Security First
Skills with the best security audit scores
Showing 11,341–11,400 of 13,198 skills · Page 190 of 220
yaklang / llm-prompt-injection
2.3kLLM prompt injection playbook
yaklang / sqli-sql-injection
2.3kSQL injection playbook
yaklang / upload-insecure-files
2.3kInsecure file upload playbook
zenstory-ai / short-drama-knowhow
2.2k维护者专用的短剧 know-how 学习、验证与生命周期治理。仅在维护者明确要求从其当前会话提供的授权只读文本源学习完整短剧项目链,并把私有观察逐步转成去标识、去复刻、经盲测与独立审查的公共 reference、rubric 或 synthetic fixture 候选时使用;不用于普通创作、公开运行时取数、媒体生成或粗略数据分析。
Weizhena / research-report
2.2kSummarize deep research results into markdown report, cover all fields, skip uncertain values.
WordPress / wp-abilities-api
2.2kUse when working with the WordPress Abilities API (wp_register_ability, wp_register_ability_category, /wp-json/wp-abilities/v1/*, @wordpress/abilities) including defining abilities, categories, meta, REST exposure, and permissions checks for clients.
WordPress / wp-block-themes
2.2kUse when developing WordPress block themes: theme.json (global settings/styles), templates and template parts, patterns, style variations, and Site Editor troubleshooting (style hierarchy, overrides, caching).
WordPress / wp-performance
2.2kUse when investigating or improving WordPress performance (backend-only agent): profiling and measurement (WP-CLI profile/doctor, Server-Timing, Query Monitor via REST headers), database/query optimization, autoloaded options, object caching, cron, HTTP API calls, and safe verification.
WordPress / wp-phpstan
2.2kUse when configuring, running, or fixing PHPStan static analysis in WordPress projects (plugins/themes/sites): phpstan.neon setup, baselines, WordPress-specific typing, and handling third-party plugin classes.
WordPress / wp-plugin-development
2.2kUse when developing WordPress plugins: architecture and hooks, activation/deactivation/uninstall, admin UI and Settings API, data storage, cron/tasks, security (nonces/capabilities/sanitization/escaping), and release packaging.
WordPress / wp-rest-api
2.2kUse when building, extending, or debugging WordPress REST API endpoints/routes: register_rest_route, WP_REST_Controller/controller classes, schema/argument validation, permission_callback/authentication, response shaping, register_rest_field/register_meta, or exposing CPTs/taxonomies via show_in_res…
WordPress / wp-wpcli-and-ops
2.2kUse when working with WP-CLI (wp) for WordPress operations: safe search-replace, db export/import, plugin/theme/user/content management, cron, cache flushing, multisite, and scripting/automation with wp-cli.yml.
LeoYeAI / 0codekit
2.1k0codekit integration. Manage Workspaces
LeoYeAI / 12-factor-apps
2.1kPerform 12-Factor App compliance analysis on any codebase
LeoYeAI / absurdist-play
2.1kThe philosophy of absurdist play — the meta-skill that trains your ability to acquire and use all other skills. Creates genuine connection through creative, surprising, authentic engagement
LeoYeAI / achievement-qztc
2.1k课程目标达成情况分析表生成工具。根据Excel学生数据替换Word模板中的课程目标达成情况,生成新的分析表。
LeoYeAI / activity-campaign-from-ui
2.1kTurn campaign UI references into a new H5/Web campaign proposal, page architecture, and HTML/CSS/JavaScript high-fidelity front-end draft. Supports mode-based responses: analysis, proposal, architecture, delivery, and full.
LeoYeAI / adult-social-skills
2.1kBuilding and maintaining social connections as an adult
LeoYeAI / afrexai-construction-estimator
2.1kComplete construction estimating and cost management system
LeoYeAI / agent-browser
2.1kBrowser automation CLI for AI agents
LeoYeAI / agent-browser
2.1kBrowser automation CLI for AI agents
LeoYeAI / agent-browser
2.1kBrowser automation CLI for AI agents
LeoYeAI / agent-browser
2.1kBrowser automation CLI for AI agents
LeoYeAI / agent-browser
2.1kBrowser automation CLI for AI agents
LeoYeAI / agentic-street
2.1kOpenClaw channel for watcher alerts. Defaults to 'last'
LeoYeAI / agentsocial
2.1k让你的 AI Agent 替你进行社交匹配——招聘、找工作、找合伙人、社交、找对象
LeoYeAI / ai-talent-hunter
2.1k从 GitHub 找到最匹配的技术人才,生成个性化触达话术。适用于招聘工程师、寻找技术合伙人、猎头交付候选人等场景。
LeoYeAI / alchemy-openapi-skill
2.1kOperate Alchemy Prices API reads through UXC with a curated OpenAPI schema, path-templated API-key auth, and read-first guardrails.
appeeky / app-launch
2.1kWhen the user wants to plan a launch strategy for a new app or major update. Also use when the user mentions "app launch", "launch plan", "launch checklist", "pre-launch", "launch day", or "how to launch my app". For ongoing ASO after launch, see aso-audit.
0xsline / image-gen
2.0kAI image generation via Fal.ai, gpt-image-2, nano-banana, MiniMax image-01, and xAI Grok Imagine
0xsline / news-rough-cut
2.0k新闻素材智能粗剪——把新闻素材粗剪为一条内容完整、逻辑清晰、节奏紧凑的新闻短视频。Use when the user asks to 粗剪新闻、新闻剪辑、把新闻素材剪成短视频、智能粗剪、news rough cut、编辑新闻视频, or provides news footage (发布会/采访/现场/监控素材) to be cut into a factual news short. Never add music, voiceover, or sound effects.
0xsline / storyboard-shot-breakdown
2.0kBreak down each shot and turn the analysis into a storyboard reference
aipoch / imagegenskill
1.9kGenerate renderable, scientific-style SVG graphics directly from natural-language requirements (no image models)
Besty0728 / unity-component
1.8kManage GameObject components
Besty0728 / unity-terrain
1.8kOperate on Unity Terrain
cbrock84 / labor-and-union-relations
1.7kManages the relationship with a represented workforce — administering a collective agreement, handling grievances, understanding what supervisors may and may not say, and preparing for bargaining.
feiskyer / github-fix-issue
1.7kFix GitHub issues end-to-end — analysis, branch creation, implementation, testing, and PR submission
activeloopai / hivemind-graph
1.6kQuery the local code graph (functions, classes, calls, imports) through the Deeplake mount at memory/graph/
Kaelio / dbt_ingest
1.6kMap dbt `schema.yml` / `properties.yml` models and sources into ktx semantic-layer overlays and column notes. Covers `sources:` vs `models:`, column `data_tests` (not_null, unique, accepted_values, relationships), and how bundle-time writes complement manifest backfill from git sync.
pedrohcgs / context-status
1.6kShow current context status and session health. Use to check how much context has been used, whether auto-compact is approaching, and what state will be preserved.
rohitg00 / structured-code-review
1.5kPerforms a structured five-stage code review covering requirements compliance, correctness, code quality, testing, and security/performance. Each stage uses targeted checklists and categorized feedback (Blocker/Major/Minor/Nit) with actionable suggestions and rationale
rohitg00 / root-cause-analysis
1.5kPerforms systematic root cause analysis to identify the true source of bugs, errors, and unexpected behavior through structured investigation phases — not just treating symptoms
actionbook / rust-deps-visualizer
1.5kVisualize Rust project dependencies as ASCII art. Triggers on: /deps-viz, dependency graph, show dependencies, visualize deps, 依赖图, 依赖可视化, 显示依赖
mohitagw15856 / ai-ethics-review
1.4kConduct a structured ethical review of an AI or ML feature, model, or product
mohitagw15856 / cicd-playbook
1.4kWrite a CI/CD pipeline playbook for a service or team
daymade / app-evolver
1.4kImproves an existing application using its code, product contract, authorized work history and competitor evidence. Use for 取长补短、取其精华去其糟粕、参考竞品优化应用 or evolving an app from successful and failed work.
daymade / local-conversation-history
1.4kEntry point for local AI conversation history across Claude Code, Codex and Kimi CLI: routes each request to the reader or continuation skill that owns it and keeps the cross-provider inventory
daymade / macos-permissions
1.4kDiagnoses and repairs macOS TCC dialogs and silent denials: Full Disk Access, Screen Recording, Microphone, Camera, Accessibility, Automation. Use for recurring prompts, LaunchAgent/uv jobs that fail only in background, broken grants, or automating Full Disk Access (权限弹窗 / 授权了没用 / 完全磁盘访问).
coldteadotai / eli5
1.4kExplain like I'm someone who knows nothing about this code: one sentence, then one part at a time, until the whole picture is on screen and the reader already knows every part of it.
noobnooc / better-codex
1.4kBehavioral guardrails for Codex coding work based on common user complaints
tjboudreaux / thinking-bounded-rationality
1.3kUse when search or investigation could run forever. Set an explicit good-enough threshold first, then stop at the first option that clears it.
tjboudreaux / thinking-circle-of-competence
1.3kUse when a specific claim may lack grounding. Check evidence boundary, size wrongness cost, then answer, fetch, or abstain — never confabulate.
tjboudreaux / thinking-five-whys-plus
1.3kWhen a fault is localized and the proximate cause is known but the systemic root is not, chain evidence-linked whys with a counterfactual stop and a countermeasure.
tjboudreaux / thinking-jobs-to-be-done
1.3kDeciding what to build or why adoption fails. Recover the progress users hire a solution for under a circumstance, then rank by outcome and competing workarounds.
tjboudreaux / thinking-lindy-effect
1.3kUse when longevity of a non-perishable option matters. Treat survival duration as a remaining-life prior, then check domain drift before favoring the proven.
tjboudreaux / thinking-map-territory
1.3kWhen a claim, doc, test, metric, or assumption conflicts with observed behavior, stop theorizing from the map and verify the live code or data; let territory overrule.
tjboudreaux / thinking-margin-of-safety
1.3kWhen provisioning, setting a limit, or committing an estimate under uncertainty, size a buffer to residual error and the cost of breach—not to the optimistic edge.
tjboudreaux / thinking-model-combination
1.3kWhen one mental model leaves a material blind spot on a multi-domain or high-stakes problem, sequence complementary models with named roles and a conflict rule.
tjboudreaux / thinking-opportunity-cost
1.3kBefore committing scarce time, people, or money, name the best forgone use of those resources and the value delta of the chosen path versus that alternative.
tjboudreaux / thinking-red-team
1.3kFor authorized security review of code, auth, or APIs you control, model the attacker, map the attack surface, and report only findings with a reproducible exploit path and verified mitigation.