# skills.ws

> 86 agent skills for AI coding assistants. Marketing, growth, web3, dev, design, security, ops, and EU compliance.

Skills work with OpenClaw, Claude Code, Cursor, Codex, GitHub Copilot, and any agent that supports the SKILL.md standard. Install with: `npx skills-ws install all` (or `npx skills-ws install <name>` for one skill).

Last updated: 2026-08-07

## Skills

- [ab-testing](https://www.skills.ws/skills/ab-testing): Experimentation guidance: A/B test design, sample-size/MDE calculation, pre-analysis plans, SRM and validity checks, frequentist + Bayesian + sequential analysis, variance reduction (CUPED), and ship/no-ship decisions. Use when designing or analyzing an A/B test, sizing an experiment, prioritizing tests, debugging suspicious results, or deciding whether to ship a variant.
- [accounting-finance](https://www.skills.ws/skills/accounting-finance): Operator finance for SMEs/startups: GAAP/IFRS P&L, 13-week cash/runway forecasting, SaaS unit economics (NRR/GRR/CAC payback), chart of accounts, monthly close, bank reconciliation, ASC 606/IFRS 15 revenue recognition, VAT/sales-tax checklists. Use when building a P&L/budget, forecasting cash, setting up bookkeeping, or checking invoicing/VAT.
- [affiliate-marketing](https://www.skills.ws/skills/affiliate-marketing): Affiliate/partner program design, commission economics, fraud-resistant tracking & attribution, compliance (FTC/GDPR/CPRA/tax/KYC), recruitment, and payout ops. Use when launching an affiliate program, designing commission terms, building click/conversion tracking, reviewing affiliate fraud, vetting payouts, or recruiting partners.
- [ai-agent-building](https://www.skills.ws/skills/ai-agent-building): Build production AI agents — LangGraph state machines, CrewAI teams, tool design, memory, RAG, MCP, multi-agent orchestration, evals, cost control, and safety. Use when building LangGraph/CrewAI agents, designing or validating tools, wiring RAG or MCP, adding human-in-the-loop, or running agent evals and safety reviews.
- [aleph-cloud-self-deployment](https://www.skills.ws/skills/aleph-cloud-self-deployment): Deploy and operate VMs on Aleph Cloud with the aleph-client CLI — single node or multi-node fleets, Tailscale mesh, HAProxy distribution, backup/recovery, cost control, and security hardening. Use when deploying confidential/persistent VMs (e.g. an OpenClaw agent runtime) on Aleph Cloud, or building an Aleph node fleet.
- [api-design](https://www.skills.ws/skills/api-design): Production HTTP API design — REST conventions, pagination, error models, versioning, rate limiting, auth, and idempotency. Use when designing or reviewing public/internal HTTP APIs, OpenAPI contracts, pagination, error models, rate limits, auth, or idempotent write endpoints.
- [ascii-banner](https://www.skills.ws/skills/ascii-banner): Build animated ASCII/Unicode banners for CLI tools and web UIs — frame animation, ANSI color, terminal capability detection, flicker-free rendering, accessibility, and canvas/WebGL ASCII shaders. Use when adding a CLI startup banner, building terminal-aesthetic web UIs, converting images/3D scenes to ASCII, or making banner animation TTY-safe.
- [auth-implementation](https://www.skills.ws/skills/auth-implementation): Secure authentication & authorization — OAuth 2.1/OIDC with PKCE & state, JWT/JWKS verification, hashed-rotating refresh tokens, sessions/BFF, passkeys/WebAuthn, MFA/TOTP, RBAC/ABAC, password hashing, and CSRF. Use when implementing or reviewing auth, authz, MFA, passkeys, OAuth/OIDC, sessions, tokens, or access control.
- [aws-production-deploy](https://www.skills.ws/skills/aws-production-deploy): Production AWS infra-as-code in Terraform & CDK: 3-tier VPC, ECS Fargate, Aurora, CloudFront/S3/WAF, OIDC CI/CD, monitoring, security hardening. Use when deploying a web app to AWS for production, writing/reviewing Terraform or CDK, setting up GitHub Actions OIDC deploys, or hardening an AWS account (remote state, GuardDuty, KMS, IAM).
- [bing-webmaster](https://www.skills.ws/skills/bing-webmaster): Bing Webmaster Tools setup, IndexNow protocol, URL submission, backlink analysis, AI Performance report (Feb 2026), Generative Engine Optimization (GEO) per Bing's official guidelines, Copilot citation tracking, meta-directive controls for AI surfaces, and Bing-specific SEO. Use when setting up Bing Webmaster Tools, implementing IndexNow, tracking Copilot citations, optimizing for Bing search or AI answers.
- [blog-engine](https://www.skills.ws/skills/blog-engine): End-to-end pipeline for one long-form, answer-engine-ready blog post — brief, primary-source research, intent mapping, outline, draft, on-page + AI-search optimization, JSON-LD, internal links, QA, and refresh, with 50+ headline formulas and 8 post-type templates. Use when researching, outlining, drafting, optimizing, or refreshing a blog post or SEO article.
- [brand-strategy](https://www.skills.ws/skills/brand-strategy): Frameworks and templates for building and managing a cohesive brand system. Use when defining or auditing brand positioning, messaging hierarchy, voice/tone, visual identity, brand architecture, naming, or brand guidelines for a product or company.
- [business-development](https://www.skills.ws/skills/business-development): BD strategy for B2B SaaS: partner scoring, compliance-safe outreach, deal pipeline + CRM fields, partner economics, and negotiation playbooks. Use when sourcing/qualifying partners, running cold outbound, structuring referral/reseller/integration/white-label deals, negotiating partnership terms, or building a BD dashboard.
- [ci-cd-pipeline](https://www.skills.ws/skills/ci-cd-pipeline): Architect and audit end-to-end CI/CD systems: reusable workflows, testing strategy, OIDC cloud deploys, SLSA provenance, canary/rollback, reversible migrations, and monorepo orchestration. Use for pipeline architecture, security reviews, deployment strategy, or cross-repository CI design. For copy-ready GitHub Actions implementation, use `cicd-pipelines`.
- [cicd-pipelines](https://www.skills.ws/skills/cicd-pipelines): Implement production GitHub Actions with copy-ready workflow YAML for caching, OIDC, Docker builds, deployment, rollback, and release automation. Use when writing or debugging `.github/workflows` in one repository. For CI/CD architecture, governance, or multi-repository strategy, use `ci-cd-pipeline`.
- [cold-outreach](https://www.skills.ws/skills/cold-outreach): B2B cold email and LinkedIn outreach: deliverability (SPF/DKIM/DMARC), copy frameworks, sequences, personalization, suppression, and compliance (CAN-SPAM/GDPR/CASL). Use when writing or diagnosing compliant cold outbound, fixing spam-folder/deliverability issues, or lifting reply/meeting rates; not for consumer bulk or scraped lists.
- [community-building](https://www.skills.ws/skills/community-building): Playbook to build, grow, moderate, and measure online communities (Discord, Slack, Circle, Reddit, GitHub Discussions) from zero to 10,000+ members: onboarding, engagement rituals, trust & safety SOPs, metrics, and a 30/90-day launch plan. Use when launching/scaling a community, fixing low engagement/retention, or writing moderation rules.
- [competitor-intelligence](https://www.skills.ws/skills/competitor-intelligence): Competitive intelligence end to end: competitor discovery, feature/pricing matrices, positioning maps, win/loss analysis, sales battlecards, monitoring automation, and a legal/ethical sourcing register. Use when building competitor analysis, battlecards, a CI program, or tracking rivals' pricing, features, and positioning.
- [content-strategy](https://www.skills.ws/skills/content-strategy): Content program strategy — topic clusters, entity-first briefs, 0-5 scoring rubrics, editorial calendar operating model, gap analysis, repurposing, and AI-era discovery (AI Overviews, ChatGPT Search, Perplexity). Use when planning a content program, writing briefs, prioritizing a backlog, or auditing content for organic + AI search.
- [copywriting](https://www.skills.ws/skills/copywriting): Copywriting — headline frameworks (PAS/AIDA/4U/BAB), page-by-page playbooks, CTA optimization, voice calibration, before/after rewrites, AI-snippet-friendly leads. Use when writing or revising landing pages, ads, emails, or product copy.
- [crm-builder](https://www.skills.ws/skills/crm-builder): Architect vendor-neutral CRM systems: data models, pipeline semantics, lifecycle definitions, lead scoring, deduplication, migration, and governance. Use when designing a CRM from first principles or specifying its schema and operating model. For HubSpot, Salesforce, or Pipedrive configuration, use `crm-operations`.
- [crm-operations](https://www.skills.ws/skills/crm-operations): Operate HubSpot, Salesforce, and Pipedrive with platform-specific recipes for properties, workflows, routing, scoring, forecasting, and data hygiene. Use when configuring or repairing an existing CRM platform. For vendor-neutral CRM architecture and schemas, use `crm-builder`.
- [customer-acquisition](https://www.skills.ws/skills/customer-acquisition): CAC optimization, channel-mix modeling, multi-touch + incrementality attribution, and acquisition strategy across paid, organic, and product-led channels. Use when calculating CAC/LTV:CAC/payback, allocating channel budget, measuring under iOS ATT/SKAN + consent-mode + cookie loss, running incrementality tests, or building channel playbooks.
- [customer-feedback](https://www.skills.ws/skills/customer-feedback): Design and operate a Voice of Customer program — NPS/CSAT/CES collection, survey instrumentation, feedback data model, AI-assisted tagging, RICE+ prioritization, and roadmap integration. Use when standing up VoC, normalizing satisfaction metrics, writing survey copy/triggers, deduping feedback to accounts, or running churn/beta loops.
- [data-analytics](https://www.skills.ws/skills/data-analytics): BI metric definitions, warehouse SQL (funnels, cohorts, retention, LTV, churn), experimentation, dashboard design, and data storytelling. Use when defining/reviewing KPIs, writing or auditing analytical SQL, modeling a semantic layer, analyzing cohorts/funnels/experiments, or turning data into an executive recommendation.
- [data-management](https://www.skills.ws/skills/data-management): Data governance, ELT/ETL pipeline design, warehouse modeling, data quality, contracts, lineage, and privacy compliance for analytics teams. Use when designing a warehouse/dbt project, defining data quality tests or contracts, setting up ownership/RACI and PII classification, or implementing GDPR retention/erasure and access controls.
- [database-design](https://www.skills.ws/skills/database-design): Relational schema design and data modeling — normalization, denormalization, indexing strategy, safe migrations, N+1 fixes, and PostgreSQL patterns for production. Use when designing or evolving a schema, choosing indexes, writing a zero-downtime migration, modeling relationships, or deciding when to denormalize.
- [defi-integration](https://www.skills.ws/skills/defi-integration): Build Solidity/TypeScript DeFi integrations — Uniswap V3/V4, Aave V3, Compound V3, Curve, 1inch/Velora, ERC-4626 vaults: swaps, lending, liquidity, flash loans, yield. Use when writing contract or wallet code that swaps, LPs, borrows, or flash-loans; simulate, set slippage from a live quote, confirm with the user before mainnet.
- [design-system](https://www.skills.ws/skills/design-system): Build and audit React/Tailwind design systems: design tokens, CVA component libraries, Storybook 10 docs/tests, WCAG 2.2 accessibility, theming, Figma-to-code token pipelines, npm publishing. Use when building or reviewing a component library, token pipeline, Storybook setup, theming, or Figma handoff on React 18/19 + Tailwind v4.
- [docker-production](https://www.skills.ws/skills/docker-production): Production Docker: multi-stage builds, security hardening, BuildKit cache/secrets, Compose Spec, SBOM/provenance/signing, networking, logging, and private registry. Use when writing Dockerfiles, hardening images, debugging containers, or shipping containers to production.
- [email-sequence](https://www.skills.ws/skills/email-sequence): Lifecycle email sequences — welcome/onboarding/nurture/re-engagement/cart/winback flows, plus deliverability and 2026 bulk-sender compliance (Google/Yahoo/Microsoft: SPF+DKIM+DMARC, RFC 8058 one-click unsubscribe). Use when the user mentions drip campaign, nurture, lifecycle email, email automation, or email deliverability/authentication.
- [eu-legal-compliance](https://www.skills.ws/skills/eu-legal-compliance): EU digital/data law for product & engineering teams — GDPR, DSA, DMA, EU AI Act, ePrivacy, NIS2, consumer protection, EAA — with article refs, mid-2026 deadlines, penalty tiers, and inline DSAR/DPIA/RoPA/cookie/SCC/AI-classifier checklists. Use when building consent flows, handling DSAR/breach duties, classifying AI systems, or planning an EU compliance roadmap. Not legal advice.
- [eu-tax-accounting](https://www.skills.ws/skills/eu-tax-accounting): EU corporate tax, VAT/OSS/IOSS, payroll, filing deadlines, e-invoicing, and cross-border rules (ATAD, Pillar Two, DAC) across all 27 member states. Use when scoping where to register, cross-border VAT, payroll cost by country, or compliance checklists. Orientation only, not filing advice. See `eu-legal-compliance`, `accounting-finance`.
- [git-workflow](https://www.skills.ws/skills/git-workflow): Git branching strategies, Conventional Commits, hooks, code review, and release/monorepo CI. Use when designing branch strategy, enforcing commit conventions, wiring Husky/commitlint, automating releases (semantic-release/release-please), setting up CODEOWNERS/monorepo CI, or deciding rebase vs cherry-pick vs force-push.
- [google-analytics](https://www.skills.ws/skills/google-analytics): GA4 implementation and analysis: event taxonomy, custom dimensions, key events (the 2024 rename of conversions), Google Ads import, GTM + Consent Mode v2, audiences, BigQuery export, and the Data API. Use when setting up GA4, fixing tracking/conversions, building Looker Studio reports, or querying analytics programmatically.
- [growth-hacking](https://www.skills.ws/skills/growth-hacking): Growth strategy and experimentation — AARRR funnels, viral/referral loop economics, PLG onboarding, experiment design, and growth metrics, with responsible-growth and privacy guardrails. Use when modeling viral/referral loops, building activation or PLG onboarding funnels, designing growth experiments, or standing up growth dashboards.
- [hiring-team-building](https://www.skills.ws/skills/hiring-team-building): Hire and build EU teams: country-by-country labor law (probation, notice, leave, works councils), structured interviews and scorecards, ESOP/equity tax by jurisdiction, cross-border remote setup, team design. Use when writing JDs, designing interviews, drafting offers or contracts, setting up cross-border/remote work, or granting equity in the EU.
- [influencer-marketing](https://www.skills.ws/skills/influencer-marketing): Influencer/creator marketing playbook: tier strategy, a 2026 budgeting model, vetting scorecard, outreach, contracts, FTC/ASA/EU compliance, and ROI/incrementality measurement. Use when planning, pricing, vetting, contracting, briefing, or measuring creator campaigns across Instagram, TikTok, YouTube, or LinkedIn.
- [landing-page-builder](https://www.skills.ws/skills/landing-page-builder): Build and revise high-converting SaaS/product/service/lead-gen landing pages: intake, copy, responsive layout, CTAs, proof sections, FAQ, and implementation-ready HTML/Tailwind/React. Use when asked to build, design, write, or improve a landing page, hero, or marketing page, or to turn an offer or brief into shippable page code.
- [lead-scoring](https://www.skills.ws/skills/lead-scoring): Design, calibrate, and implement CRM/warehouse lead & account scoring — fit + engagement models, MQL/SQL thresholds, SDR routing, decay rules, BANT/MEDDIC mapping. Use when building or tuning lead scoring in HubSpot/Salesforce/Marketo, setting MQL thresholds, validating scores against won/lost data, or adding privacy guardrails.
- [local-seo](https://www.skills.ws/skills/local-seo): Local SEO across Google Business Profile, Apple Business Connect, Bing Places, citations, reviews, location pages, map-pack and AI-Overview local visibility. Use when working on multi-location SEO, single-location optimization, or local pack ranking.
- [marketing-analytics](https://www.skills.ws/skills/marketing-analytics): Marketing measurement on GA4/GTM: event taxonomy, ecommerce dataLayer, key events, Consent Mode v2, server-side tagging/Measurement Protocol, UTMs, 2026 attribution, BigQuery SQL, dashboards. Use when setting up GA4/GTM, UTMs, key-event/conversion tracking, attribution, dashboards, funnel/cohort analysis, BigQuery exports, or consent compliance.
- [marketplace-launch](https://www.skills.ws/skills/marketplace-launch): Launch and rank a SaaS/app/tool on marketplaces, review sites, and directories — Product Hunt, AppSumo, G2, Capterra, indie/AI directories — for visibility, reviews, and acquisition. Use when running a Product Hunt launch, an AppSumo lifetime deal, a G2/Capterra review campaign, a directory push, or a multi-channel launch calendar.
- [mcp-client](https://www.skills.ws/skills/mcp-client): Consume MCP (Model Context Protocol) servers over stdio (local) or Streamable HTTP (remote): initialize handshake, call tools, read resources, get prompts, pagination/timeouts/errors, OAuth/bearer auth, plus Claude Desktop/Code, Cursor, OpenClaw config. Use when wiring an agent to an MCP server or debugging a transport/auth failure.
- [mcp-server-builder](https://www.skills.ws/skills/mcp-server-builder): Build production MCP servers: tool/resource/prompt schemas (Zod/Pydantic), Streamable HTTP + stdio (spec 2025-11-25, SSE legacy), OAuth 2.1 bearer auth, FastMCP (Python) and @modelcontextprotocol/sdk (TS), Stripe + x402 v2 monetization, deploy. Use when shipping, monetizing, or deploying an MCP server or wrapping a REST API as tools.
- [monitoring-observability](https://www.skills.ws/skills/monitoring-observability): Production monitoring & observability stack — structured logging, Prometheus/PromQL, Grafana-as-code, OpenTelemetry tracing, tail sampling, SLOs/error budgets, incident response. Use when instrumenting a service, designing metrics/alerts/SLOs, debugging an incident, wiring traces-to-logs, or choosing Datadog vs self-hosted.
- [mvp-launcher](https://www.skills.ws/skills/mvp-launcher): Ship MVPs fast: validation frameworks, scoping, build-vs-buy, realistic budgets, tech-stack selection, 3-week sprints, launch checklists, analytics/legal setup, and post-launch playbooks. Use when scoping, building, or launching an MVP and deciding what to build vs buy, what to cut, and how to validate and instrument it.
- [nextjs-performance](https://www.skills.ws/skills/nextjs-performance): Next.js (App Router, v15/16) performance: Core Web Vitals, rendering/caching strategy, bundle analysis, images, fonts, edge middleware, and RUM-driven audits. Use when a Next.js app is slow, fails LCP/INP/CLS, has a bloated bundle, or you must pick SSG/ISR/SSR/streaming or migrate to Cache Components ('use cache').
- [nextjs-stack](https://www.skills.ws/skills/nextjs-stack): Production SaaS blueprint wiring Next.js 16 App Router + React 19, Tailwind v4/shadcn, Prisma 7/Postgres, Clerk/Supabase Auth, Stripe, Vercel, and Sentry into one architecture. Use when scaffolding a full-stack SaaS, choosing the App Router/RSC/state/ORM/payments layers, or reviewing one for security and serverless correctness.
- [onchain-analytics](https://www.skills.ws/skills/onchain-analytics): On-chain EVM data analysis — Dune (DuneSQL/Trino), Etherscan V2 multichain API, The Graph, Alchemy/Infura RPC, token/holder/whale flows, DeFi & NFT metrics, mempool/MEV, dashboards. Use when querying blockchain data, building crypto dashboards, computing TVL/volume/holder distribution, or profiling wallets.
- [ophis-swap](https://www.skills.ws/skills/ophis-swap): Use when the user wants to swap, trade, buy, sell, or convert tokens onchain, get a best-execution swap quote, compare a swap against DEX aggregators, or read wallet balances, token prices, gas, or fee-rebate tiers. Drives Ophis, an intent-based DEX (a CoW Protocol deployment) that is MEV-protected, gasless for the trader, and keyless. Supports Ethereum, Optimism, Base, Arbitrum, Polygon, BNB, Gnosis, Avalanche, Plasma, Ink, and Linea.
- [page-cro](https://www.skills.ws/skills/page-cro): Landing page CRO — 100-point audit checklist, heatmap analysis, statistical testing, conversion optimization. Use when auditing or optimizing a landing/marketing page. For popups see `popup-cro`; for signup flows see `signup-flow-cro`.
- [paid-ads](https://www.skills.ws/skills/paid-ads): Paid advertising on Google (PMax, AI Max), Meta (Advantage+ Shopping/Sales), LinkedIn (Accelerate), TikTok (Symphony), X — campaign strategy, ad copy, audience targeting, ROAS/CPA. Use when user mentions PPC, paid media, ad creative, retargeting, or campaign optimization.
- [polymarket-trading](https://www.skills.ws/skills/polymarket-trading): Analyze sports prediction markets on Polymarket: scan bookmaker odds (The Odds API) for a raw shortlist, then de-vig to true probabilities to find positive-EV favorites, and optionally execute trades after confirmation. Use when the user mentions polymarket, prediction markets, sports betting, scan/place bets, NBA/football odds, positions, redeem, or edge.
- [popup-cro](https://www.skills.ws/skills/popup-cro): Popup, modal, slide-in, and banner conversion optimization — exit intent, lead capture, cookie consent, mobile-friendly (Google interstitial-safe). Use when user mentions popup, modal, overlay, slide-in, exit intent, lead-capture, or announcement banner.
- [postgres-mastery](https://www.skills.ws/skills/postgres-mastery): Advanced PostgreSQL — index strategies, EXPLAIN ANALYZE, partitioning, pgvector, connection pooling, zero-downtime migrations, backups, and replication. Use when diagnosing slow queries, designing indexes, planning a migration, tuning PgBouncer, adding pgvector search, or setting up backups/replication.
- [pr-media-outreach](https://www.skills.ws/skills/pr-media-outreach): End-to-end PR and media outreach playbook: press releases, journalist pitching, source-request platforms, crisis comms, earned/paid/contributed media, entity visibility in AI search, and PR measurement. Use when drafting a launch, pitching reporters, responding to a crisis, placing bylines, or reporting PR results.
- [pricing-optimization](https://www.skills.ws/skills/pricing-optimization): SaaS pricing strategy and billing implementation — value metrics, tiering, discount governance, willingness-to-pay research (Van Westendorp/Gabor-Granger), localization, price increases, and production Stripe Billing (Checkout, usage meters, schedules, dunning, tax). Use when setting/testing prices, designing tiers, or implementing subscription/usage billing.
- [product-led-growth](https://www.skills.ws/skills/product-led-growth): Product-led growth playbooks — activation loops, viral mechanics, freemium gating, PQL scoring, self-serve revenue, and product-led sales. Use when designing PLG onboarding, defining aha/activation metrics, building freemium gates or reverse trials, scoring PQLs, wiring self-serve Stripe billing, or layering sales onto self-serve.
- [programmatic-seo](https://www.skills.ws/skills/programmatic-seo): Build template-driven SEO pages at scale (Next.js/Astro) that survive Google's scaled-content-abuse and site-reputation-abuse policies: page patterns, data pipelines, canonical/index management, schema, indexing monitoring. Use when user mentions programmatic SEO, pSEO, or directory/location/comparison/integration pages at scale.
- [project-management](https://www.skills.ws/skills/project-management): End-to-end software project management: charter, throughput-based sprint planning, OKRs, RAID logs, ADR/DACI decisions, dependency contracts, release gates, retros. Use when planning a project/sprint, scoping/estimating, running ceremonies, tracking risks/dependencies, writing status updates, or picking Jira/Linear/GitHub Projects.
- [prompt-engineering](https://www.skills.ws/skills/prompt-engineering): Production prompt engineering across OpenAI, Anthropic, Gemini, local, and agentic coding tools: structure, few-shot, structured output, chaining, evals, injection defense, RAG, caching, reasoning controls. Use when designing prompts, debugging LLM quality/refusals, building evals, enforcing structured output, or defending against prompt injection.
- [reddit-community-engagement](https://www.skills.ws/skills/reddit-community-engagement): Transparent, rules-compliant Reddit engagement: research subreddits, scan threads with real search syntax, score thread-fit and moderation risk, draft disclosed replies, follow Reddit's API policy, log outcomes. Use when planning Reddit research, outreach, or draft replies for a product, client, or community.
- [retention-analytics](https://www.skills.ws/skills/retention-analytics): Churn analysis, cohort retention (classic/rolling/bracket + revenue retention/NRR), health scoring with calibration, churn-risk SQL, and win-back strategies for SaaS. Use when measuring retention/churn, building cohort or NRR reports, calibrating a customer health score, finding at-risk accounts, or designing win-back campaigns.
- [revenue-operations](https://www.skills.ws/skills/revenue-operations): RevOps for B2B SaaS — segmented funnel benchmarks, forecasting rigor, capacity-based quota/territory planning, GTM alignment, dashboard SQL, and a 2026 tooling stack. Use when defining funnel stages, building a forecast or quota model, auditing the GTM tech stack, or instrumenting pipeline/retention dashboards.
- [saas-billing](https://www.skills.ws/skills/saas-billing): Express/Node SaaS billing with Stripe — subscriptions, usage billing (`billing.meterEvents`), webhooks, API key provisioning, dunning runbook, Adaptive Pricing, Stripe Tax. Use when building SaaS billing on an Express/Node backend; for Next.js see `stripe-billing`.
- [sales-funnel](https://www.skills.ws/skills/sales-funnel): Design, instrument, and optimize sales/marketing funnels: TOFU/MOFU/BOFU + retention, blueprints by motion (PLG, sales-led B2B, ecommerce, creator, marketplace), GA4/CDP events, CRM lifecycle, objection handling, and privacy-safe measurement. Use when building/auditing a funnel, planning lead magnets, instrumenting events, or diagnosing drop-off.
- [search-console](https://www.skills.ws/skills/search-console): Google Search Console expert workflows: Page indexing diagnosis, Performance/CTR analysis, sitemap/canonical triage, Core Web Vitals, structured-data eligibility, and the GSC APIs plus BigQuery export. Use when verifying a property, debugging unindexed pages or lost clicks, auditing rich-result eligibility, or pulling GSC data at scale.
- [security-hardening](https://www.skills.ws/skills/security-hardening): Defensive code patterns — OWASP Top 10 with real fixes, authN/authZ, CORS, CSP `strict-dynamic` + Trusted Types, rate limiting, dependency security, supply-chain provenance (SLSA/sigstore), AI-app risks (prompt injection, LLM data leakage), incident response. Use when hardening application code.
- [security-pentester](https://www.skills.ws/skills/security-pentester): Active offensive testing — OWASP Top 10 exploitation, white-box source-aware scans, CI/CD security gates, vuln report interpretation, remediation. Use when running pentests or attacking your own app. Paired with security-hardening (defensive code) and security-sentinel (runtime threat intel).
- [security-sentinel](https://www.skills.ws/skills/security-sentinel): Perform multi-source runtime threat triage for unknown links, senders, wallets, domains, and contracts using calibrated evidence and safe handling. Use when deciding whether an external artifact can be trusted. For VirusTotal-specific CLI/API investigation, use `virustotal`; for code hardening or authorized pentesting, use the corresponding security skill.
- [seo-geo](https://www.skills.ws/skills/seo-geo): SEO + GEO (Generative Engine Optimization): technical audits, schema (JSON-LD), Core Web Vitals (LCP/INP/CLS), E-E-A-T, hreflang, and AI-search citation tuning for Google AI Overviews/AI Mode, Bing Copilot, ChatGPT Search, Claude, Perplexity, Gemini. Primary-source crawler + robots.txt rules. Use when improving search visibility, AI citations, indexing, meta tags, structured data, keyword clustering, or competitor analysis.
- [signup-flow-cro](https://www.skills.ws/skills/signup-flow-cro): Signup flow CRO — single vs multi-step analysis, social/passkey login impact, progressive profiling, friction audit, and 20+ A/B test ideas. Use when designing or optimizing signup, onboarding form, or registration funnel. For general pages see `page-cro`; for popups see `popup-cro`.
- [smart-contract-auditor](https://www.skills.ws/skills/smart-contract-auditor): EVM/Solidity security auditing: static analysis (Slither, Aderyn, Mythril), fuzzing/formal verification (Foundry, Echidna, Medusa, Halmos), proxy/upgrade safety, DeFi attack patterns, gas, and audit reporting. Use when auditing Solidity contracts, hunting reentrancy/oracle/proxy/access-control bugs, or writing an audit report or PoC.
- [social-media-growth](https://www.skills.ws/skills/social-media-growth): Organic growth on LinkedIn, X, Instagram, TikTok, and YouTube — format mix, cadence, hooks, a native-analytics verification workflow, use-case playbooks, and platform-policy guardrails. Use when planning a content calendar, diagnosing flat reach, choosing formats, or auditing growth tactics for compliance and brand risk.
- [social-media-kit](https://www.skills.ws/skills/social-media-kit): Produce a ready-to-ship social content kit — platform-spec'd posts, hooks, hashtag sets, a repurposing matrix, a calendar, and an FTC/music/giveaway compliance checklist. Use when packaging a launch/campaign kit, repurposing a long-form asset across platforms, or building a content calendar. For viral/algorithm tactics see social-media-growth.
- [solidity-dev](https://www.skills.ws/skills/solidity-dev): Develop Solidity contracts with Foundry and Hardhat: project setup, implementation patterns, tests, deployment, compiler configuration, OpenZeppelin integration, and gas optimization. Use when writing, testing, deploying, or optimizing contracts. For a security audit and findings report, use `smart-contract-auditor`.
- [stripe-billing](https://www.skills.ws/skills/stripe-billing): Production Stripe billing on Next.js App Router: subscriptions, Billing Meters usage, idempotent webhooks, portal, Stripe Tax + Adaptive Pricing, migrations, Test Clocks. Pins apiVersion 2025-09-30.clover (Clover line). Use when building or reviewing Stripe subscription/usage billing in Next.js; for Express/Node see `saas-billing`.
- [telegram-mini-apps](https://www.skills.ws/skills/telegram-mini-apps): Build & ship production Telegram Mini Apps with Stars (XTR) payments on Next.js — @telegram-apps/sdk v3 (cloudStorage, biometry, fullscreen, shareStory) with isAvailable() guards, server-side initData HMAC validation, grammY bot webhooks, and serverless-safe rate limiting. Use when building, debugging, or deploying a Telegram Mini App / TWA or Stars billing.
- [testing-strategy](https://www.skills.ws/skills/testing-strategy): Test strategy for production codebases: testing pyramid, framework choice, mocking, factories, DB isolation per ORM, coverage gates, CI sharding, flaky-test triage, visual/contract/mutation testing, performance/SLOs, observability. Use when designing or auditing a test strategy, setting coverage/CI gates, fixing flaky tests, or reviewing AI-generated tests.
- [ui-ux-pro-max](https://www.skills.ws/skills/ui-ux-pro-max): Senior UI/UX design intelligence for web/app UI — design tokens, semantic color + contrast, type scales, component anatomy/states, WCAG 2.2 AA audits, dark mode, and responsive/container-query layouts. Use when designing, auditing, or implementing UI, picking palettes/fonts, fixing accessibility, or reviewing AI-generated UI.
- [virustotal](https://www.skills.ws/skills/virustotal): Use VirusTotal CLI (`vt`) and Python (`vt-py`) for URL, file, domain, IP, Intelligence, LiveHunt, Retrohunt, relationship, and private-scanning workflows. Use when the requested tool or data source is specifically VirusTotal. For broader multi-source trust decisions, use `security-sentinel`.
- [wallet-integration](https://www.skills.ws/skills/wallet-integration): Web3 wallet integration for React/Next.js dApps — RainbowKit, ConnectKit, WalletConnect, wagmi v2/viem, contract reads/writes, EIP-712 signing, chain switching, and SSR-safe hydration. Use when connecting wallets, sending transactions, signing messages, or fixing wallet hydration/precision/security issues.
- [web-performance](https://www.skills.ws/skills/web-performance): Core Web Vitals (LCP/INP/CLS) optimization, bundle analysis, caching, image/font loading, RUM field measurement, and server-side performance for modern web apps. Use when improving page speed, fixing failing Web Vitals, setting performance budgets, or auditing front-end/server perf.
- [webinar-events](https://www.skills.ws/skills/webinar-events): End-to-end webinar and virtual-event funnel design — platform selection, registration pages, reminder sequences, live content, replay, conversion, and repurposing. Use when planning, promoting, or optimizing a webinar or its lead funnel, choosing a webinar platform, or writing reminder/follow-up emails to lift attendance and conversion.
- [yandex-webmaster](https://www.skills.ws/skills/yandex-webmaster): Yandex Webmaster setup, Yandex-specific SEO, regional/geo targeting, Site Quality Index (SQI/ИКС), commercial factors, and Webmaster API v4 for the Russian/CIS market. Use when verifying a site in Yandex, ranking on Yandex (vs Google), targeting Russian regions, auditing commercial factors, or pulling indexing/query data via the API.

## Optional

- [llms-full.txt](https://www.skills.ws/llms-full.txt): Full content of every skill.
- [skills.json](https://www.skills.ws/skills.json): Machine-readable catalog.
- [sitemap.xml](https://www.skills.ws/sitemap.xml): All indexable URLs.