2,258 skills found · Page 45 of 76
Anil-matcha / remove-bgRemove image backgrounds with the remove.bg API and check remaining credits. Trigger phrases: remove.bg, remove background, cutout image.
Anil-matcha / runwayRunway developer API: text-to-video, image-to-video, task polling, video upscale, lip-sync. Trigger phrases: runway, runway video, gen-4 video, runway upscale, runway lip sync.
Anil-matcha / shippoGet multi-carrier shipping rates, buy postage labels, track parcels, and refund labels via Shippo. Trigger phrases: shippo, shipping label, postage, shipping rates, track package.
Anil-matcha / shopifyWork with your Shopify store: view orders, products, customers; create products and discounts (with confirmation). No order or customer writes. Trigger phrases: shopify, shopify orders, shopify store, shopify discount.
Anil-matcha / spotifyWork with Spotify: read your profile, playlists, top tracks and artists, search the catalog, and (with confirmation) create playlists, add tracks, and save tracks to your library. Trigger phrases: spotify, my playlists, my top tracks, top artists, save track, search spotify.
Anil-matcha / supermemoryStore and recall with Supermemory: add memories and documents, hybrid search, upload files, tune settings. Trigger phrases: supermemory, memory engine, remember this.
Anil-matcha / ticktickRead and write TickTick: list projects and tasks, create tasks, complete and delete tasks. Trigger phrases: ticktick, task list, my tasks.
Anil-matcha / tiktokRead TikTok via API v2: your profile and video list. Posting is approval-gated and not shipped. Trigger phrases: tiktok, my tiktok, tiktok profile, tiktok videos.
Anil-matcha / transistorManage Transistor.fm podcast hosting, from episode drafts to audio uploads. Trigger phrases: transistor, transistor.fm, podcast hosting, publish episode.
Anil-matcha / twitchRead and write Twitch via the Helix API: channel profile, follower stats, live stream status, past videos, channel title and game updates, clip creation. Trigger phrases: twitch, stream stats, stream followers, channel update.
Anil-matcha / unsplashSearch Unsplash for free stock photos, browse by photographer or topic, and download images with proper attribution credit. Trigger phrases: unsplash, stock photo, find an image, download unsplash image.
Anil-matcha / vapiManage Vapi voice AI: assistants, phone numbers, calls. Outbound calls are high actuation and need exact-match confirmation; test numbers by default. Trigger phrases: vapi, voice assistant, outbound call, AI phone call.
Anil-matcha / veedRemove video backgrounds with VEED's direct developer API: standard, fast and green-screen endpoints. Trigger phrases: veed, remove video background, background removal, transparent video.
Anil-matcha / webflowManage Webflow sites: list sites and CMS collections, read and edit CMS items, and publish. Trigger phrases: webflow, webflow cms, publish webflow site.
Anil-matcha / ynabRead and write YNAB budgets: list budgets, accounts, balances, transactions, and categories; record transactions. Trigger phrases: ynab, budget, my budget, spending.
Anil-matcha / youtubeWork with YouTube: read channels, videos, search, playlist items; upload videos and post comments (with confirmation). Trigger phrases: youtube, videos, upload video, youtube comment.
Anil-matcha / zepWork with Zep's temporal memory: create users and threads, append messages, read distilled facts and history. Trigger phrases: zep, knowledge graph memory, conversation memory.
jsmastery-pro / developRun /develop to build a feature, UI or backend, from an approved design, a page, component, API, service, or data slice. If something load bearing is undecided and no spec records it, it stops and routes you to /architect; otherwise it reads the spec plus AGENTS.md, builds, and advances the scope.
uphiago / hunt-api-misconfigHunt API security misconfiguration — mass assignment, JWT attacks, prototype pollution, HTTP verb tampering. Mass assignment: send {is_admin:true, role:admin, verified:true} on profile/account/reset endpoints — server blindly applies.
uphiago / hunt-firebaseHunt Firebase / Firestore / GCP exploitation — Firebase API key discovery in JS bundles, anonymous auth via signUp endpoint, Firestore collection enumeration with anon key, Realtime Database read/write without auth, Firebase Storage bucket listing, Firebase Hosting detection, GCP service account JSO…
uphiago / hunt-supabaseHunt Supabase exploitation — Supabase anon key discovery in JS bundles, REST API table enumeration with anon key, Row Level Security (RLS) bypass via missing organization_id check, RPC function abuse returning cross-organization data, Storage bucket listing, Auth signUp/signIn with anon key, multi-t…
uphiago / wp-plugin-rest-auth-bypassScan WordPress REST API plugin endpoints for unauthenticated state-changing operations — discover write endpoints (POST/PUT/PATCH/DELETE) exposed without auth, enumerate all plugin routes, and test for unauthorized content publishing, settings modification, and data leakage.
uphiago / firebase-supabase-attackExploit Firebase/Supabase for data via JS config leak probe.
uphiago / cors-chain-automationUse when a bounded list of authorized API endpoints needs consistent CORS triage before browser validation.
uphiago / recon-playbookUse when starting or restructuring an authorized external web and API assessment.
uphiago / api-noauth-huntUse when an API may expose data or privileged operations without authentication.
uphiago / github-secret-huntingFind leaked API keys, tokens, and credentials in public GitHub repositories.
uphiago / hardcoded-credential-huntDetect hardcoded passwords in HTML forms, JavaScript, and API responses.
uphiago / humanize-automationHuman-like mouse, keyboard and scroll behavior for behavioral bot bypass.
uphiago / js-secrets-extractionAnalyze JS bundles and source maps for hardcoded secrets, API keys, JWTs, and internal endpoints
