373 skills found ¡ Page 5 of 13
browser-act / producthunt-launchesScrape Product Hunt daily/weekly/monthly/yearly leaderboard launches with full product details, maker profiles, and website contact info
browser-act / trustpilot-company-infoTrustpilot company profile lookup on trustpilot.com â input a company domain (e.g. apple.com, shopify.com, shopwagandtail.com) and extract company metadata: official display name, businessUnitId, TrustScore (1-5), star rating, total review count, last-12-months review count, primary category and allâĻ
browser-act / youtube-influencer-finder-api-skillThis skill helps users extract YouTube influencer profiles including social links, subscriber counts, and channel stats via the BrowserAct API.
dotnet / coordinate-componentsShare state between components that don't have a direct parent-child parameter relationship, using cascading values, scoped services with change events, or CascadingValueSource via DI.
irinabuht12-oss / content-repurposerTransform one long-form piece into multiple platform-specific content derivatives including LinkedIn posts, tweet threads, email snippets, ad hooks, and video scripts while maintaining voice consistency
irinabuht12-oss / competitor-teardownSystematic competitive analysis covering positioning, messaging hierarchy, objection handling, and CTA strategy from landing page URLs or screenshots
irinabuht12-oss / email-sequence-writerWrite complete nurture email sequences with subject lines, preview text, and body copy using proven copywriting formulas
irinabuht12-oss / icp-research-assistantBuild detailed B2B buyer personas with pain points, objections, buying triggers, and messaging angles
irinabuht12-oss / ad-copy-variant-generatorAnalyzes your top performing ads, identifies what's working in the hooks, CTAs, messaging angles, and formats, then generates new variants that follow the same winning patterns while introducing enough variation to test meaningfully. Platform: Google and Meta.
elementalsouls / bugcrowd-reportingBugcrowd-specific reporting tactics complementing report-writing: VRT category search-and-fallback strategy when no exact match exists, manual severity override when VRT defaults underrate impact, severity-request paragraph as first body section, OOS-clause rebuttal templates (rate limiting on auth-âĻ
elementalsouls / hunt-brute-forceHunt Missing/Weak Rate Limiting â login brute force, OTP/2FA brute force (10^6 keyspace), password-reset-token brute, credential stuffing, username/email enumeration via error-string / status-code / timing differences, weak password policy, missing CAPTCHA (CAPTCHA token replay / single-use / concurâĻ
elementalsouls / hunt-host-headerHunt Host Header Injection â password reset poisoning â ATO, web cache poisoning via unkeyed Host/X-Forwarded-Host, routing-based SSRF (Host picks upstream â cloud metadata/internal services), path-override SSRF/ACL-bypass (X-Original-URL/X-Rewrite-URL), OAuth redirect_uri/issuer poisoning, and absoâĻ
elementalsouls / hunt-sessionHunt Session Management vulnerabilities â session fixation (no regeneration on login), insufficient invalidation on logout / password-change / email-change, predictable or low-entropy session IDs, JWT-as-session with no exp/revocation, refresh-token rotation/reuse-detection gaps, OAuth/SSO session lâĻ
elementalsouls / hunt-tls-networkHunt TLS/SSL and DNS misconfigurations â missing HSTS (downgrade attack), weak cipher suites, expired/invalid certificates, mTLS bypass, missing SPF/DKIM/DMARC (email spoofing), DNS Zone Transfer (AXFR), dangling CNAME subdomain takeover, CAA records.
elementalsouls / okta-attackOkta-as-IdP red-team attack chain â tenant discovery, user enumeration (multiple vectors), authentication flow analysis (factors enumeration, push-notification fatigue, SMS bypass), password spray with lockout discipline, Okta-specific phishing primitives (kits, FastPass abuse, OIDC redirect_uri tamâĻ
elementalsouls / hunt-mfa-bypassHunt MFA / 2FA bypass â 7 distinct patterns. (1) MFA not enforced on sensitive endpoints (password change, email change accept without MFA challenge), (2) MFA-step skip via direct navigation to post-login URL, (3) MFA-token replay (same code accepted twice), (4) brute-force the 6-digit OTP without râĻ
elementalsouls / hunt-sstiHunt server-side template injection (SSTI) across Jinja2 (Flask/Django), Twig (Symfony), Freemarker (Java), ERB (Rails), Spring, Velocity, Mako, Thymeleaf, Smarty. Detection probes use double-curly and dollar-curly math expressions evaluated server-side.
elementalsouls / hunt-forgot-passwordHunt Forgot Password / Account Recovery Authentication Flaws â 5 distinct patterns: (1) username enumeration via different responses for valid vs invalid email, (2) reset token exposed directly in the API response body, (3) reset token not invalidated after use (replay), (4) password reset link workâĻ
aipoch / OpenAlexFind, verify, and synthesize scientific literature â from "what's the seminal paper for X" through full multi-source reviews. Covers grounding claims in real retrieved sources, avoiding fabricated citations, handling retractions, and calibrating confidence to evidence strength.
brycewang-stanford / python-econ-computingUse when writing Python code for DSGE models, HANK models, numerical economic computation, causal inference, or quantitative economic data analysis
brycewang-stanford / unpaywall-apiFind free legal full-text versions of scholarly articles via Unpaywall
JimLiu / baoyu-designCreate polished design artifacts as self-contained HTML: UI mockups, interactive prototypes, wireframes, landing pages, dashboards, app screens, mobile apps, slide decks (a.k.a.
davidondrej / cmuxControl the cmux macOS terminal app: workspaces, panes, surfaces, browsers, notifications, settings, and hooks. Use only when the user explicitly names cmux. Read before running any cmux command.
davidondrej / deepapiUse DeepAPI for all web search, deep research, and web scraping (websites, LinkedIn, GitHub, X/Twitter, YouTube, Instagram) instead of built-in search, research, fetch, or browser tools. Prefer dedicated platform endpoints over web search.
glitternetwork / pinmeUse this skill when the user mentions "pinme", or needs to upload files, store to IPFS, create/publish/deploy websites or full-stack services (including frontend pages, backend APIs, database storage, email sending, etc.), or any feature requiring backend database/server support.
glitternetwork / pinme-authUse when a PinMe project (Worker TypeScript) needs to integrate user authentication â creating email/password users, verifying id_tokens, querying user info, or listing users via Identity Platform auth proxy APIs.
davepoon / postwirePublish and schedule to TikTok, Instagram, YouTube, LinkedIn, X, Bluesky, Mastodon, Facebook, Threads, Reddit, Telegram and Discord through one PostWire API call â writing a separate, native version of the post for each network instead of sending identical text everywhere
davepoon / clawringPhone calling skill for OpenClaw: agent makes real outbound phone calls to users for alerts, briefings, reminders, and urgent notifications. Managed service, no Twilio setup needed. 100+ countries, 70+ voices.
davepoon / bulkpublish-social-schedulingSchedule, publish and analyze social posts across 15 networks via BulkPublish (MCP or REST) â Facebook, Instagram, X, TikTok, YouTube, Threads, Bluesky, Pinterest, Google Business, LinkedIn, Mastodon, Discord, Telegram, Tumblr, Snapchat
davepoon / linkedin-profile-refreshRefresh a LinkedIn profile for a job search from the user''s own resume â pick and check the profile photo, crop it locally to LinkedIn, Slack and GitHub sizes, and write a headline and About section grounded in the resume, then check that LinkedIn, GitHub and the resume tell the same story
