14,554 skills found ¡ Page 274 of 486
utkusen / sast-missingauthDetect missing authentication and broken function-level authorization vulnerabilities in a codebase using a three-phase approach: recon (map endpoints and the role/permission system), batched verify (check auth/authz in parallel subagents, 3 endpoints each), and merge (consolidate batch results).
utkusen / sast-pathtraversalDetect path traversal vulnerabilities in a codebase using a three-phase approach: recon (find file-loading sinks with dynamic paths), batched verify (trace user input and mitigations in parallel subagents, 3 sinks each), and merge (consolidate batch results).
utkusen / sast-rceDetect Remote Code Execution (RCE) vulnerabilities in a codebase using a three-phase approach: recon (find dangerous execution sinks), batched verify (trace user input to sinks in parallel subagents, 3 sinks each), and merge (consolidate batch results).
utkusen / sast-sqliDetect SQL injection vulnerabilities in a codebase using a three-phase approach: recon (find unsafe SQL construction sites), batched verify (trace user input to those sites in parallel subagents, 3 sites each), and merge (consolidate batch results).
utkusen / sast-ssrfDetect Server-Side Request Forgery (SSRF) vulnerabilities in a codebase using a three-phase approach: recon (find outbound call sites), batched verify (trace user input to destinations in parallel subagents, 3 sites each), and merge (consolidate batch results).
utkusen / sast-sstiDetect Server-Side Template Injection (SSTI) vulnerabilities in a codebase using a three-phase approach: recon (find template rendering sites that use dynamic strings), batched verify (trace user input to those sites in parallel subagents, 3 candidates each), and merge (consolidate batch results).
utkusen / sast-xssDetect Cross-Site Scripting (XSS) vulnerabilities in a codebase using a three-phase approach: recon (find HTML/JS/DOM sink sites), batched verify (trace user input to sinks in parallel subagents, 3 sink sites each), and merge (consolidate batch results).
utkusen / sast-xxeDetect XML External Entity (XXE) vulnerabilities in a codebase using a three-phase approach: recon (find XML parsing sites without external-entity hardening), batched verify (trace user input to each site in parallel subagents, 3 sites each), and merge (consolidate batch results).
Anil-matcha / aqaraRead and control Aqara smart home devices: plugs, switches, lights, AC, locks, curtains, scenes. Trigger phrases: aqara, aqara hub, aqara lock, aqara curtain.
Anil-matcha / smartthingsRead status and send commands to Samsung SmartThings devices: lights, locks, thermostats, sirens, garage doors. Trigger phrases: smartthings, samsung smart home, unlock the door, smartthings thermostat.
Anil-matcha / tesla-fleet-apiControl Tesla vehicles through the official Tesla Fleet API: lock/unlock, remote start, charge control, preconditioning, honk, trunk. Trigger phrases: tesla car, tesla vehicle, lock my tesla, precondition tesla, tesla charge.
utkusen / sast-hardcodedsecretsDetect hardcoded sensitive data (API keys, access tokens, private keys, passwords, etc.) in publicly accessible code â frontend JavaScript, mobile apps, client-side bundles, and HTML templates.
Anil-matcha / deepseekUse DeepSeek's chat API: list models, run chat completions, check account balance. Trigger phrases: deepseek, deepseek chat, deepseek api.
Anil-matcha / mistralMistral AI (La Plateforme) API: chat completions, embeddings, document OCR, and model listing via api.mistral.ai. Trigger phrases: mistral, La Plateforme, mistral chat, mistral ocr, mistral embeddings.
Anil-matcha / xaiQuery Grok chat completions and list available Grok models through the xAI API. Trigger phrases: xai, grok, chat with grok, grok model.
utkusen / sast-businesslogicDetect business logic vulnerabilities in a codebase using a three-phase approach: threat modeling (domain analysis and attack scenarios), batched verify (check exploitable gaps in parallel subagents, 3 scenarios each), and merge (consolidate batch results).
Anil-matcha / cartesiaCartesia text-to-speech: synthesize speech audio and browse voices. Trigger phrases: cartesia, text to speech, TTS, synthesize voice, voiceover.
Anil-matcha / cohesivityBackend infrastructure for a project via Cohesivity (cohesivity.ai). Provisions Postgres, Redis, object storage, vector database, hosting, auth, realtime, email inbox, and AI model APIs through one HTTP API. No account or API keys required to start.
Anil-matcha / deepgramDeepgram speech AI: transcribe audio to text and synthesize speech (TTS). Trigger phrases: deepgram, transcribe audio, speech to text, STT, deepgram tts.
Anil-matcha / ecovacsControl Ecovacs DEEBOT robot vacuums through the Ecovacs Open Platform: device list, status, battery, cleaning start/pause/stop, dock return. Trigger phrases: ecovacs, deebot, robot vacuum, start cleaning, dock vacuum.
Anil-matcha / elaiElai AI avatar videos: list avatars, check videos, and render avatar videos. Trigger phrases: elai, avatar video, AI presenter, talking head video.
Anil-matcha / elevenlabsElevenLabs: check subscription usage, list voices, and generate text-to-speech audio. TTS spends quota and needs --confirm. Trigger phrases: elevenlabs, eleven labs, voice api, tts, text to speech.
Anil-matcha / figmaLook up your Figma user, read file metadata, and post comments on files. Trigger phrases: figma, figma file, design file.
Anil-matcha / frontWork with Front: list inboxes and conversations, reply to conversations, assign teammates, add tags. Writes need --confirm. Trigger phrases: front, front inbox, shared inbox, support inbox.
Anil-matcha / google-nestRead Nest device state (thermostats, cameras, doorbells) and set thermostat modes and setpoints via the Smart Device Management API. Trigger phrases: google nest, nest thermostat, nest camera, sdm.
Anil-matcha / homeyRead and control devices on a Homey Pro hub or Homey cloud account: lights, thermostats, locks, blinds, Flows. Trigger phrases: homey, homey pro, homey flow, athom.
Anil-matcha / hubitatRead and control devices on a Hubitat Elevation hub via the Maker API: lights, locks, thermostats, garage doors, HSM. Trigger phrases: hubitat, maker api, hubitat lock, hubitat hub.
Anil-matcha / hume-aiHume AI Octave TTS and EVI speech-to-speech configs: synthesize speech and manage EVI configs. Trigger phrases: hume, hume ai, octave tts, EVI config.
Anil-matcha / lodestoneUse Lodestone (lodestone.studiocorsair.com) as one MCP connector for Meta Ads, Instagram insights, Google Analytics 4, email, Telegram, Typefully, and image/video generation.
Anil-matcha / moonrakerControl a Klipper 3D printer through Moonraker: print jobs, file uploads, emergency stop, smart plugs, and gated raw G-code. Trigger phrases: moonraker, klipper, mainsail, fluidd, start print, pause print, emergency stop.
