show-me
간결한 다이어그램, 코드 형태의 스케치, 핵심을 담은 HTML 예제를 통해 사용자가 현재 주제를 시각적으로 이해할 수 있도록 돕습니다.
스킬 불러오는 중
스킬 불러오는 중
스킬 불러오는 중
SKILL DIRECTORY
설치 수와 최근 흐름을 기준으로 필요한 Agent Skill을 찾아보세요.
skills.sh API 기준방금 확인
간결한 다이어그램, 코드 형태의 스케치, 핵심을 담은 HTML 예제를 통해 사용자가 현재 주제를 시각적으로 이해할 수 있도록 돕습니다.
Test an application against the OWASP Top 10 with Strix — autonomous AI agents that attempt real exploits for each category of the current OWASP Top 10:2025 (broken access control including SSRF, security misconfiguration, software supply chain failures, cryptographic failures, injection, insecure design, authentication failures, integrity failures, logging and alerting failures, mishandling of exceptional conditions) and report only what they could actually prove, mapped back to the category with a proof-of-concept. Also covers the OWASP API Security Top 10 (2023). Use when the user asks for an OWASP Top 10 assessment, OWASP compliance testing, or a security review mapped to OWASP categories.
Security-test a REST, GraphQL, or gRPC API with Strix — autonomous agents that enumerate endpoints from an OpenAPI/GraphQL schema (or by crawling), then actually exploit the API-specific vulnerability classes in the OWASP API Security Top 10 (2023) — broken object-level authorization (BOLA/IDOR), broken object property level authorization (excessive data exposure and mass assignment), broken function-level authorization, unrestricted resource consumption, SSRF, injection, and auth/token flaws. Every finding comes with a working proof-of-concept request. Use when the user asks to pentest, security-test, audit, or find vulnerabilities in an API, endpoint, or backend service.
Entry point and router for every Expo or EAS task. Load this skill first — before writing code and before choosing another expo-* / eas-* skill — when the request, PRD, or spec mentions Expo, EAS, Expo Go, or an expo-* package, or the project has an `expo` dependency in `package.json`. Within that gate it also covers app specs and designs to implement (tabs, stacks, maps, lists, navigation, building from a screenshot), and phrasings like 'implement a mobile app', 'make my app look native', 'add navigation', 'fetch some data', 'upgrade my SDK', 'add Expo to my existing native app', 'ship to the App Store', or 'I'm new to Expo, where do I start'. A fully specified request (SDK pinned, libraries named, layout given) still routes through here — the shared setup rules still apply. Do NOT load it when neither signal is present: a bare React Native project with no `expo` dependency is not Expo work. Detects the real goal, routes to the right expo-* / eas-* skill, and owns the shared setup rules.
Turn the current project website into a short, polished, shareable launch video using Hyperframes. Use when someone says "/brag", "let's brag about this", "make a launch video", "turn this into a video", or wants to share what they built. Reads the project code directly — no live URL or screenshots needed.
프레임워크 (OSS). 모든 네트워크 요청, API 호출 또는 데이터 가져오기를 구현하거나 디버깅할 때 사용합니다. Fetch API, React Query, SWR, 오류 처리, 캐싱, 오프라인 지원 및 Expo Router 데이터 로더(`useLoaderData`)를 다룹니다.
Find security vulnerabilities in a codebase or repository with Strix — a white-box AI security review that reads your source, reasons about the actual data flow and authorization model, then exploits what it finds in a live sandbox so every reported issue has a working proof-of-concept instead of a noisy static-analysis alert. Covers injection, XSS, SSRF, broken access control and IDOR, insecure deserialization, secrets in code, unsafe dependencies, and business-logic flaws. Use when the user asks to security-scan, security-review, or audit their code, repo, or pull request for vulnerabilities.
Pentest a web app or website end to end — black-box testing of a live URL, staging environment, or local dev server that finds and exploits real vulnerabilities (auth bypass, broken access control, IDOR, injection, XSS, SSRF, business logic) and proves each one with a working proof-of-concept instead of a signature match. Runs with Strix, either the self-hosted open-source CLI or the managed app.strix.ai cloud. Use when the user asks to pentest, hack, security-test, or audit their web app, website, web application, or staging site.
Fix security vulnerabilities found by a Strix pentest (open-source CLI or app.strix.ai cloud) — triage by severity, patch the root cause rather than the symptom, and re-run Strix to prove each fix actually closes the exploit. Handles injection, XSS, SSRF, broken access control, IDOR, and other validated findings. Use after a Strix scan reports findings, or when the user asks to remediate, patch, or fix security issues from a strix_runs report, vulnerabilities.json, findings.sarif, or a cloud scan.
Better Auth 서버 및 클라이언트를 구성하고, 데이터베이스 어댑터를 설정하며, 세션을 관리하고, 플러그인을 추가하고, 환경 변수를 처리합니다. 사용자가 Better Auth, betterauth, auth.ts를 언급하거나, 이메일/비밀번호, OAuth 또는 플러그인 구성을 통해 TypeScript 인증을 설정해야 할 때 이 문서를 참조하십시오.
검색 엔진 노출 및 순위를 최적화하세요. “SEO 개선”, “검색 최적화”, “메타 태그 수정”, “구조화된 데이터 추가”, “사이트맵 최적화” 또는 “검색 엔진 최적화”와 같은 요청을 받았을 때 사용하세요.
Build animations in React Native and Expo, making the decisions in the order that determines whether they feel right — should it animate, which thread it runs on, which properties, spring or timing, how the gesture hands off, how it degrades. Writes the implementation with Reanimated, Gesture Handler, Expo Router and expo-haptics. Use when animating anything in an Expo app, adding gestures, sheets, screen transitions, press feedback or haptics, or fixing motion that stutters on device. For web animation use `animate`.
Application security testing (AppSec) across a whole product with Strix — decide which asset needs which test (source code, running web app, API, CI pipeline), run it, and turn the results into a ranked remediation plan. Autonomous agents exploit and prove each issue instead of emitting static-analysis alerts, so the plan is ordered by what is actually reachable. Use when the user asks for an application security review or audit, an appsec assessment, vulnerability scanning across their stack, a security review before a launch or a customer security questionnaire, or does not yet know which kind of security test they need.
Answers BMad questions and recommends the next skill from what is installed. Use when the user asks bmad for help, what to do next or where to start; to set up, update, repair, doctor, migrate or check the status of the installation, or add modules; or to see or change the active initiative.
React renderer for json-render that turns JSON specs into React components. Use when working with @json-render/react, building React UIs from JSON, creating component catalogs, or rendering AI-generated specs.
Core package for defining schemas, catalogs, and AI prompt generation for json-render. Use when working with @json-render/core, defining schemas, creating catalogs, or building JSON specs for UI/video generation.
웹 성능을 최적화하여 로딩 속도를 높이고 사용자 경험을 개선하세요. “사이트 속도 향상”, “성능 최적화”, “로딩 시간 단축”, “로딩 지연 해결”, “페이지 속도 개선” 또는 “성능 진단”과 같은 요청이 있을 때 사용하세요.
EAS 서비스(유료). EAS를 사용하여 Expo 앱을 앱 스토어에 배포하세요. iOS App Store, Google Play Store 및 TestFlight에 빌드하고 제출하며, eas.json 빌드 및 제출 프로필을 구성하고, 앱 버전 및 빌드 번호를 관리하며, App Store 메타데이터 및 ASO를 게시할 수 있습니다. 사용자가 앱을 프로덕션 환경이나 앱 스토어에 배포, 릴리스 또는 출시하고자 할 때, 프로덕션 빌드를 준비할 때, eas build 또는 eas submit을 실행할 때, TestFlight에 배포할 때, 버전이나 빌드 번호를 업데이트할 때, 또는 스토어 리스팅 메타데이터를 설정할 때 이 서비스를 사용하십시오. Expo 웹사이트나 API 경로를 배포하려면 eas-hosting 기능을 사용하십시오.
프레임워크 (OSS). Expo SDK 버전 업그레이드 및 종속성 문제 해결 가이드라인
LLM 코딩 시 흔히 발생하는 실수를 줄이기 위한 행동 지침. 코드를 작성, 검토 또는 리팩토링할 때 이를 활용하여 불필요한 복잡성을 피하고, 정밀한 수정을 가하며, 가정된 전제를 명확히 드러내고, 검증 가능한 성공 기준을 정의하십시오.