1,116 skills found ¡ Page 33 of 38
hypnguyen1209 / web-pentestUse when pentesting a web application or API â injection, XSS/CSP, SSRF/cloud-metadata, HTTP desync & cache poisoning, SSTI/prototype-pollution/deserialization, JWT/OAuth/GraphQL/IDOR, business logic & single-packet race
hypnguyen1209 / windows-mitigations-bypassUse when bypassing a Windows exploit/platform mitigation â ASLR/DEP/CFG/XFG/CET, ACG/CIG, WDAC/App Control, ASR/AMSI/ETW, PPL/LSA Protection, BYOVD/VBS/HVCI
hypnguyen1209 / wireless-rfUse when the target has a non-Wi-Fi radio attack surface â Bluetooth/BLE (GATT, pairing, KNOB/BIAS/BleedingTooth), Zigbee/Thread/Matter & Z-Wave mesh (Touchlink, S0 downgrade), LoRaWAN/Sub-GHz LPWAN, SDR capture/replay/rolljam, smart locks/medical/IoT radios.
hypnguyen1209 / writing-offensive-skillsUse when creating or editing a skill in this offensive-claude repo â for the SKILL.md conventions (trigger descriptions, technique map, runnable scripts, OPSEC/detection, red-flags tables, flowchart rules)
hypnguyen1209 / windows-boundariesUse when crossing a Windows security boundary or escaping a sandbox â kernel/user crossing (win32k/dxgkrnl UAF CVE-2025-24983), BYOVD kernel R/W, UAC/COM elevation, AppContainer/LPAC & Chromium-Mojo sandbox escape (CVE-2025-2783), PPL bypass, RPC/ALPC & named-pipe impersonation
hypnguyen1209 / engagement-memoryUse when recalling prior techniques at recon/weaponize, or recording a confirmed finding at report â cross-engagement pattern memory ranked by impact
hypnguyen1209 / threat-model-disciplineUse when starting an engagement, before exploitation, or whenever the attack surface changes â build/validate the threat model and detect drift (new unreviewed surface) before advancing
hypnguyen1209 / using-offensive-claudeUse when starting any offensive-security engagement or task â establishes how to find and invoke the right skill before any action (including clarifying questions, recon, exploitation, or reporting)
hypnguyen1209 / engagement-flowUse when starting, planning, or running a multi-phase pentest or red-team engagement â to sequence the Cyber Kill Chain phases with quality gates instead of jumping straight to exploitation
hypnguyen1209 / scope-disciplineUse when about to send a request to, scan, enumerate, exploit, or otherwise interact with any host, IP, URL, or asset â before the first packet reaches a target
arpitg1304 / robotics-securitySecurity hardening and best practices for robotic systems, covering SROS2 DDS security, network segmentation, secrets management, secure boot, and the physical-cyber safety intersection.
arpitg1304 / ros2Comprehensive best practices, design patterns, and common pitfalls for ROS2 (Robot Operating System 2) development. Use this skill when building ROS2 nodes, packages, launch files, components, or debugging ROS2 systems.
spencermarx / github-workflow-automationAdvanced GitHub Actions workflow automation with AI swarm coordination, intelligent CI/CD pipelines, and comprehensive repository management
spencermarx / Pair ProgrammingAI-assisted pair programming with multiple modes (driver/navigator/switch), real-time verification, quality monitoring, and comprehensive testing. Supports TDD, debugging, refactoring, and learning sessions.
spencermarx / code-review-swarmDeploy specialized AI agents to perform comprehensive, intelligent code reviews that go beyond traditional static analysis.
spencermarx / V3 Swarm Coordination15-agent hierarchical mesh coordination for v3 implementation. Orchestrates parallel execution across security, core, and integration domains following 10 ADRs with 14-week timeline.
spencermarx / github-code-reviewComprehensive GitHub code review with AI-powered swarm coordination
spencermarx / sparc-security-reviewđĄī¸ Security Reviewer - You perform static and dynamic audits to ensure secure code practices. You flag secrets, poor mod...
spencermarx / V3 Security OverhaulComplete security architecture overhaul for claude-flow v3. Addresses critical CVEs (CVE-1, CVE-2, CVE-3) and implements secure-by-default patterns. Use for security-first v3 implementation.
jaechang-hits / anndata-data-structureAnnotated matrices for single-cell genomics. Stores X with obs/var metadata, layers, embeddings (obsm/varm), graphs (obsp/varp), uns. Use for .h5ad/.zarr I/O, concatenation, scverse integration. For analysis use scanpy; for probabilistic models use scvi-tools.
agamm / owasp-securityReviews code for security vulnerabilities and guides secure implementation using OWASP Top 10:2025, ASVS 5.0, the OWASP Top 10 for LLM Applications (2026), and the OWASP Top 10 for Agentic Applications (2026)
giuseppe-trisciuoglio / spring-boot-security-jwtProvides JWT authentication and authorization patterns for Spring Boot 3.5.x covering token generation with JJWT, Bearer/cookie authentication, database/OAuth2 integration, and RBAC/permission-based access control using Spring Security 6.x
giuseppe-trisciuoglio / aws-cloudformation-cloudfrontProvides AWS CloudFormation patterns for CloudFront distributions, origins (ALB, S3, Lambda@Edge, VPC Origins), CacheBehaviors, Functions, SecurityHeaders, parameters, Outputs and cross-stack references
giuseppe-trisciuoglio / spring-boot-openapi-documentationProvides patterns to generate comprehensive REST API documentation using SpringDoc OpenAPI 3.0 and Swagger UI in Spring Boot 3.x applications
giuseppe-trisciuoglio / unit-test-security-authorizationProvides patterns for unit testing Spring Security with `@PreAuthorize`, `@Secured`, `@RolesAllowed`. Validates role-based access control and authorization policies
giuseppe-trisciuoglio / react-patternsProvides comprehensive React 19 patterns for Server Components, Server Actions, useOptimistic, useActionState, useTransition, concurrent features, Suspense boundaries, and TypeScript integration.
giuseppe-trisciuoglio / aws-cloudformation-securityProvides AWS CloudFormation patterns for security infrastructure including KMS encryption, Secrets Manager, IAM security, VPC security, ACM certificates, parameter security, outputs, and secure cross-stack references
giuseppe-trisciuoglio / aws-cli-beastProvides advanced AWS CLI patterns for managing EC2, Lambda, S3, DynamoDB, RDS, VPC, IAM, and CloudWatch. Generates bulk operation scripts, automates cross-service workflows, validates security configurations, and executes JMESPath queries for complex filtering.
giuseppe-trisciuoglio / typescript-security-reviewProvides security review capability for TypeScript/Node.js applications, validates code against XSS, injection, CSRF, JWT/OAuth2 flaws, dependency CVEs, and secrets exposure
giuseppe-trisciuoglio / spring-boot-rest-api-standardsProvides REST API design standards and best practices for Spring Boot projects
