Marketplace
Skills
Skills for Haarness: instructions and scripts an agent picks up when a task calls for them, added with one command.
Google Calendar via gws
Creates, updates and queries Google Calendar events, calendars and free/busy slots through the gws CLI.
Google Forms via gws
Creates and updates Google Forms and reads their responses through the gws CLI.
Google Chat via gws
Manages Google Chat spaces, members and messages, and posts to spaces, through the gws CLI.
Google Drive via gws
Lists, uploads, downloads, shares and organizes Google Drive files, folders and shared drives through the gws CLI.
Google Docs via gws
Creates, reads and edits Google Docs documents, including batch updates and appending text, through the gws CLI.
Calendar Agenda
Shows today's, tomorrow's or this week's events across all your Google calendars in one list.
Stitch SITE.md Planner
Turns a project brief into a .stitch/SITE.md with identity, visual vibe, sitemap and a prioritized page backlog for the Stitch loop.
Gemini API Development
Writes current Gemini API code in Python or TypeScript: text, chat, multimodal, image and speech output, tools, agents and migrations.
Stitch Taste Design
Writes an opinionated DESIGN.md for Google Stitch that bans generic AI UI habits and sets strict type, color, layout and motion rules.
Stitch Build Loop
Builds a website page by page with Google Stitch, passing a baton file between iterations and wiring each page into the site.
shadcn/ui Integration
Helps add, theme and extend shadcn/ui components in React apps, from project init and registries to variants and accessibility.
Stitch to React Dashboard
Turn Stitch design screens into a working React dashboard on Vite with data fetching wired up.
Stitch Prompt Enhancer
Turns a vague UI idea into a structured Stitch prompt with page sections, UI vocabulary and the project's design tokens.
Gemini Live API
Builds real-time voice and video apps on the Gemini Live API over WebSockets, with VAD, async tools, transcription and translation.
Stitch DESIGN.md Builder
Reads a Google Stitch project's screens and writes a DESIGN.md that describes its colors, type, shapes and layout in plain words.
Gemini Omni Video
Generates, extends and edits short videos with Gemini Omni Flash from text, images or clips, with ffmpeg prep and batch runs.
Web Design Reviewer
Screenshots a running site at several viewports, finds layout, responsive and accessibility issues, then fixes them in source.
STRIDE Threat Model Analyst
Produces a full STRIDE-plus-abuse threat model of a repo with data-flow diagrams and ranked findings, or diffs it against an earlier report.
Test Gap Audit
Finds missing, weak or stale tests for a repo, PR or feature and proposes prioritized test cases tied to file and line evidence.
SQL Code Review
Reviews SQL across major databases for injection risks, access control, indexing, schema design and common query anti-patterns.
GitHub Secret Scanning
Configures GitHub secret scanning and push protection, writes custom patterns and walks through rotating and cleaning leaked secrets.
Protobuf and gRPC Review
Catch breaking changes in protobuf and gRPC schemas and plan rollouts where old and new versions coexist.
Poka-Yoke Mistake Proofing
Redesigns interfaces and audits code so common misuse becomes impossible or loud, ranking each hazard by how the fix catches it.
PlantUML ASCII Diagrams
Turns PlantUML sources into plain-text or Unicode box-drawing diagrams for terminals, READMEs and commit messages.
Meeting Minutes
Turns notes or transcripts from short meetings into structured minutes with decisions and owned, dated action items.
MCP Config Security Audit
Statically checks .mcp.json server entries for hardcoded secrets, shell-injection args, unpinned package runners and unapproved servers.
Blameless Incident Postmortem
Guides a team through a blameless outage write-up: timeline, 5-whys root cause, impact numbers and owned action items.
ImageMagick Image Processing
Resizes, converts, inspects and batch-processes images with the magick CLI, with matching Bash and PowerShell examples.
GitHub Actions Hardening
Reviews workflow YAML for script injection, privileged triggers running fork code, unpinned actions and over-broad token scopes.
Conventional Git Commits
Inspects the diff, groups related files into logical commits and writes Conventional Commits messages before committing locally.
GDPR Engineering Practices
Applies privacy-by-design rules to data models, APIs, logging, retention and secrets, with a PR checklist for personal-data changes.
Draw.io Diagram Generator
Writes valid draw.io XML for flowcharts, architecture, sequence, ER and UML diagrams from templates, then checks the file structure.
Doublecheck Fact Verification
Extracts the factual claims in AI output, looks for sources online and flags likely fabrications in a verification report.
CodeQL Code Scanning
Sets up CodeQL scanning through GitHub Actions or the CLI, covering language matrices, build modes, SARIF and troubleshooting.
Diataxis Documentation Writer
Plans and writes tutorials, how-to guides, references or explanations using the Diataxis framework, outline first.
Cloud Design Patterns
Helps choose and apply 42 distributed-system patterns such as retry, circuit breaker, CQRS and saga, with trade-offs.
Bug Reproduction Brief
Pin down a fuzzy or intermittent bug with a small, reliable repro and supporting evidence before touching the code.
Dependabot Configuration
Builds and tunes dependabot.yml for every ecosystem in a repo, including grouping, schedules, cooldowns and monorepo layouts.
Docs Drift Audit
Compares READMEs, API docs, env samples and examples against the code to report stale or missing documentation with evidence.
Architecture Decision Records
Drafts a numbered ADR with context, decision, consequences and rejected alternatives, saved under docs/adr.
Skill Writer
Creates and improves agent skills step by step: gathers sources, picks a layout, writes SKILL.md, tunes the trigger text and validates.
Skill Security Scanner
Checks an agent skill for prompt injection, risky scripts, broad permissions, leaked secrets and supply-chain risks before you install it.
Security Model Writer
Write down a repo's threat model in a SECURITY_MODEL.md so automated reviewers know what counts as a real finding.
Secret Serialization Review
Finds credentials that leak through auto-generated repr, dumps, JSON or telemetry serialization in Python and JavaScript code.
Prompt Optimizer
Creates and tunes system or agent prompts against a small eval set, including ports between Claude, OpenAI and Gemini models.
Iterate PR to Green
Loops on a pull request, fixing failing CI and high or medium review comments, then commits and pushes until checks pass.
PR Writer
Writes or refreshes pull request titles and descriptions from the full branch diff, aimed at what reviewers need to know.
GitHub Actions Security Review
Audits GitHub Actions workflows for attacks an outsider can actually pull off: pwn requests, expression injection, token theft.