712 skills found · Page 7 of 24
Jeffallan / security-reviewerIdentifies security vulnerabilities, generates structured audit reports with severity ratings, and provides actionable remediation guidance
slavingia / mvpGuide building a minimum viable product the minimalist entrepreneur way — manual first, then processized, then productized
AgriciDaniel / ads-auditRun a source-grounded paid-advertising audit for one or more of Google, Meta, YouTube, LinkedIn, TikTok, Microsoft, Apple, Amazon, Reddit, Pinterest, Snapchat, and X.
google-labs-code / shadcn-uiExpert guidance for integrating and building applications with shadcn/ui components, including component discovery, installation, customization, and best practices.
google-labs-code / enhance-promptTransforms vague UI ideas into polished, Stitch-optimized prompts. Enhances specificity, adds UI/UX keywords, injects design system context, and structures output for better generation results.
Gentleman-Programming / gentle-ai-chained-prTrigger: PRs over 400 lines, stacked PRs, review slices. Split oversized changes into chained PRs that protect review focus.
android / android-intent-securityBest practices for Android Intent security. Use this skill when auditing
android / display-glasses-with-jetpack-compose-glimmerProvides guidelines for developing projected Android XR apps for display
lijigang / ljg-blind盲区扫描——读昨天你与 AI 的全部对话，照出暴露的思维盲区（不是不懂的知识，是让某类真相一直看不见的思维习惯），再从微信读书挑一本书的一章精准补上，落成一篇完整分析笔记。Use when user says '扫盲区', '盲区', '照盲区', '看看我的思维盲区', '我昨天想漏了什么', 'blind spot', 'ljg-blind', '/ljg-blind', or wants yesterday's AI conversations analyzed for cognitive blind spots plus a targeted weread chapter to fil…
trailofbits / substrate-vulnerability-scannerScans Substrate/Polkadot pallets for 7 critical vulnerabilities including arithmetic overflow, panic DoS, incorrect weights, and bad origin checks
trailofbits / atherisSets up and runs Atheris, the coverage-guided Python fuzzer built on libFuzzer. Covers TestOneInput harnesses, FuzzedDataProvider, instrumenting both pure Python and native C extensions, and running under AddressSanitizer
trailofbits / firebase-apk-scannerScans Android APKs for Firebase security misconfigurations including open databases, storage buckets, authentication issues, and exposed cloud functions
jakubkrehel / better-layoutHelps with grouping, alignment, reading order, responsive structure and room for translated text, so a layout holds up when it is resized, translated or mirrored.
tech-leads-club / ai-cold-outreachWhen the user wants to build an AI-powered outreach system, write cold emails, improve deliverability, or scale personalized outreach.
tech-leads-club / video-outreachWhen the user wants to build video-first cold outreach, create personalized video at scale, implement async selling, or use AI demo generation for prospecting.
tech-leads-club / subagent-creatorGuide for creating AI subagents with isolated context for complex multi-step workflows
tech-leads-club / web-quality-auditComprehensive web quality audit covering performance, accessibility, SEO, and best practices in a single review
deanpeters / eol-messageWrite a right-sized EOL announcement — brief notice through full phased comms — with rationale, customer impact, and next steps
deanpeters / agent-orchestration-advisorDesign multi-agent AI workflows with clear boundaries, handoffs, and monitoring
deanpeters / user-story-mappingCreate a user story map that lays out activities, steps, tasks, and release slices
deanpeters / eol-processRun a product sunset end to end — decide, align, plan, prepare, announce, close
deanpeters / eol-checklistBuild a phase-gated EOL checklist sized to the sunset, with a named owner on every item
deanpeters / eol-internal-enablementBuild the support FAQ, sales talking points, and objection handling teams need before an EOL announcement
deanpeters / positioning-statementCreate a Geoffrey Moore-style positioning statement
deanpeters / battle-card-builderResearch and draft a competitive battle card from public evidence — every claim labeled and sourced
SnailSploit / offensive-anti-forensicsAnti-forensics and evidence destruction techniques for red team operators conducting authorized engagements. Covers log clearing on Windows (wevtutil, Clear-EventLog, ETW provider patching) and Linux (journal truncation, utmp/wtmp binary editing, syslog manipulation), timestamp manipulation via Time…
SnailSploit / offensive-network-attacksDense description covering ARP spoofing, LLMNR/NBT-NS/mDNS poisoning, DNS poisoning, MITM attacks, VLAN hopping, DHCP attacks, 802.1X/NAC bypass, IPv6 attacks. Tools: Bettercap, Responder, mitm6, Ettercap, Wireshark. MITRE T1557, T1040
SnailSploit / offensive-lateral-movementComprehensive lateral movement tradecraft for authorized red team engagements covering credential-based movement (pass-the-hash, pass-the-ticket, overpass-the-hash), NTLM relay attacks (ntlmrelayx with PetitPotam, DFSCoerce, PrinterBug coercion), remote execution protocols (WMI, WinRM, DCOM, PsExec…
SnailSploit / offensive-persistenceComprehensive persistence tradecraft for authorized red team engagements covering Windows and Linux mechanisms. Windows techniques include registry Run/RunOnce keys, scheduled tasks, WMI event subscriptions, DLL search order hijacking, COM object hijacking, Startup folder drops, service creation, Se…
SnailSploit / offensive-phishingPhishing campaign execution methodology for authorized red team engagements. Covers end-to-end campaign lifecycle: infrastructure provisioning (GoPhish, SMTP relay configuration, domain acquisition and aging, SPF/DKIM/DMARC alignment), payload delivery vectors (Office macro weaponization, HTA droppe…
