1,866 skills found · Page 41 of 63
Anil-matcha / unsplashSearch Unsplash for free stock photos, browse by photographer or topic, and download images with proper attribution credit. Trigger phrases: unsplash, stock photo, find an image, download unsplash image.
Anil-matcha / vapiManage Vapi voice AI: assistants, phone numbers, calls. Outbound calls are high actuation and need exact-match confirmation; test numbers by default. Trigger phrases: vapi, voice assistant, outbound call, AI phone call.
Anil-matcha / veedRemove video backgrounds with VEED's direct developer API: standard, fast and green-screen endpoints. Trigger phrases: veed, remove video background, background removal, transparent video.
Anil-matcha / webflowManage Webflow sites: list sites and CMS collections, read and edit CMS items, and publish. Trigger phrases: webflow, webflow cms, publish webflow site.
Anil-matcha / ynabRead and write YNAB budgets: list budgets, accounts, balances, transactions, and categories; record transactions. Trigger phrases: ynab, budget, my budget, spending.
Anil-matcha / youtubeWork with YouTube: read channels, videos, search, playlist items; upload videos and post comments (with confirmation). Trigger phrases: youtube, videos, upload video, youtube comment.
Anil-matcha / zepWork with Zep's temporal memory: create users and threads, append messages, read distilled facts and history. Trigger phrases: zep, knowledge graph memory, conversation memory.
jsmastery-pro / developRun /develop to build a feature, UI or backend, from an approved design, a page, component, API, service, or data slice. If something load bearing is undecided and no spec records it, it stops and routes you to /architect; otherwise it reads the spec plus AGENTS.md, builds, and advances the scope.
uphiago / hunt-api-misconfigHunt API security misconfiguration — mass assignment, JWT attacks, prototype pollution, HTTP verb tampering. Mass assignment: send {is_admin:true, role:admin, verified:true} on profile/account/reset endpoints — server blindly applies.
uphiago / hunt-firebaseHunt Firebase / Firestore / GCP exploitation — Firebase API key discovery in JS bundles, anonymous auth via signUp endpoint, Firestore collection enumeration with anon key, Realtime Database read/write without auth, Firebase Storage bucket listing, Firebase Hosting detection, GCP service account JSO…
uphiago / hunt-supabaseHunt Supabase exploitation — Supabase anon key discovery in JS bundles, REST API table enumeration with anon key, Row Level Security (RLS) bypass via missing organization_id check, RPC function abuse returning cross-organization data, Storage bucket listing, Auth signUp/signIn with anon key, multi-t…
uphiago / wp-plugin-rest-auth-bypassScan WordPress REST API plugin endpoints for unauthenticated state-changing operations — discover write endpoints (POST/PUT/PATCH/DELETE) exposed without auth, enumerate all plugin routes, and test for unauthorized content publishing, settings modification, and data leakage.
uphiago / firebase-supabase-attackExploit Firebase/Supabase for data via JS config leak probe.
uphiago / cors-chain-automationUse when a bounded list of authorized API endpoints needs consistent CORS triage before browser validation.
uphiago / recon-playbookUse when starting or restructuring an authorized external web and API assessment.
uphiago / api-noauth-huntUse when an API may expose data or privileged operations without authentication.
uphiago / github-secret-huntingFind leaked API keys, tokens, and credentials in public GitHub repositories.
uphiago / hardcoded-credential-huntDetect hardcoded passwords in HTML forms, JavaScript, and API responses.
uphiago / humanize-automationHuman-like mouse, keyboard and scroll behavior for behavioral bot bypass.
uphiago / js-secrets-extractionAnalyze JS bundles and source maps for hardcoded secrets, API keys, JWTs, and internal endpoints
uphiago / port-service-discoveryNmap scan for MySQL, Redis, FTP, SSH, internal API services.
uphiago / scada-hikvision-isapiEnumerate Hikvision ISAPI endpoints on SCADA and IoT web interfaces.
uphiago / unauth-api-flow-hijackExploit unauthenticated multi-step API flows without credentials.
uphiago / visual-reconScreenshot all live hosts for rapid visual triage and technology fingerprinting.
uphiago / cloud-iam-deepGCP/AWS/Azure cloud exploitation -- Cloud Functions, Firestore, Cloud Run, S3, MinIO, Blob Storage, SA keys
uphiago / hunt-broken-function-level-authHunt broken function-level authorization via verb drift, route shadowing, and transport gaps.
uphiago / hunt-fastapiHunt FastAPI-specific vulnerabilities: dependency injection gaps, Pydantic coercion, and OpenAPI mining.
uphiago / hunt-mass-assignmentHunt mass assignment via sensitive field injection and ORM framework exploitation.
uphiago / hunt-mcp-securityHunt Model Context Protocol (MCP) vulnerabilities in AI-tool integration systems.
uphiago / hunt-nestjsHunt NestJS-specific vulnerabilities: guard bypass, decorator gaps, and microservice auth drift.
