983 skills found ¡ Page 30 of 33
aiskillstore / firebase-development-add-featureThis skill should be used when adding features to existing Firebase projects. Triggers on "add function", "create endpoint", "new tool", "add api", "new collection", "implement", "build feature". Guides TDD workflow with test-first development, security rules, and emulator verification.
aiskillstore / firebase-development-validateThis skill should be used when reviewing Firebase code against security model and best practices. Triggers on "review firebase", "check firebase", "validate", "audit firebase", "security review", "look at firebase code". Validates configuration, rules, architecture, and security.
aiskillstore / fresh-eyes-reviewThis skill should be used as a mandatory final sanity check before git commit, PR creation, or declaring work done. Triggers on "commit", "push", "PR", "pull request", "done", "finished", "complete", "ship", "deploy", "ready to merge".
aiskillstore / security-patternsSecurity patterns and OWASP guidelines. Triggers on: security review, OWASP, XSS, SQL injection, CSRF, authentication, authorization, secrets management, input validation, secure coding.
aiskillstore / code-reviewUse this skill when user asks to "review code", "check for issues", "analyze code quality", "find bugs", or wants feedback on code implementation.
sanjay3290 / azure-devopsManage Azure DevOps projects, work items, repos, PRs, pipelines, wikis, test plans, security alerts, variable groups, environments/approvals, branch policies, and attachments
fcakyon / reviewer-defenseUse when the user wants to anticipate reviewer questions, select the strongest ablations to present, prepare rebuttals, or identify paper weaknesses before submission.
tobihagemann / review-codeReview code for bugs, security vulnerabilities, API misuse, consistency issues, simplicity problems, or test coverage gaps and low-value tests by running internal reviews and a peer review in parallel and returning combined findings.
tobihagemann / create-threat-modelAnalyze a codebase and produce a structured threat model at .turbo/threat-model.md covering assets, trust boundaries, attack surfaces with existing mitigations, attacker stories, and calibrated severity
jamditis / supply-chain-hardeningInstall-time cooldowns for npm/bun plus a sandboxed pre-install scan for bypasses. Use for supply-chain attacks or npm security.
prekuter / migrationBring an existing codebase into Dryforge, once. Reads the code, asks what code cannot show â business rules, security policy, what is intentional â and writes the project docs at the entry points agents already read
jamditis / api-hardeningAPI hardening for Express, FastAPI, and serverless. Use for rate limiting, CORS, input validation, API keys, or OWASP API Top 10.
jamditis / secure-authSecure authentication patterns (OWASP, NIST). Use for login, registration, password reset, sessions, JWT, OAuth, MFA, passkeys.
Microck / compliance-architectureEnterprise-grade compliance architecture for SOC 2, HIPAA, GDPR, PCI-DSS. Provides compliance checklists, security controls, audit guidance, and regulatory requirements for serverless and cloud architectures.
Microck / ai-llm-engineeringOperational skill hub for LLM system architecture, evaluation, deployment, and optimization (modern production standards). Links to specialized skills for prompts, RAG, agents, and safety.
Microck / blockchain-developerExpert blockchain developer specializing in smart contract development, DApp architecture, and DeFi protocols. Masters Solidity, Web3 integration, and blockchain security with focus on building secure, gas-efficient, and innovative decentralized applications.
pegasi-ai / reinsStop AI agents from doing things you didn't ask for.
ergrelet / windiff-version-diff-analysisGenerate and interpret security-research diffs between Windows versions or patch levels using this repo's WinDiff CLI and databases
hypnguyen1209 / coding-masteryUse when writing security tooling, exploits, scanners, or C2 in Python/C/Go/Rust/ASM â systems & network programming, automation, cryptography implementation
hypnguyen1209 / edr-evasionUse when bypassing EDR/AV to run a payload â hook unhooking, direct/indirect syscalls, PPID spoofing, process injection, AMSI bypass, ETW patching, memory/sleep encryption, behavioral evasion
hypnguyen1209 / initial-accessUse when gaining initial access to a target â phishing, payload delivery, HTML smuggling, ISO/IMG/MOTW bypass, supply-chain, credential stuffing, exposed-service exploitation
hypnguyen1209 / shellcode-devUse when writing position-independent shellcode or a loader â PEB walking, API hashing, null-byte avoidance, encoders, loaders, PE-to-shellcode conversion, cross-platform shellcode
hypnguyen1209 / red-team-opsUse when running a full red-team engagement end-to-end â initial access, persistence, privilege escalation, defense evasion, C2 infrastructure, EDR bypass, living-off-the-land
hypnguyen1209 / active-directory-attackUse when attacking a Windows Active Directory domain â Kerberos roasting/delegation, coercion + NTLM/Kerberos relay (CVE-2025-33073), ADCS ESC1-16 (EKUwu), ticket forgery & DCSync, dMSA BadSuccessor (CVE-2025-53779), BloodHound attack-path enumeration, domain dominance
hypnguyen1209 / ai-agent-redteamUse when red-teaming an agentic AI / LLM application â indirect & zero-click prompt injection, MCP tool poisoning, persistent memory poisoning, excessive-agency tool abuse, multi-turn jailbreaks, PyRIT/Garak/Promptfoo harnesses
hypnguyen1209 / ai-securityUse when attacking an AI/ML system or model â prompt injection & jailbreaks (Crescendo, Skeleton Key, Best-of-N), RAG/vector poisoning, agentic/MCP exploitation (CVE-2025-54136), ML supply-chain RCE (pickle CVE-2025-32434), model extraction / membership inference / adversarial suffixes (GCG)
hypnguyen1209 / browser-exploitationUse when building a client-side browser exploit â V8/JSC JIT type confusion to renderer R/W, V8 heap-sandbox escape, renderer-to-browser sandbox escape (Mojo IPC, GPU/Dawn/ANGLE), Electron/webview IPC abuse, 1-click RCE chains
hypnguyen1209 / cicd-supply-chainUse when attacking or auditing a CI/CD pipeline or software supply chain â pwn requests, poisoned pipeline execution, compromised/mutable-tag actions, dependency confusion, registry worms, runner backdoors, OIDC trust abuse, SLSA/provenance
hypnguyen1209 / cloud-securityUse when attacking AWS/Azure/GCP cloud â IAM/identity privilege escalation, IMDS/metadata SSRF, Entra device-code & PRT theft, GCP impersonation chains, Kubernetes/container escape, IaC/CI-CD federation abuse
hypnguyen1209 / container-k8s-escapeUse when breaking out of a container or escalating inside Kubernetes â runc/BuildKit CVEs, privileged/capability/cgroup misconfig escapes, NVIDIA GPU toolkit escape, K8s RBAC abuse, kubelet RCE, ingress/admission-controller RCE, node-to-cluster pivot
