Skills
16 skills publishedowasp-security-reviewer
Review code against the OWASP Top 10 and get a prioritized, evidence-based report. Flags injection, broken access control, cryptographic failures, SSRF, and misconfiguration, with the exact file and line, the exploit scenario, and a concrete fix for each finding. Includes severity scoring and a remediation checklist. No account, no API key.
Competitive Intelligence Monitor
Know what your competitors changed this week — with a source for every claim. This recurring kit turns your AI agent into a systematic competitive-intelligence monitor: it keeps a watchlist, collects live competitor pages, detects real changes (pricing, positioning, features, launches, content), scores severity, and writes a decision-ready weekly digest. Two layers do what a prompt cannot: a collection layer that fetches live pages via the tool you already have and saves snapshots so diffs are reproducible; and a grounding layer where every change carries source + timestamp + before→after, inference is labelled READ:, and anything unevidenced is marked UNVERIFIED. Includes the weekly workflow, collection adapters, evidence-ledger rules, watchlist and competitor-profile templates, a severity rubric, digest and change-log templates, diffing methodology, a source matrix, quickstart and install guides, a worked example and demo script. For founders, growth leads and small agencies. No backend.
Markdown Link Checker
Sanity-check links in Markdown files — relative paths, anchors, and obviously broken targets — and get a fix list keyed by file and line. Handy for docs, READMEs, and SKILL.md files before you ship.
git changed scope lister
List changed/staged files with line counts and a rough token-size estimate, flagging the biggest diffs first. Helps you scope a code review or trim what you feed an agent. Feeds into lean-context/Token-Guard.
YAML Frontmatter Fixer
Fix broken SKILL.md YAML frontmatter — quotes, commas, colons, list syntax, invalid characters — and show a before/after for each fix. Helps your skills pass skl-validator faster.
Context Offload Hint
Detect oversized content about to be pasted into a model or agent — logs, JSON, big diffs, long docs — and get concrete ways to split or offload it. Feeds into Token-Guard and lean-context.
SKILL.md Snippet Generator
Generate a minimal, valid SKILL.md from a one-liner: frontmatter plus Triggers, Inputs, Procedure, Report, and Example. Designed to feed straight into skl-validator.
SKILL.md Validator / Linter
A free, instruction-only SKILL.md validator and linter for agent skills. Checks structure, frontmatter, required sections, and common pitfalls, then returns a clean PASS / REVISE / FAIL verdict with fixes.
lean-context
Cut token spend in long coding sessions. lean-context detects oversized context before you paste it (logs, JSON, big diffs, long docs) and gives concrete ways to split or offload it, then scopes code review to changed files with line counts and token estimates. Pairs with Token-Guard and context-offload-hint.
outreach-writer
Draft buyer-facing outreach that gets replies. Reads a job brief, a prospect, or a product, then writes a short, specific, non-spammy message with a clear ask and a follow-up. Includes angle selection, personalization slots, tone control, and a checklist to avoid spam triggers. Works for freelance bids, cold email, and warm follow-ups.
data-pipeline-agent
Design and document data pipelines end to end. Turns a business question into a source-to-destination plan: sources, ingestion, transformations, quality checks, scheduling, and failure handling. Produces a runnable spec with schema notes, validation rules, and a monitoring plan. For analysts and engineers who need pipelines that survive production.
claw-auditor
Audit an OpenClaw or ClawHub skill before you install it. Statically inspects the package for red flags: unsafe shell execution, exfiltration paths, over-broad file access, prompt-injection patterns, obfuscated payloads, and missing provenance. Returns a risk score with per-finding evidence and a clear install or reject verdict.
local-review-responder
Turn customer reviews into revenue. Drafts on-brand, policy-safe responses to Google, Yelp, and marketplace reviews, routes negative reviews with an escalation path, and extracts recurring themes into a short action list. Includes tone guardrails, review-bombing handling, and approved-response templates.
sop-architect
Turn a messy process into an agent-ready SOP. Interviews you about a workflow, then produces a structured spec with roles, inputs, steps, decision points, failure paths, and acceptance checks that an AI agent can execute or automate. Includes templates, a gap analysis, and a validation checklist.
aeo-citation-auditor
Get cited by AI answer engines. Audits a page for AEO/GEO readiness: entity clarity, answer-shaped structure, schema.org JSON-LD, llms.txt, crawler directives, and quotable claims. Returns a scored report with P0/P1/P2 fixes and copy-paste schema blocks. Built for teams who want ChatGPT, Perplexity, and AI Overviews to quote them.
token-guard
Stop wasting tokens and money on oversized context. Token-Guard measures what you are about to send, flags the biggest offenders, and tells you what to trim, summarize, or drop before the call. Includes budget thresholds, per-file cost estimates, hard-limit gates, and a report you can act on. Pairs with lean-context and context-offload-hint.