3,616 skills found ¡ Page 74 of 121
Anil-matcha / webflowManage Webflow sites: list sites and CMS collections, read and edit CMS items, and publish. Trigger phrases: webflow, webflow cms, publish webflow site.
Anil-matcha / ynabRead and write YNAB budgets: list budgets, accounts, balances, transactions, and categories; record transactions. Trigger phrases: ynab, budget, my budget, spending.
jsmastery-pro / syncRun /sync as the last step after a change is complete, around merge, to keep durable knowledge current. Updates root and nested AGENTS.md, reconciles the scope from repo evidence, and flags specs the change made stale. Surgical edits only: it adds lines, and rewrites single lines it owns.
jsmastery-pro / debugRun /debug to find and fix a bug's root cause: a test failing for an unclear reason, /check verify finding a failure, or behavior being wrong. Runs a reproduce, localize, hypothesize, test, fix, verify loop, makes the minimal fix, and hands a regression test to /test.
yaojingang / yao-open-skills-syncManage the yao-open-skills public collection. Use this skill whenever the user wants to evaluate whether a local skill should be open sourced, import a local skill into the yao-open-skills repository, register which skills are already public, track GitHub sync status, or update the collection READMEâĻ
jsmastery-pro / architectRun /architect when choosing between approaches, designing a feature or page, picking a tech stack, or when /develop says a decision is owed, anytime a load bearing technical decision is unmade. Asks deep questions, recommends an answer, and writes a build spec to docs/specs/. Owns all spec files.
jsmastery-pro / scopeRun /scope to turn a product idea into a living, coarse scope in docs/scope/ and keep it current: plan a new product, plan the next slice, enroll one named feature, or run with no argument to reconcile after shipping and queue what is next. Seeds WHAT to build; /architect designs, /develop builds.
jsmastery-pro / checkConfirm a change before merge. `/check verify` drives the real app to prove behavior against the spec (every acceptance criterion met, every surface built). `/check review` runs a senior code review on a fresh model, one that did not write the code. Verify after /develop, review before a PR.
uphiago / api-noauth-huntUse when an API may expose data or privileged operations without authentication.
uphiago / cache-attackPoison CDN cache or deceive when X-Cache header is detected.
uphiago / cms-detectionIdentify CMS, frameworks, and server technology stacks on live hosts.
uphiago / exchange-owa-attackExchange/OWA NTLM AD leak, spray attack when mail subdomain.
uphiago / hardcoded-credential-huntDetect hardcoded passwords in HTML forms, JavaScript, and API responses.
uphiago / http2-header-impersonationSpoof HTTP/2 SETTINGS frames and pseudo-header order per browser profile.
uphiago / js-secrets-extractionAnalyze JS bundles and source maps for hardcoded secrets, API keys, JWTs, and internal endpoints
uphiago / origin-ip-discoveryDiscover origin IPs behind CDN/WAF via favicon hash, DNS history, and SSL certs.
uphiago / hunt-broken-function-level-authHunt broken function-level authorization via verb drift, route shadowing, and transport gaps.
uphiago / hunt-information-disclosureHunt error leakage, DVCS exposure, source maps, config files, and differential oracles.
uphiago / google-dorks-catalogHigh-precision Google dorks for exposed configs, secrets, and credentials -- real-world validated
uphiago / subdomain-takeover-huntDetect and verify subdomain takeover via dangling CNAME to unclaimed services.
uphiago / vhost-enumerationDiscover hidden virtual hosts via Host header fuzzing and SSL certificate parsing.
uphiago / hunt-metrics-exposureHunt public /metrics, /health, and actuator endpoints leaking AI usage, DB pools, and operational intelligence.
AI-Builder-Club / crabbox-setupScaffold an isolated CLOUD dev box per agent (via crabbox + Daytona) for any codebase â the parallel-safe counterpart to dev-local-setup. Each agent gets its own full stack (own DB + dev server) and an in-box browser for e2e, so concurrent loops never collide on ports/state.
AI-Builder-Club / agent-context-auditAudit a repo's agent context â CLAUDE.md files, codebase docs, skills, and tool/MCP designs â against Anthropic's Claude 5 context-engineering guidance ("unhobbling": Anthropic cut ~80% of Claude Code's system prompt with no eval loss).
AI-Builder-Club / verifier-setupSet a repo up to prove engineering-task work actually works before it ships. Investigates the repo, ensures a one-command dev stack (`dev-local`) exists, asks whether verification runs locally or in a sandbox (crabbox), confirms/installs the driver (the `playwright-cli` skill for web by default).
AI-Builder-Club / open-agent-teamsDelegate tasks to ANY CLI agent (claude, codex, aider, ...) running in a detached tmux session, with a race-safe done-signal protocol and multi-turn iteration
AI-Builder-Club / new-loopSpin up a new loop (domain) in a file-based knowledge base â bootstrap the substrate if it's missing, gather the loop's charter, scaffold domains/<loop>/README.md, then do ONE real test run and record it in the loop's Timeline and LOG.md
GanyuanRan / receiving-code-reviewUse when receiving code review feedback before implementing suggestions, especially when feedback is unclear, risky, disputed, or technically questionable.
GanyuanRan / requesting-code-reviewUse when requesting independent code review, after implementation slices, before merging high-risk work, or when verification exposes evidence, baseline, architecture, compatibility, or retirement uncertainty.
GanyuanRan / using-git-worktreesUse when a coding task needs a concurrent checkout, unrelated dirty state blocks safe branch switching, or the user or repository explicitly requires a worktree.
