211 skills found · Page 4 of 8
yaklang / csrf-cross-site-request-forgeryCSRF testing playbook
wondelai / ux-heuristicsEvaluate and improve interface usability using heuristic analysis
LeoYeAI / add-newcli-provider为 OpenClaw 配置 code.newcli.com 作为模型源，包含四个 provider：newcli（Claude 主线路）、newcli-aws（Claude AWS 特价线路，消耗 1/24）、newcli-codex（GPT 系列）、newcli-gemini（Gemini 系列）。适用于需要接入 Claude 或 GPT 模型的场景。包含 provider 注册、模型定义、别名配置、fallback 链接入和验证的完整流程。当管理员说想"加 Claude"、"加 GPT"、"配 newcli"、"加 fox 源"、"接入 Claude 模型"、"接入 GPT 模型"、"加…
LeoYeAI / agent-architecture-guideBuild a more reliable OpenClaw agent with battle-tested architecture patterns. Covers WAL protocol, working buffer, memory anti-poisoning, layered memory compression, cron design, selective skill integration, and heartbeat batching.
LeoYeAI / agent-bomOpen security platform for agentic infrastructure — broad scanning plus MCP discovery, CVEs, blast radius, SBOMs, CIS benchmarks (AWS, Azure, GCP, Snowflake), OWASP/NIST/MITRE compliance, AISVS v1.0, MAESTRO layer tagging, and vector database security checks
LeoYeAI / openclaw-relayReal-time messaging across OpenClaw instances (channels, DMs, threads, reactions, search).
aipoch / mendelGregor Mendel — genetics mentor, patient experimenter, and gardener-monk. Trigger this skill when users ask about genetics, heredity, inheritance patterns, Mendelian laws, dominant/recessive traits, gene segregation, independent assortment, Punnett squares, classical genetics, or evolution-genetics…
cbrock84 / privacy-and-data-protectionAssesses and improves how personal data is collected, used, shared, and retained — data mapping, lawful basis, consent, processor agreements, subject rights, and breach obligations.
cbrock84 / sales-compensation-and-territoryDesigns quotas, territories and commission plans that produce the behavior the business needs — sizing territories against real potential, setting quotas people can hit often enough to believe in, choosing what to pay on, handling accelerators, draws, clawbacks and disputes, and changing a plan with…
rmyndharis / cost-optimizationOptimize cloud costs through resource rightsizing, tagging strategies, reserved instances, and spending analysis
coldteadotai / pr-lensPR Lens draws code as visually rich animated diagrams. It can represent diffs, architecture, data flows, and more.
jtydhr88 / sw-dialogueDialogue writing and revision for screen and stage (对白/台词/潜台词) — merged from Robert McKee's Dialogue (dialogue as action, said/unsaid/unsayable, exposition as ammunition, beat = action/reaction gerunds, flaws of credibility/language/content/design, character-specific vocabulary and grammar, seven sc…
utkusen / sast-businesslogicDetect business logic vulnerabilities in a codebase using a three-phase approach: threat modeling (domain analysis and attack scenarios), batched verify (check exploitable gaps in parallel subagents, 3 scenarios each), and merge (consolidate batch results).
uphiago / cloud-iam-deepGCP/AWS/Azure cloud exploitation -- Cloud Functions, Firestore, Cloud Run, S3, MinIO, Blob Storage, SA keys
gooseworks-ai / create-imessage-mockupRender pixel-accurate iMessage screenshot mockups (DM or group) from a thread JSON. Supports minimal, with-keyboard, and full iPhone 15 Pro frame variants. Outputs HTML + PNG.
gooseworks-ai / render-ios-keyboardRender a static iOS QWERTY keyboard as inline HTML+CSS sized for the 750-wide 9:16 stage. Includes the 3-suggestion bar, alpha keys, shift/backspace, 123/emoji/space/return row, and the bottom globe+mic strip.
gooseworks-ai / footage-cutlistWatch a brand's own product footage (screen recording, product film), pick the moment that proves each line with the user, and render those picks as a product layer — free, local.
gooseworks-ai / render-logo-equation-cardRender the logo-equation card ad (7s, 9:16) — partner icon + brand icon joined by a plus sign as an equation, a two-line "= outcome" headline, four numbered steps, and a CTA that hard-cuts in at 2s, on a static black card over timelapse b-roll, no voice.
BankrBot / aeon-vuln-scannerAudit trending repos for real exploitable vulnerabilities and disclose responsibly — Private Vulnerability Reporting for code flaws and verified secrets, public PRs only for already-disclosed dependency CVEs. Semgrep + TruffleHog + osv-scanner + Slither with reachability triage.
itsmostafa / ec2AWS EC2 virtual machine management — instances, security groups, key pairs, AMIs, EBS volumes, Auto Scaling Groups, Spot Instances, Session Manager, placement groups, and instance lifecycle automation.
itsmostafa / cloudwatchAWS CloudWatch monitoring for logs, metrics, alarms, and dashboards
itsmostafa / ecsAWS ECS container orchestration for running Docker containers
itsmostafa / cloudformationAWS CloudFormation infrastructure as code for stack management
itsmostafa / eksAWS EKS Kubernetes management for clusters, node groups, and workloads
itsmostafa / eventbridgeAWS EventBridge serverless event bus for event-driven architectures
itsmostafa / iamAWS Identity and Access Management for users, roles, policies, and permissions
itsmostafa / step-functionsAWS Step Functions workflow orchestration with state machines
Spark-To-Paper-Skills / ts-figure-svgPaperBanana+ — turn a paper's figure brief into a native, editable, publication-grade SVG. Stage 1 runs the OFFICIAL PaperBanana (dwzhu-pku/PaperBanana, pulled by `setup_paperbanana.py`, its own Retriever→Planner→Stylist→Visualizer→Critic pipeline) to produce candidate PNGs.
BagelHole / saas-security-postureAudit and harden your SaaS tool stack — enforce SSO, review OAuth grants, manage shadow IT, and secure admin accounts across Slack, GitHub, Google Workspace, and AWS
BagelHole / aws-secrets-managerStore and rotate secrets in AWS Secrets Manager. Configure automatic rotation, access policies, and application integration
