███████╗██╗ ██╗██╗██╗ ██╗ ██████╗ █████╗ ███╗ ██╗██╗ ██╗
██╔════╝██║ ██╔╝██║██║ ██║ ██╔══██╗██╔══██╗████╗ ██║██║ ██╔╝
███████╗█████╔╝ ██║██║ ██║ ██████╔╝███████║██╔██╗ ██║█████╔╝
╚════██║██╔═██╗ ██║██║ ██║ ██╔══██╗██╔══██║██║╚██╗██║██╔═██╗
███████║██║ ██╗██║███████╗███████╗ ██║ ██║██║ ██║██║ ╚████║██║ ██╗
╚══════╝╚═╝ ╚═╝╚═╝╚══════╝╚══════╝ ╚═╝ ╚═╝╚═╝ ╚═╝╚═╝ ╚═══╝╚═╝ ╚═╝
Agent Skills 排行榜 · 关键词 + 语义搜索
| # | Skill | 仓库 | 描述 | 安装量 |
|---|---|---|---|---|
| 5401 | xcode-compilation-analyzer | avdlee/xcode-build-optimization-agent-skill |
Xcode Compilation Analyzer Use this skill when compile time, not just general project configuration, looks like the bottleneck. Core Rules Start from evidence, ideally a recent .build-benchmark/ artifact or raw timing-summary output. Prefer analysis-only compiler flags over persistent project edits during investigation. Rank findings by expected wall-clock impact, not cumulative compile-time impact. When compile tasks are heavily parallelized (sum of compile categories >> wall-clock median), not...
|
3.4K |
| 5402 | wayfinder | vinvcn/mattpocock-skills-zh-cn |
A loose idea has arrived — too big for one agent session, and wrapped in fog: the route from here to a plan isn't visible yet. This skill charts it: stand up a map, then work its tickets one at a time until the way to the goal is clear. The map is domain-agnostic — engineering work, course content, whatever fits the shape. The Map The map is a single compact Markdown file, one per wayfinding effort, git-tracked alongside the project. It is the canonical artifact — the whole map is loaded as cont...
|
3.4K |
| 5403 | lfg | everyinc/compound-engineering-plugin |
CRITICAL: You MUST execute every step below IN ORDER. Do NOT skip any required step. Do NOT jump ahead to coding or implementation. The plan phase (step 2) MUST be completed and verified BEFORE any work begins. Violating this order produces bad output. Optional: If the ralph-loop skill is available, run /ralph-loop:ralph-loop "finish all slash commands" --completion-promise "DONE" . If not available or it fails, skip and continue to step 2 immediately. /ce:plan $ARGUMENTS GATE: STOP. If ce:plan ...
|
3.4K |
| 5404 | understand-dashboard | egonex-ai/understand-anything |
/understand-dashboard Start the Understand Anything dashboard to visualize the knowledge graph for the current project. Instructions Determine the project directory and data directory: If $ARGUMENTS contains a path, use that as the project directory Otherwise, use the current working directory Prefer the legacy .understand-anything/ data directory when it exists, otherwise use .ua/ Use the Bash tool to resolve: PROJECT_ARG = " $ARGUMENTS " if [ -n " $PROJECT_ARG " ] ; then PROJECT_DIR = $( cd " ...
|
3.4K |
| 5405 | understand-explain | egonex-ai/understand-anything |
/understand-explain Provide a thorough, in-depth explanation of a specific code component. Graph Structure Reference The knowledge graph JSON has this structure: project — {name, description, languages, frameworks, analyzedAt, gitCommitHash} nodes[] — each has {id, type, name, filePath?, summary, tags[], complexity, languageNotes?} Code node types: file, function, class, module, concept Non-code node types: config, document, service, table, endpoint, pipeline, schema, resource Domain/knowledge n...
|
3.4K |
| 5406 | blueprint | wordpress/agent-skills |
Blueprint — Construction Plan Generator Turn a one-line objective into a step-by-step construction plan that any coding agent can execute cold. When to Use Breaking a large feature into multiple PRs with clear dependency order Planning a refactor or migration that spans multiple sessions Coordinating parallel workstreams across sub-agents Any task where context loss between sessions would cause rework Do not use for tasks completable in a single PR, fewer than 3 tool calls, or when the user says...
|
3.4K |
| 5407 | shieldadvanced | aws/agent-toolkit-for-aws |
AWS Shield Advanced Overview Domain expertise for configuring AWS Shield Advanced, the paid tier that adds enhanced Distributed Denial of Service (DDoS) protection, automatic application layer mitigation, attack visibility, expert support, and cost protection on top of the always-on AWS Shield Standard. Covers subscribing and protecting resources, automatic application layer mitigation, health-based detection, Shield Response Team (SRT) access and proactive engagement, event review and cost prot...
|
3.4K |
| 5408 | macro-regime-detector | tradermonty/claude-trading-skills |
Macro Regime Detector Detect structural macro regime transitions using monthly-frequency cross-asset ratio analysis. This skill identifies 1-2 year regime shifts that inform strategic portfolio positioning. When to Use User asks about current macro regime or regime transitions User wants to understand structural market rotations (concentration vs broadening) User asks about long-term positioning based on yield curve, credit, or cross-asset signals User references RSP/SPY ratio, IWM/SPY, HYG/LQD,...
|
3.4K |
| 5409 | shareplay-activities | dpearson2699/swift-ios-skills |
GroupActivities / SharePlay Build shared real-time experiences using the GroupActivities framework. SharePlay connects people over FaceTime or iMessage, synchronizing media playback, app state, or custom data. Targets Swift 6.2 / iOS 26+. Contents Setup Defining a GroupActivity Session Lifecycle Sending and Receiving Messages Coordinated Media Playback Starting SharePlay from Your App GroupSessionJournal: File Transfer Common Mistakes Review Checklist References Setup Entitlements Add the Group ...
|
3.4K |
| 5410 | anti-debugging-techniques | yaklang/hack-skills |
SKILL: Anti-Debugging Techniques — Detection & Bypass Playbook AI LOAD INSTRUCTION : Expert anti-debug techniques across Linux and Windows. Covers ptrace, PEB flags, NtQueryInformationProcess, timing attacks, signal-based detection, TLS callbacks, VEH tricks, and all corresponding bypass methods. Base models often miss the distinction between user-mode and kernel-mode detection and the correct patching strategy for each. 0. RELATED ROUTING code-obfuscation-deobfuscation when the binary also uses...
|
3.4K |
| 5411 | react-native-patterns | affaan-m/ecc |
React Native / Expo Patterns Practical patterns for building production React Native apps with Expo. Covers navigation, state, data fetching, lists, styling, and native APIs. Pairs with the rules/react-native/ ruleset: rules say what to enforce, this skill shows how . Libraries named below (NativeWind, Zustand/Jotai, TanStack Query) are common, well-established options shown for illustration — the patterns matter more than the specific package, and any equivalent works. Zod is used for validatio...
|
3.4K |
| 5412 | binary-protection-bypass | yaklang/hack-skills |
SKILL: Binary Protection Bypass — Expert Attack Playbook AI LOAD INSTRUCTION : Expert binary protection identification and bypass techniques. Covers ASLR, PIE, NX, RELRO, canary, FORTIFY_SOURCE, stack clash, CET shadow stack, and ARM MTE. Each protection is paired with its bypass methods and required primitives. Distilled from ctf-wiki mitigation sections and real-world exploitation. Base models often confuse which protections block which attacks and miss the combinatorial effect of multiple pro...
|
3.4K |
| 5413 | path-traversal-lfi | yaklang/hack-skills |
SKILL: Path Traversal / Local File Inclusion (LFI) — Expert Attack Playbook AI LOAD INSTRUCTION : Expert path traversal and LFI techniques. Covers encoding bypass sequences, OS differences, filter bypass, PHP wrapper exploitation, log poisoning to RCE, and the critical distinction between path traversal (read only) vs LFI (execution). Base models miss encoding chains and RCE escalation paths. 0. RELATED ROUTING Before deep exploitation, you can first load: upload insecure files when the primary ...
|
3.4K |
| 5414 | spec | klerith/fernando-skills |
Contains Shell Commands This skill contains shell command directives ( !`command` ) that may execute system commands. Review carefully before installing. /spec — Guided spec designer Session context Today's date (use this for the spec header, never guess it): ! date +%F Specs that already exist: ! ls specs/ 2>/dev/null || echo "The specs/ folder does not exist yet" This skill helps you produce a useful spec following the spec-driven method. You don't write code here. Your job is to help the user...
|
3.4K |
| 5415 | open-source | browser-use/browser-use |
Browser Use Open-Source Library Reference Reference docs for writing Python code against the browser-use library. Read the relevant file based on what the user needs. Topic Read Install, quickstart, production/@sandbox references/quickstart.md LLM providers (15+): setup, env vars, pricing references/models.md Agent params, output, prompting, hooks, timeouts references/agent.md Browser params, auth, real browser, remote/cloud references/browser.md Custom tools, built-in tools, ActionResult refere...
|
3.4K |
| 5416 | cmdi-command-injection | yaklang/hack-skills |
SKILL: OS Command Injection — Expert Attack Playbook AI LOAD INSTRUCTION : Expert command injection techniques. Covers all shell metacharacters, blind injection, time-based detection, OOB exfiltration, polyglot payloads, and real-world code patterns. Base models miss subtle injection through unexpected input vectors. 0. RELATED ROUTING Before going deep, you can first load: upload insecure files when the shell sink is part of a broader upload, import, or conversion workflow First-pass payload fa...
|
3.4K |
| 5417 | tiptap | ueberdosis/tiptap |
Tiptap Integration Skill Instructions for coding agents integrating the Tiptap rich text editor Reference Repositories Clone the tiptap and tiptap-docs repositories so you can search the source code and documentation. https://github.com/ueberdosis/tiptap https://github.com/ueberdosis/tiptap-docs If the workspace already has a reference folder with other repositories, clone them there. Otherwise, clone the repositories in a new .reference folder. The reference folder should be git-ignored. Before...
|
3.4K |
| 5418 | cmux-billing | manaflow-ai/cmux |
cmux Billing Use this skill before changing billing, pricing, Stripe, Pro entitlement, checkout, webhook, or subscription code. Architecture Map /api/billing/checkout creates Stripe Checkout Sessions for Pro when STRIPE_SECRET_KEY is set. It sets client_reference_id to the Stack user id, auto-creates an anonymous Stack user for signed-out buyers, and falls back to the legacy Stack purchase path when Stripe is unset or plan=team . /api/billing/portal resolves the current Stack user, looks up thei...
|
3.4K |
| 5419 | graphql-and-hidden-parameters | yaklang/hack-skills |
SKILL: GraphQL and Hidden Parameters — Introspection, Batching, and Undocumented Fields AI LOAD INSTRUCTION : Use this skill when GraphQL exists or when REST documentation suggests optional, deprecated, or undocumented fields. Focus on schema discovery, hidden parameter abuse, and batching as a force multiplier. 1. GRAPHQL FIRST PASS query { __typename } query { __schema { types { name } } } If introspection is restricted, continue with: field suggestions and error-based discovery known type pro...
|
3.4K |
| 5420 | prometheus-label-strategy | grafana/skills |
Prometheus Label Strategy Evaluator You are an expert in Prometheus label strategy. When asked to evaluate, audit, design, or improve a Prometheus label schema — or when a user asks how to prevent high cardinality at the source — use this guide to provide structured, actionable advice. This skill is about preventing bad labels at the source — in application instrumentation and in scrape target labels — so they never enter storage. It is not about stripping labels off metrics after they've been e...
|
3.4K |
| 5421 | threejs-gltf-loading | gamedev-skills/awesome-gamedev-agent-skills |
three.js glTF Loading Load .gltf / .glb models and play their animations in three.js, including compressed geometry (DRACO/Meshopt) and textures (KTX2). Patterns target r184 ; preserve an existing project's pinned release unless migration is requested. When to use Use to import a 3D model, add it to the scene, inspect its node hierarchy, and play baked/skinned animation clips with an AnimationMixer . Use when files are .gltf / .glb , or code imports GLTFLoader / DRACOLoader / KTX2Loader from thr...
|
3.4K |
| 5422 | unity-physics | gamedev-skills/awesome-gamedev-agent-skills |
Unity Physics (Rigidbody / PhysX) Make objects move, collide, and detect each other with Unity 6.3 LTS's built-in 3D physics (PhysX). Get the FixedUpdate discipline, trigger-vs-collision rules, and collision layers right. Targets Unity 6.3 LTS (6000.3) . Unity 6.3 LTS rename: Rigidbody.velocity is now Rigidbody.linearVelocity (the old name is deprecated). Code copied from older tutorials will warn or fail to compile. When to use Use when giving an object physical motion (forces, velocity, gravit...
|
3.4K |
| 5423 | vueuse-functions | vueuse/skills |
VueUse Functions This skill is a decision-and-implementation guide for VueUse composables in Vue.js / Nuxt projects. It maps requirements to the most suitable VueUse function, applies the correct usage pattern, and prefers composable-based solutions over bespoke code to keep implementations concise, maintainable, and performant. When to Apply Apply this skill whenever assisting user development work in Vue.js / Nuxt. Always check first whether a VueUse function can implement the requirement. Pre...
|
3.4K |
| 5424 | jobkorea-talent-search | nomadamas/k-skill |
jobkorea-talent-search 잡코리아 기업 인재검색에서 유료 열람/포지션 제안 전에 현재 보이는 마스킹 이력서와 목록 정보를 비교해 “열람할 만한 후보”를 추천한다. 개발자 전용이 아니며 모든 직무에 role-adaptive하게 적용한다. Use when 사용자가 잡코리아에서 후보를 찾아달라고 요청한다. 기업회원 로그인 세션에서 마스킹 이력서/목록을 비교해야 한다. 유료 열람 전 shortlist, 점수, 근거, 리스크, 후보 URL이 필요하다. Hard boundaries Allowed: 잡코리아 기업회원 브라우저 세션 열기 및 검색 필터 입력 현재 보이는 마스킹 목록/이력서/프로필 읽기 후보 분석, 점수화, shortlist 작성, 유료 열람 추천 Show more Installs 831 Repository nomadamas/k-skill GitHub Stars 6.6K First Seen Jun 21, 2026 Security Audits Gen Agent Trus...
|
3.4K |
| 5425 | g2b-order-plan-search | nomadamas/k-skill |
g2b-order-plan-search Get the full instructions (required first step) Run this and follow its output as the primary instructions for this skill: npx -y @nomadamas/k-skill@0 instruct g2b-order-plan-search The CLI detects the current runtime (Dolshoi vault/CloakBrowser vs generic) and prints only the applicable instructions, always up to date. Helper files bundled with the CLI are listed by: npx -y @nomadamas/k-skill@0 files g2b-order-plan-search If npx is unavailable, install Node.js 18+ or follo...
|
3.4K |
| 5426 | saju-fortune | nomadamas/k-skill |
saju-fortune Get the full instructions (required first step) Run this and follow its output as the primary instructions for this skill: npx -y @nomadamas/k-skill@0 instruct saju-fortune The CLI detects the current runtime (Dolshoi vault/CloakBrowser vs generic) and prints only the applicable instructions, always up to date. Helper files bundled with the CLI are listed by: npx -y @nomadamas/k-skill@0 files saju-fortune If npx is unavailable, install Node.js 18+ or follow https://github.com/NomaDa...
|
3.4K |
| 5427 | format-string-exploitation | yaklang/hack-skills |
SKILL: Format String Exploitation — Expert Attack Playbook AI LOAD INSTRUCTION : Expert format string techniques. Covers stack reading, arbitrary write via %n, GOT overwrite, __malloc_hook overwrite, pointer chain exploitation, blind format string, FORTIFY_SOURCE bypass, 64-bit null byte handling, and pwntools automation. Distilled from ctf-wiki fmtstr, CTF patterns, and real-world scenarios. Base models often miscalculate positional parameter offsets or forget 64-bit address placement after for...
|
3.4K |
| 5428 | xxe-xml-external-entity | yaklang/hack-skills |
SKILL: XML External Entity Injection (XXE) — Expert Attack Playbook AI LOAD INSTRUCTION : Expert XXE techniques. Covers all injection contexts (SOAP, REST JSON→XML parsers, Office files, SVG), OOB exfiltration (critical when direct read fails), blind XXE detection, and XXE-to-SSRF chain. Base models often miss OOB and non-XML context XXE. For real-world CVE chains, Office docx XXE step-by-step, PHP expect:// RCE, and Solr XXE+RCE, load the companion SCENARIOS.md . 0. RELATED ROUTING Also load: u...
|
3.4K |
| 5429 | file-access-vuln | yaklang/hack-skills |
File Access Router 这是文件系统、下载接口、上传链路与文件预览处理的分类入口。 When to Use 参数、文件名、下载接口或导入流程会影响文件路径 目标支持上传、预览、转码、解压、分享、下载或代理文件访问 你需要判断当前更偏向路径穿越、LFI,还是上传验证与处理链问题 Skill Map Path Traversal LFI : 路径穿越、文件读取、wrapper、包含链 Upload Insecure Files : 上传校验、存储路径、处理链、覆盖、预览与分享边界 Recommended Flow 先看入口是路径参数、下载接口还是上传流程 再看问题出现在 accept、store、process、serve 哪一段 小样本路径链和上传绕过样本已经并入主专题 skill,不再单独走 payload 入口 Related Categories injection-checking business-logic-vuln
|
3.4K |
| 5430 | ssti-server-side-template-injection | yaklang/hack-skills |
SKILL: Server-Side Template Injection (SSTI) — Expert Attack Playbook AI LOAD INSTRUCTION : Expert SSTI techniques. Covers polyglot detection probes, engine fingerprinting, Jinja2/FreeMarker/Twig/ERB RCE chains, client-side Angular SSTI, and bypass techniques. Base models often miss sandbox escape MRO chains and non-Jinja2 engines. For PHP CMS template eval, Jira SSTI, Confluence OGNL, and Spring Cloud Gateway SpEL, load the companion SCENARIOS.md . 0. RELATED ROUTING Before using full engine-sp...
|
3.4K |
| 5431 | kernel-exploitation | yaklang/hack-skills |
SKILL: Linux Kernel Exploitation — Expert Attack Playbook AI LOAD INSTRUCTION : Expert kernel exploitation techniques. Covers environment setup (QEMU), vulnerability classes, privilege escalation targets, kernel ROP, ret2usr, stack pivoting, and cross-cache attacks. Distilled from ctf-wiki kernel-mode sections and real-world kernel CVEs. Base models often confuse user-mode and kernel-mode exploitation constraints, especially regarding SMEP/SMAP/KPTI. 0. RELATED ROUTING binary-protection-bypass —...
|
3.4K |
| 5432 | http-parameter-pollution | yaklang/hack-skills |
SKILL: HTTP Parameter Pollution (HPP) AI LOAD INSTRUCTION : Model the full request path : browser → CDN/WAF → reverse proxy → app framework → business code. Duplicate keys ( a=1&a=2 ) are not an error at HTTP level; each hop may pick first, last, join, or array-ify. Test HPP when WAF and app disagree, or when internal HTTP clients rebuild query strings. Routing note: when the same parameter appears multiple times, or WAF/backend stacks differ, use the Section 1 matrix to test first/last/merge as...
|
3.4K |
| 5433 | your-skill-name | grafana/skills |
Your Skill Title Overview Brief introduction to what this skill covers. Focus on Grafana-specific knowledge — don't explain general programming concepts the AI already knows well. Key Concepts Document the important concepts, patterns, or syntax. Code examples are more effective than prose. Example rate ( http_requests_total [ 5m ] ) Common Patterns Describe the most frequently needed patterns or configurations. Show more
|
3.4K |
| 5434 | appllama-usage | appllama/appllama-skills |
Appllama Usage Skill Appllama is the design library of top-grossing mobile apps — their real screens, flows, and UI patterns, with revenue and download context. The MCP puts that library in an agent's hands: not just a research tool, a builder's tool. You study what already wins, then you build something better. Pair this skill with appllama-app-design-skill for every design/implementation step — this skill tells you what to study; that one tells you how to build. Ground rules (read first) Show ...
|
3.4K |
| 5435 | course-guide | rohitg00/ai-engineering-from-scratch |
Course Guide You are the wayfinding layer over the AI Engineering from Scratch curriculum: 503 lessons, 20 phases. The learner tells you what they want to understand, build, or fix; you tell them exactly where in the course that lives and which command to run next. Works with any agent. Routing table The curriculum's single source of truth is the Contents section of the repo README: every phase has a table listing each lesson's number, title, type (Build/Learn), language, and directory path. Rea...
|
3.4K |
| 5436 | saramin-talent-search | nomadamas/k-skill |
saramin-talent-search 사람인 인재풀에서 유료 열람/연락처 확인/제안 발송 전에 현재 보이는 마스킹 후보 정보를 비교해 “열람할 만한 후보”를 추천한다. 개발자 전용이 아니며 모든 직무에 role-adaptive하게 적용한다. Use when 사용자가 사람인 인재풀에서 후보를 찾아달라고 요청한다. 기업회원 로그인/2차 인증이 완료된 브라우저 세션에서 후보를 검색해야 한다. 유료 열람 전 shortlist, 점수, 근거, 리스크, 후보 URL이 필요하다. Hard boundaries Allowed: 사람인 인재풀 브라우저 세션 열기 및 검색 필터 입력 현재 보이는 마스킹 후보 목록/프로필/이력서 읽기 후보 분석, 점수화, shortlist 작성, 유료 열람 추천 Show more Installs 837 Repository nomadamas/k-skill GitHub Stars 6.6K First Seen Jun 21, 2026 Security Audits Gen Age...
|
3.4K |
| 5437 | job-posting-match | nomadamas/k-skill |
job-posting-match Get the full instructions (required first step) Run this and follow its output as the primary instructions for this skill: npx -y @nomadamas/k-skill@0 instruct job-posting-match The CLI detects the current runtime (Dolshoi vault/CloakBrowser vs generic) and prints only the applicable instructions, always up to date. Helper files bundled with the CLI are listed by: npx -y @nomadamas/k-skill@0 files job-posting-match If npx is unavailable, install Node.js 18+ or follow https://gi...
|
3.4K |
| 5438 | typescript-best-practices | alleneubank/claude-code |
TypeScript best practices Apply the type-system-discipline principle skill first; this skill grounds it in TypeScript syntax. Show more Installs 3.4K Repository cursor/plugins GitHub Stars 6.9K First Seen May 24, 2026 Security Audits Gen Agent Trust Hub Pass Socket Pass Snyk Pass
|
3.4K |
| 5439 | ce-debug | everyinc/compound-engineering-plugin |
Debug and Fix Find root causes, then fix them. This skill investigates bugs systematically — tracing the full causal chain before proposing a fix — and optionally implements the fix with test-first discipline. <bug_description> $ARGUMENTS </bug_description> Core Principles Investigate before fixing. Do not propose a fix until you can explain the full causal chain from trigger to symptom with no gaps. "Somehow X leads to Y" is a gap. Predictions for uncertain links. When the causal chain has unce...
|
3.4K |
| 5440 | c-review | trailofbits/skills |
C/C++ Security Review Runs in the main conversation (invoke via /c-review:c-review ). Orchestrator owns the Task* ledger as bookkeeping for retries; workers and judges have no Task tools. Workers and judges are named plugin subagents ( c-review:c-review-worker , c-review:c-review-dedup-judge , c-review:c-review-fp-judge ); tool sets are declared in plugins/c-review/agents/*.md . Findings are exchanged via markdown-with-YAML files in a shared output directory. When to Use Native C/C++ application...
|
3.4K |
| 5441 | chakra-ui-builder | chakra-ui/chakra-ui |
Chakra UI Builder You are building UI with Chakra UI v3 and helping developers set up Chakra UI in their projects. Your job is to produce clean, accessible, responsive code that fits the project — not generic boilerplate. Read the project context first, then build or set up. Step 1 — Read the project context Check package.json if available. Look for: Chakra UI version (use v3 patterns by default; only use v2 if explicitly on v2) Framework: Next.js App Router, Pages Router, Vite, plain React Type...
|
3.4K |
| 5442 | arc-region-switch | aws/agent-toolkit-for-aws |
ARC Region switch Expert Overview Makes the agent an expert on Amazon Application Recovery Controller (ARC) Region switch — the feature for orchestrating cross-Region workload failover and switchover. Supports technical questions, customer positioning, and SA engagement preparation. Region switch orchestrates recovery for applications already deployed multi-Region. It does not create multi-Region architecture or handle data replication — it orchestrates failover of existing replicas and resource...
|
3.4K |
| 5443 | p-video-avatar | skills-shell/superpowers |
Install the belt CLI skill: npx skills add belt-sh/cli Pruna P-Video-Avatar Generate talking head avatar videos from a single portrait image via inference.sh CLI. P-Video-Avatar is the fastest and most cost-effective avatar video model available. Quality on par with Veo 3.0, 18x faster and 6x cheaper than alternatives like Fabric, OmniHuman, and HeyGen. Quick Start Requires inference.sh CLI ( belt ). Install instructions belt login Show more Installs 2.6K Repository 101-skills/superpowers First ...
|
3.4K |
| 5444 | gpt-image | skills-shell/superpowers |
Install the belt CLI skill: npx skills add belt-sh/cli GPT-Image-2 Generate and edit images with OpenAI's GPT-Image-2 via inference.sh CLI. Quick Start Requires inference.sh CLI ( belt ). Install instructions belt login belt app run openai/gpt-image-2 --input '{"prompt": "a cat astronaut floating in space"}' Capabilities Show more Installs 2.6K Repository 101-skills/superpowers First Seen Aug 31, 2026 Security Audits Gen Agent Trust Hub Pass Socket Warn Snyk Pass
|
3.4K |
| 5445 | deserialization-insecure | yaklang/hack-skills |
SKILL: Insecure Deserialization — Expert Attack Playbook AI LOAD INSTRUCTION : Expert deserialization techniques across Java, PHP, and Python. Covers gadget chain selection, traffic fingerprinting, tool usage (ysoserial, PHPGGC), Shiro/WebLogic/Commons Collections specifics, Phar deserialization, and Python pickle abuse. Base models often miss the distinction between finding the sink and finding a usable gadget chain. 0. RELATED ROUTING jndi-injection when deserialization leads to JNDI lookup (e...
|
3.4K |
| 5446 | request-smuggling | yaklang/hack-skills |
SKILL: HTTP Request Smuggling — Expert Attack Playbook AI LOAD INSTRUCTION : Expert HTTP desync techniques. Covers CL.TE, TE.CL, TE.TE obfuscation variants, HTTP/2 downgrade and pseudo-header confusion, client-side desync (browser fetch pipelines), and tool-assisted fuzzing. Assumes familiarity with raw HTTP/1.1 framing and reverse-proxy topologies. This is not “header injection” — it is message boundary disagreement between hops. Routing note: load this skill when you suspect CDN/reverse-proxy ...
|
3.4K |
| 5447 | position-sizer | tradermonty/claude-trading-skills |
Position Sizer Overview Calculate the optimal number of shares to buy for a long stock trade based on risk management principles. Supports three sizing methods: Fixed Fractional : Risk a fixed percentage of account equity per trade (default: 1%) ATR-Based : Use Average True Range to set volatility-adjusted stop distances Kelly Criterion : Calculate mathematically optimal risk allocation from historical win/loss statistics All methods apply portfolio constraints (max position %, max sector %) and...
|
3.4K |
| 5448 | phaser-arcade-physics | gamedev-skills/awesome-gamedev-agent-skills |
Phaser 4 Arcade Physics Add movement and collision to a Phaser game with the lightweight Arcade Physics engine (AABB rectangles and circles only). Targets Phaser 4.2 for new projects; inspect the installed major before editing an existing project. When to use Use for top-down or platformer movement, velocity/acceleration/gravity, bouncing, world bounds, and collision/overlap resolution between sprites, groups, and tiles. Use when the scene enables physics: { default: 'arcade' } and code calls th...
|
3.4K |
| 5449 | unity-build-pipeline | gamedev-skills/awesome-gamedev-agent-skills |
Unity Build Pipeline Configure, script, and automate Unity 6.3 LTS player builds: scenes, platform target, scripting backend, stripping, and headless/CI builds. Targets Unity 6.3 LTS (6000.3) . When to use Use when setting up Build Settings/Profiles, choosing a platform and scripting backend (Mono vs IL2CPP), reducing build size with managed stripping, scripting a repeatable build with BuildPipeline.BuildPlayer , or wiring a CI/headless build. Use when the project has ProjectSettings/EditorBuild...
|
3.4K |
| 5450 | p-image | skills-shell/superpowers |
Pruna P-Image Generation Generate images with Pruna's optimized P-Image models via inference.sh CLI. Quick Start Requires inference.sh CLI ( infsh ). Get installation instructions: npx skills add inference-sh/skills@agent-tools infsh login infsh app run pruna/p-image --input '{"prompt": "a futuristic cityscape at sunset"}' P-Image Models Pruna optimizes AI models for speed without sacrificing quality. Model App ID Best For P-Image pruna/p-image Fast text-to-image, multiple aspect ratios P-Image-...
|
3.4K |