230 skills found · Page 4 of 8
softaworks / draw-iodraw.io diagram creation, editing, and review. Use for .drawio XML editing, PNG conversion, layout adjustment, and AWS icon usage.
yaklang / websocket-securityWebSocket handshake, CSWSH, tooling (wsrepl, ws-harness, Burp), and common flaws
yaklang / authbypass-authentication-flawsAuthentication bypass testing playbook
yaklang / business-logic-vulnerabilitiesBusiness logic vulnerability playbook
yaklang / http2-specific-attacksHTTP/2 protocol-specific attack playbook
yaklang / waf-bypass-techniquesWAF bypass methodology and generic evasion techniques
yaklang / csrf-cross-site-request-forgeryCSRF testing playbook
wondelai / ux-heuristicsEvaluate and improve interface usability using heuristic analysis
LeoYeAI / add-newcli-provider为 OpenClaw 配置 code.newcli.com 作为模型源，包含四个 provider：newcli（Claude 主线路）、newcli-aws（Claude AWS 特价线路，消耗 1/24）、newcli-codex（GPT 系列）、newcli-gemini（Gemini 系列）。适用于需要接入 Claude 或 GPT 模型的场景。包含 provider 注册、模型定义、别名配置、fallback 链接入和验证的完整流程。当管理员说想"加 Claude"、"加 GPT"、"配 newcli"、"加 fox 源"、"接入 Claude 模型"、"接入 GPT 模型"、"加…
LeoYeAI / agent-architecture-guideBuild a more reliable OpenClaw agent with battle-tested architecture patterns. Covers WAL protocol, working buffer, memory anti-poisoning, layered memory compression, cron design, selective skill integration, and heartbeat batching.
LeoYeAI / agent-bomOpen security platform for agentic infrastructure — broad scanning plus MCP discovery, CVEs, blast radius, SBOMs, CIS benchmarks (AWS, Azure, GCP, Snowflake), OWASP/NIST/MITRE compliance, AISVS v1.0, MAESTRO layer tagging, and vector database security checks
LeoYeAI / openclaw-relayReal-time messaging across OpenClaw instances (channels, DMs, threads, reactions, search).
aws / aws-toolkit-vscodeAmazon Q, CodeCatalyst, Local Lambda debug, SAM/CFN syntax, ECS Terminal, AWS resources
aws / amazon-q-developer-cli✨ Agentic chat experience in your terminal. Build applications using natural language.
aipoch / mendelGregor Mendel — genetics mentor, patient experimenter, and gardener-monk. Trigger this skill when users ask about genetics, heredity, inheritance patterns, Mendelian laws, dominant/recessive traits, gene segregation, independent assortment, Punnett squares, classical genetics, or evolution-genetics…
patrickchugh / terravisionCloud architecture diagrams in both directions: AI prompt or JSON to diagram, diagram to Terraform via MCP server, and Terraform to diagram via CLI or CI/CD. Using Official AWS, Azure and GCP icons.
cbrock84 / privacy-and-data-protectionAssesses and improves how personal data is collected, used, shared, and retained — data mapping, lawful basis, consent, processor agreements, subject rights, and breach obligations.
cbrock84 / sales-compensation-and-territoryDesigns quotas, territories and commission plans that produce the behavior the business needs — sizing territories against real potential, setting quotas people can hit often enough to believe in, choosing what to pay on, handling accelerators, draws, clawbacks and disputes, and changing a plan with…
rmyndharis / cost-optimizationOptimize cloud costs through resource rightsizing, tagging strategies, reserved instances, and spending analysis
awslabs / cli-agent-orchestratorMulti-agent orchestration for AI coding CLIs — Claude Code, Kiro, Codex, and more, coordinated in isolated tmux sessions
coldteadotai / pr-lensPR Lens draws code as visually rich animated diagrams. It can represent diffs, architecture, data flows, and more.
jtydhr88 / sw-dialogueDialogue writing and revision for screen and stage (对白/台词/潜台词) — merged from Robert McKee's Dialogue (dialogue as action, said/unsaid/unsayable, exposition as ammunition, beat = action/reaction gerunds, flaws of credibility/language/content/design, character-specific vocabulary and grammar, seven sc…
utkusen / sast-businesslogicDetect business logic vulnerabilities in a codebase using a three-phase approach: threat modeling (domain analysis and attack scenarios), batched verify (check exploitable gaps in parallel subagents, 3 scenarios each), and merge (consolidate batch results).
uphiago / cloud-iam-deepGCP/AWS/Azure cloud exploitation -- Cloud Functions, Firestore, Cloud Run, S3, MinIO, Blob Storage, SA keys
thClaws / thClawsOpen-source AI agent harness in native Rust — GUI, CLI, headless, and webapp from one binary. Multi-provider, MCP, skills, plugins, agent teams.
gooseworks-ai / create-imessage-mockupRender pixel-accurate iMessage screenshot mockups (DM or group) from a thread JSON. Supports minimal, with-keyboard, and full iPhone 15 Pro frame variants. Outputs HTML + PNG.
gooseworks-ai / render-ios-keyboardRender a static iOS QWERTY keyboard as inline HTML+CSS sized for the 750-wide 9:16 stage. Includes the 3-suggestion bar, alpha keys, shift/backspace, 123/emoji/space/return row, and the bottom globe+mic strip.
gooseworks-ai / footage-cutlistWatch a brand's own product footage (screen recording, product film), pick the moment that proves each line with the user, and render those picks as a product layer — free, local.
gooseworks-ai / render-logo-equation-cardRender the logo-equation card ad (7s, 9:16) — partner icon + brand icon joined by a plus sign as an equation, a two-line "= outcome" headline, four numbered steps, and a CTA that hard-cuts in at 2s, on a static black card over timelapse b-roll, no voice.
BankrBot / aeon-vuln-scannerAudit trending repos for real exploitable vulnerabilities and disclose responsibly — Private Vulnerability Reporting for code flaws and verified secrets, public PRs only for already-disclosed dependency CVEs. Semgrep + TruffleHog + osv-scanner + Slither with reachability triage.
