
Research
/Security News
Two Joyfill npm Beta Releases Compromised to Deliver DEV#POPPER Remote Access Trojan
Two Joyfill npm beta releases contain an import-time implant that uses blockchain transactions to retrieve a remote-access trojan.
1337 production-ready AI agent skills with self-evolving meta-skills — cybersecurity, SEO, trading, marketing, automation, devops, content, financial services
Your AI agent is lazy. These 1337 skills fix that.
AI agents skip tests, ignore security, write placeholder code, and cut corners whenever they can. 1ai-skills forces them to follow real workflows with anti-rationalization tables, code examples, and verification checklists — across every domain.
Your AI agent says:
"I'll add tests later." "Security is a nice-to-have." "This placeholder works fine."
It doesn't. It won't. It never does.
Every skill in this library includes an Anti-Rationalization Table — a structured argument that prevents your agent from cutting corners:
| Rationalization | Reality |
|---|---|
| "Tests slow me down" | Bugs slow you down 10x more. Tests are speed, not overhead. |
| "I will refactor later" | Technical debt compounds. Refactor as you go. |
| "It works on my machine" | If it is not in CI, it does not work. Ship proof, not claims. |
/plugin marketplace add oyi77/1ai-skills
/plugin install 1ai-skills@1ai-skills
git clone https://github.com/oyi77/1ai-skills.git
cp -r 1ai-skills/cybersecurity/* .cursor/rules/
gemini skills install https://github.com/oyi77/1ai-skills.git --path skills
git clone https://github.com/oyi77/1ai-skills.git
# Point your agent to the skills/ directory
| Category | Skills | What It Covers |
|---|---|---|
| Cybersecurity | 786 | Threat hunting, forensics, pen testing, SOC ops, incident response |
| Development | 92 | TDD, debugging, code review, PRD, engineering workflows |
| Content | 64 | Video, audio, design, writing, document generation |
| Mindset | 55 | Negotiation, leadership, critical thinking, productivity |
| Marketing | 45 | SEO, viral content, email, ads, growth |
| Core | 44 | AI infrastructure, memory, self-improvement, model routing |
| Integrations | 36 | GitHub, Discord, Notion, Slack, Stripe, Firebase, Supabase |
| DevOps | 33 | Docker, Kubernetes, CI/CD, cloud ops, GitOps |
| Automation | 28 | Bots, workflows, scrapers, process automation |
| Research | 23 | Deep research, market analysis, competitive intelligence |
| Trading | 20 | Crypto, DeFi, Polymarket, trading strategies |
| Operations | 19 | Business ops, governance, HR, legal, project management |
| Agents | 16 | AI agent orchestration, coding, research, autonomous execution |
| MCP | 14 | Model Context Protocol servers and tool integrations |
| Meta | 13 | Self-evolving meta-skills, performance monitoring |
| Financial | 15 | Finance analysis, valuation, tax, portfolio management |
| Sales | 14 | Lead generation, CRM, outreach, sales automation |
| Data | 10 | Data pipelines, analysis, visualization, ETL |
| Productivity | 10 | Calendars, email, meetings, workspace management |
| Other repos | 1ai-skills | |
|---|---|---|
| Skills | 24-100 curated | 1337 tested |
| Anti-rationalization | Some | Every skill |
| Code examples | Some | Every skill |
| Test suite | None | 8-dimension, 100% pass |
| Cybersecurity | None | 786 skills |
| Verification checklists | Some | Every skill |
| Dynamic website | Static | Auto-generated from data |
| Self-evolving | No | Meta-skills that improve |
python3 scripts/test-skills.py # Full test
python3 scripts/test-skills.py --quick # Skip SDK checks
python3 scripts/test-skills.py --json # JSON output
python3 scripts/test-skills.py --skill NAME # Single skill
8 test dimensions:
ast.parse, JS/TS, Bash)/skills/ links resolve)Result: 1337/1337 PASS · 0 warnings · 0 failures
| Skill | Category | What It Does |
|---|---|---|
| docx-creator | content | Generate Word documents programmatically |
| pdf-creator | content | Create, edit, extract PDFs |
| pptx-creator | content | Build PowerPoint presentations |
| xlsx-creator | content | Create Excel spreadsheets with formulas |
| canvas-design | content | Generative art, SVG, data visualizations |
| frontend-ui-design | content | React/Vue UI components, design systems |
| theme-factory | content | Design tokens, color systems, typography |
| gemini-api-dev | core | Google Gemini API integration |
| replicate-runner | core | Run AI models on Replicate cloud |
| model-router | core | Multi-provider LLM routing |
| stripe-integration | integrations | Stripe payments and subscriptions |
| supabase-integration | integrations | Supabase auth, DB, real-time |
| firebase-integration | integrations | Firebase auth, Firestore, functions |
| bigquery-integration | integrations | BigQuery analytics and SQL |
| spec-driven-development | development | PRD-first workflow |
| context-engineering | development | Agent context window design |
| browser-testing-devtools | development | Playwright E2E testing |
| git-workflow-mastery | development | Advanced Git workflows |
1ai-skills includes 13 meta-skills that make the library improve itself:
| Command | What It Does |
|---|---|
/find | Search and activate the right skill |
/audit | Run comprehensive skill library audit |
/lint | Lint and fix skill content quality |
/new-skill | Create a new skill from template |
# Create a new skill
python3 scripts/generate-site.py # Regenerate website
bash scripts/audit-skills.sh --write # Update SKILLS.json
python3 scripts/validate-skills.py # Validate structure
python3 scripts/test-skills.py # Run all tests
See CONTRIBUTING.md for guidelines.
MIT — use freely, contribute back.
Star this repo if it saves your agent from being lazy.
FAQs
1337 production-ready AI agent skills with self-evolving meta-skills — cybersecurity, SEO, trading, marketing, automation, devops, content, financial services
The npm package 1ai-skills receives a total of 52 weekly downloads. As such, 1ai-skills popularity was classified as not popular.
We found that 1ai-skills demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
Two Joyfill npm beta releases contain an import-time implant that uses blockchain transactions to retrieve a remote-access trojan.

Security News
Socket releases free Certified Patches for high-severity Nuxt vulnerabilities, including server-side remote code execution through server island props.

Security News
An open letter signed by 50 companies, from NVIDIA and Microsoft to Mistral and Hugging Face, urges Washington not to restrict open weight AI.