14,560 skills found Ā· Page 394 of 486
hypnguyen1209 / web-pentestUse when pentesting a web application or API ā injection, XSS/CSP, SSRF/cloud-metadata, HTTP desync & cache poisoning, SSTI/prototype-pollution/deserialization, JWT/OAuth/GraphQL/IDOR, business logic & single-packet race
hypnguyen1209 / windows-mitigations-bypassUse when bypassing a Windows exploit/platform mitigation ā ASLR/DEP/CFG/XFG/CET, ACG/CIG, WDAC/App Control, ASR/AMSI/ETW, PPL/LSA Protection, BYOVD/VBS/HVCI
hypnguyen1209 / wireless-rfUse when the target has a non-Wi-Fi radio attack surface ā Bluetooth/BLE (GATT, pairing, KNOB/BIAS/BleedingTooth), Zigbee/Thread/Matter & Z-Wave mesh (Touchlink, S0 downgrade), LoRaWAN/Sub-GHz LPWAN, SDR capture/replay/rolljam, smart locks/medical/IoT radios.
hypnguyen1209 / writing-offensive-skillsUse when creating or editing a skill in this offensive-claude repo ā for the SKILL.md conventions (trigger descriptions, technique map, runnable scripts, OPSEC/detection, red-flags tables, flowchart rules)
hypnguyen1209 / windows-boundariesUse when crossing a Windows security boundary or escaping a sandbox ā kernel/user crossing (win32k/dxgkrnl UAF CVE-2025-24983), BYOVD kernel R/W, UAC/COM elevation, AppContainer/LPAC & Chromium-Mojo sandbox escape (CVE-2025-2783), PPL bypass, RPC/ALPC & named-pipe impersonation
hypnguyen1209 / engagement-memoryUse when recalling prior techniques at recon/weaponize, or recording a confirmed finding at report ā cross-engagement pattern memory ranked by impact
hypnguyen1209 / threat-model-disciplineUse when starting an engagement, before exploitation, or whenever the attack surface changes ā build/validate the threat model and detect drift (new unreviewed surface) before advancing
hypnguyen1209 / using-offensive-claudeUse when starting any offensive-security engagement or task ā establishes how to find and invoke the right skill before any action (including clarifying questions, recon, exploitation, or reporting)
hypnguyen1209 / engagement-flowUse when starting, planning, or running a multi-phase pentest or red-team engagement ā to sequence the Cyber Kill Chain phases with quality gates instead of jumping straight to exploitation
hypnguyen1209 / scope-disciplineUse when about to send a request to, scan, enumerate, exploit, or otherwise interact with any host, IP, URL, or asset ā before the first packet reaches a target
codeaashu / free-claude-codeUse claude-code for free in the terminal, VSCode extension or via discord like openclaw
AThevon / compose-graphicsAdvanced Compose visuals - Material 3 Expressive motion physics, AGSL shaders (Android 13+), Canvas/DrawScope generative, graphicsLayer effects.
AThevon / compose-motionJetpack Compose animation foundations - animate*AsState, AnimatedVisibility, Crossfade, updateTransition, SharedTransitionLayout, gestures.
AThevon / compose-multiplatformCompose Multiplatform / KMP patterns - expect/actual composables, platform-specific code, density and font handling cross-target, iOS/Android/Desktop interop.
AThevon / desktop-principlesDesktop-specific UX principles - hover states, pointer precision, keyboard shortcuts, multi-window, focus management. Covers macOS, Windows, Linux, web desktop.
AThevon / swiftui-graphicsAdvanced SwiftUI visuals - Metal shaders (.colorEffect, .layerEffect, .distortionEffect), .visualEffect, Liquid Glass (iOS 26), Canvas, holographic and CRT effects.
AThevon / swiftui-motionSwiftUI animation foundations - withAnimation, transitions, matchedGeometryEffect, PhaseAnimator, KeyframeAnimator, springs, gestures.
AThevon / ui-ux-pro-maxUI/UX design-system intelligence - 84 styles, 192 palettes, 74 font pairings, 25 charts, 99 UX guidelines across 22 stacks (searchable dataset + CLI). Internal genjutsu module: loaded by /genjutsu:cast and /genjutsu:paint, not invoked directly.
AThevon / mobile-principlesMobile-specific UX principles - touch targets, hover-less doctrine, thumb zones, safe areas, gestures, mobile perf budgets. Cross-platform (web mobile, iOS, Android).
AThevon / orchestrationRunning a team of subagents on one design build: clone briefs, disjoint file ownership, isolated builds, the evidence packet, review lenses, the fix plan, verdicts, cold eyes and the stop rule, with the workflow templates bunshin runs.
AThevon / bunshinSummon shadow clones: genjutsu's full-scale pipeline for a whole website or web app, from scratch or as a full redesign. Harvests the client's real material, researches in parallel, lets Impeccable lead the direction and genjutsu the motion, builds the pages with parallel agents, then loops fixes, vā¦
AThevon / castCast genjutsu on a UI - creative coding for motion, micro-interactions, and wow-factor. Scans the stack, proposes an interaction thesis, loads the right sub-skills, implements the illusion. Adapts to Web, Android (Compose), Apple (SwiftUI).
AThevon / paintPaint a complete visual universe with genjutsu - art direction brainstorm, design system, implementation, audit. Anti-AI-slop design pipeline. Adapts to Web, Android (Compose), Apple (SwiftUI).
staskh / ib_0dteFind and place the best 0DTE (zero-days-to-expiration) credit spreads from Interactive Brokers. Default execution route is the EMA9/EMA21 + VIX/VXN regime strategy (ema_vix_0dte.py), which auto-selects bull_put or bear_call from a bare EMA cross and skips the trade when the vol index is elevated (VXā¦
staskh / ib-stop-lossDownside stop-loss management for PMCC, naked LEAPS, and stock positions in IB. Computes stop prices, detects alerts, and places conditional combo orders. Dry-run by default. Requires TWS or IB Gateway running locally.
staskh / ib-trailing-stopServer-side trailing stop management for stocks and naked LEAPS in IB. Places native TRAIL orders that auto-ratchet the stop as price climbs. Dry-run by default. Requires TWS or IB Gateway running locally.
staskh / ib-pmcc-advisorAnalyze PMCC (Poor Man's Covered Call / diagonal spread) positions from IB portfolio. For each diagonal spread, reports short leg risk (delta, IV, assignment probability), daily P&L projections, top-3 roll candidates, and a side-by-side comparison table. Requires TWS or IB Gateway running locally.
staskh / scanner-pmccScan stocks for Poor Man's Covered Call (PMCC) suitability. Analyzes LEAPS and short call options for delta, liquidity, spread, IV, yield, trend direction, and earnings proximity
staskh / ib-trades-historyFetch trade executions from Interactive Brokers filtered by account, date range, or symbol. Supports live API (~7 days history) and FlexReport (full history)
staskh / ib-collarGenerate tactical collar strategy reports for protecting PMCC positions through earnings or high-risk events. Requires TWS or IB Gateway running locally.
