256 skills found · Page 8 of 9
Sushegaad / tisaxExpert TISAX (Trusted Information Security Assessment Exchange) advisor for the automotive supply chain — the ENX/VDA assessment regime that OEMs like VW, BMW, and Mercedes-Benz require from suppliers and service providers.
rampstackco / product-analytics-setupHow to actually instrument product analytics correctly. Event taxonomy, property design, naming conventions, schema versioning, identity stitching, funnel design, retention cohorts, North Star metric selection, dashboard hygiene, instrumentation debt, and the failure modes that produce data nobody t…
laolaoshiren / dep-auditor审计 Node.js、Python、Go、Rust、JVM、Ruby 项目的依赖漏洞、版本健康度与许可证事实；当用户要求检查 package.json、lockfile、requirements、go.mod、Cargo.toml、pom.xml、Gemfile.lock，或生成不改依赖的中文审计报告时使用
taracodlabs / virustotalVirusTotal aggregates results from 70+ antivirus engines and threat intelligence feeds. Check file hashes, URLs, domains, and IP addresses for known malware, phishing, and suspicious activity.
coreyhaines31 / company-brainYour team's shared, AI-ready knowledge base — people, companies, meetings, SOPs, and decisions structured so an agent can answer on your team's behalf. Team-scope sibling to second-brain — personal notes go there, not here.
borghei / knowledge-opsAudit and repair an internal knowledge base — staleness, ownership gaps, orphans, duplication, and findability
borghei / agentic-evaluation-frameworkThis skill should be used when the user asks to "evaluate LLM output quality", "set up LLM-as-judge", "build an eval rubric", "compare model outputs pairwise", or "measure agent quality".
borghei / dependency-auditorScan project dependencies for vulnerabilities, license issues, and upgrade opportunities across Python, Node.js, Go, and Rust
borghei / skill-security-auditorSecurity audit and vulnerability scanning for AI agent skills before install. Detects prompt injection, dangerous code, exfiltration, credential harvesting, and supply chain risks
nWave-ai / nw-source-verificationSource reputation tiers, cross-referencing methodology, bias detection, and citation format requirements
michael-denyer / show-me-your-workKeep a reviewable decision trail for long-running or unattended work: a TSV log with one row per decision (what, why, evidence, result). Local by default; commit it when a reviewer needs the trail to trust the result.
vibeeval / factcheck-guardUse this skill when making any factual claim about the codebase — existence, absence, or behavior. Converts the claim-verification rule into a systematic action protocol that prevents false assertions from grep-only results.
lllllllama / ai-research-reproductionRigor Reproduce compatible skill slug for README-first deep learning repository reproduction
aiskillstore / python-fastapiPython FastAPI development with uv package manager, modular project structure, SQLAlchemy ORM, and production-ready patterns.
tobihagemann / create-threat-modelAnalyze a codebase and produce a structured threat model at .turbo/threat-model.md covering assets, trust boundaries, attack surfaces with existing mitigations, attacker stories, and calibrated severity
jamditis / accessibility-complianceWeb accessibility patterns for news and academic sites. Use for WCAG audits, alt text, accessible data viz, and assistive tech.
jamditis / mobile-debuggingRemote JavaScript console and debugging on mobile. Use for phone/tablet console errors, responsive testing, Eruda, and vConsole.
jamditis / python-pipelinePython data pipelines with modular architecture. Use for content workflows, batch jobs, or Google Sheets/Drive integration.
jamditis / web-scrapingAuthorized web scraping with fallback cascades and access-failure handling. Use for social media, yt-dlp, CAPTCHA or 403 blocks.
jamditis / page-monitoringWeb page change detection, availability tracking, and RSS feed generation. Use to monitor changes, downtime, or make a feed.
jamditis / web-archivingWeb archiving and retrieval via Wayback Machine and Archive.today. Use to preserve content, reach dead pages, or save evidence.
jamditis / brainstormingExplores intent and design before implementation. MUST use before creating or modifying any feature, component, or behavior.
jamditis / data-journalismAcquire, clean, analyze, verify, visualize, and explain data for journalism. Use for reproducible data reporting, statistical analysis, maps, or public methodology.
jamditis / source-verificationVerify sources, claims, images, video, documents, interviews, and synthetic media with SIFT and a durable evidence trail. Use before relying on uncertain material.
jamditis / email-request-intakeUse to process a concrete request from an allowlisted email intake route while preserving thread context, authority, and delivery evidence.
hypnguyen1209 / coding-masteryUse when writing security tooling, exploits, scanners, or C2 in Python/C/Go/Rust/ASM — systems & network programming, automation, cryptography implementation
hypnguyen1209 / cicd-supply-chainUse when attacking or auditing a CI/CD pipeline or software supply chain — pwn requests, poisoned pipeline execution, compromised/mutable-tag actions, dependency confusion, registry worms, runner backdoors, OIDC trust abuse, SLSA/provenance
hypnguyen1209 / vulnerability-analysisUse when auditing source code for vulnerabilities — drive CodeQL/Semgrep/Joern to taint untrusted data source-to-sink across injection, memory safety, deserialization/prototype-pollution, secrets/crypto/authz/race, and supply-chain risks
hypnguyen1209 / writing-offensive-skillsUse when creating or editing a skill in this offensive-claude repo — for the SKILL.md conventions (trigger descriptions, technique map, runnable scripts, OPSEC/detection, red-flags tables, flowchart rules)
hypnguyen1209 / threat-model-disciplineUse when starting an engagement, before exploitation, or whenever the attack surface changes — build/validate the threat model and detect drift (new unreviewed surface) before advancing
