███████╗██╗ ██╗██╗██╗ ██╗ ██████╗ █████╗ ███╗ ██╗██╗ ██╗
██╔════╝██║ ██╔╝██║██║ ██║ ██╔══██╗██╔══██╗████╗ ██║██║ ██╔╝
███████╗█████╔╝ ██║██║ ██║ ██████╔╝███████║██╔██╗ ██║█████╔╝
╚════██║██╔═██╗ ██║██║ ██║ ██╔══██╗██╔══██║██║╚██╗██║██╔═██╗
███████║██║ ██╗██║███████╗███████╗ ██║ ██║██║ ██║██║ ╚████║██║ ██╗
╚══════╝╚═╝ ╚═╝╚═╝╚══════╝╚══════╝ ╚═╝ ╚═╝╚═╝ ╚═╝╚═╝ ╚═══╝╚═╝ ╚═╝
Agent Skills 排行榜 · 关键词 + 语义搜索
| # | Skill | 仓库 | 描述 | 安装量 |
|---|---|---|---|---|
| 4751 | skill-scanner | getsentry/skills |
Skill Security Scanner Scan agent skills for security issues before adoption. Detects prompt injection, malicious code, excessive permissions, secret exposure, and supply chain risks. Important : Run all scripts from the repository root using the full path via ${CLAUDE_SKILL_ROOT} . Bundled Script scripts/scan_skill.py Static analysis scanner that detects deterministic patterns. Outputs structured JSON. uv run ${CLAUDE_SKILL_ROOT} /scripts/scan_skill.py < skill-directory > Returns JSON with find...
|
2.7K |
| 4752 | ads-math | agricidaniel/claude-ads |
PPC Financial Calculator & Modeling Process Ask the user what calculation they need (or detect from context) Collect required inputs (from pasted data, exports, or verbal description) Perform calculations with clear formulas shown Present results with interpretation and recommendations Flag any concerning metrics or benchmarks Calculators 1. CPA Calculator CPA = Total Spend / Total Conversions Show more
|
2.7K |
| 4753 | m07-concurrency | actionbook/rust-skills |
Concurrency Layer 1: Language Mechanics Core Question Is this CPU-bound or I/O-bound, and what's the sharing model? Before choosing concurrency primitives: What's the workload type? What data needs to be shared? What's the thread safety requirement? Error → Design Question Show more
|
2.7K |
| 4754 | performance-review | anthropics/knowledge-work-plugins |
/performance-review If you see unfamiliar placeholders or need to check which tools are connected, see CONNECTORS.md . Generate performance review templates and help structure feedback. Usage /performance-review $ARGUMENTS Modes /performance-review self-assessment Generate self-assessment template /performance-review manager [employee] Manager review template for a specific person /performance-review calibration Calibration prep document If no mode is specified, ask what ty...
|
2.7K |
| 4755 | nx-run-tasks | nrwl/nx-ai-agents-config |
You can run tasks with Nx in the following way. Keep in mind that you might have to prefix things with npx/pnpx/yarn if the user doesn't have nx installed globally. Look at the package.json or lockfile to determine which package manager is in use. For more details on any command, run it with --help (e.g. nx run-many --help , nx affected --help ). Understand which tasks can be run You can check those via nx show project <projectname> --json , for example nx show project myapp --json . It contains...
|
2.7K |
| 4756 | process-optimization | anthropics/knowledge-work-plugins |
Process Optimization Analyze existing processes and recommend improvements. Analysis Framework 1. Map Current State Document every step, decision point, and handoff Identify who does what and how long each step takes Note manual steps, approvals, and waiting times 2. Identify Waste Waiting : Time spent in queues or waiting for approvals Rework : Steps that fail and need to be redone Handoffs : Each handoff is a potential point of failure or delay Over-processing : Steps that add no value Manual ...
|
2.7K |
| 4757 | security-ownership-map | openai/skills |
Security Ownership Map Overview Build a bipartite graph of people and files from git history, then compute ownership risk and export graph artifacts for Neo4j/Gephi. Also build a file co-change graph (Jaccard similarity on shared commits) to cluster files by how they move together while ignoring large, noisy commits. Requirements Python 3 networkx (required; community detection is enabled by default) Install with: pip install networkx Workflow Scope the repo and time window (optional --since/--u...
|
2.7K |
| 4758 | auth-sec | yaklang/hack-skills |
Authentication and Authorization Router This is the routing entry point for authentication, sessions, and authorization boundaries. Use it to decide whether the issue is mainly login mechanics, object-level authorization, browser trust boundaries, or identity protocols such as OAuth/JWT/SAML before going deeper. When to Use The target includes login, registration, password reset, 2FA, sessions, JWT, OAuth, or SSO You suspect object authorization flaws, cross-tenant access, cross-origin reads, CS...
|
2.7K |
| 4759 | elasticsearch-file-ingest | elastic/agent-skills |
Elasticsearch File Ingest Stream-based ingestion and transformation of large data files (NDJSON, CSV, Parquet, Arrow IPC) into Elasticsearch. Features & Use Cases Stream-based : Handle large files without running out of memory High throughput : 50k+ documents/second on commodity hardware Cross-version : Seamlessly migrate between ES 8.x and 9.x, or replicate across clusters Formats : NDJSON, CSV, Parquet, Arrow IPC Transformations : Apply custom JavaScript transforms during ingestion (enrich, sp...
|
2.7K |
| 4760 | byok-custom-model | starchild-ai-agent/official-skills |
🔑 BYOK — Custom LLM Models Register a custom LLM endpoint to the model selector. Bypasses the platform proxy — the user supplies their own API key, the agent hits the vendor / aggregator directly (OpenRouter, DashScope, Anthropic native, self-hosted, etc.). This is a script-mode skill — no tools registered. Read this file, then call the exports from a bash block. See also config/context/references/model-onboarding.md — broader model selection / OAuth context chatgpt-codex-onboarding skill — for ...
|
2.7K |
| 4761 | equity-research | anthropics/financial-services |
Equity Research Analysis You are an expert equity research analyst. Combine IBES consensus estimates, company fundamentals, historical prices, and macro data from MCP tools into structured research snapshots. Focus on routing tool outputs into a coherent investment narrative — let the tools provide the data, you synthesize the thesis. Core Principles Every piece of data must connect to an investment thesis. Pull consensus estimates to understand market expectations, fundamentals to assess busine...
|
2.7K |
| 4762 | vibe-security | raroque/vibe-security-skill |
Audit code for security vulnerabilities commonly introduced by AI code generation. These issues are prevalent in "vibe-coded" apps — projects built rapidly with AI assistance where security fundamentals get skipped. AI assistants consistently get these patterns wrong, leading to real breaches, stolen API keys, and drained billing accounts. This skill exists to catch those mistakes before they ship. The Core Principle Never trust the client. Every price, user ID, role, subscription status, featur...
|
2.7K |
| 4763 | injection-checking | yaklang/hack-skills |
Injection Testing Router 这是输入进入危险解释器或执行环境时的分类入口。 它适合在确认“这是注入类问题”之后,继续判断更偏向浏览器上下文、数据库、模板引擎、服务端请求、XML 解析器还是系统命令。 When to Use 输入会进入 HTML、JS、SQL、模板、URL 提取器、XML 解析器或 shell 你还没决定应该先走 XSS、SQLi、SSRF、XXE、SSTI、CMDi 还是 NoSQL 你需要按输入流向选择正确的深度专题 skill Skill Map XSS Cross Site Scripting SQLi SQL Injection SSRF Server Side Request Forgery XXE XML External Entity SSTI Server Side Template Injection CMDi Command Injection NoSQL Injection Deserialization Insecure JNDI Injection Expression Language Injection CRLF I...
|
2.7K |
| 4764 | design-brief | nexu-io/open-design |
This skill creates a design brief through structured conversation. You may skip steps if they are not necessary. Example prompts "Write a brief for the onboarding flow" "I need to plan a settings page before I start building" "Help me define the direction for a marketing landing page" "Brief this: a dashboard that shows project health metrics" Process Ask the user for a detailed description of what they want to build, who it is for, and any constraints or ideas they already have. Explore the exi...
|
2.7K |
| 4765 | animate | delphi-ai/animate-skill |
Analyze a feature and strategically add animations and micro-interactions that enhance understanding, provide feedback, and create delight. MANDATORY PREPARATION Context Gathering (Do This First) You cannot do a great job without having necessary context, such as target audience (critical), desired use-cases (critical), brand personality/tone (playful vs serious, energetic vs calm), and performance constraints. Attempt to gather these from the current thread or codebase. If you don't find exact ...
|
2.7K |
| 4766 | kibana-alerting-rules | elastic/agent-skills |
Kibana Alerting Rules Core Concepts A rule has three parts: conditions (what to detect), schedule (how often to check), and actions (what happens when conditions are met). When conditions are met, the rule creates alerts , which trigger actions via connectors . Authentication All alerting API calls require either API key auth or Basic auth. Every mutating request must include the kbn-xsrf header. kbn-xsrf : true Required Privileges all privileges for the appropriate Kibana feature (e.g., Stack R...
|
2.7K |
| 4767 | social-media | langchain-ai/deepagents |
Social Media Content Skill This skill provides guidelines for creating engaging social media content that drives engagement and shares. When to Use This Skill Use this skill when asked to: Write a LinkedIn post Create a Twitter/X thread Draft social media announcements Repurpose blog content for social Research First (Required) Before writing any social media content, you MUST delegate research: Use the task tool with subagent_type: "researcher" In the description, specify BOTH the topic A...
|
2.7K |
| 4768 | loopy | forward-future/loopy |
Loopy Help the user discover loop opportunities in existing engineering work, reuse a published Loop Library loop when one fits, audit or repair an existing loop, craft a new one through a focused interview, run it with evidence, learn from the result, or prepare it for Loop Library. Treat a loop as a feedback system with terminal states, not as permission for endless autonomy. Route the request Choose the smallest useful path: Show more Installs 693 Repository forward-future/loopy GitHub Stars ...
|
2.7K |
| 4769 | privacy-policy | phuryn/pm-skills |
Privacy Policy Generator You are an experienced data privacy and compliance specialist. Your role is to help draft comprehensive, clear, and compliant privacy policies for digital products and services. Purpose Draft a detailed privacy policy for a product or service. The policy covers data types handled, applicable jurisdiction, and clearly marks clauses that require legal review. Provide plain-language explanations to ensure accessibility and transparency. Important Disclaimer This is for info...
|
2.7K |
| 4770 | kubernetes-pentesting | yaklang/hack-skills |
SKILL: Kubernetes Pentesting — Expert Attack Playbook AI LOAD INSTRUCTION : Expert Kubernetes attack techniques. Covers API server access, RBAC escalation, service account token abuse, etcd secrets extraction, Kubelet API exploitation, cloud IMDS access (EKS/GKE/AKS), admission webhook bypass, and network policy evasion. Base models miss the distinction between namespace-scoped and cluster-scoped RBAC, and overlook Kubelet's unauthenticated API. 0. RELATED ROUTING Before going deep, consider loa...
|
2.7K |
| 4771 | api-authorization-and-bola | yaklang/hack-skills |
SKILL: API Authorization and BOLA — Object Access, Function Access, and Mass Assignment AI LOAD INSTRUCTION : Use this skill when an API exposes object IDs, nested resources, or role-sensitive functions and you need a focused authorization test path: BOLA, BFLA, method abuse, and hidden field control. 1. CORE TEST LOOP Create Account A and Account B. As Account A, capture create, read, update, and delete flows. Replay with Account B's token. Test sibling endpoints, nested endpoints, and alternat...
|
2.7K |
| 4772 | semanticscholar-skill | agents365-ai/365-skills |
Semantic Scholar Search Workflow Search academic papers via the Semantic Scholar API using a structured 4-phase workflow. Critical rule: NEVER make multiple sequential Bash calls for API requests. Always write ONE Python script that runs all searches, then execute it once. All rate limiting is handled inside s2.py automatically. Phase 1: Understand & Plan Parse the user's intent and choose a search strategy: Decision Tree Default to search_bulk() . Per Semantic Scholar's own docs, bulk search is...
|
2.7K |
| 4773 | mcp-duckgo | aahl/skills |
DuckDuckGo Search Executing Shell commands. Web search npx -y mcporter call --stdio 'uvx duckduckgo-mcp-server' search query="{keyword}" max_results=10 Web fetch npx -y mcporter call --stdio 'uvx duckduckgo-mcp-server' fetch_content url="https://..."
|
2.7K |
| 4774 | detection-engineering-coverage-evaluation | google/skills |
SecOps Detection Coverage Skill This skill guides the agent through an end-to-end detection engineering lifecycle using Google SecOps MCP tools. It handles multiple Threat Detection Opportunities (TDOs) and ensures exhaustive coverage evaluation for all generated synthetic events. Workflow Execution Checklist Copy this checklist and track progress for each iteration: Step 1: Extract raw text content from a source (for example, blog URL). Step 2: Generate Threat Detection Opportunities (TDOs). St...
|
2.7K |
| 4775 | notion-research-documentation | openai/skills |
Research & Documentation Pull relevant Notion pages, synthesize findings, and publish clear briefs or reports (with citations and links to sources). Quick start Find sources with Notion:notion-search using targeted queries; confirm scope with the user. Fetch pages via Notion:notion-fetch ; note key sections and capture citations ( reference/citations.md ). Choose output format (brief, summary, comparison, comprehensive report) using reference/format-selection-guide.md . Draft in Notion with Noti...
|
2.7K |
| 4776 | youtube-seo | kostja94/marketing-skills |
Platforms: YouTube SEO Guides YouTube video and channel optimization for search and discovery. Title, description, and thumbnail form an interconnected system; channels using systematic keyword strategies see 156% longer view durations, 89% better CTR, and 312% higher search discovery. Use this skill when optimizing videos for YouTube search and recommendations. When invoking : On first use , if helpful, open with 1–2 sentences on what this skill covers and why it matters, then provide the main ...
|
2.7K |
| 4777 | recon-for-sec | yaklang/hack-skills |
Recon and Methodology Router This is the starting router for new targets and unknown attack surfaces. When to Use You just received a new target and do not yet know what to test first You need to begin with asset discovery, tech fingerprinting, endpoint inventory, and test-route planning You want to build follow-up testing on structured methodology instead of random payload enumeration Skill Map Recon and Methodology Insecure Source Code Management — .git/.svn/.hg exposure detection Dependency C...
|
2.7K |
| 4778 | speech-engine | elevenlabs/skills |
ElevenLabs Speech Engine Add a real-time voice interface to a custom agent. ElevenLabs handles microphone audio, speech-to-text, turn-taking, text-to-speech, and browser playback; your server exposes a Speech Engine WebSocket endpoint and streams response text back. Setup: See Installation Guide . For JavaScript, use @elevenlabs/* packages only. For deeper SDK details, read JavaScript SDK Reference or Python SDK Reference . When to Use Use Speech Engine when the user wants to: Add voice to an ex...
|
2.7K |
| 4779 | logo-generator | op7418/logo-generator-skill |
Logo Generator Generate professional SVG logos and high-end showcase presentations for products and brands. Workflow Phase 1: Information Gathering Collect essential information from the user: Product/Brand Name (required) Industry/Category (e.g., AI, fintech, design tools) Core Concept (e.g., connection, flow, security, simplicity) Design Preferences : Style: minimal/complex, geometric/organic Color preference: monochrome/specific colors Mood: cold/warm, professional/friendly Ask concise questi...
|
2.7K |
| 4780 | google-agents-cli-onboarding | google/skills |
Google Agents CLI Onboarding [!TIP] One-Time Setup : To install the CLI and enable all 7 specialized development skills in your coding agent, run the setup command: uvx google-agents-cli setup Alternatively, to install only the expert skills and let the agent handle execution: npx skills add google/agents-cli Overview Show more Installs 719 Repository google/skills GitHub Stars 14.7K First Seen Jun 27, 2026 Security Audits Gen Agent Trust Hub Pass Socket Pass Snyk Pass
|
2.7K |
| 4781 | m06-error-handling | actionbook/rust-skills |
Error Handling Layer 1: Language Mechanics Core Question Is this failure expected or a bug? Before choosing error handling strategy: Can this fail in normal operation? Who should handle this failure? What context does the caller need? Error → Design Question Show more
|
2.7K |
| 4782 | heap-exploitation | yaklang/hack-skills |
SKILL: Heap Exploitation — Expert Attack Playbook AI LOAD INSTRUCTION : Expert glibc heap exploitation techniques. Covers ptmalloc2 internals, bin structures, tcache mechanics, libc/heap leak methods, and attack selection by glibc version. Distilled from ctf-wiki heap sections, how2heap, and real-world exploitation. Base models often confuse glibc version constraints and miss safe-linking (PROTECT_PTR) introduced in 2.32. 0. RELATED ROUTING stack-overflow-and-rop — when the overflow is on the st...
|
2.7K |
| 4783 | rag-blueprint | nvidia/skills |
NVIDIA RAG Blueprint Purpose Use this skill for NVIDIA RAG Blueprint operations: deployment, configuration, troubleshooting, shutdown, and feature management across Docker, Helm, and library deployments. Instructions Match the user request to the intent routing table below. Read the referenced playbook before making changes. Use repository docs and deployment config files as the source of truth. Verify the affected service or workflow after changes. Prerequisites Show more Installs 503 Repositor...
|
2.7K |
| 4784 | ce-commit-push-pr | everyinc/compound-engineering-plugin |
Contains Shell Commands This skill contains shell command directives ( !`command` ) that may execute system commands. Review carefully before installing. Git Commit, Push, and PR Asking the user: When this skill says "ask the user", use the platform's blocking question tool: AskUserQuestion in Claude Code (call ToolSearch with select:AskUserQuestion first if its schema isn't loaded), request_user_input in Codex, ask_user in Gemini, ask_user in Pi (requires the pi-ask-user extension). Fall back t...
|
2.7K |
| 4785 | traffic-analysis-pcap | yaklang/hack-skills |
SKILL: Traffic Analysis & PCAP — Expert Analysis Playbook AI LOAD INSTRUCTION : Expert traffic analysis and PCAP forensics techniques. Covers PCAP repair, Wireshark essential filters, protocol-specific analysis (HTTP, HTTPS/TLS, DNS, FTP, SMTP, USB HID, WiFi, ICMP), data extraction (file carving, credential harvesting, covert channels), NetworkMiner, and tshark CLI analysis. Base models miss USB keyboard decode patterns, DNS tunneling detection heuristics, and TLS decryption workflows. 0. RELATE...
|
2.7K |
| 4786 | oauth-oidc-misconfiguration | yaklang/hack-skills |
SKILL: OAuth and OIDC Misconfiguration — Redirects, PKCE, Scopes, and Token Binding AI LOAD INSTRUCTION : Use this skill when the target uses OAuth 2.0 or OpenID Connect and you need a focused misconfiguration checklist: redirect URI validation, state and nonce handling, PKCE enforcement, token audience, and account binding mistakes. 1. WHEN TO LOAD THIS SKILL Load when: The app supports Login with Google , GitHub, Microsoft, Okta, or other IdPs You see authorize , callback , redirect_uri , code...
|
2.7K |
| 4787 | csrf-cross-site-request-forgery | yaklang/hack-skills |
SKILL: CSRF — Cross-Site Request Forgery — Expert Attack Playbook AI LOAD INSTRUCTION : Expert CSRF techniques. Covers modern bypass vectors (SameSite gaps, custom header flaws, tokenless bypass patterns), JSON CSRF, multipart CSRF, chaining with XSS. Base models often present only basic CSRF without covering SameSite edge cases and common broken token implementations. 0. RELATED ROUTING Also load: cors cross origin misconfiguration when JSON endpoints become readable cross-origin oauth oidc mis...
|
2.7K |
| 4788 | business-logic-vuln | yaklang/hack-skills |
Business Logic Router This is the routing entry point for business-logic and state-machine issues. When to Use The target involves coupons, inventory, payment, approvals, quotas, invites, trials, or state transitions The issue is not parser-level; it is about when checks happen and which business conditions are checked You suspect race conditions, workflow bypass, price tampering, negative values, stacked discounts, or multi-step flaws Skill Map Business Logic Vulnerabilities Recommended Flow Fi...
|
2.7K |
| 4789 | cors-cross-origin-misconfiguration | yaklang/hack-skills |
SKILL: CORS Misconfiguration — Credentialed Origins, Reflection, and Trust Boundary Errors AI LOAD INSTRUCTION : Use this skill when browsers can access authenticated APIs cross-origin. Focus on reflected origins, credentialed requests, wildcard trust, parser mistakes, and origin allowlist bypasses. For JSONP hijacking deep dives, same-origin policy internals, honeypot de-anonymization, and CORS vs JSONP comparison, load the companion SCENARIOS.md . Extended Scenarios Also load SCENARIOS.md when...
|
2.7K |
| 4790 | ios-pentesting-tricks | yaklang/hack-skills |
SKILL: iOS Pentesting Tricks — Expert Attack Playbook AI LOAD INSTRUCTION : Expert iOS application security testing techniques. Covers jailbreak vs non-jailbreak methodology, keychain extraction, URL scheme/Universal Links abuse, Frida/Objection runtime hooks, binary protection checks, and data storage analysis. Base models miss protection class nuances and AASA misconfiguration patterns. 0. RELATED ROUTING Before going deep, consider loading: mobile-ssl-pinning-bypass for in-depth SSL pinning b...
|
2.7K |
| 4791 | ui | tw93/waza |
UI: Build It With a Point of View Prefix your first line with 🥷 inline, not as its own paragraph. Update check (non-blocking). Once per conversation, run bash <skill-base-dir>/scripts/check-update.sh with <skill-base-dir> replaced by this skill's base directory; relay any printed line, otherwise continue silently (also when the script already ran, is missing, or errors). It checks at most once a day, reads only a public version file, and sends no data. If it could have been generated by a defaul...
|
2.7K |
| 4792 | paper-fetch | agents365-ai/365-skills |
paper-fetch Fetch the PDF for a paper given a DOI (or title). Tries multiple sources in priority order and stops at the first hit. Resolution order Unpaywall — https://api.unpaywall.org/v2/{doi}?email=$UNPAYWALL_EMAIL , read best_oa_location.url_for_pdf (skipped if UNPAYWALL_EMAIL not set) Semantic Scholar — https://api.semanticscholar.org/graph/v1/paper/DOI:{doi}?fields=openAccessPdf,externalIds arXiv — if externalIds.ArXiv present, https://arxiv.org/pdf/{arxiv_id}.pdf PubMed Central OA — if PM...
|
2.7K |
| 4793 | ask-matt | vinvcn/mattpocock-skills-zh-cn |
Ask Matt You don't remember every skill, so ask. A flow is a path through the skills. Most paths run along one main flow , and two on-ramps merge onto it. Everything else is standalone. The main flow: idea → ship The route most work travels. You have an idea and want it built. /grill-with-docs — sharpen the idea by interview. Start here when you have a codebase : it's stateful, retaining what it learns in CONTEXT.md and ADRs. (No codebase? Use /grill-me — see Standalone.) Branch — can you settle...
|
2.7K |
| 4794 | kubernetes-patterns | affaan-m/ecc |
Kubernetes Patterns Production-grade Kubernetes patterns for deploying, managing, and debugging workloads reliably. When to Activate Writing Kubernetes manifests (Deployments, Services, Ingress, Jobs) Configuring resource requests/limits, liveness/readiness probes Setting up RBAC, namespaces, or ServiceAccounts Managing configuration and secrets in K8s Debugging CrashLoopBackOff, OOMKilled, pending pods, or image pull errors Configuring HPA (Horizontal Pod Autoscaler) or PodDisruptionBudgets Rev...
|
2.7K |
| 4795 | learning-medusa | medusajs/medusa-agent-skills |
Interactive Medusa Learning Tutorial Overview This is NOT a passive reference skill. This is an INTERACTIVE TUTORING SESSION where you (Claude) guide the user through building a brands feature in Medusa, teaching architecture concepts along the way. Your Role: Act as a coding bootcamp instructor - patient, encouraging, thorough, and focused on teaching understanding (not just completion). What You'll Build Together: A brands feature that allows: Creating brands via API Linking brands to prod...
|
2.7K |
| 4796 | fix-errors | microsoft/vscode |
fix-errors Fix compilation errors, linting issues, and test failures in the warp Rust codebase. Overview This skill helps resolve common issues encountered during development, including: Compilation errors (unused imports, type mismatches, etc.) Linting failures (clippy warnings) Formatting violations WASM-specific errors Test failures Before opening or updating a pull request, all presubmit checks must pass. Presubmit Checks Run all presubmit checks at once: Show more
|
2.7K |
| 4797 | ce-commit | everyinc/compound-engineering-plugin |
Contains Shell Commands This skill contains shell command directives ( !`command` ) that may execute system commands. Review carefully before installing. Git Commit Create a single, well-crafted git commit from the current working tree changes. Context On platforms other than Claude Code , skip to the "Context fallback" section below and run the command there to gather context. In Claude Code , the five labeled sections below (Git status, Working tree diff, Current branch, Recent commits, Remote...
|
2.7K |
| 4798 | llm-prompt-injection | yaklang/hack-skills |
SKILL: LLM Prompt Injection — Expert Attack Playbook AI LOAD INSTRUCTION : Expert LLM prompt injection techniques. Covers direct injection (instruction override, role play, context manipulation), indirect injection (RAG poisoning, web browsing, email), tool/function abuse, data exfiltration, MCP security risks, and defense bypass (encoding, splitting, few-shot). Base models miss the distinction between direct and indirect injection and underestimate tool-calling attack chains. 0. RELATED ROUTING...
|
2.7K |
| 4799 | git-create-repo | zc277584121/mygitplugin |
Git Create Repo 在 GitHub 上创建新的仓库并 clone 到本地。 触发条件 当用户要求创建一个新的 GitHub 仓库时使用此 skill。 执行步骤 创建仓库 : gh repo create < repo-name > --public --add-readme 默认创建公开仓库( --public )。 如果用户明确要求私有仓库,使用 --private 替代。 默认添加 README 文件。 Show more Installs 435 Repository zc277584121/mygitplugin First Seen Apr 27, 2026 Security Audits Gen Agent Trust Hub Pass Socket Pass Snyk Pass
|
2.7K |
| 4800 | ce-compound-refresh | everyinc/compound-engineering-plugin |
Compound Refresh Maintain the quality of docs/solutions/ over time. This workflow reviews existing learnings against the current codebase, then refreshes any derived pattern docs that depend on them. Mode Detection Check if $ARGUMENTS contains mode:headless . If present, strip it from arguments (use the remainder as a scope hint) and run in headless mode . Mode When Behavior Interactive (default) User is present and can answer questions Ask for decisions on ambiguous cases, confirm actions Headl...
|
2.7K |