14,560 skills found · Page 116 of 486
deanpeters / battle-card-builderResearch and draft a competitive battle card from public evidence — every claim labeled and sourced
deanpeters / competitive-intel-watchScheduled delta monitoring against a prior competitive snapshot
deanpeters / competitive-research-snapshotResearch a competitive landscape with cited snapshots, a comparison matrix, and so-what implications
deanpeters / market-landscape-scanMap a market's segments, players, substitutes, and whitespace with cited evidence
deanpeters / porters-five-forcesRead an industry's structure through Porter's Five Forces with documented signals per rating, ending at the profit pool
deanpeters / pricing-packaging-trackerTrack competitor pricing and packaging as a diffable time series
deanpeters / product-sense-interview-answerStructure a spoken PM product-sense answer with assumptions, segmentation, pain-point prioritization, and MVP tradeoffs
deanpeters / autonomous-investigationThe protocol behind every investigation skill
deanpeters / executive-onboarding-playbookPlan a VP or CPO 30-60-90 day diagnostic onboarding path
deanpeters / finance-metrics-quickrefLook up SaaS finance metrics, formulas, and benchmarks fast
deanpeters / pm-skill-creatorDesign a new PM skill through guided conversation
deanpeters / stakeholder-engagement-advisorPlan engagement for a specific stakeholder
deanpeters / stakeholder-identificationMap every stakeholder before engaging anyone
deanpeters / stakeholder-mappingPrioritize stakeholders using two complementary grids
deanpeters / pestel-delta-monitorQuarterly re-scan of a prior PESTEL analysis
internet-court / internet-court-skillThe trust layer for agent-to-agent commerce — natural-language mandates, ERC-7710 delegated permissions, x402 payments, escrow, and dispute resolution as one open, catch-all Agent Skill / Claude Code plugin.
FailproofAI / failproofaiObservability and enforcement for AI agent harnesses. Capture every run and runtime reliability with policy enforcement.
open-multi-agent / open-multi-agentSelf-hosted TypeScript agent runtime with durable approvals and verifiable run records. Own it, approve it, audit it.
htdt / asset-genGenerate visual assets from text prompts: PNG images (Gemini / xAI Grok, or local Qwen-Image when installed), GLB 3D models (Tripo CLI), rigged characters, retargeted animations, and frame-by-frame animated sprites, plus background removal
ZSeven-W / openpencilThe world's first open-source AI-native vector design tool and the first to feature concurrent Agent Teams. Design-as-Code. Turn prompts into UI directly on the live canvas. A modern alternative to Pencil.
olimorris / codecompanion.nvim✨ AI Coding, Vim Style
SnailSploit / offensive-active-directoryActive Directory attack methodology for internal network red team engagements. Covers reconnaissance (BloodHound, PowerView, ADExplorer), credential abuse (Kerberoasting, ASREProasting, NTLM relay, LLMNR/NBT-NS poisoning), privilege escalation (ACL abuse, GPO abuse, unconstrained/constrained delegat…
SnailSploit / offensive-netexecUse this skill whenever the user asks about NetExec (nxc) — a network exploitation and post-exploitation tool for Active Directory environments.
SnailSploit / offensive-ai-securityAI/LLM security offensive checklist: prompt injection, jailbreaking, model extraction, training data poisoning, adversarial inputs, LLM-assisted attack automation, and AI system reconnaissance. Use when assessing AI/ML systems, red-teaming LLMs, or researching AI attack vectors.
SnailSploit / offensive-api-abuseAdvanced API exploitation methodology focused on business logic abuse and sophisticated attack patterns that bypass traditional security controls. Covers business logic bypass through API call chaining and workflow manipulation.
SnailSploit / offensive-api-securityComprehensive API security testing methodology covering REST, gRPC, and WebSocket attack surfaces. Addresses the full OWASP API Security Top 10 2023 including BOLA/IDOR, broken authentication, excessive data exposure, rate limiting bypass, BFLA, mass assignment, SSRF, and security misconfiguration.
SnailSploit / offensive-cicd-pipelineComprehensive CI/CD pipeline exploitation methodology covering GitHub Actions injection vectors (expression injection via PR titles and issue bodies, workflow_run event abuse, GITHUB_TOKEN over-scoping, composite action supply chain compromise), Jenkins attack paths (Groovy sandbox escapes, script c…
SnailSploit / offensive-cicd-secretsComprehensive secrets extraction methodology targeting CI/CD environments across all major platforms. Covers environment variable extraction from build contexts, exploitation of vault and secrets-manager misconfigurations (HashiCorp Vault, AWS Secrets Manager, Azure Key Vault, GCP Secret Manager), r…
SnailSploit / offensive-cloudCloud security attack methodology covering AWS, Azure, and GCP. Includes credential harvesting (IMDS, ~/.aws, env vars, leaked CI secrets, instance roles), enumeration with cloud-specific tools (pacu, ScoutSuite, Prowler, ROADtools, gcp_enum), privilege escalation paths (IAM PassRole, AssumeRole cha…
SnailSploit / offensive-container-escapeContainer escape and breakout techniques targeting Docker, containerd, and Podman runtimes. Covers privileged container breakout via host filesystem mount and nsenter, Docker socket abuse through /var/run/docker.sock, Linux capability exploitation including CAP_SYS_ADMIN, CAP_SYS_PTRACE, and CAP_NET…
