Security First
Skills with the best security audit scores
Showing 9,481–9,540 of 13,196 skills · Page 159 of 220
hypnguyen1209 / network-attack
377Use when attacking a network or moving laterally — L2/L3 poisoning (LLMNR/mDNS, ARP/DHCP, mitm6), coercion + NTLM relay (CVE-2025-33073), TUN pivoting (Ligolo-ng/Chisel), MitM, network-service RCE (CVE-2024-38077), WPA2/WPA3 wireless
hypnguyen1209 / privesc-linux
377Use when escalating privileges on a Linux host — SUID/SGID & GTFOBins, sudo LPE (CVE-2025-32462/32463), capabilities & LD_PRELOAD, kernel LPE (CVE-2024-1086, Dirty Pipe, GameOver(lay)), service misconfig (PwnKit, Looney Tunables), container/namespace escape
hypnguyen1209 / privesc-windows
377Use when escalating privileges on a Windows host — SeImpersonate Potato chains (GodPotato/PrintNotifyPotato), service & DLL hijacking, UAC bypass (fodhelper/ICMLuaUtil), kernel EoP + BYOVD (CVE-2025-29824), token-rights abuse, LSASS/SAM/DPAPI credential harvesting
hypnguyen1209 / recon-osint
377Use when mapping a target's external attack surface or gathering OSINT — subdomain enumeration, attack-surface mapping (httpx/katana/JS secrets), subdomain takeover, multi-cloud/Azure tenant recon, GitHub secret dorking, breach/infostealer credential intel, CVE prioritization (EPSS/KEV)
hypnguyen1209 / reverse-engineering
377Use when reverse-engineering a binary or firmware — static triage + decompilation (Ghidra/IDA/Binary Ninja), dynamic instrumentation (GDB/Frida 17/angr), anti-reversing & packer bypass, OLLVM/VM deobfuscation, UEFI/BIOS RE & Secure Boot research, patch-diffing for n-days
hypnguyen1209 / threat-hunting
377Use when hunting threats or engineering detections — ATT&CK Detection-Strategies, Sigma + correlation with Detection-as-Code CI, Windows endpoint hunting (Sysmon/ETW/LSASS/LOLBins), network C2 hunting (JA4+, beaconing, DNS tunneling), cloud-identity hunting, Atomic Red Team purple-team validation
hypnguyen1209 / vulnerability-analysis
377Use when auditing source code for vulnerabilities — drive CodeQL/Semgrep/Joern to taint untrusted data source-to-sink across injection, memory safety, deserialization/prototype-pollution, secrets/crypto/authz/race, and supply-chain risks
hypnguyen1209 / web-pentest
377Use when pentesting a web application or API — injection, XSS/CSP, SSRF/cloud-metadata, HTTP desync & cache poisoning, SSTI/prototype-pollution/deserialization, JWT/OAuth/GraphQL/IDOR, business logic & single-packet race
hypnguyen1209 / windows-mitigations-bypass
377Use when bypassing a Windows exploit/platform mitigation — ASLR/DEP/CFG/XFG/CET, ACG/CIG, WDAC/App Control, ASR/AMSI/ETW, PPL/LSA Protection, BYOVD/VBS/HVCI
hypnguyen1209 / wireless-rf
377Use when the target has a non-Wi-Fi radio attack surface — Bluetooth/BLE (GATT, pairing, KNOB/BIAS/BleedingTooth), Zigbee/Thread/Matter & Z-Wave mesh (Touchlink, S0 downgrade), LoRaWAN/Sub-GHz LPWAN, SDR capture/replay/rolljam, smart locks/medical/IoT radios.
staskh / ib-trades-history
369Fetch trade executions from Interactive Brokers filtered by account, date range, or symbol. Supports live API (~7 days history) and FlexReport (full history)
jaechang-hits / general-figure-guide
367Universal QA checklist for generated scientific plots: overlapping labels, clipped text, missing axes/legends, overcrowded data, and cross-journal resolution/format guidance.
jaechang-hits / hypothesis-generation
367Structured hypothesis formulation: turn observations into testable hypotheses with predictions, propose mechanisms, design experiments. Follows the scientific method. Use scientific-brainstorming for open ideation; hypogenic for automated LLM hypothesis testing on datasets.
jaechang-hits / peer-review-methodology
367Structured peer review of manuscripts and grants. 7-stage evaluation: initial assessment, section review, statistical rigor, reproducibility, figure integrity, ethics, writing. Covers CONSORT/STROBE/PRISMA and report structure.
AlpacaLabsLLC / color-palette-generator
361Create an HTML color palette from a mood, description, or image, with swatches, color codes, pairings, and contrast checks. Use for color schemes or brand colors.
AlpacaLabsLLC / zoning-analysis-nyc
361Analyze NYC lot zoning, FAR, height, setbacks, uses, and buildable envelope from PLUTO and the Zoning Resolution. Use for \"what can I build\"; use nyc-bsa for relief and zoning-envelope for 3D visualization.
kazukinagata / e-bookkeeping-compliance
360優良な電子帳簿の要件チェック・コンプライアンス診断を実行する。 「優良な電子帳簿」「電帳法対応」「電子帳簿の要件確認」 「税務調査の準備」「75万円控除の条件」「帳簿の要件を満たしているか」 「e-bookkeeping compliance」で起動。
athola / action-first-output
338Shapes turns action-first: action leads, steps numbered, state restated. Use for ADHD-friendly output. Do not use to trim tokens; use response-compression.
athola / stack-push
338Pushes all branches in a stack and opens or updates one dependent PR per slice. Use after stack-create to publish the stack or after adding commits to a slice.
PatrickJS / cypress-integration-testing-cursorrules-prompt-file
41.0kCursor rules for Cypress development with integration testing.
shanraisshan / claude-code-best-practice
68.0kfrom vibe coding to agentic engineering - practice makes claude perfect
herdrdev / herdr
45.8kthe runtime your coding agents live on
chatboxai / chatbox
42.1kPowerful AI Client
tractorjuice / arc-kit
2.3kThe Enterprise Architecture Governance Harness — strategy, architecture, delivery, and assurance using AI coding assistants
zhu1090093659 / deepseek-pp
1.9kDeepSeek Web browser extension: AI agent workspace with MCP tools, memory, Skills, automation, web search, and conversation export.
aoci-spec / aoci-code
1.7kA persistent, Git-versioned map of your whole codebase and database schema that coding agents read before they touch anything.
frankbria / ralph-claude-code
9.7kAutonomous AI development loop for Claude Code with intelligent exit detection
suekou / mcp-notion-server
925A Model Context Protocol server for connecting Notion to MCP-compatible clients
unbrowse-ai / unbrowse
807Unbrowse - Reverse engineer any website so that your agents can access its APIs directly
Get-Concord-AI / concord-mcp
669Live messaging for coding agents
neiltron / apple-health-mcp
575Local-first Apple Health MCP server. Lets AI assistants answer questions about your sleep, workouts, activity and heart data from a local export.
Jane-xiaoer / claude-skill-web-clone
1.1kMethodology for faithfully cloning any website (static / React / WebGL) — without copying AI-hallucinated code. Real source first.
AgriciDaniel / claude-canvas
300AI-orchestrated visual production for Obsidian Canvas. Create presentations, flowcharts, mood boards, knowledge graphs, and galleries with intelligent layout and AI-generated content.
tomwong001 / qingsheng-skill
187情圣 · Claude Code 中文恋爱教练技能 · 微信/探探/Soul/Bumble/青藤之恋聊天截图分析 · 高情商回复生成 · 7阶段关系推进
thatrebeccarae / claude-marketing
181A full marketing department for Claude Code. Skill packs for Klaviyo, Shopify, GA4, Looker Studio, paid media, and more. Audit, optimize, and report using natural language.
x-glacier / kali-pentest
165Kali Linux penetration testing skill for AI agents (Claude Code, OpenClaw, Hermes Agent). 200+ CLI tools, 15 scenario playbooks. Autonomously plans attack paths, selects tools, and integrates results across phases to adapt the penetration strategy — with human approval gates for high-risk actions.
Akxan / ppt-agent-skill
165🎨 World-class AI presentation generator · 26 styles · 18 charts · benchmarked against Linear/Anthropic/Stripe/Apple/NYT — a Claude Code Skill that turns one sentence into design-agency-quality decks (HTML + editable PPTX)
framix-team / skill-email-html-mjml
79Claude Code skill — generate cross-client HTML email with MJML. Outlook-safe, Gmail-optimized, WCAG 2.1 AA accessible.
ljx-chase / research-field-onboarding
75A reusable research-onboarding skill for Claude, ChatGPT, Codex, and other instruction-following agents.
Terryc21 / skill-reviewer
57Candid reviews of Claude Code skills. File:line citations. Ranked actions. No filler.
SpillwaveSolutions / mastering-langgraph-agent-skill
41Build stateful AI agents and agentic workflows with LangGraph in Python. Covers tool-using agents, branching workflows, memory persistence, human-in-the-loop, multi-agent systems, and production deployment. Supports 14+ AI coding agents via Agent Skill Standard.
equalang / equalang-skill
40Agent Skill for Equalang: translate PDF, DOCX, PPTX, XLSX, EPUB, subtitles, pictures, audio and video with the layout kept; transcribe recordings. For Claude Code, Codex, Cursor and more.
OutlineDriven / odin-claude-plugin
39Outline-Driven Development for Claude Code - 46 agents, 25+ skills, diagram-first methodology, AST-based editing, atomic commits.
teng-lin / agent-fetch
314Full-content web fetcher for AI agents — Chrome TLS fingerprinting, browser impersonation, multi-strategy article extraction, and web scraping.
mahmoudsajjadi / awesome-ai-coding-tools
14Awesome AI Coding Tools (2026): Curated 3-tier taxonomy of coding assistants, CLI agents, local LLMs, MCP servers, and benchmarks
Kong / kong
44.3k🦍 The API and AI Gateway
NirDiamant / agents-towards-production
21.8kEnd-to-end, code-first tutorials for building production-grade GenAI agents. From prototype to enterprise deployment.
palmier-io / palmier-pro
14.6kmacOS video editor built for AI
wonderwhy-er / DesktopCommanderMCP
10.1kThis is MCP server for Claude that gives it terminal control, file system search and diff file editing capabilities
yigitkonur / cli-continues
1.6kresume any AI coding session in another tool — Claude Code, Copilot, Gemini, Codex, Cursor
prapaa-ai / agav
170Terminal-native AI coding assistant for real repositories. Inspect code, edit files, run tests, and verify changes from the CLI.
juliantanx / aiusage
136Open-source AI usage tracker — tokens, cost, and sessions across Claude Code, Codex, Hermes, Qoder, and more
firish / claude_code_vs
102Bring Claude Code to Visual Studio 2026: A native diff with accept/reject, a live debugger Claude can drive autonomously, Roslyn code navigation, and Test Explorer integration. The IDE half of Claude Code's integration protocol. Community-built, unofficial.
utensils / claudette
83Claude's missing better half — a companion tool for Claude Code usage.
maruakshay / miii-cli
42Free, open-source AI coding agent for terminal and browser. A Claude Code / Cursor alternative that runs offline with Ollama or with your own Claude, GPT or Gemini keys. No account, no subscription. 🇮🇳
syncfusion / maui-toolkit-ui-components-skills
39Skills for Syncfusion® Toolkit for .NET MAUI components. Enable AI-assisted development with comprehensive documentation, code examples, and best practices for 30+ UI controls including Charts, Calendar, Cards and more.
warpforgehq / warpforge
39Local-first desktop command center for Claude Code, Codex, OpenCode, and other coding agents—parallel tasks, worktrees, dev services, port forwards, diffs, and review.
PyModel / react-frontend-skills
39Production-grade AI agent skills for React 19, Next.js 16, TypeScript 7, testing, data, UI, and frontend architecture—ready for Codex, Claude Code, Cursor, Pi, and more.
girishr / SpecPilot
38Spec-driven development (SDD) CLI for AI coding agents (Claude Code, Cursor) - initialize, validate, and sync .specs/ across TypeScript & Node.js projects
anatomia-dev / anatomia
33Spec-driven agent harness for Claude Code and Codex — five-agent pipeline (scope, plan, build, verify, learn) with an auditable proof chain.