Agent Skills Hub

libfuzzer

Coverage-guided fuzzer for C/C++ projects integrated with the LLVM toolchain.

toh-framework

Security-first auditing framework for AI-generated code. Provides multi-level protection including hardcoded secret detection, dangerous pattern identification, and comprehensive vulnerability audits for modern web applications.

find-bugs

Perform automated security audits, bug detection, and code quality assessments on local branch diffs using a structured, checklist-driven verification process.

debugging-strategies

Language-agnostic debugging framework: scientific method, stack trace analysis, logging strategies, and advanced techniques like Git bisect and rubber ducking.

evaluation

Build systematic evaluation frameworks for AI agents using multi-dimensional rubrics, LLM-as-a-judge, and regression testing to measure performance, quality, and context engineering effectiveness.

hs

Pre-execution security guardrails for AI agents. Validates shell commands and file reads against 400+ security patterns to block destructive operations, credential theft, and unauthorized system access.

ultraqa

Autonomous QA cycling workflow that runs test-verify-fix loops until your quality goals are met.

Documentation Builder

Generates comprehensive API references, user manuals, and architectural system documentation directly from your codebase and technical specifications.

cc-stack-analysis

Expert tool for auditing and validating the structural integrity, naming conventions, and best practices of Claude Code configurations, including skills, hooks, and commands.

identify-assumptions-existing

Stress-test existing product feature ideas by identifying risky assumptions across Value, Usability, Viability, and Feasibility using a multi-perspective devil's advocate framework.

claude-oracle

Automated tool and MCP server discovery for Claude Code. Searches 17+ registries to find relevant skills, plugins, and tools before planning or when errors occur.

cn-daily-tools

An all-in-one Chinese daily utility toolkit: weather, currency exchange, news, and package tracking. Zero configuration, no API keys required.