Security First
Skills with the best security audit scores
Showing 6,721–6,780 of 13,198 skills · Page 113 of 220
uphiago / cms-detection
1.3kIdentify CMS, frameworks, and server technology stacks on live hosts.
uphiago / exchange-owa-attack
1.3kExchange/OWA NTLM AD leak, spray attack when mail subdomain.
uphiago / flask-werkzeug-attack
1.3kExploit Flask/Werkzeug debugger exposure for traceback and SECRET leaks.
uphiago / github-secret-hunting
1.3kFind leaked API keys, tokens, and credentials in public GitHub repositories.
uphiago / hardcoded-credential-hunt
1.3kDetect hardcoded passwords in HTML forms, JavaScript, and API responses.
uphiago / http2-header-impersonation
1.3kSpoof HTTP/2 SETTINGS frames and pseudo-header order per browser profile.
uphiago / humanize-automation
1.3kHuman-like mouse, keyboard and scroll behavior for behavioral bot bypass.
uphiago / js-secrets-extraction
1.3kAnalyze JS bundles and source maps for hardcoded secrets, API keys, JWTs, and internal endpoints
uphiago / origin-ip-discovery
1.3kDiscover origin IPs behind CDN/WAF via favicon hash, DNS history, and SSL certs.
uphiago / port-service-discovery
1.3kNmap scan for MySQL, Redis, FTP, SSH, internal API services.
uphiago / s3-minio-content-type-xss
1.3kExploit public bucket Content-Type override for stored XSS on target origin.
uphiago / scada-hikvision-isapi
1.3kEnumerate Hikvision ISAPI endpoints on SCADA and IoT web interfaces.
uphiago / stealth-browser-launch
1.3kLaunch stealth Chromium with C++ fingerprint patches for anti-bot bypass.
uphiago / tls-fingerprint-impersonation
1.3kSpoof TLS ClientHello and JA4 fingerprints for browser impersonation.
uphiago / unauth-api-flow-hijack
1.3kExploit unauthenticated multi-step API flows without credentials.
uphiago / visual-recon
1.3kScreenshot all live hosts for rapid visual triage and technology fingerprinting.
uphiago / web-enumeration
1.3kSensitive file scanning, path traversal bypass, vHost enum, .env extract, log mining, Varnish detect
uphiago / cloud-iam-deep
1.3kGCP/AWS/Azure cloud exploitation -- Cloud Functions, Firestore, Cloud Run, S3, MinIO, Blob Storage, SA keys
uphiago / hunt-broken-function-level-auth
1.3kHunt broken function-level authorization via verb drift, route shadowing, and transport gaps.
uphiago / hunt-fastapi
1.3kHunt FastAPI-specific vulnerabilities: dependency injection gaps, Pydantic coercion, and OpenAPI mining.
uphiago / hunt-information-disclosure
1.3kHunt error leakage, DVCS exposure, source maps, config files, and differential oracles.
uphiago / hunt-mass-assignment
1.3kHunt mass assignment via sensitive field injection and ORM framework exploitation.
uphiago / hunt-mcp-security
1.3kHunt Model Context Protocol (MCP) vulnerabilities in AI-tool integration systems.
uphiago / hunt-nestjs
1.3kHunt NestJS-specific vulnerabilities: guard bypass, decorator gaps, and microservice auth drift.
uphiago / hunt-prototype-pollution
1.3kHunt client-side and server-side prototype pollution for XSS, auth bypass, and RCE.
uphiago / hunt-schema-enumeration
1.3kEnumerate hidden tables, fields, and endpoints via API error hints. Agnostic across PostgREST, Zod, FastAPI, GraphQL, and REST.
ai-evals-course / evaluate-rag
1.3kGuides evaluation of RAG pipeline retrieval and generation quality
ai-evals-course / write-judge-prompt
1.3kDesign LLM-as-Judge evaluators for subjective criteria that code-based checks cannot handle
vibe-motion / 3d-chladni-render
1.3kClone or update https://github.com/nolangz/3D-Chladni and export deterministic 3D Chladni particle motion as MP4 or transparent ProRes MOV
vibe-motion / fisheye-motion
1.3k制作屏摄风格的鱼眼畸变效果与聚焦动画：桶形鱼眼畸变 + 细扫描线/摩尔纹干涉 + 四周暗角， 可对任意图片/视频做「推镜聚焦到某处 + 黄色标注块滑入」的 Remotion 视频输出。 核心是 clone https://github.com/vibe-motion/fisheye-motion 项目并按需改参数渲染。 触发词：鱼眼、fisheye、屏摄、摩尔纹、moire、扫描线、CRT、暗角、vignette、 聚焦推镜、高亮标注动画、screen-photo effect。
vibe-motion / remotion-candlestick
1.3k在 Remotion 项目中创建带动画的金融 K 线图（蜡烛图）。涵盖数据获取（Yahoo Finance）、 插件架构（config / timeline / Scene / plugin）、Canvas 逐帧绘制、深色交易终端风格、 以及 Remotion Studio 预览和渲染输出。触发词：K线图、蜡烛图、candlestick、OHLC、 股票动画、金融图表视频、Remotion 图表。
huytieu / create-user-story
1.2kCreate user stories with duplicate checking across any project tracker (Linear, GitHub Issues, Jira)
huytieu / export-open-issues
1.2kAudit and export open issues from any project tracker with summary analysis and vault archival
huytieu / generate-prd
1.2kGenerate product requirements documents with optional publishing to Confluence or other wiki platforms
huytieu / generate-release-notes
1.2kGenerate categorized release notes from any source (GitHub, Linear, Jira, or manual input) with optional publishing
huytieu / publish-to-confluence
1.2kPublish any markdown file from the vault to Confluence with format conversion and approval gate
huytieu / scout
1.2kEvaluate URLs and tools — check vault coverage, assess relevance, recommend save or skip
huytieu / update-knowledge-base
1.2kMaintain and update product knowledge base from releases, features, and project changes with optional wiki sync
BankrBot / agent-wormhole
1.2kUse Agent Wormhole for one-time sealed handoffs between autonomous agents, including encrypted mission briefs, scoped secrets, temporary artifacts, receipts, config drops, CLI/API usage, ECHO holder access, and Bankr x402 paid opens.
BankrBot / agenticbets
1.2kPlace prediction bets on token prices on Base via AgenticBets
BankrBot / blueagent-x402
1.2kSecurity OS for autonomous agents and builders on Base. 31 pay-per-use tools across Quantum Security, Agent Safety, Research, Data, and Earn. Built for AI agents, Zero-Human Companies (ZHC), and Base ecosystem builders. Pay USDC per call via x402 protocol — no subscription, no API key needed.
BankrBot / checkr
1.2kAccess real-time X/Twitter attention intelligence for Base chain tokens via the checkr API. Use when you need to know what is trending on CT, which tokens are spiking in social attention, get attention/price divergence signals, or fetch narrative summaries for specific Base tokens.
BankrBot / clanker
1.2kDeploy ERC20 tokens on Base, Ethereum, Arbitrum, and other EVM chains using the Clanker SDK
BankrBot / darksol-random-oracle
1.2kBankr-compatible skill for DARKSOL Random Oracle, an on-chain verifiable RNG API on Base
BankrBot / helixa
1.2kHelixa — Onchain identity, reputation, and Cred Scores for AI agents on Base
BankrBot / onchainkit
1.2kBuild onchain applications with React components and TypeScript utilities from Coinbase's OnchainKit
BankrBot / veil
1.2kPrivacy and shielded transactions on Base via Veil Cash (veil.cash). Deposit ETH or USDC into private pools, withdraw/transfer privately using ZK proofs. Manage Veil keypairs, check private/queue balances across all pools, and submit deposits via Bankr
Aaronontheweb / aspire-configuration
1.2kConfigure Aspire AppHost to emit explicit app config via environment variables; keep app code free of Aspire clients and service discovery.
Aaronontheweb / marketplace-publishing
1.2kWorkflow for publishing skills and agents to the dotnet-skills Claude Code marketplace. Covers adding new content, updating plugin.json, validation, and release tagging.
Aaronontheweb / skills-index-snippets
1.2kCreate and maintain AGENTS.md / CLAUDE.md snippet indexes that route tasks to the correct dotnet-skills skills and agents (including compressed Vercel-style indexes).
fy-agent / trellis-update-spec
1.2kCaptures executable contracts and coding conventions into .trellis/spec/ documents
brycewang-stanford / acmmm-author-response
1.2kUse when drafting the ACM MM (ACM Multimedia) rebuttal — turning multiple anonymous reviews into one focused, anonymous response that fixes factual errors first, adds small confirmatory cross-modal results, concedes calibratedly, and stays inside policy (anonymous, no new external links), written fo…
fcakyon / dokploy-deploy
1.2kThis skill should be used when user asks to "deploy with Dokploy", "use Dokploy Cloud", "manage self-hosted Dokploy", "deploy Docker Compose on Dokploy", "manage Dokploy databases", "configure Dokploy domains", or "look up Dokploy CLI commands".
fcakyon / gcloud-usage
1.2kThis skill should be used when user asks about "GCloud logs", "Cloud Logging queries", "Google Cloud metrics", "GCP observability", "trace analysis", or "debugging production issues on GCP".
matlab / simulating-simulink-models
1.1kConfigures Simulink simulations non-destructively using SimulationInput objects — parameter overrides without modifying the model, batch sweeps via parsim, custom input signals via Dataset, and simulation data retrieval via logsout
MoizIbnYousaf / backend-development
1.1kBackend API design, database architecture, microservices patterns, and test-driven development. Use for designing APIs, database schemas, or backend system architecture.
MoizIbnYousaf / code-documentation
1.1kWriting effective code documentation - API docs, README files, inline comments, and technical guides. Use for documenting codebases, APIs, or writing developer guides.
MoizIbnYousaf / database-design
1.1kDatabase schema design, optimization, and migration patterns for PostgreSQL, MySQL, and NoSQL databases. Use for designing schemas, writing migrations, or optimizing queries.
MoizIbnYousaf / llm-application-dev
1.1kBuilding applications with Large Language Models - prompt engineering, RAG patterns, and LLM integration. Use for AI-powered features, chatbots, or LLM-based automation.
dpearson2699 / focus-engine
1.1kImplements keyboard, directional, and scene-level focus behavior across SwiftUI and UIKit