Herramientas

Skills for solving CTF challenges across web, pwn, crypto, reverse engineering, forensics, OSINT and malware analysis, plus a script that installs common CTF tools in one go. Follows the Agent Skills spec and installs with npx skills.

Grafana's official MCP: search and edit dashboards, query Prometheus, Loki and other data sources, and view alerts, incidents and OnCall schedules to help with troubleshooting. Needs a Grafana URL and a service account token.

Plugin marketplace for investment research: six plugin groups covering yfinance market data, earnings previews and recaps, DCF valuation, option payoff charts, ETF premiums, read-only news from X, Discord and other social sources, and TradingView data. Research only, not investment advice.

PostgreSQL MCP server with database health checks, index tuning, EXPLAIN plan analysis and hypothetical index simulation, plus safe read-only SQL execution in restricted mode.

AWS's generally available agent toolkit and plugin marketplace: plugins such as aws-core, aws-agents and aws-data-analytics bundle the AWS MCP Server with evaluated skills for IaC, serverless, containers and billing. Calling AWS APIs requires configured credentials.

AWS's official skills (Agent Toolkit for AWS) covering IAM, CDK/CloudFormation, serverless, containers, observability, cost management and Bedrock, plus service-specific skills. Running AWS operations requires locally configured credentials.

About 40 research skills from Google DeepMind: search arXiv, PubMed and OpenAlex, query UniProt, PDB, ClinVar, ChEMBL and more, run AlphaGenome variant analysis and render structures in PyMOL. Requires uv; AlphaGenome needs an API key, and keys raise limits for OpenAlex, ClinVar and others.

Kubernetes' official CLI for inspecting and managing Pods, Deployments, Services and other cluster resources, reading logs, executing commands in containers and applying YAML manifests. Requires a working kubeconfig for cluster access.

Framework for writing data transformation models in SQL or Python, with a Terraform-like plan/apply flow, virtual data environments, unit tests and table diffs, and transpilation across 10+ SQL dialects. A Linux Foundation project and an alternative to dbt.

Cloudflare's official skills with build and deploy guidance for Workers, Wrangler, Durable Objects, the Agents SDK, Sandbox, Email Service and Cloudflare One; the plugin version also bundles the official MCP.

Teaches agents to build, debug and review stateful AI agents with the Cloudflare Agents SDK: state sync, scheduled tasks, RPC, MCP servers, email and streaming chat, checking the latest official docs first. Maintained by Cloudflare.

Cloudflare's official overview skill: recommends platform products such as Workers, R2, D1, Durable Objects, Containers and AI for your needs, then loads the matching sub-skills and docs. The same repo has dedicated skills for Wrangler, the Agents SDK and more.

Cloudflare's official plugin with skills for Workers, Durable Objects, the Agents SDK, Wrangler, Sandbox and web performance audits, plus the Cloudflare API MCP for account data and up-to-date docs.

Lets agents write and run Playwright scripts on the fly for browser automation: page tests, UX checks and multi-step flows, opening a visible browser by default and auto-detecting local dev servers. After installing the plugin, run npm run setup in the skill directory.

Lets agents write and run Playwright scripts on the fly for browser testing and automation, auto-detecting local dev servers, with screenshots, responsive checks, login flows and link checking. After installing, run npm run setup in the skill directory.

Pluggable natural-language linter that checks Markdown and plain text for wording, punctuation and terminology consistency like code, with auto-fix, and can also run as an MCP server. Rules are installed separately, mostly for Japanese and English; requires Node.js 20+.

MCP server built into the textlint proofreader: agents check Markdown, plain text and other documents against your rules for wording, punctuation and formatting issues and get auto-fixed text. Needs Node.js plus a .textlintrc and rule packages in your project; textlint has no default rules.

Microsoft's official skill collection: 170+ skills focused on Azure SDKs (Python, .NET, TypeScript, Java, Rust) and Microsoft Foundry development, plus plugins, custom agents and MCP configs. Microsoft recommends picking skills per project rather than installing them all.

Finance skills for US, Hong Kong and China A-share markets: news from 10+ sources, quotes and fundamentals, sentiment analysis, time-series forecasts, signal tracking, impact-chain diagrams and reports. Needs Python; some skills download PyTorch models. Not investment advice.

Standards-based command-line calendar that syncs iCloud and other CalDAV calendars via vdirsyncer, so agents can query your schedule and quickly add events; also has an interactive UI. Setting up vdirsyncer takes some technical effort; no Windows support.

Measurement-first audits and optimization of web quality using Lighthouse, Chrome DevTools performance traces and CrUX data, covering Core Web Vitals, WCAG 2.2 accessibility, SEO and best practices, for any frontend framework. By Addy Osmani (not an official Google project).

Supabase's official general skill covering the database, Auth, Edge Functions, Realtime, Storage, vectors and queues, plus supabase-js/SSR integration, the CLI and MCP, migrations and RLS security checks, and it checks the latest docs and changelog before acting.

Postgres rules ranked by impact: query optimization, indexing, connection pooling, RLS security, schema design and lock troubleshooting, with wrong-vs-right SQL examples, applicable to any Postgres. Maintained by Supabase.

A JADX decompiler plugin plus companion MCP server that lets agents read an APK's classes, methods, Smali and resources to assist Android reverse engineering and vulnerability hunting. Requires JADX-GUI and uv.