Skip to main content

Skills reference

This page lists the 276 skills of the Navin library by category. A skill is activated in a project on its own or with a plugin, see how to enable an item.

Categories​

CategoryCount
Ads1
Careers14
Data11
Design5
Development23
Devops43
Documents17
General24
Intelligence11
Marketing18
Meeting1
Navigation8
Sales18
Security45
Seo11
Studio1
Trading9
Writing16

Ads​

NameDescriptionPlugins
paid-ads-managerPlan and operate Google Ads, Microsoft Ads, Meta Ads, TikTok Ads, Reddit Ads, and LinkedIn Ads - real analysis of exports / MCP rows with the ads engine, targeting, creatives, budgets, and approval-gated optimization loops.-

Careers​

NameDescriptionPlugins
application-trackerTrack job applications - statuses, follow-ups, interviews, and reminders - in a structured pipeline.-
ats-analyzerScore CV-to-job-offer match, identify missing keywords, and check ATS parseability.-
career-advisorRecommend career moves, skill investments, and trajectory options based on profile, market demand, and goals.-
career-agentRun the Navin Career desk for freelance missions and permanent jobs. Search authorized sources, score matches, tailor a CV from the Master CV, import pasted LinkedIn offers, track inbox and follow-ups.-
cover-letter-writerWrite personalized cover letters and motivation messages that connect a candidate's story to a specific company and role.-
cv-builderGenerate professional, ATS-compatible CVs from career information - structure, achievement phrasing, and clean formatting.-
cv-tailoringAdapt an existing CV to a specific job offer - keyword alignment, reordering, and emphasis, without fabrication.-
followup-writerWrite J+3 and J+7 recruiter follow-ups from the Career inbox and pipeline.-
freelance-rate-cardBuild or defend a freelance daily rate (TJM) from the Career profile, market, and mission scope.-
interview-coachPrepare candidates for interviews - likely questions, STAR answers, mock sessions, and salary negotiation.-
job-search-agentSearch, filter, and rank freelance and job opportunities on authorized sources with the career tool.-
linkedin-optimizerOptimize LinkedIn profiles - headline, about, experience, keywords, and visibility settings - for recruiters, clients, or partners.-
offer-analyzerCompare a job or freelance offer to the Career profile - compensation, risk, visa, stack, and a clear accept / negotiate / walk-away.-
salary-negotiatorPrepare salary and package negotiation for a specific offer - market range, anchors, counters, and email drafts.-

Data​

NameDescriptionPlugins
data-lineage-observerObserve data pipelines through OpenLineage events and lineage catalogs (Marquez, DataHub, OpenMetadata) to answer where a dataset comes from, what depends on it and whether it is fresh. Reads RunEvents (START, COMPLETE, FAIL, facets schema, columnLineage, errorMessage, outputStatistics) emitted by Airflow, dbt, Spark, Flink or Dagster, walks the graph for impact and root cause, finds orphan datasets, traces personal data column by column and checks freshness SLAs from a JSONL export.-
data-migration-agentPlan and execute source→target data migrations with mapping, transforms, reconciliation, and cutover checks.-
data-quality-agentDetect duplicates, missing values, schema drift, and inconsistencies across datasets.-
database-explorerExplore PostgreSQL, MySQL, MongoDB, Redis, and SQLite schemas and sample data safely (read-first).-
kpi-reporterBuild recurring KPI reports, dashboards summaries, and alerts from multiple data sources.-
metrics-analystMeasure project and product health - code metrics, complexity, dependency freshness, test coverage, technical debt, and product KPIs.-
pdf-ocr-extractorExtract tables, forms, and text from PDFs and scans (OCR when needed), including multilingual docs.-
rag-knowledge-builderBuild and evaluate RAG corpora - ingest, chunk, embed, index, and spot-check retrieval quality.-
sql-analystTranslate business questions into SQL, validate results, and explain assumptions.-
stripe-operatorInspect and operate Stripe (customers, payments, subscriptions, invoices, products) through the Stripe API or CLI.-
supabase-operatorAdminister Supabase tables, migrations, storage, functions, and RLS policies. Prefer MCP Supabase or CLI when configured.-

Design​

NameDescriptionPlugins
algorithmic-artGenerates original algorithmic art with p5.js - seeded randomness, flow fields, particle systems, noise and parametric variation - packaged as a self-contained interactive HTML viewer with seed navigation, sliders and PNG export.example-skills
brand-guidelinesDefines the Navin brand (ink-on-paper palette with one lime accent, Inter and IBM Plex typography, spacing scale, wordmark rules, tone of voice) and shows how to apply it in HTML/CSS, python-pptx, python-docx, reportlab and matplotlib.example-skills
canvas-designDesigns posters, covers, title cards and single-page visual canvases as one PNG or PDF - a short visual philosophy first, then a composition rendered with HTML+CSS in the headless browser or with Pillow from a JSON spec, using open-licensed fonts and the Navin palette.example-skills
slack-gif-creatorBuilds small looping animated GIFs for Slack (custom emoji at 128x128, message GIFs up to 2 MB) from code with Pillow, applying size budgets, palette reduction and easing so the result reads well at thumbnail size.example-skills
theme-factoryApplies one of ten ready-made color and type themes (Navin Studio as the default, plus Ink and Lime, Harbor, Terracotta, Moss, Slate, Aurora, Dune, Orchard, Midnight) to slides, documents, reports and HTML pages, or derives a new theme in the same format.example-skills

Development​

NameDescriptionPlugins
app-backend-bridgePhase 4 of App Factory. Keep the existing backend (FastAPI, NestJS, Express, Django, Next.js API) and make the mobile/desktop app talk to it over HTTPS - API base URL, CORS origins capacitor://localhost, http://localhost, https://tauri.localhost, tauri://localhost, auth cookies or tokens. Sidecar backend only when a local desktop backend is required.-
app-build-repairApp Factory recovery for failed mobile/desktop builds and broken runtimes - Gradle/JDK mismatch, SDK licenses, minSdk, missing webkit2gtk-4.1, MSVC link.exe not found, WebView2 missing, Rust target missing, frontendDist empty, white screen from absolute asset paths, CORS, SameSite cookies on capacitor://localhost and https://tauri.localhost, mixed content.-
app-capacitor-builderApp Factory mobile builder. Wrap the web frontend with Capacitor 8 inside os/<target> and build Android (.apk, .aab) then iOS (.ipa) - cap init, add android, sync, run, Gradle assembleDebug / bundleRelease, signing via keystore with secrets from env.-
app-compatibility-enginePhase 2 of App Factory. Decide how a web frontend runs inside a mobile (Capacitor 8) or desktop (Tauri 2) shell - strategy static, next-export or client-shell - and enforce the Next.js rule (never just output export when Server Actions, SSR, middleware or route handlers exist). Drives appfactory action=plan.-
app-device-testerApp Factory tests on real runtimes - Android emulator or device via the mobile tool and adb, Maestro flows, desktop binary launch and Playwright against the web build - with honest passed / failed / not_run reporting. A compiled build is not a working app.-
app-environment-managerPhase 3 of App Factory. Detect and prepare the build toolchain for a mobile or desktop target (Node, JDK 21, Android SDK, Gradle, Rust, MSVC, WebView2, webkit2gtk-4.1, Xcode) with appfactory action=doctor, and install missing tools with official installers only after the user agrees.-
app-factoryEntry point to turn an existing web app into a real mobile or desktop app (Android, iOS, Windows, macOS, Linux).-
app-frontend-adapterPhase 4 of App Factory. Adapt the web frontend to run inside the Capacitor 8 or Tauri 2 shell without touching the website - static build config in os/<target>, client-shell frontend in os/<target>/web for Next.js server features, API base URL from env, relative assets, real mobile adaptation (safe areas, 44px touch targets, keyboard, back navigation).-
app-native-capabilitiesApp Factory native features. Add only the native capabilities the app really uses - Capacitor plugins (Camera, Filesystem, Preferences, Push Notifications, Geolocation, App back button, StatusBar, Keyboard, SplashScreen) and Tauri 2 plugins (fs, dialog, notification, shell with scope, updater, store) - always with minimal permissions.-
app-project-analyzerPhase 1 of App Factory. Analyze a web project before turning it into a mobile or desktop app - frontend framework and version, package manager, build script and output dir, backend, server features, auth, API base URL env vars, existing native folders. Drives appfactory action=analyze and verifies its report against the files.-
app-release-managerApp Factory delivery and publishing - versionCode/versionName, Tauri version, signing (Android keystore, Windows code signing, macOS notarization), Play Store .aab, store checklists, CI runners for hosts that cannot build locally, and the final appfactory report.-
app-security-auditorApp Factory security gate before delivery or publishing of a mobile/desktop app - Android permissions in AndroidManifest, Tauri capabilities and CSP, secrets scan, dependency audit (npm audit, cargo audit), signing key handling, TLS-only API.-
app-tauri-builderApp Factory desktop builder. Wrap the web frontend with Tauri 2 + Rust inside os/<target> and build Windows (.exe NSIS, .msi), macOS (.dmg), Linux (.deb, .rpm, .AppImage) packages - tauri init, frontendDist, beforeBuildCommand, minimal capabilities, updater and signing keys from env.-
frontend-designGives a new or reworked interface a distinctive, deliberate visual identity instead of a templated look - subject-driven aesthetic direction, typography, palette, layout, restrained motion and interface copy, planned as a token system and critiqued before code.example-skills, frontend-design
hookify-rulesExplains how to write hookify rules, the Markdown files in .navin/hookify.<name>.local.md that warn about or block agent actions (shell commands, file edits, stopping, user prompts) by matching regex patterns.hookify
make-interfaces-feel-betterDesign engineering principles for making interfaces feel polished.frontend-design
mcp-builderBuild an MCP (Model Context Protocol) server end to end - scope the upstream API, choose Python FastMCP or the TypeScript SDK, design tools an LLM picks correctly (names, schemas, pagination, errors), implement, run over stdio or HTTP, test with a client, write an evaluation set, wire it into Navin.example-skills
mobile-devBuild, run, and debug mobile apps - Expo, React Native, Flutter, native Android (Kotlin/Java, Gradle, Jetpack Compose) and native iOS (Swift, Xcode). Detect the stack, doctor the toolchain, start the packager or Gradle/xcodebuild, fix build errors, and ship UI changes.-
model-migrationMigrates an application's code, configuration and prompts from one model generation to a newer one, for any provider (OpenAI, Gemini, Mistral, open-weight models, frontier model families). Finds every model id, updates ids and request parameters (reasoning effort, thinking budget, max tokens, temperature limits, deprecated fields), then tunes prompts for models that follow instructions more literally, and compares outputs before and after.model-migration
project-metadataCreate and maintain the .navin/metadata project knowledge base - file roles, dependencies, and the metagraph index - so questions map instantly to the right files without grepping.-
ui-ux-pro-maxDefault web UI/UX design intelligence for Navin. Design-system generator (84 styles, 192 palettes, typography, landing patterns, UX rules) plus mandatory framer-motion for all web sites.frontend-design
web-artifacts-builderBuilds multi-component web artifacts (React + TypeScript + Material UI + framer-motion, optional three.js) bundled into one self-contained HTML file shown beside the chat - scaffold, live preview, vite-plugin-singlefile bundle.example-skills
webapp-testingTests a local web application end to end - start the server under test, discover selectors in the rendered DOM, drive the pages with the built-in browser tool or Playwright scripts, capture console errors, failed requests and screenshots, then report findings.example-skills

Devops​

NameDescriptionPlugins
ai-llm-telemetryObserve LLM applications and agents from their telemetry. Reads Opik (Comet) traces and spans, LiteLLM proxy spend logs, budgets and key limits, and OpenTelemetry GenAI spans (gen_ai.* attributes) to compute cost per model, team, user and day, token percentiles, cache hit ratio, tool call frequency, failure rate and latency, time to first token, error and retry rates, cost anomalies and runaway tool loops. Bundled scripts aggregate JSON or JSONL exports offline.-
api-engineerRead OpenAPI specs, call APIs, validate responses, and draft connectors.-
aws-architectDesign and build production AWS architectures - HA multi-AZ VPC, EKS, RDS PostgreSQL, ElastiCache Redis, ALB, Route 53, ACM, S3, backups - with Well-Architected checks and IaC (Terraform, CDK, CloudFormation, Cloud Control).infra-ops
cicd-agentWork with GitHub Actions, GitLab CI, and deployment pipelines - inspect runs, fix workflows, and gate releases.infra-ops
cloud-awsOperate AWS with the aws CLI - EC2, EKS, S3, IAM, VPC, RDS, Lambda, costs. Read-first; mutations gated by approval.infra-ops
cloud-azureOperate Microsoft Azure with the az CLI - VMs, AKS, storage, networking, ARM resources, costs. Read-first; mutations gated by approval.infra-ops
cloud-gcpOperate Google Cloud with gcloud - GCE, GKE, storage, networking, IAM, logs, costs. Read-first; mutations gated by approval.infra-ops
code-reviewerReview code changes for bugs, security issues, regressions, and maintainability.code-review, feature-dev, pr-review-toolkit
config-managementManage configuration as code - Ansible playbooks and roles, SSH fleets, cloud-init, Helm values, Kustomize overlays - always check/diff before apply.infra-ops
database-reliabilityRun databases reliably - PostgreSQL, MySQL, Redis, MongoDB, Kafka, Amazon RDS/Aurora, Cloud SQL, Azure Database - HA and failover, backups, PITR, restore drills, replication, performance and safe schema migrations.infra-ops
debug-liveLive debugging workflow - reproduce first, DebugMCP breakpoints, conversational state questions, isolated repair branch, before/after tests, repair report.-
disaster-recovery-plannerPlan, run and evaluate disaster recovery (PRA) and business continuity (PCA) exercises and validate RPO and RTO targets against evidence. Builds the business impact analysis (MTPD, RTO, RPO, MBCO), picks the recovery strategy (backup and restore, pilot light, warm standby, active-active), writes the exercise plan with injects and success criteria, computes achieved RTO and RPO from drill timestamps, and maps evidence to DORA art. 11, 12 and 24 to 26, ISO 22301, NIS2 and ANSSI guides, using AWS Backup, Elastic Disaster Recovery, Route 53 ARC, Aurora Global Database, Azure Site Recovery, Velero and database PITR.-
docker-operatorBuild, run, inspect, and diagnose containers safely - Docker and Compose, Podman, containerd (nerdctl, crictl).infra-ops
finops-analystAnalyze and reduce cloud spend - inventory, cost breakdown per provider/service/tag, rightsizing, idle and orphaned resources, budgets and alerts, savings plans and reservations, cleanup.infra-ops
fullstack-devBuild, run, and debug frontend, backend, and database projects end to end in the workspace (plan, investigate, code, execute, verify).feature-dev
gitFull git workflow for developers: status, staging, commits, branches, push/pull, merge/rebase, conflict resolution, stash, history (log/blame/bisect), remotes, tags, worktrees, cherry-pick, and recovery with reflog. The everyday operations live in the git tool; this skill covers the rest.commit-commands
gitops-argocdRun GitOps deployments with Argo CD and Flux - inspect applications, diff desired vs live state, deploy through git commits and PRs, sync and verify rollouts.infra-ops
helm-operatorInspect, template, install, and upgrade Helm releases safely; author and lint charts.infra-ops
infra-orchestratorMaster playbook for any Cloud, DevOps, SRE, platform, security or observability mission stated in natural language (build a platform, migrate, audit, fix, scale).infra-ops
kubernetes-operatorInspect pods, logs, services, ingress, and deployments with kubectl.infra-ops
kubernetes-platformBuild and operate Kubernetes platforms - EKS, GKE, AKS, OpenShift, K3s, RKE2, MicroK8s - with ingress, cert-manager, external-dns, autoscaling, storage classes, CRDs/operators and version upgrades.infra-ops
network-engineerDesign and troubleshoot networks - cloud VPC/VNet, subnets, routing, VPN, NAT, DNS, firewalls and security groups, load balancers - and debug hosts with ip, ss, nft, dig, tcpdump, openssl.infra-ops
new-repoPublish a local project to a new private repository on GitHub, GitLab or Forgejo: inspect first, prepare a safe first commit (.gitignore, no secrets), create the repo with forge action=repo_create, add origin and push through the git tool.-
observability-agentQuery metrics, logs, and traces (Prometheus, Grafana, Loki, Tempo, Sentry, OpenTelemetry, CloudWatch) to diagnose incidents.infra-ops
openshift-operatorOperate Red Hat OpenShift with oc - projects, routes, SecurityContextConstraints, builds and image streams, operators through OLM, cluster operators and upgrades with oc adm.infra-ops
ops-supervisorOrchestrate end-to-end DevOps/SysOps work - plan the ops chain, delegate to specialized agents (Kubernetes, cloud, GitOps, SRE, sysops), enforce approvals, and verify outcomes.infra-ops
pack-builderCreate, audit, install, and manage Navin plugin packs - self-contained bundles of skills and MCP servers (npx/uvx/docker).-
performance-auditorProfile and optimize applications - hot paths, N+1 queries, blocking I/O, caching, bundle size, memory, startup time.-
platform-engineerBuild golden paths for developers - CI/CD (GitHub Actions, GitLab CI, Jenkins, Forgejo Actions), GitOps (Argo CD, Flux), environments, secrets management and an observability baseline - so a team ships a service from template to production safely.infra-ops
pr-autopilotKeep one pull / merge request merge-ready - resolve merge conflicts, triage every unresolved review thread, fix in-scope CI failures, re-check live state every pass and pace the next pass with a one-shot cron job. Never merges.code-review
private-cloud-operatorOperate private clouds and virtualization - OpenStack (openstack CLI), VMware vSphere (govc), Proxmox VE (pvesh, qm, pct) - VMs, templates, networks, storage, snapshots and capacity.infra-ops
project-boardWork the shared project task board (kanban + dependency-aware plan + milestones + timeline) that humans edit in the Dev workbench - decompose objectives, claim tasks, track progress, file findings, assign to subagents or humans, and run the board in a loop.-
quality-gateRun the full release-readiness gate - code review, security, performance, tests, docs, and metrics in one orchestrated pass with a go/no-go verdict.-
resilience-testerTest that a system holds - network checks, API tests, performance and load (k6, hey, vegeta), security scans, availability probes, disaster recovery drills and chaos experiments (pod/node/AZ failure).infra-ops
shell-sandboxRun shell commands with strict limits - prefer workspace sandbox, avoid privileged ops, and quote unsafe output.-
slo-error-budgetDefine, compute and review service level indicators, SLO targets and error budgets. Expresses availability, latency, correctness, freshness and throughput SLIs as good over total events, computes budget consumed and remaining over rolling or calendar windows, burn rates over 1h, 6h, 1d and 3d, and evaluates the Google SRE multi-window burn-rate alerts. Generates Prometheus recording and alert rules, reads and writes OpenSLO v1 and Sloth specs, maps to Pyrra, Nobl9, Datadog SLOs and Grafana SLO, and produces error budget policies and SLO review reports.-
split-to-prsSplit a large branch or a pile of uncommitted work into small, reviewable pull requests on GitHub, GitLab or Forgejo: snapshot to a backup ref first, propose slices, wait for approval, then branch, stage named files or hunks, commit, push and open PRs with forge pr_create.-
sre-incident-responderTriage incidents like an SRE - correlate logs, metrics, events and traces, find the root cause, propose remediation, and write the postmortem. Uses k8sgpt when available.infra-ops
storage-operatorOperate object, block and file storage - S3, GCS, Azure Blob, MinIO, EBS, EFS, Persistent Volumes, Ceph, NFS - encryption, lifecycle, versioning, replication, quotas and backups.infra-ops
sysops-administratorAdminister Linux, macOS, and Windows servers and VMs - systemd services, Nginx, Traefik, HAProxy, IIS, disks, memory, processes, network, certificates, backups, patches. Whitelisted read commands; dangerous ops need approval.infra-ops
terraform-agentAuthor and validate Terraform / OpenTofu IaC with plan-before-apply discipline.infra-ops
test-generatorGenerate and run unit, API, and E2E tests (including Playwright) that match project conventions.feature-dev, pr-review-toolkit
toolbeltVerify and install missing CLI tools on demand - scanners, linters, runtimes - without root, using uvx, npx, or static binaries in ~/.local/bin.-

Documents​

NameDescriptionPlugins
archifyDefault Navin skill for architecture and technical diagrams. Create polished, validated architecture, workflow, sequence, data-flow, and lifecycle diagrams as explorable HTML with inline SVG (PNG/SVG/WebM export).-
canvasPresent standalone analytical results (audits, code review findings, benchmarks, metrics, token usage, PR/CI status, project boards, video QA, investigations, data-heavy comparisons) as a Navin canvas in the Artifact Canvas panel, built from typed JSON blocks with present_artifact type=canvas. Not for architecture diagrams (archify), specific deliverables, or short answers.-
contract-extractorExtract structured data from contracts - parties, dates, amounts, obligations, deadlines, and renewal terms - into usable tables.-
document-templatesVisual theme catalog and template handling for generated documents (PPTX, DOCX, PDF, XLSX).-
docxWorks on existing Word (.docx) files at the package level with python-docx and lxml. Dumps and replaces text while keeping run formatting, adds or lists comments, accepts, rejects or creates tracked changes, unpacks, repacks and validates the OOXML package, converts with headless LibreOffice.document-skills
docx-generatorCreate, read, and edit Word (.docx) files - styles, tables, images, headers, and templates - using python-docx.document-skills
invoice-readerExtract invoice data - vendor, amounts, taxes, dates, line items - from PDFs and scans into structured records, with validation checks.-
pdfReads and manipulates PDF files with pdfplumber, pypdf, PyMuPDF and reportlab. Extracts text and tables per page, lists and fills AcroForm fields with optional flattening, overlays text at measured coordinates on non-fillable forms, merges, splits, rotates, extracts and renders pages to PNG, reads metadata.document-skills
pdf-generatorGenerate PDF documents - reports, one-pagers, certificates, agreements, product sheets, quotes - from HTML laid out as A4 pages (Chromium) or from a finished DOCX/PPTX/XLSX (LibreOffice).document-skills
pptxWorks on PowerPoint decks that already exist or must follow a strict JSON plan. Inventories slides and shapes, replaces text in place while keeping formatting, deletes and reorders slides, rebuilds a deck from a JSON spec with the Navin theme (twelve slide types from title to closing, native tables and charts), renders a contact sheet of thumbnails, repacks and validates the package.document-skills
pptx-generatorCreate PowerPoint (.pptx) decks - layouts, text, tables, charts, images, and brand templates - using python-pptx.document-skills
presentation-designerDesign the story, structure, and slide-by-slide plan of presentations - pitch decks, client presentations, reports.-
report-generatorAssemble recurring or one-off business reports - data, charts, narrative, and formatted output (PDF/DOCX/Markdown) - from multiple sources.-
spreadsheet-analystRead, analyze, and produce Excel/CSV files - cleanup, pivots, formulas, charts, and formatted workbooks - using pandas and openpyxl.document-skills
studio-html-reportStudio / GTM reports are interactive Three.js UIs opened with open_preview (UI, not PDF). Expert Review / Security / Debug stay a self-contained HTML file in File Preview (no JavaScript).-
template-managerMaintain the library of branded document templates - DOCX, PPTX, PDF styles, email blocks - versioned and reusable by all document skills.-
xlsxBuilds and audits Excel workbooks that carry real formulas. Inspects sheets, named ranges and error cells, recalculates with headless LibreOffice or runs a static formula audit, applies the Navin table style and the financial model color code, repacks and validates the package.document-skills

General​

NameDescriptionPlugins
agent-creatorCreate custom subagents for Navin (agent definition files under .navin/agents or ~/.navin/agents) that the model delegates to with spawn(agent="<name>").-
agent-developmentDesign and write Navin subagents (agents/<name>.md with name, description and examples, tools, model, color, and a system prompt body), and test that Navin delegates to them.plugin-dev
calendarCheck availability and manage personal calendar events through a connected Google or Microsoft account, using the accounts tool.-
clawhubSearch and install agent skills from ClawHub, the public skill registry.-
command-developmentWrite Navin slash commands as Markdown prompt files (frontmatter, $ARGUMENTS, $1..$9, ${1:-default}, @file inlining, !cmd shell output, allowed-tools, namespaces, plugin commands with ${NAVIN_PLUGIN_ROOT}).plugin-dev
cronSchedule reminders and recurring tasks.-
emailRead, search, draft and reply to email using a connected Google or Microsoft account.-
githubInteract with GitHub using the gh CLI.commit-commands, issue-triage
hook-developmentWrite Navin lifecycle hooks (hooks.json, PreToolUse, PostToolUse, UserPromptSubmit, SessionStart, Stop, SubagentStop) as shell commands that read the event JSON on stdin and block, warn or add context through exit codes and JSON output.hookify, plugin-dev
image-generationGenerate images and iteratively edit saved image artifacts.-
issue-triageIssue-triage autopilot for GitHub (GitLab/Forgejo best effort): stale sweep, lifecycle labels (needs-info, needs-repro, invalid, stale, autoclose), duplicate detection and closing. Dry-run plan first, batch approval to apply.issue-triage
managed-settingsDeploys and audits Navin organization policy through a managed-settings.json file that sits above every personal, project and plugin setting (managed hooks, plugin and MCP allowlists, pinned environment variables, tool deny rules, no permission bypass).-
mcp-integrationConnect MCP servers to Navin and ship them in plugins (mcp.json, stdio, sse, streamableHttp, env and headers, ${NAVIN_PLUGIN_ROOT}, enabledTools, toolTimeout, mcp_<server>_<tool> names).plugin-dev
memoryTwo-layer memory system with Dream-managed knowledge files.-
myInspect and optionally adjust the agent's runtime state.-
output-stylesUse when the user asks to "change the output style", "make the agent explain its choices", "switch to learning mode" or "write a custom output style". Explains the builtin and custom styles and how to select them.explanatory-output-style, learning-output-style
plugin-settingsGive a Navin plugin per-project settings stored in .navin/<plugin>.local.md (YAML frontmatter for values, Markdown body for free text) and read them from hooks, commands and agents.plugin-dev
plugin-structureLay out, scaffold, package and install a Navin plugin (plugin.json manifest, skills/, agents/, commands/, hooks/hooks.json, mcp.json, ${NAVIN_PLUGIN_ROOT}).plugin-dev
skill-creatorCreate or update AgentSkills with scripts, references and assets, then measure them with an evaluation loop (prompts with and without the skill, deterministic grading, benchmark, HTML report, description tuning).example-skills
skill-developmentWrite, restructure or improve a Navin skill (SKILL.md frontmatter, trigger description, progressive disclosure with references/, examples/, scripts/).plugin-dev
summarizeSummarize or extract text/transcripts from URLs, podcasts, and local files (great fallback for “transcribe this YouTube/video”).-
tmuxRemote-control tmux sessions for interactive CLIs by sending keystrokes and scraping pane output.-
update-setupOne-time setup wizard for the navin upgrade skill.-
weatherGet current weather and forecasts (no API key required).-

Intelligence​

NameDescriptionPlugins
adaptive-reasoningChoose the right depth of reasoning for the task - shallow for routine edits, deep for architecture, security, or ambiguous bugs.-
context-compressorCompress long histories and documents into durable decision summaries without losing constraints, TODOs, or file paths.-
critic-reviewerCritically review code, plans, or agent output for bugs, security issues, missing tests, and weak assumptions before delivery.-
mission-ledgerMagentic-style Task/Progress Ledger orchestration for /blueprint, /forge, /cruise, and /mission.-
model-routerRecommend which model or provider preset to use based on cost, latency, context size, and task difficulty.-
multi-agent-orchestrationCoordinate specialized subagents (architect, implementer, reviewer, analyst, researcher) with clear roles, handoffs, and validation.-
proactive-agentRun periodic checks, anticipate follow-ups, resume after interruptions, and keep quiet when nothing changed.-
risklensRun RiskLens on any plan, launch, product, hire, strategy, or decision. Assumes it already failed 6 months from now and works backward to find every reason why. Produces a revised plan with blind spots exposed.-
self-healing-retryRecover from tool failures and flaky commands with intelligent retries, alternate tools, and clear fallbacks.-
studio-expert-contractShared senior-desk contract for Marketing, SEO, and Leads studios. Enforces context bar, sourced claims, deliverable formats, anti-hallucination rules, and a PASS/WARN/BLOCK closing gate. Load on every /marketing, /campaign, /seo, and /leads run.-
task-plannerDecompose complex requests into ordered steps, dependencies, risks, and deliverables.-

Marketing​

NameDescriptionPlugins
ad-creative-generatorProduce complete ad creative sets - concepts, hooks, copy, AI-generated images and videos declined per platform and format.-
campaign-managerPlan and run multichannel campaigns with an editorial calendar, asset tracking, and post-mortems.-
competitor-intelligenceMonitor competitors' offers, pricing, campaigns, hiring, and positioning changes over time.-
content-recyclerTurn one long-form piece into LinkedIn posts, X threads, Instagram carousels, TikTok scripts, and emails.-
conversion-rate-optimizationOptimize landing pages, forms, CTAs, and funnels - diagnosis, hypotheses, and test plans.-
customer-persona-builderBuild ICP and buyer personas - pains, goals, objections, triggers, and watering holes - from real evidence.-
digital-marketingFull-funnel marketing orchestrator - strategy, content, SEO, social, email, paid, and measurement.-
email-marketingDesign newsletters, nurture sequences, and lifecycle emails - structure, cadence, deliverability, and measurement.-
go-to-market-plannerPlan a product or feature launch - segments, messaging, assets, channels, and launch calendar.-
growth-marketingDesign acquisition experiments, run them, and analyze results with a testing loop.-
market-researchStudy a market - size, trends, players, pricing, regulation, and opportunities - with sourced findings.-
marketing-analyticsMeasure CAC, conversion rates, attribution, ROAS, CPL, and pipeline contribution from marketing data.-
marketing-strategistBuild positioning, ICP, offer, channel mix, and an execution plan.-
montage-studioProject marketing montage - analyze the workspace, record live browser demos, package platform video exports, propose calendars, generate images/videos/music, and lazily set up HyperFrames.-
motion-designStoryboard and motion-design craft for premium product demo, promo and launch videos - hook in the first 2 s, one idea per scene, 2-4 s scenes, kinetic type, safe areas, brand usage, pacing to beats, CTA.-
product-visualsGenerate product imagery - packshots, lifestyle scenes, e-commerce sets, mockups, and short product videos from reference photos.-
social-media-managerProduce and schedule content for LinkedIn, Instagram, Facebook, X, Reddit, and TikTok - hooks, formats, cadence, and engagement.-
video-generationGenerate short videos with the generate_video tool (Veo, Sora, Hailuo) - scripts, storyboards, scene-by-scene AI generation, and assembly with the montage tool.-

Meeting​

NameDescriptionPlugins
meeting-studioRun the Navin Meeting studio desk - capture notes/transcripts, custom summary templates, speaker labels, calendar-linked meetings, chat-with-meeting Q&A, exports, and local audit-aware reports.-
NameDescriptionPlugins
computer-useDesktop control - see the real screen, click, type, press shortcuts, scroll, drag and drive any native application (Windows / macOS / Linux X11 and Wayland) with the built-in computer tool.-
deep-web-researchMulti-source web research with comparison, source quality checks, and a cited report.-
entity-researchResearch companies and people - leadership, revenue signals, tech stack, contacts, and sources.-
playwright-browserBrowser automation - navigate, click, fill forms, multi-tab, upload, extract, infinite scroll, download, screenshot, and deliver web tasks end-to-end. Prefer the built-in browser tool (Playwright + optional browser-use).-
scrape-operatorOrchestrate any web scraping job to delivery - static, paginated, infinite-scroll, mass crawl, sitemap, JS pages via browser. Export datasets until done.-
scraplingWrite scrapers with the official Scrapling 0.4.14 API (Fetcher, StealthyFetcher, DynamicFetcher, sessions, Spider templates, adaptive CSS). Default framework in the Scraping module. Fall back to the scrape tool or browser only when Scrapling is the wrong tool.-
web-extractorTurn websites into clean Markdown or structured JSON for RAG, migrations, or analysis.-
website-monitorDetect changes in price, content, tenders, or availability and alert only on meaningful deltas.-

Sales​

NameDescriptionPlugins
account-researchBuild a complete account sheet before a meeting - company, people, news, tech, pains, and talking angles.-
buying-signalsDetect and score buying signals - funding, hiring, tech changes, leadership moves, expansion, regulation.-
cold-email-writerWrite personalized cold emails that earn replies - research-based hooks, clear relevance, low-friction asks.-
contract-reviewerReview commercial contracts - flag risky clauses, missing protections, and negotiation points.-
crm-update-agentKeep the CRM clean - log activities, update deal stages, maintain contact data in HubSpot, Salesforce, or a workspace CRM.-
discovery-call-assistantPrepare discovery call questions, live-call structure, and post-call summaries that feed qualification and proposals.-
lead-enrichmentEnrich leads with email/domain data via Hunter or Apollo when API keys are present. Prefer scripts/enrich_leads.py. Never mark emails verified without API or public proof. Fall back to pattern inference when keys are missing.-
lead-generationIdentify target companies and decision-makers matching the ICP - build clean, sourced prospect lists.-
lead-prospectorExpert-level prospect hunting - find companies, people, roles, and verified contact context from open web sources.-
lead-qualificationScore prospects on need, budget, authority, timing, and fit - decide who gets sales effort.-
meeting-followupProduce meeting minutes, action lists, and follow-up emails within hours of a meeting.-
objection-handlerBuild and use objection response playbooks - price, security, integration, competition, status quo.-
outreach-sequencerDesign multi-touch outreach sequences - email, LinkedIn, phone - with timing, angles, and stop conditions.-
pipeline-analystAnalyze the sales pipeline - stuck deals, forecast quality, conversion by stage, and next best actions.-
pricing-assistantBuild pricing scenarios - options, margins, discount policies, and negotiation floors - for offers and deals.-
sales-proposal-writerGenerate sales offers, quotes, and commercial proposals with pricing options and decision-ready framing.-
tender-agentFind, qualify, answer and win public tenders. Official portals, company profile, semantic match, 0-100 score, Go/No-Go, dossier writer, pipeline to Won/Lost.-
tender-monitorWatch public tenders, RFPs, and consultations across portals - filter by fit, alert on deadlines, and prep bid decisions.-

Security​

NameDescriptionPlugins
agent-runtime-guardControl what an AI agent and its MCP servers may do while they run - a PreToolUse policy (denied commands, protected paths, approved hosts, approved MCP servers and tools, no credentials in arguments), a redacted log of every tool call, and a session audit that finds denied calls, loops and bursts.-
api-security-auditorAudit the web/API attack surface - authn/authz on endpoints, CORS, CSRF, SSRF, security headers, rate limiting, mass assignment, and OWASP API Top 10.-
audit-loggerKeep a clear audit trail of actions, tools used, actors, outcomes, and errors for sensitive work.-
backup-rollbackSnapshot configs, memory, and skills before risky edits, and define a rollback path.-
cloud-security-postureAudit and harden cloud and Kubernetes security posture - IAM, RBAC, KMS, Vault, cert-manager, OPA/Gatekeeper, Kyverno, Trivy, Falco, CIS benchmarks. Read-only audit first, then gated remediation.infra-ops
compliance-mapperMap the codebase and controls against security standards - OWASP ASVS, CIS Benchmarks, SOC 2, ISO 27001, PCI-DSS - producing a gap analysis with evidence and remediation.-
data-dlp-monitorClassify data and monitor for leaks and exfiltration. Finds personal, financial and secret data with validated detectors (IBAN mod 97, French NIR key, SIREN/SIRET and payment card Luhn, e-mail, French phone, AWS keys, JWT, private keys, RGPD article 9 vocabulary), proposes Public/Internal/Confidential/Restricted tiers, reviews Microsoft Purview DLP policies and labels, Google Cloud DLP infoTypes, AWS Macie, Nightfall and gitleaks results, and detects exfiltration signals (volume baseline per user, off-hours, new destination, archive then upload, DNS tunneling, personal cloud, LLM prompts) with a response playbook aligned on RGPD, CNIL, NIS2 and DORA.-
data-privacy-auditorAudit data protection and privacy - PII/PHI handling, encryption at rest and in transit, retention, logging of sensitive data, tenant isolation, and GDPR/CCPA obligations.-
dependency-auditorAudit the software supply chain - vulnerable and outdated dependencies, CVEs, lockfile integrity, license risks, typosquatting, and SBOM generation.-
human-approvalPause and ask for explicit user approval before sends, deletes, payments, deployments, or other irreversible actions.-
iac-security-auditorAudit infrastructure-as-code and runtime config - Dockerfiles, Kubernetes manifests, Terraform, CI/CD pipelines, and cloud settings for misconfigurations and hardening gaps.infra-ops
identity-access-reviewRun identity and access reviews (IAM/PAM recertification, joiners-movers-leavers, dormant and orphan accounts, privileged access and MFA coverage, service account key age, break-glass accounts, separation-of-duties conflicts) across Microsoft Entra ID and PIM, Okta, SailPoint IdentityNow, Saviynt, CyberArk, HashiCorp Vault, AWS IAM (credential report, Access Analyzer), GCP IAM recommender, Kubernetes RBAC and GitHub organisations, then map findings to ISO 27001:2022, SOC 2, DORA, NIS2 and PCI DSS 4.0 and build an auditor evidence pack.-
penetration-testerThink like an attacker - chain weaknesses into realistic exploit paths, build proof-of-concept reproductions, and prioritize by real-world impact.-
permission-guardEnforce least privilege for commands, file paths, domains, and APIs.-
prompt-injection-defenderDetect and resist malicious instructions from web pages, PDFs, emails, and tool output that try to override system or user goals.-
sbom-attestationGenerate, score, diff, sign and verify software bills of materials and build attestations. Produces CycloneDX and SPDX SBOMs with syft, checks them against the NTIA minimum elements, scans them with grype or trivy, signs images and attestations with Cosign (key or keyless with Fulcio and Rekor), verifies SLSA v1.0 provenance and GitHub artifact attestations by digest, and drafts admission policies (Sigstore policy-controller, Kyverno verifyImages) and VEX statements.-
secrets-managerHandle secrets safely via env vars, Vault, AWS Secrets Manager, or encrypted stores - never paste keys into chat, commits, or logs.-
secrets-scannerHunt for leaked credentials - hardcoded API keys, tokens, private keys, passwords and connection strings in code, config, logs and git history.-
security-ai-agentsAudit prompts, RAG, tools, MCP and exfiltration. Loaded by the Navin Security router for the matching stack or findings; also usable on its own.-
security-apiTest REST, GraphQL, WebSocket and webhooks. Loaded by the Navin Security router for the matching stack or findings; also usable on its own.-
security-attack-chainingChain several weaknesses into compromise scenarios. Loaded by the Navin Security router for the matching stack or findings; also usable on its own.-
security-auditorRun a full application security audit - auth flows, input validation, secrets handling, injection surfaces, dependency risks, and hardening.security-guidance
security-authenticationAudit JWT, OAuth, OIDC, MFA and sessions. Loaded by the Navin Security router for the matching stack or findings; also usable on its own.-
security-authorizationVerify IDOR, BOLA, RBAC and ABAC. Loaded by the Navin Security router for the matching stack or findings; also usable on its own.-
security-business-logicIdentify business rule bypasses. Loaded by the Navin Security router for the matching stack or findings; also usable on its own.-
security-cloudAnalyze AWS, Azure, GCP and IAM. Loaded by the Navin Security router for the matching stack or findings; also usable on its own.-
security-complianceCheck OWASP ASVS, CIS and NIST requirements. Loaded by the Navin Security router for the matching stack or findings; also usable on its own.-
security-containersAudit Docker, Kubernetes and OpenShift. Loaded by the Navin Security router for the matching stack or findings; also usable on its own.-
security-cryptographyCheck TLS, encryption, signatures and keys. Loaded by the Navin Security router for the matching stack or findings; also usable on its own.-
security-desktopAudit Tauri, Rust, IPC and permissions. Loaded by the Navin Security router for the matching stack or findings; also usable on its own.-
security-frontendVerify DOM, CSP, CORS and browser storage. Loaded by the Navin Security router for the matching stack or findings; also usable on its own.-
security-injectionFind SQLi, XSS, SSTI, XXE and command injections. Loaded by the Navin Security router for the matching stack or findings; also usable on its own.-
security-mobileAudit Android, iOS and Capacitor. Loaded by the Navin Security router for the matching stack or findings; also usable on its own.-
security-multitenancyVerify tenant isolation, RLS, cache and storage. Loaded by the Navin Security router for the matching stack or findings; also usable on its own.-
security-remediationGenerate and validate fixes. Loaded by the Navin Security router for the matching stack or findings; also usable on its own.-
security-sast-reviewAnalyze code, input sources and dangerous operations. Loaded by the Navin Security router for the matching stack or findings; also usable on its own.-
security-secretsIdentify exposed secrets and their propagation. Loaded by the Navin Security router for the matching stack or findings; also usable on its own.-
security-supply-chainAudit dependencies, SBOM, artifacts and CI/CD. Loaded by the Navin Security router for the matching stack or findings; also usable on its own.-
security-threat-modelingIdentify sensitive assets, trust boundaries and attack scenarios. Loaded by the Navin Security router for the matching stack or findings; also usable on its own.-
siem-edr-connectorCollect, normalize and correlate security alerts from SIEM and EDR platforms (Splunk SPL and REST search jobs, Elastic Security KQL/EQL/ES|QL and detection rules API, Microsoft Sentinel and Defender for Endpoint KQL, Wazuh API and indexer, CrowdStrike Falcon FQL detects and alerts, SentinelOne Deep Visibility PowerQuery) into ECS or OCSF events, convert Sigma rules per backend, group alerts into incidents per host and user with MITRE ATT&CK tactics and a severity score, and produce a triage report.-
skill-vetterAudit a skill package before install or enable - permissions, network calls, credential access, obfuscation, and suspicious system commands.-
third-party-risk-registerBuild and maintain the ICT third-party risk register (DORA register of information templates B_01 to B_07 with LEI, contract reference, function criticality, substitutability, exit strategy, sub-contracting, data location), tier vendors (critical, important, standard), judge due diligence evidence (SOC 2 Type II, ISO 27001 scope, pentest, RGPD art. 28 DPA, BCP/DR, cyber insurance), check contract clauses (audit rights, 24h incident notification, SLA, termination assistance), measure concentration risk, track provider incidents and ratings (SecurityScorecard, BitSight), compute review dates.-
threat-intelligenceCollect, qualify, enrich and share cyber threat intelligence. Extracts and refangs IOCs (hashes, IPs, domains, URLs, e-mails, mutexes, YARA rule names) from reports, queries and feeds MISP (attributes/events restSearch, warninglists, sightings) and OpenCTI (GraphQL indicators, observables, relationships), reads and builds STIX 2.1 bundles and TAXII 2.1 collections, maps TTPs to MITRE ATT&CK with navigator layers, applies TLP sharing rules, confidence and aging, and enriches with VirusTotal, Shodan, abuse.ch, GreyNoise and AbuseIPDB within their rate limits.-
threat-modelerMap the attack surface and build a STRIDE threat model - trust boundaries, data flows, entry points, assets, and prioritized threats with mitigations.-
vulnerability-scannerHunt for concrete, exploitable vulnerabilities - OWASP Top 10 patterns, hardcoded secrets, vulnerable dependencies and CVEs, SSRF, path traversal.-

Seo​

NameDescriptionPlugins
backlink-strategyIdentify realistic link opportunities - partners, guest posts, directories, digital PR, and linkable assets.-
competitor-seo-analysisAnalyze competitors' keywords, top pages, content structure, and backlink signals to find gaps.-
geo-ai-search-optimizerOptimize content to be cited by ChatGPT, Gemini, Perplexity, and AI Overviews (GEO).-
keyword-researchFind keywords, estimate difficulty and intent, and map opportunities to pages.-
local-seoOptimize Google Business Profile, local landing pages, citations, and reviews for local visibility.-
on-page-seo-optimizerOptimize existing pages - titles, meta descriptions, heading hierarchy, internal links, and content depth.-
programmatic-seoGenerate hundreds of structured pages from data (locations, integrations, glossaries, comparisons) with unique value per page.-
seo-content-writerWrite search-optimized articles that read naturally - proper structure, intent match, and internal links, without keyword stuffing.-
seo-data-providerPull real SEO metrics (search volume, keyword difficulty, SERP, backlinks) from DataForSEO or Semrush when API credentials are present.-
seo-monitoringTrack rankings, traffic signals, technical errors, and competitor changes over time, with scheduled checks and alerts.-
seo-technical-auditorAudit technical SEO - indexation, sitemap, robots.txt, Core Web Vitals hints, redirects, canonical tags, and crawl errors.-

Studio​

NameDescriptionPlugins
trading-agentRun the Navin Trading Agent OS.-

Trading​

NameDescriptionPlugins
crypto-swingBTC / ETH / SOL swing skill for the Trading Agent OS. Technical + sentiment + vol cap; no fake token fundamentals.-
dividend-portfolioIncome / dividend tilt for the Trading Agent OS. Favor durable cash return over narrative growth.-
earnings-traderEarnings-event skill for the Trading Agent OS. Fade or follow only with a thesis and a hard stop.-
global-equitiesCountry-aware equity skill. Yahoo-quoted names and country ETFs only.-
macro-investorMacro overlay for the Trading Agent OS. Tape, vol, and benchmark first; single-name stories second.-
momentum-traderSwing / momentum skill for the Trading Agent OS. Require uptrend, constructive RSI, and specialist consensus before a buy.-
nft-collectorPaper NFT collection skill. Live CoinGecko floors only. No invented floors, no wash trades.-
real-estate-investorListed real-estate skill for the Trading Agent OS. REITs and foncières by country. No invented listing prices.-
value-investorValue / quality screen for the Trading Agent OS. Prefer cash-generative names with reasonable debt and a margin of safety.-

Writing​

NameDescriptionPlugins
blog-writerProduce structured, documented, readable long-form articles - tutorials, opinion pieces, industry analyses.-
brand-voice-managerDefine, store, and enforce brand voice across all content - vocabulary, tone, do/don't lists per brand.-
case-study-writerTurn client projects into commercial case studies - problem, solution, results, and metrics.-
content-generationGeneral-purpose content production - articles, reports, social posts, newsletters, product descriptions, and docs - with channel adaptation and quality control.-
copywriting-agentWrite sales pages, ads, slogans, and persuasive copy using proven frameworks (AIDA, PAS, value-first).-
doc-coauthoringCo-author structured documents (proposals, technical specs, decision docs, RFCs, briefs, PRDs) in three stages - a short context round, outline then section-by-section drafting reviewed block by block, and a reader simulation that lists gaps first.example-skills
email-writerWrite professional emails - commercial, administrative, follow-ups, difficult messages - with the right tone in FR/EN/AR.-
fact-checkerVerify claims, statistics, quotes, and citations before publication - with sources and confidence levels.-
internal-commsWrite internal communications that people actually read - weekly status updates, team newsletters, FAQ answers, leadership notes, project updates and incident communications - with an audience and tone matrix and fixed structure templates.example-skills
professional-writerWrite business letters, reports, memos, meeting notes, and formal documents in French, English, or Arabic.-
proofreaderCorrect grammar, spelling, punctuation, and clarity in French, English, and Arabic without changing the author's voice.-
proposal-writerPrepare commercial proposals and client responses - structure, pricing presentation, and persuasive framing.-
rfp-writerRespond to RFPs, RFQs, tenders, and cahiers des charges - compliance matrix, requirement mapping, and structured answers.-
style-editorRewrite text to match a target tone - the company's, an executive's, or a specific register - while keeping the substance.-
technical-writerCreate product docs, API references, runbooks, procedures, and architecture documents.-
translation-localizationTranslate and localize between French, English, and Arabic - adapting idioms, register, formats, and cultural context, not just words.-