Security First
Skills with the best security audit scores
Showing 7,021–7,080 of 13,236 skills · Page 118 of 221
mukul975 / Phishing
34.7k'Queries Certificate Transparency logs via crt.sh and pycrtsh to detect
mukul975 / analyzing-web-server-logs-for-intrusion
34.7kParse Apache and Nginx access logs to detect SQL injection attempts,
mukul975 / analyzing-windows-prefetch-with-python
34.7kParse Windows Prefetch (.pf) files with the windowsprefetch Python
mukul975 / conducting-pass-the-ticket-attack
34.7kPerform Pass-the-Ticket (PtT) lateral movement by extracting Kerberos TGT/TGS tickets from LSASS memory on a compromised host and injecting them into another session to impersonate the ticket owner without knowing their password.
mukul975 / configuring-certificate-authority-with-openssl
34.7kBuild a two-tier PKI Certificate Authority hierarchy (offline Root CA
mukul975 / configuring-hsm-for-key-storage
34.7kConfigures Hardware Security Modules for cryptographic key storage
mukul975 / configuring-multi-factor-authentication-with-duo
34.7kDeploys Cisco Duo multi-factor authentication across enterprise applications,
mukul975 / Steal Web Session Cookie
34.7kConfigures secure OAuth 2.0 authorization flows, including Authorization
nanocoai / add-webex
31.0kAdd Webex channel integration via Chat SDK.
nanocoai / debug
31.0kDebug container agent issues
nanocoai / self-customize
31.0kCustomize your own agent — add capabilities, install packages, add MCP servers, edit code or CLAUDE.md
nanocoai / welcome
31.0kIntroduce yourself to a newly connected channel. Triggered automatically when a channel is first wired. Send a friendly greeting and brief overview of what you can do.
nanocoai / convert-documents-to-markdown
31.0kConvert an attached Word document, presentation, spreadsheet, OpenDocument file, RTF, EPUB, CSV, or text-based PDF into local Markdown
wanshuiyin / claims-drafting
17.7kDraft patent claims for an invention
wanshuiyin / novelty-check
17.7kVerify research idea novelty against recent literature
Orchestra-Research / brainstorming-research-ideas
13.8kGuides researchers through structured ideation frameworks to discover high-impact research directions
Orchestra-Research / creative-thinking-for-research
13.8kApplies cognitive science frameworks for creative thinking to CS and AI research ideation
uvwt / skill-authoring
1.1k创建、设计、修改、重构和验证 AgentDock Skill 时使用；负责 Agent Skills 兼容的 SKILL.md、可移植核心、引用、辅助脚本、测试、安全边界和本地真实验证。
Jeffallan / atlassian-mcp
11.9kIntegrates with Atlassian products to manage project tracking and documentation via MCP protocol
zenstory-ai / story-long-write
7.8k长篇网文规划与写作。支持只讨论结构、只写大纲或指定细纲，明确要求正文后再写章节。触发方式：/story-long-write、/写长篇、「帮我开书」「定设定」「出卷纲」「规划剧情」「写大纲」「补细纲」「日更」「续写」「继续写」「修改第X章」「回炉」「重写第X章」。
zenstory-ai / story-setup
7.8k网文写作工具集基础设施部署与检查。为 Claude Code / OpenCode / Codex / Google Antigravity / ZCode / OpenClaw / Reasonix 提供内置适配；Web AI / 通用 Agent 可走 skills + AGENTS.md 文件模式。触发方式：/story-setup、$story-setup、「准备写书」「帮我搭一下环境」「配置写作项目」「检查写作环境」。
Devin-AXIS / github-sync-pr-flow
7.1kUse when preparing iPolloWork local changes for GitHub: stash or preserve local edits, sync the current personal branch with remote main, re-apply local work, diagnose conflicts, commit in English, push to the current remote branch, and open a PR to main without creating extra branches.
Devin-AXIS / ipollowork-plugin-ui
7.1k为 iPolloWork 新插件或插件工作区复用 UI 组件、颜色、字体及交互规范。按 Figma 成熟状态和代码清单优先采用已确认组件，区分宿主 React 与独立 HTML/iframe 的接入方式；适用于插件表单、导航、浮层、反馈、状态和进度设计及实现，不改变用户作品的视觉风格。
tech-leads-club / the-fool
7.1kUse when challenging ideas, plans, decisions, or proposals. Invoke to play devil's advocate, run a pre-mortem, red team, stress test assumptions, audit evidence quality, or find blind spots before committing.
tech-leads-club / frontend-design
7.1kCreate distinctive, production-grade frontend interfaces with high design quality. Use this skill when the user asks to build web components, pages, artifacts, posters, or applications. Generates creative, polished code that avoids generic AI aesthetics.
tech-leads-club / react-best-practices
7.1kReact and Next.js performance optimization guidelines from Vercel Engineering
tech-leads-club / tlc-generative-engine-optimization
7.1kGenerative Engine Optimization (GEO) specialist — the technical, on-page publishing work that makes a given page or site discoverable, understandable, trustworthy, quotable, and fresh for AI answer engines (Google AI Overviews, ChatGPT Search, Bing Copilot, Perplexity)
tech-leads-club / web-quality-audit
7.1kComprehensive web quality audit covering performance, accessibility, SEO, and best practices in a single review
internet-court / smart-accounts-kit
6.8kBuild dApps with MetaMask Smart Accounts Kit — ERC-4337 smart accounts, delegations, and Advanced Permissions (ERC-7715)
internet-court / metaplex
6.8kMetaplex development on Solana — NFTs, tokens, compressed NFTs, candy machines, token launches, autonomous agents
internet-court / okx-agentic-wallet
6.8kOKX Agentic Wallet — the single skill for the user's wallet and on-chain execution. Use it whenever the user wants to operate their wallet or execute an on-chain action, including: login & accounts, balance / holdings, wallet address / deposit / receive, send / transfer, contract calls (approve / de…
internet-court / okx-defi
6.8kOKX-aggregated DeFi (no specific DApp named) — product discovery, deposit/withdraw/claim execution, AND positions viewing.
internet-court / helius
6.8kBuild Solana applications with Helius infrastructure. Covers transaction sending (Sender), asset/NFT queries (DAS API), real-time streaming (WebSockets, Laserstream), event pipelines (webhooks), priority fees, wallet analysis, and agent onboarding.
breaking-brake / pr-review-analysis
5.4kAnalyze PR review comments from a GitHub PR URL. Fetch review comments, verify each finding against the actual codebase, assess validity (correct/incorrect/partial), present a structured summary with recommended actions, and optionally reply to each comment on GitHub
elementalsouls / hunt-clickjacking
5.2kHunt Clickjacking — missing X-Frame-Options / CSP frame-ancestors lets an attacker embed the target page in an invisible iframe and trick victims into clicking buttons they cannot see (UI redressing). Targets: login flows, money transfers, account settings, OAuth confirmation pages.
elementalsouls / hunt-exceptional-conditions
5.2kHunt mishandling of exceptional conditions — feed an endpoint malformed/unexpected input (wrong type, broken JSON, oversized field, null byte) and make it fail OPEN or leak internals: a verbose stack-trace / framework error page that discloses ORM internals, server file paths, library versions, or a…
ThinkInAIXYZ / deepchat-sdd
6.4kUse before substantial DeepChat code, configuration, documentation, test, build, feature, issue, refactor, or architecture changes that need a durable RFC and an explicit execution path.
indranilbanerjee / competitor-pages
832Build competitor comparison pages: X-vs-Y, alternatives and roundups, with schema. \"create a vs page\"
indranilbanerjee / context-engine
832Load shared marketing context: brand profile, benchmarks, compliance rules, specs. \"load my brand context\"
indranilbanerjee / cowork-setup
832Set up DMP for team use in Cowork: sandbox check, Drive folders, saved routing. \"set up DMP for my team in Cowork\"
indranilbanerjee / help
832Show help with live plugin counts: getting started, which skill fits a goal, fixes. \"what can this plugin do\"
indranilbanerjee / seo-plan
832Build a 12-month SEO plan that scores four pillars and phases the roadmap. \"build an SEO strategy\"
indranilbanerjee / status
832Show DMP status for the active brand: profile, engagement progress, recent insights. \"what brand am I on\"
alexgreensh / token-dashboard
2.7kAnswers what a past session cost ("the Garden session yesterday", a session id) with a priced number, and opens the Token Optimizer dashboard when asked to see it.
shinpr / recipe-update-doc
696Update existing design documents (Design Doc / PRD / ADR) with review
RandallLiuXin / gm-evaluate
554Evaluate the current tag's quality: enforce the playable-closed-loop gate, maintain a single cross-tag e2e/ suite that always reflects the current game (add tests for new mechanics, prune tests for mechanics this tag deliberately removed), and reason about gameplay quality.
RandallLiuXin / gm-scaffold
554Scaffold a new Godot project: project.godot + addons + base directories + e2e/conftest.py + initial git commit. Lifetime-once role — runs only on fresh projects. Explicit invocation only — use /gm-scaffold.
RandallLiuXin / gm-verify
554Mechanical verification of the built game: headless build, unit tests, lint, static checks. Explicit invocation only — use /gm-verify.
notque / writing
441Writing: voice creation and validation, prose editing, anti-AI cleanup, professional communication, translation.
notque / do
441Classify user requests and route to the correct agent + skill. Primary entry point for all delegated work.
notque / roast
441Constructive critique via 5 HackerNews personas with claim validation.
giuseppe-trisciuoglio / github-issue-workflow
359Provides a structured 8-phase workflow for resolving GitHub issues in Claude Code. Covers fetching issue details, analyzing requirements, implementing solutions, verifying correctness, performing code review, committing changes, and creating pull requests
giuseppe-trisciuoglio / aws-sdk-java-v2-core
359Provides AWS SDK for Java 2.x client configuration, credential resolution, HTTP client tuning, timeout, retry, and testing patterns
giuseppe-trisciuoglio / aws-sdk-java-v2-dynamodb
359Provides Amazon DynamoDB patterns using AWS SDK for Java 2.x
giuseppe-trisciuoglio / aws-sdk-java-v2-kms
359Provides AWS Key Management Service (KMS) patterns using AWS SDK for Java 2.x
giuseppe-trisciuoglio / aws-sdk-java-v2-secrets-manager
359Provides AWS Secrets Manager patterns for AWS SDK for Java 2.x, including secret retrieval, caching, rotation-aware access, and Spring Boot integration
giuseppe-trisciuoglio / graalvm-native-image
359Provides expert guidance for building GraalVM Native Image executables from Java applications
giuseppe-trisciuoglio / langchain4j-mcp-server-patterns
359Provides LangChain4j patterns for implementing MCP (Model Context Protocol) servers, creating Java AI tools, exposing tool calling capabilities, and integrating MCP clients with AI services
giuseppe-trisciuoglio / spring-boot-dependency-injection
359Provides dependency injection patterns for Spring Boot projects, including constructor-first design, optional collaborator handling, bean selection, and wiring validation
giuseppe-trisciuoglio / spring-boot-resilience4j
359Provides fault tolerance patterns for Spring Boot 3.x using Resilience4j