Security First
Skills with the best security audit scores
Showing 6,181–6,240 of 13,212 skills · Page 104 of 221
addyosmani / context-engineering
108.2kOptimizes agent context setup
addyosmani / spec-driven-development
108.2kCreates specs before coding
heygen-com / canopy-part-title
67.0kLeaves sweep through the frame and part to reveal the headline. HyperFrames block, 1920×1080, 12s, 11 variables.
coreyhaines31 / marketing-ideas
55.4kWhen the user needs marketing ideas, inspiration, or strategies for their SaaS or software product. Also use when the user asks for 'marketing ideas,' 'growth ideas,' 'how to market,' 'marketing strategies,' 'marketing tactics,' 'ways to promote,' 'ideas to grow,' 'what else can I try,' 'I don't kno…
sickn33 / akf-trust-metadata
47.9kThe AI native file format. EXIF for AI — stamps every file with trust scores, source provenance, and compliance metadata. Embeds into 20+ formats (DOCX, PDF, images, code). EU AI Act, SOX, HIPAA auditing.
sickn33 / api-analyzer
47.9kValidates whether an API request is correct based on provided inputs (method, URL, headers, body, auth, query params).
sickn33 / apify-lead-generation
47.9kScrape leads from multiple platforms using Apify Actors.
sickn33 / app-store-changelog
47.9kGenerate user-facing App Store release notes from git history since the last tag.
anthropics / access
43.1kManage Discord channel access — approve pairings, edit allowlists, set DM/group policy
mukul975 / analyzing-threat-actor-ttps-with-mitre-navigator
34.7k'Map advanced persistent threat (APT) group TTPs to the MITRE ATT&CK framework using the attackcti Python library to query STIX/TAXII data for group-technique associations, then generate ATT&CK Navigator layer files to visualize and compare defensive coverage against adversary profiles
mukul975 / attacking-oauth-with-device-code-phishing
34.7kRun OAuth 2.0 device-code and illicit-consent phishing attacks against
nanocoai / onecli-gateway
31.0kOneCLI Gateway: transparent HTTPS proxy that injects stored credentials into outbound calls. You MUST use this skill when the user asks you to read emails, check calendar, access GitHub repos, create issues, check Stripe payments, or interact with ANY external service or API.
latent-spaces / brag-slim
14.2kTurn a project directory or a website URL into a short, shareable launch video with music, motion, and share copy. One file, no bundled assets — built entirely by the model with the tools already on the machine
wanshuiyin / auto-review-loop
17.7kAutonomous multi-round research review loop. In Copilot CLI it defaults to the native complementary rubber-duck subagent with host-event model evidence; elsewhere it uses Codex, while explicit external reviewer overrides remain available.
wanshuiyin / prior-art-search
17.7kSearch patent databases and academic literature for prior art relevant to an invention
wanshuiyin / proof-checker
17.7kRigorous mathematical proof verification and fixing workflow. Reads a LaTeX proof, identifies gaps via cross-model review (external reviewer backend, ultra reasoning), fixes each gap with full derivations, re-reviews, and generates an audit report
AgriciDaniel / obsidian-bases
15.7kExplain, draft, and validate Obsidian Bases .base files with filters, formulas, properties, summaries, and table, card, or list views. Use for Obsidian Bases, database-like vault views, dynamic tables, reading lists, task trackers, filters, formulas, summaries, and .base file edits.
Orchestra-Research / deepspeed
13.8kExpert guidance for distributed training with DeepSpeed - ZeRO optimization stages, pipeline parallelism, FP16/BF16/FP8, 1-bit Adam, sparse attention
Orchestra-Research / pytorch-fsdp2
13.8kAdds PyTorch FSDP2 (fully_shard) to training scripts with correct init, sharding, mixed precision/offload config, and distributed checkpointing
Orchestra-Research / modal-serverless-gpu
13.8kServerless GPU cloud platform for running ML workloads
Orchestra-Research / experiment-tracking-swanlab
13.8kProvides guidance for experiment tracking with SwanLab
reticlehq / replay-user-flows
1.3kTurn a user journey you just clicked through into a saved regression check that re-runs deterministically, with no model in the loop and no test code to write
reticlehq / verify-keyboard-access
1.3kVerify that every interactive control on a page can take keyboard focus and that its primary action fires from the keyboard rather than only the mouse, and say plainly that Tab order cannot be verified today
Jeffallan / cli-developer
11.9kUse when building CLI tools, implementing argument parsing, or adding interactive prompts. Invoke for parsing flags and subcommands, displaying progress bars and spinners, generating bash/zsh/fish completion scripts, CLI design, shell completions, and cross-platform terminal applications using comma…
Jeffallan / csharp-developer
11.9kUse when building C# applications with .NET 8+, ASP.NET Core APIs, or Blazor web apps. Builds REST APIs using minimal or controller-based routing, configures database access with Entity Framework Core, implements async patterns and cancellation, structures applications with CQRS via MediatR, and sca…
Jeffallan / golang-pro
11.9kImplements concurrent Go patterns using goroutines and channels, designs and builds microservices with gRPC or REST, optimizes Go application performance with pprof, and enforces idiomatic Go with generics, interfaces, and robust error handling
Jeffallan / security-reviewer
11.9kIdentifies security vulnerabilities, generates structured audit reports with severity ratings, and provides actionable remediation guidance
Jeffallan / the-fool
11.9kUse when challenging ideas, plans, decisions, or proposals using structured critical reasoning. Invoke to play devil's advocate, run a pre-mortem, red team, or audit evidence and assumptions.
Jeffallan / vue-expert
11.9kBuilds Vue 3 components with Composition API patterns, configures Nuxt 3 SSR/SSG projects, sets up Pinia stores, scaffolds Quasar/Capacitor mobile apps, implements PWA features, and optimises Vite builds
jnMetaCode / brainstorming
8.3k在任何创造性工作之前必须使用此技能——创建功能、构建组件、添加功能、修改行为，或筹划任何新东西，无论是软件还是软件之外（一场分享、一门生意、一次装修）。
jnMetaCode / chinese-code-review
8.3k中文 review 沟通参考——话术模板、分级标注（必须修复/建议修改/仅供参考）、国内团队常见反模式应对。仅在用户显式 /chinese-code-review 时调用，不要根据上下文自动触发。
jnMetaCode / mcp-builder
8.3k在构建 MCP 服务器或 MCP 工具时使用 —— 系统化的生产级 MCP 构建方法论，覆盖工具设计、错误处理、传输层选择与测试，让 AI 助手连接外部能力
jnMetaCode / using-git-worktrees
8.3k当需要开始与当前工作区隔离的功能开发，或在执行实现计划之前使用——通过原生工具或 git worktree 回退机制确保隔离工作区存在
Gentleman-Programming / work-unit-commits
7.9kPlan commits as reviewable work units. Trigger: implementation, commit splitting, chained PRs, or keeping tests and docs with code.
miqdadbadjuber / antislop-layoutmobile
6.7kMobile layout skill for antislop. Use for layouts that reflow across screen sizes, phone to desktop: grids, overflow, tap targets. Load with the core.
tech-leads-club / evolutionary-modular-architecture
7.1kGuides design and implementation of evolutionary modular-monolith platforms with DDD (strategic + tactical), flat-by-aggregate organization, an Anti-Corruption Layer for vendor independence, a transactional outbox for events, smart resilience (backoff with jitter, circuit breakers, idempotency), and…
tech-leads-club / modular-design-principles
7.1kTechnology-agnostic guidance for modular systems: bounded contexts, clear boundaries, composability, state isolation, explicit contracts, failure containment, scaffolding workflows, split/merge criteria, sub-units inside a context, and compliance review signals
tech-leads-club / paid-creative-ai
7.1kWhen the user wants to create AI-generated ad creative, test performance creative, manage creative fatigue, or optimize paid media with AI tools.
tech-leads-club / sentry
7.1kInspect Sentry issues, summarize production errors, and pull health data via the Sentry API (read-only)
tech-leads-club / perf-web-optimization
7.1kOptimize web performance: bundle size, images, caching, lazy loading, and overall page speed
internet-court / nla-arbitrate
6.8kManually arbitrate NLA escrow fulfillments as an alternative to the automated oracle
internet-court / direct-tests
6.8kWrite and run fast direct mode tests for GenLayer intelligent contracts.
internet-court / genvm-lint
6.8kValidate GenLayer intelligent contracts with the GenVM linter.
internet-court / integration-tests
6.8kWrite and run integration tests against a GenLayer environment.
internet-court / nansen-wallet-profiler
6.8kWallet profiler — balance, PnL, labels, transactions, counterparties, related wallets, batch, trace, compare
internet-court / okx-ai
6.8kERC-8004 Agent identity: 注册/更新/上架/下架/搜索agent, register/update/activate/deactivate/search — User/ASP/Evaluator(买家/卖家/评审员, 旧称仲裁者亦可); 我的agent/ASP, 找做X的ASP/agent有什么服务/endpoint怎么填/查口碑/传头像.
internet-court / okx-growth-competition
6.8kList OKX Agentic Wallet exclusive trading competitions, register users for contests, track participation and leaderboard rankings, and claim won rewards
elementalsouls / offensive-osint
5.2kOperational arsenal for authorized external red-team and bug-bounty recon. Concrete probes, wordlists, regexes, dorks, curl one-liners for: subdomain enum, GraphQL/Swagger/REST discovery, identity fabric (Entra/Okta/ADFS/Google/SAML/M365 deep — Teams/SharePoint/OneDrive), cloud bucket enum (S3/GCS/A…
obra / requesting-code-review
291.0kUse when completing tasks, implementing major features, or before merging to verify work meets requirements
indranilbanerjee / backlink-gap
832Find backlink gap domains linking to competitors, not you, scored by script. \"who links to our competitors but not us\"
indranilbanerjee / campaign-audit
832Audit all campaigns running for a brand across channels, with 4-tier triage. \"we just inherited this account\"
indranilbanerjee / engagement-workflow
832Run the 12-Part engagement workflow from intake to growth plan, checkpointed. \"start a new engagement\"
indranilbanerjee / launch-campaign
832Launch an approved multi-channel campaign: blocker checks, then ordered activation. \"go live with the campaign\"
indranilbanerjee / validate-profile
832Validate the brand profile is production-ready: fields, compliance, connectors. \"is the brand setup correct\"
first-fluke / oma-recap
1.3kSummarize AI conversation histories for a specified date or period.
first-fluke / oma-slide
1.3kCreate, import, revise, or export presentation decks through the
first-fluke / oma-voice
1.3kGenerate or transcribe speech with Voicebox, or process existing
glitternetwork / pinme-share
3.8kUse this skill when the user wants to share, publish, or upload a static result through PinMe, especially by generating a static HTML share page for a PinMe project link, deployed full-stack app, Codex conversation summary, report, file, demo, or any 分享/发布/上传分享页 request that should end with `pinme u…
AgriciDaniel / blog-flow
2.5kFLOW framework integration for bloggers. Evidence-led content workflow using the Find, Optimize, Win loop with stage-specific AI prompts from the FLOW knowledge base (30 blog-applicable prompts, adapted from FLOW under CC BY 4.0)
AgriciDaniel / blog-outline
2.5kSERP-informed outline generation with H2/H3 heading hierarchy, competitive content gap analysis, section-by-section word count targets, chart and image placement markers, optional FAQ question planning, and internal linking zones.