Claude Configs
CLAUDE.md project files and Claude Code slash commands
Showing 8,701–8,760 of 12,603 skills · Page 146 of 211
elementalsouls / email-domain-security
2.7kRigorous, defensible email-spoofability verdict and SPF supply-chain risk analysis computed from published DNS alone. Deepens the record-level SPF/DMARC/DKIM/BIMI/MTA-STS/DNSSEC fetch recipes in the offensive-osint arsenal (§16.14) with the reasoning that section doesn't do: a priority-ordered compo…
elementalsouls / exposure-risk-quantification
2.7kFAIR-aligned exposure quantification: turns a pile of recon findings into a defensible 0-100 + A-F org risk score (Likelihood x Impact, three ownership-aware factors: exposure/threat/impact), an ownership + proof demotion cap so unproven or weakly-owned findings can't inflate the number, a $-denomin…
elementalsouls / identity-provider-recon
2.7kOrganization-grade identity-fabric mapping: tenant/federation fingerprinting and the pre-auth user-ENUMERATION oracle methodology — enumeration and fingerprint only, never credential submission.
elementalsouls / offensive-osint
2.7kOperational arsenal for external red-team and bug-bounty reconnaissance. Concrete wordlists (28 Swagger paths, 13 GraphQL paths, 35 high-risk ports, 6 missing-header findings, 15 always-on HTTP checks, 5 SAML paths, cloud bucket permutations, JS guess-paths, vendor product fingerprints for Citrix/F5…
elementalsouls / org-attack-surface
2.7kOrg-grade attack-surface mapping: given a company's legal identity, discover its ENTIRE owned internet footprint — corporate family -> owned domains -> owned netblocks/ASN -> live assets — with attribution discipline, not just DNS breadth.
expo / expo-skill-eval
2.6kEvaluate Expo skills in this repo end-to-end - trigger accuracy, generated code quality, and runtime screenshots on iOS simulator and Android emulator via Expo Go (web optional)
Sahir619 / fable-method
2.3kA step-by-step problem-solving loop (classify the ask, define done, gather evidence, decide, act surgically, verify by observation, report outcome-first)
yaklang / active-directory-acl-abuse
2.3kActive Directory ACL abuse playbook
yaklang / active-directory-certificate-services
2.3kAD Certificate Services attack playbook
yaklang / active-directory-kerberos-attacks
2.3kKerberos attack playbook for Active Directory
yaklang / binary-protection-bypass
2.3kBinary protection bypass playbook
yaklang / browser-exploitation-v8
2.3kBrowser and V8 exploitation playbook
yaklang / cors-cross-origin-misconfiguration
2.3kCORS misconfiguration testing playbook
yaklang / email-header-injection
2.3kEmail header injection and spoofing playbook
yaklang / expression-language-injection
2.3kExpression Language injection playbook
yaklang / format-string-exploitation
2.3kFormat string exploitation playbook
yaklang / http-host-header-attacks
2.3kHTTP Host header injection and routing abuse playbook
yaklang / http2-specific-attacks
2.3kHTTP/2 protocol-specific attack playbook
yaklang / idor-broken-object-authorization
2.3kIDOR and broken object authorization testing playbook
yaklang / jwt-oauth-token-attacks
2.3kJWT and OAuth token attack playbook
yaklang / kernel-exploitation
2.3kLinux kernel exploitation playbook
yaklang / linux-privilege-escalation
2.3kLinux privilege escalation playbook
yaklang / linux-security-bypass
2.3kLinux security mechanism bypass playbook
yaklang / memory-forensics-volatility
2.3kMemory forensics playbook using Volatility 2/3
yaklang / network-protocol-attacks
2.3kNetwork protocol attack playbook
yaklang / ntlm-relay-coercion
2.3kNTLM relay and authentication coercion playbook
yaklang / prototype-pollution
2.3kPrototype pollution testing for JavaScript stacks
yaklang / reverse-shell-techniques
2.3kReverse shell techniques playbook
yaklang / rsa-attack-techniques
2.3kRSA attack playbook for CTF and real-world cryptanalysis
yaklang / smart-contract-vulnerabilities
2.3kSmart contract vulnerability playbook
yaklang / stack-overflow-and-rop
2.3kStack overflow and ROP playbook
yaklang / steganography-techniques
2.3kSteganography detection and extraction playbook
yaklang / subdomain-takeover
2.3kSubdomain takeover detection and exploitation playbook
yaklang / traffic-analysis-pcap
2.3kTraffic analysis and PCAP forensics playbook
yaklang / tunneling-and-pivoting
2.3kTunneling and pivoting playbook
yaklang / type-juggling
2.3kPHP type juggling and weak comparison (`==`) bypass
yaklang / unauthorized-access-common-services
2.3kUnauthorized access playbook for common exposed services
yaklang / waf-bypass-techniques
2.3kWAF bypass methodology and generic evasion techniques
yaklang / web-cache-deception
2.3kWeb cache deception and poisoning playbook
yaklang / windows-av-evasion
2.3kAV/EDR evasion playbook for Windows
yaklang / windows-lateral-movement
2.3kWindows lateral movement playbook
yaklang / windows-privilege-escalation
2.3kWindows local privilege escalation playbook
zenstory-ai / short-drama-develop
2.2k将中文小说、短剧或漫剧想法、梗概、改编材料、已有系列笔记或多集完整剧本发展成可追溯的改编方案、戏剧方向、创作简报、导演阐述、故事引擎与分集地图，并按题材与制作形态（画风）选择写法。用户提出“导入小说做短剧”“从多集整稿生成/补分集地图”“开发短剧/漫剧”“做故事设定/系列大纲/分集规划”“写导演阐述”“这个题材怎么写”“定画风/制作形态”“把这个点子变成短剧”或需要梳理人物冲突与集间交接时使用；已有单集剧本可直接进入写作、资产或审查流程，不强制补开发文件。
zenstory-ai / short-drama-write
2.2k编写或修订可拍摄的中文短剧、漫剧单集 Markdown 剧本，也负责保留作者原文并规范化现成剧本。用户提出“写/改一集短剧”“把大纲写成剧本”“优化场景/对白”“去模板感”“去 AI 味润色”“续写下一集”或提供剧本要求进入后续制作时使用；不负责资产、分镜、媒体提示词或终审。
WordPress / wp-abilities-audit
2.2kAudit a WordPress plugin's REST surface and produce a standardized audit document proposing Abilities API registrations. Produces a markdown doc with a YAML schema and prose sections that humans and agents can both consume when planning a registration rollout. Works on any WP plugin.
WordPress / wp-block-development
2.2kUse when developing WordPress (Gutenberg) blocks: block.json metadata, register_block_type(_from_metadata), attributes/serialization, supports, dynamic rendering (render.php/render_callback), deprecations/migrations, viewScript vs viewScriptModule, and @wordpress/scripts/@wordpress/create-block buil…
LeoYeAI / product-marketing-context
2.1kWhen the user wants to create or update their product marketing context document. Also use when the user mentions 'product context,' 'service context,' 'marketing context,' 'set up context,' 'positioning,' 'who is my target audience,' 'describe my product,' 'describe my service,' 'ICP,' 'ideal custo…
LeoYeAI / Justin Roosch
2.1kComprehensive compliance and security self-assessment for AI agents. 14-check framework producing a structured threat model + compliance report with RED/AMBER/GREEN ratings across security, governance, EU AI Act readiness, oversight quality, and NIST alignment domains.
majidmanzarpour / threejs-gameplay-systems
2.1kBuild and iterate playable Three.js game systems: starter scaffold, architecture, design briefs, core loops, level and encounter design, entities, input, camera, collision and physics, scoring, objectives, and game feel.
Leanmcp / ios-bootstrap-testflight
2.1kScaffold a native iOS app (SwiftUI, no dependencies) from nothing, run it in the Simulator, and archive + upload it to TestFlight entirely from the command line. Bundles working scripts for icon generation, simulator run, and signed upload via the App Store Connect API.
Leanmcp / publicity-distribution
2.1kWrite and distribute launch and publicity content across LinkedIn, X/Twitter, Instagram, Discord, Medium, Substack, and YouTube.
appeeky / competitor-analysis
2.1kWhen the user wants to analyze competitors' App Store strategy, find keyword gaps, or understand competitive positioning. Also use when the user mentions "competitor analysis", "competitive research", "keyword gap", "what are my competitors doing", or "compare my app to".
appeeky / market-movers
2.1kWhen the user wants to track App Store chart rank changes, find top gainers and losers, detect breakout apps entering the top 100, or identify apps dropping out of charts.
appeeky / market-pulse
2.1kWhen the user wants a comprehensive App Store market overview, daily/weekly market briefing, or combined view of chart movements, trending keywords, featured apps, and new releases.
appeeky / metadata-optimization
2.1kWhen the user wants to optimize App Store metadata — title, subtitle, keyword field, or description. Also use when the user mentions "optimize my title", "ASO metadata", "keyword field", "character limits", "app description", or "write my subtitle". For keyword discovery, see keyword-research.
appeeky / retention-optimization
2.1kWhen the user wants to reduce churn, improve user engagement, or increase lifetime value. Also use when the user mentions "retention", "churn", "users leaving", "engagement", "DAU/MAU", "user activation", or "why are users uninstalling". For onboarding-specific issues, see app-launch.
appeeky / review-management
2.1kWhen the user wants to analyze, respond to, or improve their app reviews and ratings. Also use when the user mentions "reviews", "ratings", "negative reviews", "how to get more reviews", "review response", or "my rating is dropping". For broader ASO audit, see aso-audit.
appeeky / screenshot-optimization
2.1kWhen the user wants to design, optimize, or evaluate App Store screenshots and preview videos. Also use when the user mentions "screenshots", "app preview", "product page design", "screenshot design", "creative assets", or "what should my screenshots show".
mcollina / linting-neostandard-eslint9
1.9kConfigures ESLint v9 flat config and neostandard for JavaScript and TypeScript projects, including migrating from legacy `.eslintrc*` files or the `standard` package
mcollina / snipgrapher
1.9kConfigures and uses snipgrapher to generate polished code snippet images, including syntax-highlighted PNGs, SVGs, and WebP exports with custom themes, profiles, and styling options