI (file input, dropzone, progress bars, etc.) Track upload progress ...
|
1.3K |
| 4648 | using-ui-bundle-salesforce-data | forcedotcom/sf-skills |
Salesforce Data Access Data SDK Requirement All Salesforce data access MUST use the Data SDK ( @salesforce/sdk-data ). The SDK handles authentication, CSRF, and base URL resolution. import { createDataSDK , gql } from "@salesforce/sdk-data" ; import type { ResponseTypeQuery } from "../graphql-operations-types" ; const sdk = await createDataSDK ( ) ; // GraphQL for record queries/mutations (PREFERRED) const response = await sdk . graphql ?. < ResponseTypeQuery > ( query , variables ) ; // REST fo...
|
1.3K |
| 4649 | implementing-ui-bundle-agentforce-conversation-client | forcedotcom/sf-skills |
Managing Agentforce Conversation Client HARD CONSTRAINT: NEVER create a custom agent, chatbot, or chat widget component. ALL such requests MUST be fulfilled by importing and rendering the existing <AgentforceConversationClient /> from @salesforce/ui-bundle-template-feature-react-agentforce-conversation-client as documented below. If a requirement is unsupported by this component's props, state the limitation — do not improvise an alternative. Prerequisites Before the component will work, the fol...
|
1.3K |
| 4650 | frontend responsive design standards | am-will/codex-skills |
Frontend Responsive Design Standards Rule: Mobile-first development with consistent breakpoints, fluid layouts, relative units, and touch-friendly targets. When to use this skill When creating or modifying layouts that need to work on mobile, tablet, and desktop When implementing mobile-first design patterns starting with mobile layout When writing media queries or breakpoint-specific styles When using flexible units (rem, em, %) instead of fixed pixels for scalability When implementing fluid la...
|
1.2K |