Bundled Skills Reference
29 atomic skills ship with agents-fleet. Skills are composable knowledge packs the coordinator attaches to roles when spawning workers — they are NOT agent personas (for those, see Roles). Skills live in src/skills/bundled/skills/ and are always loaded (bundled tier); override any skill with a same-named .skill.md in .fleet/skills/ or ~/.fleet/skills/. List them at runtime with /skills or list_features --kind skill.
Generated for agents-fleet v0.52.0 · 29 bundled skills.
Fleet & Architecture
| Skill | Tags | Description |
|---|---|---|
agents-fleet-conventions | shared, conventions, typescript, esm | Shared conventions for agents-fleet codebase (TypeScript/ESM/branded types/named exports) |
ci-pipeline-authoring | ci, testing, infrastructure | Authoring robust CI/CD pipelines — test, coverage, regression matrix, and build gates (GitHub Actions) |
coordinator-worker-architecture | architecture, coordinator-worker, fleet | agents-fleet coordinator-worker primitives, boundaries, and concurrency |
hub-tool-discipline | hub, topology, discipline, communication, coordinator | Hub topology — workers MUST route ALL coordinator-bound communication through report_to_coordinator |
prepared-statements-pattern | sqlite, database, prepared-statements | IntelDatabase prepared-statement conventions for better-sqlite3 (WAL, sync, idempotent migrations) |
react-ink-patterns | react, ink, terminal-ui, hooks | React 18 + Ink 5 terminal-UI patterns — function components, hooks, Static, Box layout, polling |
workflow-authoring | workflows, authoring, orchestration | Workflow authoring guide — file anatomy, runner types, edges, forEach, postChecks, dispatch ceremony, author→validate→fix loop |
Code Quality
| Skill | Tags | Description |
|---|---|---|
ponytail-minimalism | minimalism, yagni, code-quality | YAGNI ladder and minimalism rules — forces the laziest solution that actually works |
ponytail-review | review, minimalism, over-engineering, code-quality | Over-engineering code review — finds what to delete, replace with stdlib/native, or shrink |
vitest-patterns | testing, vitest, async | Vitest 4.x test patterns — fixtures, mocking, async, tmpDir cleanup |
Reporting & Documentation
| Skill | Tags | Description |
|---|---|---|
html-report-authoring | reporting, html, documentation, pdf, diagrams | Author polished, self-contained, interactive HTML reports in the agents-fleet light brand theme (SVG/PNG/interactive diagrams, never ASCII) with on-demand PDF export |
Security — Application
| Skill | Tags | Description |
|---|---|---|
sec-authz-audit | security, authz, authn, idor, jwt, access-control, appsec | Audit authentication and authorization flaws — broken access control, IDOR, missing function-level authz, JWT weaknesses, session/cookie flaws, privilege escalation |
sec-cicd-audit | security, cicd, github-actions, supply-chain, appsec | Audit CI/CD and GitHub Actions security — over-privileged tokens, untrusted pull_request_target, script injection via github.event, unpinned actions, secret exposure, artifact tampering |
sec-crypto-audit | security, cryptography, tls, randomness, appsec | Audit cryptographic misuse — weak algorithms, hardcoded keys/IVs, insecure randomness, unauthenticated encryption, improper TLS/cert validation |
sec-deserialization-audit | security, deserialization, prototype-pollution, reflection, appsec | Audit insecure deserialization, JS prototype pollution, and unsafe reflection across Node/TS and C#/.NET |
sec-injection-audit | security, injection, sqli, ssti, ssrf, xxe, path-traversal, appsec | Find and safely confirm injection classes — SQL/NoSQL, OS command, SSTI, path traversal, SSRF, XXE, open redirect, header injection |
sec-llm-agent-audit | security, llm, agent, prompt-injection, mcp, atlas, appsec | Audit LLM and agent security (MITRE ATLAS) — prompt injection (direct/indirect), tool/command injection via model output, system-prompt leakage, RAG poisoning, unsafe MCP/tool allowlists, over-broad agent permissions |
sec-recon-attack-surface | security, recon, attack-surface, threat-model, appsec | Methodology to map a codebase's attack surface — entry points, trust boundaries, dangerous sinks, dependencies, CI/CD, and secrets locations |
sec-secrets-audit | security, secrets, credentials, gitleaks, git-history, appsec | Detect secrets and credential exposure in source, config, and git history — API keys, tokens, private keys, connection strings — with gitleaks-style patterns and remediation |
sec-supplychain-audit | security, supply-chain, sca, dependency-confusion, sbom, npm, nuget, appsec | Audit dependency and supply-chain risk — known-vulnerable packages, lockfile integrity, dependency confusion, typosquatting, SBOM review for npm and NuGet |
security-audit-checklist | security, audit, threat-model | Threat-model audit checklist — path traversal, SQL injection, prototype pollution, credentials, command injection, MCP allowlists |
Security — Reporting & PoC
| Skill | Tags | Description |
|---|---|---|
sec-crash-triage-exploitability | security, binary, crash-triage, exploitability, poc, appsec | Triage fuzzing crashes and assess realistic exploitability — reproduce, classify (WinDbg !exploitable / !analyze, ASan reports), determine the memory-safety primitive (OOB read/write, UAF, type confusion), assess mitigations (DEP/ASLR/CFG/stack cookies), and write the minimal PoC that PROVES impact (controlled crash/AV) — never a weaponized exploit |
sec-finding-report | security, reporting, cwe, owasp, mitre, appsec | Document a security finding — title, qualitative severity, affected file:line, description, PoC/repro, impact, remediation, and framework mapping (CWE, OWASP Top 10 2021, MITRE ATT&CK) |
sec-msrc-report | security, reporting, msrc, coordinated-disclosure, cvss, cwe, appsec | Produce an MSRC-format coordinated-disclosure report — affected product/build, vulnerability type + CWE, CVSS 3.1 and 4.0 vectors + base scores, attack vector/prerequisites/privileges/user-interaction, numbered repro steps, PoC reference, impact classification, affected configurations, suggested mitigation, and coordinated-disclosure timeline |
sec-poc-authoring | security, poc, testing, responsible-disclosure, appsec | Prove a security finding SAFELY — write a local failing test or minimal sandboxed proof-of-concept against the operator's own code only, that goes green once fixed |
Security — Binary Analysis & Fuzzing
| Skill | Tags | Description |
|---|---|---|
sec-binary-static-analysis | security, binary, reverse-engineering, static-analysis, patch-diff, appsec | Static reverse engineering of a target binary (PE/ELF/Mach-O) — triage the file, extract imports/exports/strings/sections, disassemble + decompile (Ghidra headless / IDA / radare2 / objdump), identify dangerous APIs, parsing routines, and trust boundaries, and patch-diff a patched-vs-unpatched build to locate the fixed/target code |
sec-fuzzing | security, binary, fuzzing, coverage-guided, sanitizers, appsec | Coverage-guided fuzzing of a target (parser/decoder/IPC/file-format) — build a harness (libFuzzer/AFL++/WinAFL/honggfuzz), assemble a seed corpus + dictionaries, run with sanitizers (ASan/UBSan), measure coverage, and minimize crashers — all inside an isolated, disposable VM |
Security — Infrastructure
| Skill | Tags | Description |
|---|---|---|
sec-azure-vm-provisioning | security, azure, vm, isolation, disposable, coordinated-disclosure, appsec | Safely provision an ISOLATED, DISPOSABLE Azure VM for PoC validation with the az CLI — dedicated resource group, isolated vnet/subnet, deny-all NSG, no public IP, snapshot before detonation, TTL tag, and guaranteed teardown; NEVER a production subscription |
sec-vm-detonation | security, azure, vm, detonation, evidence, integrity, coordinated-disclosure, appsec | Detonate a PoC inside an isolated, disposable Azure VM and capture evidence — transfer via az vm run-command / Custom Script Extension, execute, collect logs/screenshots/crash-dumps/process+event evidence, hash + timestamp each artifact, assert the security impact vs a benign baseline, then snapshot-revert or delete the RG |