1,400 skills found · Page 26 of 47
awslabs / cli-agent-orchestratorMulti-agent orchestration for AI coding CLIs — Claude Code, Kiro, Codex, and more, coordinated in isolated tmux sessions
actionbook / m14-mental-modelUse when learning Rust concepts. Keywords: mental model, how to think about ownership, understanding borrow checker, visualizing memory layout, analogy, misconception, explaining ownership, why does Rust, help me understand, confused about, learning Rust, explain like I'm, ELI5, intuition for, comin…
actionbook / m11-ecosystemUse when integrating crates or ecosystem questions. Keywords: E0425, E0433, E0603, crate, cargo, dependency, feature flag, workspace, which crate to use, using external C libraries, creating Python extensions, PyO3, wasm, WebAssembly, bindgen, cbindgen, napi-rs, cannot find, private, crate recommend…
daymade / cli-demo-generatorGenerates professional animated CLI demos as GIFs using VHS terminal recordings. Use to create terminal demos, record CLI workflows as GIFs, generate animated documentation, build demo tapes for README files, or showcase any command-line tool visually: record terminal / VHS tape / demo GIF / animate…
daymade / openclawAudits, diffs, copies, and lists providers/models, adds models, and switches the default model in local openclaw.json configs; diagnoses gateway/plugin failures (down, parked, broken, or out of date after an upgrade). Use for 虾/龙虾 config audits.
daymade / promptfoo-evaluationConfigures and runs LLM evaluation using Promptfoo framework
daymade / read-docx-review读取 Word/WPS 审阅后的 docx，把批注（comments）与修订（track changes）提取成可逐条裁决的 markdown 对账表或 JSON。触发场景：对方批注完的合同/协议/书稿/报告回来了要读意见；「提取 docx 批注」「审阅意见对账」「读一下修订」「谁批了什么、批在哪」；WPS 云文档/Word 在线协作 导出的审阅稿；收到带修订模式改动的回稿要看对方改了什么。核心保证：修订感知——python-docx 裸读会漏掉修订插入（w:ins）的内容、认不出整段删除（w:del），本 skill 走 OpenXML SDK 引擎 不漏。只读，不改对方文件。边界：生成/排…
FANzR-arch / qimen-dunjia奇门遁甲排盘、解盘、择时、方位判断与理论教学技能。用户明确提到奇门遁甲、时家奇门、 奇门排盘、奇门解盘、奇门择吉、方位选择、趋吉避凶，或要求“用奇门”分析一件具体事情时， 必须使用本技能。正式排盘前先做结构化访谈，再调用脚本完成固定计算，最后再做解读与建议。
uphiago / wp-plugin-rest-auth-bypassScan WordPress REST API plugin endpoints for unauthenticated state-changing operations — discover write endpoints (POST/PUT/PATCH/DELETE) exposed without auth, enumerate all plugin routes, and test for unauthorized content publishing, settings modification, and data leakage.
uphiago / deep-invadeDeep pentest WP: SSRF, plugin CVE, JS mine, port scan chain.
uphiago / firebase-supabase-attackExploit Firebase/Supabase for data via JS config leak probe.
uphiago / xmlrpc-exploitationExploit XMLRPC multicall, pingback for brute force and SSRF.
uphiago / api-noauth-huntUse when an API may expose data or privileged operations without authentication.
uphiago / exchange-owa-attackExchange/OWA NTLM AD leak, spray attack when mail subdomain.
uphiago / flask-werkzeug-attackExploit Flask/Werkzeug debugger exposure for traceback and SECRET leaks.
uphiago / github-secret-huntingFind leaked API keys, tokens, and credentials in public GitHub repositories.
uphiago / hardcoded-credential-huntDetect hardcoded passwords in HTML forms, JavaScript, and API responses.
uphiago / http2-header-impersonationSpoof HTTP/2 SETTINGS frames and pseudo-header order per browser profile.
uphiago / humanize-automationHuman-like mouse, keyboard and scroll behavior for behavioral bot bypass.
uphiago / origin-ip-discoveryDiscover origin IPs behind CDN/WAF via favicon hash, DNS history, and SSL certs.
uphiago / s3-minio-content-type-xssExploit public bucket Content-Type override for stored XSS on target origin.
uphiago / scada-hikvision-isapiEnumerate Hikvision ISAPI endpoints on SCADA and IoT web interfaces.
uphiago / stealth-browser-launchLaunch stealth Chromium with C++ fingerprint patches for anti-bot bypass.
uphiago / tls-fingerprint-impersonationSpoof TLS ClientHello and JA4 fingerprints for browser impersonation.
uphiago / unauth-api-flow-hijackExploit unauthenticated multi-step API flows without credentials.
uphiago / visual-reconScreenshot all live hosts for rapid visual triage and technology fingerprinting.
uphiago / hunt-fastapiHunt FastAPI-specific vulnerabilities: dependency injection gaps, Pydantic coercion, and OpenAPI mining.
uphiago / hunt-information-disclosureHunt error leakage, DVCS exposure, source maps, config files, and differential oracles.
uphiago / hunt-mass-assignmentHunt mass assignment via sensitive field injection and ORM framework exploitation.
uphiago / hunt-mcp-securityHunt Model Context Protocol (MCP) vulnerabilities in AI-tool integration systems.
