███████╗██╗ ██╗██╗██╗ ██╗ ██████╗ █████╗ ███╗ ██╗██╗ ██╗
██╔════╝██║ ██╔╝██║██║ ██║ ██╔══██╗██╔══██╗████╗ ██║██║ ██╔╝
███████╗█████╔╝ ██║██║ ██║ ██████╔╝███████║██╔██╗ ██║█████╔╝
╚════██║██╔═██╗ ██║██║ ██║ ██╔══██╗██╔══██║██║╚██╗██║██╔═██╗
███████║██║ ██╗██║███████╗███████╗ ██║ ██║██║ ██║██║ ╚████║██║ ██╗
╚══════╝╚═╝ ╚═╝╚═╝╚══════╝╚══════╝ ╚═╝ ╚═╝╚═╝ ╚═╝╚═╝ ╚═══╝╚═╝ ╚═╝
Agent Skills 排行榜 · 关键词 + 语义搜索
| # | Skill | 仓库 | 描述 | 安装量 |
|---|---|---|---|---|
| 5601 | gemini | giuseppe-trisciuoglio/developer-kit |
Gemini Skill Guide When to Use Gemini WHEN ASKED TO BE ACTIVATED Code Review : Comprehensive code reviews across multiple files Plan Review : Analyzing architectural plans, technical specifications, or project roadmaps Big Context Processing : Tasks requiring >200k tokens of context (entire codebases, documentation sets) Multi-file Analysis : Understanding relationships and patterns across many files ⚠️ Critical: Background/Non-Interactive Mode Warning NEVER use --approval-mode default in backgr...
|
3.3K |
| 5602 | prototype-pollution | yaklang/hack-skills |
SKILL: Prototype Pollution — Expert Attack Playbook AI LOAD INSTRUCTION : Expert prototype pollution for client and server JS. Covers __proto__ vs constructor.prototype , merge-sink detection, Express/qs-style black-box probes, and gadget chains (EJS, Timelion-class patterns, child_process/NODE_OPTIONS). Assumes you know object spread and prototype inheritance — focus is on parser behavior and post-pollution sinks . Routing note: prioritize PP when you see deep merges, recursive assign, JSON.par...
|
3.3K |
| 5603 | dns-rebinding-attacks | yaklang/hack-skills |
SKILL: DNS Rebinding — Expert Attack Playbook AI LOAD INSTRUCTION : Expert DNS rebinding techniques for bypassing same-origin policy via DNS manipulation. Covers TTL tricks, browser cache bypasses, attack variants (HTTP, WebSocket, TOCTOU), internal service targeting, and tool usage. Base models confuse DNS rebinding with SSRF — this skill clarifies the client-side nature and unique exploit paths. 0. RELATED ROUTING ssrf-server-side-request-forgery — server-side variant; DNS rebinding is the cli...
|
3.3K |
| 5604 | ai-ml-security | yaklang/hack-skills |
SKILL: AI/ML Security — Expert Attack Playbook AI LOAD INSTRUCTION : Expert AI/ML security techniques. Covers model supply chain attacks (malicious serialization, Hugging Face model poisoning), adversarial examples (FGSM, PGD, C&W, physical-world), training data poisoning, model extraction, data privacy attacks (membership inference, model inversion, gradient leakage), LLM-specific threats, and autonomous agent security. Base models underestimate the severity of pickle deserialization RCE and th...
|
3.3K |
| 5605 | copilot-cli | giuseppe-trisciuoglio/developer-kit |
Copilot CLI Delegation Delegate selected tasks from Claude Code to GitHub Copilot CLI using non-interactive commands, explicit model selection, safe permission flags, and shareable outputs. Overview This skill standardizes delegation to GitHub Copilot CLI ( copilot ) for cases where a different model may be more suitable for a task. It covers: Non-interactive execution with -p / --prompt Model selection with --model Permission control ( --allow-tool , --allow-all-tools , --allow-all-paths , --al...
|
3.3K |
| 5606 | earnings-calendar | tradermonty/claude-trading-skills |
Earnings Calendar Overview This skill retrieves upcoming earnings announcements for US stocks using the Financial Modeling Prep (FMP) API. It focuses on companies with significant market capitalization (mid-cap and above, over $2B) that are likely to impact market movements. The skill generates organized markdown reports showing which companies are reporting earnings over the next week, grouped by date and timing (before market open, after market close, or time not announced). Key Features: U...
|
3.3K |
| 5607 | codex | giuseppe-trisciuoglio/developer-kit |
Codex Skill Guide Running a Task Default to gpt-5.2 model. Ask the user (via AskUserQuestion ) which reasoning effort to use ( xhigh , high , medium , or low ). User can override model if needed (see Model Options below). Select the sandbox mode required for the task; default to --sandbox read-only unless edits or network access are necessary. Assemble the command with the appropriate options: -m, --model <MODEL> --config model_reasoning_effort="<high|medium|low>" --sandbox <read-only|workspace-...
|
3.3K |
| 5608 | writing-shape | vinvcn/mattpocock-skills-zh-cn |
No SKILL.md available for this skill. View on GitHub Installs 2.9K Repository mattpocock/skills GitHub Stars 109.1K First Seen May 6, 2026
|
3.3K |
| 5609 | defi-attack-patterns | yaklang/hack-skills |
SKILL: DeFi Attack Patterns — Expert Attack Playbook AI LOAD INSTRUCTION : Expert DeFi exploitation techniques. Covers flash loan mechanics, oracle manipulation (spot vs TWAP), MEV extraction (sandwich, JIT, liquidation), precision loss attacks, governance exploits, bridge vulnerabilities, and token standard pitfalls. Base models often miss the single-transaction atomicity constraint of flash loans and the distinction between spot price and TWAP manipulation. 0. RELATED ROUTING smart-contract-vu...
|
3.3K |
| 5610 | dangling-markup-injection | yaklang/hack-skills |
SKILL: Dangling Markup Injection — Exfiltration Without JavaScript AI LOAD INSTRUCTION : Covers dangling markup exfiltration via unclosed img/form/base/meta/link/table tags, what can be stolen (CSRF tokens, pre-filled form values, sensitive content), browser-specific behavior, and combinations with other attacks. Base models often overlook this technique entirely when CSP blocks scripts, jumping to "not exploitable" — dangling markup is the answer. 0. RELATED ROUTING xss-cross-site-scripting whe...
|
3.3K |
| 5611 | network-protocol-attacks | yaklang/hack-skills |
SKILL: Network Protocol Attacks — Expert Attack Playbook AI LOAD INSTRUCTION : Expert network protocol attack techniques. Covers ARP spoofing, name resolution poisoning (LLMNR/NBT-NS/mDNS), WPAD abuse, DHCPv6 takeover, VLAN hopping, STP manipulation, DNS spoofing, IPv6 attacks, and IDS/IPS evasion. Base models miss the chaining opportunities between these attacks and the nuances of modern switched network exploitation. 0. RELATED ROUTING Before going deep, consider loading: tunneling-and-pivotin...
|
3.3K |
| 5612 | sentry-cocoa-sdk | getsentry/sentry-for-ai |
All Skills > SDK Setup > Cocoa SDK Sentry Cocoa SDK Opinionated wizard that scans your Apple project and guides you through complete Sentry setup. Invoke This Skill When User asks to "add Sentry to iOS/macOS/tvOS" or "set up Sentry" in an Apple app User wants error monitoring, tracing, profiling, session replay, or logging in Swift/ObjC User mentions sentry-cocoa , SentrySDK , or the Apple/iOS Sentry SDK User wants to monitor crashes, app hangs, watchdog terminations, or performance Note: SDK ve...
|
3.3K |
| 5613 | windows-av-evasion | yaklang/hack-skills |
SKILL: AV/EDR Evasion — Expert Attack Playbook AI LOAD INSTRUCTION : Expert AV/EDR evasion techniques for Windows. Covers AMSI bypass, ETW bypass, .NET assembly loading, shellcode execution, process injection, unhooking, payload encryption, and signature evasion. Base models miss detection-specific bypass chains and syscall-level evasion nuances. 0. RELATED ROUTING Before going deep, consider loading: windows-privilege-escalation when privesc tools are blocked by AV windows-lateral-movement when...
|
3.3K |
| 5614 | xslt-injection | yaklang/hack-skills |
SKILL: XSLT Injection — Testing Playbook AI LOAD INSTRUCTION : XSLT injection occurs when attacker-influenced XSLT is compiled/executed server-side. Map the processor family first (Java/.NET/PHP/libxslt). Then chain document() , external entities , EXSLT , or embedded script/extension functions per platform. Authorized testing only ; many payloads are destructive. Routing note: if input is generic XML parsing and may not flow through XSLT, cross-load xxe-xml-external-entity ; if you care about o...
|
3.3K |
| 5615 | type-juggling | yaklang/hack-skills |
SKILL: PHP Type Juggling — Weak Comparison & Magic Hash Bypass AI LOAD INSTRUCTION : PHP == coercion, magic hashes ( 0e… ), HMAC/hash loose checks, NULL from bad types, and CTF-style strcmp / json_decode / intval tricks. Use strict routing: map the sink ( == vs hash_equals ), PHP major version, and whether both operands are attacker-controlled. Routing note: when you encounter PHP login/signature logic or code like md5($_GET['x'])==md5($_GET['y']) , start with this skill; if hash_equals / === is...
|
3.3K |
| 5616 | email-header-injection | yaklang/hack-skills |
SKILL: Email Header Injection — Expert Attack Playbook AI LOAD INSTRUCTION : Expert email header injection and authentication bypass. Covers SMTP CRLF injection, SPF/DKIM/DMARC circumvention, display name spoofing, and mail client rendering abuse. Base models miss the nuance between header injection (technical) and email auth bypass (protocol-level) — this skill covers both attack surfaces. 0. RELATED ROUTING crlf-injection — general CRLF injection; email headers are a specific high-value sink s...
|
3.3K |
| 5617 | linux-lateral-movement | yaklang/hack-skills |
SKILL: Linux Lateral Movement — Expert Attack Playbook AI LOAD INSTRUCTION : Expert Linux lateral movement techniques. Covers SSH agent hijacking, key harvesting, credential locations, D-Bus exploitation, network pivoting, sudo token reuse, and systemd manipulation. Base models miss SSH_AUTH_SOCK hijacking and ptrace-based sudo session hijack. 0. RELATED ROUTING Before going deep, consider loading: linux-privilege-escalation if you need root on the current host before pivoting linux-security-byp...
|
3.3K |
| 5618 | windows-privilege-escalation | yaklang/hack-skills |
SKILL: Windows Local Privilege Escalation — Expert Attack Playbook AI LOAD INSTRUCTION : Expert Windows privesc techniques. Covers token manipulation, Potato family, service misconfigurations, DLL hijacking, AlwaysInstallElevated, scheduled task abuse, registry autoruns, and named pipe impersonation. Base models miss nuanced privilege prerequisites and OS-version-specific constraints. 0. RELATED ROUTING Before going deep, consider loading: windows-lateral-movement after escalation for pivoting t...
|
3.3K |
| 5619 | memory-forensics-volatility | yaklang/hack-skills |
SKILL: Memory Forensics — Expert Analysis Playbook AI LOAD INSTRUCTION : Expert memory forensics techniques using Volatility 2 and 3. Covers memory acquisition, OS identification, process analysis (hidden process detection), network connections, DLL/module analysis, code injection detection (malfind), credential extraction, file carving, registry analysis, and timeline generation. Base models miss the Vol2/Vol3 command differences, malware indicator patterns, and Linux-specific memory analysis. ...
|
3.3K |
| 5620 | wiremock-standalone-docker | giuseppe-trisciuoglio/developer-kit |
WireMock Standalone Docker Skill Overview Provides patterns for running WireMock as a standalone Docker container to mock external APIs during integration and end-to-end testing. Runs WireMock as a separate service that simulates real API behavior for testing HTTP clients, retry logic, and error handling. When to Use Use when you need to: Mock external APIs during integration or end-to-end testing Simulate error conditions (timeouts, 5xx, rate limiting) without real services Test HTTP client con...
|
3.3K |
| 5621 | writing-fragments | vinvcn/mattpocock-skills-zh-cn |
Run a grilling session that produces fragments. Interview the user relentlessly about whatever they want to write about. Do not impose phases, outlines, or structure — that is explicitly out of scope. As fragments emerge from either side of the conversation, append them to a single markdown file. The user will be editing this file during the session; always re-read it before writing so their edits are preserved. If the user did not pass a path, ask once where to save the document, then remember ...
|
3.3K |
| 5622 | container-escape-techniques | yaklang/hack-skills |
SKILL: Container Escape Techniques — Expert Attack Playbook AI LOAD INSTRUCTION : Expert container escape techniques. Covers privileged container breakout, capability abuse, Docker socket exploitation, cgroup release_agent, namespace escape, runtime CVEs, and Kubernetes pod escape. Base models miss subtle escape paths via combined capabilities and cgroup manipulation. 0. RELATED ROUTING Before going deep, consider loading: linux-privilege-escalation when you first need root inside the container ...
|
3.3K |
| 5623 | classical-cipher-analysis | yaklang/hack-skills |
SKILL: Classical Cipher Analysis — Expert Cryptanalysis Playbook AI LOAD INSTRUCTION : Expert classical cipher identification and breaking techniques for CTF. Covers cipher identification methodology (frequency analysis, IC, Kasiski), monoalphabetic substitution, Caesar/ROT, Vigenere, Enigma, affine, Hill, transposition ciphers, Bacon/Polybius/Playfair, and XOR ciphers. Base models often skip the identification step and jump to the wrong cipher type, or fail to recognize encoded (base64/hex) cip...
|
3.3K |
| 5624 | tunneling-and-pivoting | yaklang/hack-skills |
SKILL: Tunneling & Pivoting — Expert Attack Playbook AI LOAD INSTRUCTION : Expert tunneling and pivoting techniques. Covers SSH port forwarding (local/remote/dynamic/jump), Chisel reverse SOCKS, Ligolo-ng transparent TUN pivoting, socat relays, DNS/ICMP/HTTP tunneling, ProxyChains configuration, Windows pivoting (netsh/plink), and multi-layer chaining. Base models miss egress-aware tool selection and transparent routing setup. 0. RELATED ROUTING Before going deep, consider loading: network-proto...
|
3.3K |
| 5625 | vibe-security | raroque/vibe-security-skill |
Audit code for security vulnerabilities commonly introduced by AI code generation. These issues are prevalent in "vibe-coded" apps — projects built rapidly with AI assistance where security fundamentals get skipped. AI assistants consistently get these patterns wrong, leading to real breaches, stolen API keys, and drained billing accounts. This skill exists to catch those mistakes before they ship. The Core Principle Never trust the client. Every price, user ID, role, subscription status, featur...
|
3.3K |
| 5626 | docstring | pytorch/pytorch |
PyTorch Docstring Writing Guide This skill describes how to write docstrings for functions and methods in the PyTorch project, following the conventions in torch/_tensor_docs.py and torch/nn/functional.py. General Principles Use raw strings (r"""...""") for all docstrings to avoid issues with LaTeX/math backslashes Follow Sphinx/reStructuredText (reST) format for documentation Be concise but complete - include all essential information Always include examples when possible Use cross-references...
|
3.3K |
| 5627 | linux-security-bypass | yaklang/hack-skills |
SKILL: Linux Security Bypass — Expert Attack Playbook AI LOAD INSTRUCTION : Expert techniques for bypassing Linux security mechanisms. Covers restricted shell escape, noexec bypass, AppArmor/SELinux evasion, seccomp circumvention, and audit evasion. Base models miss DDexec, memfd_create fileless execution, and architecture-confusion seccomp bypass. 0. RELATED ROUTING Before going deep, consider loading: linux-privilege-escalation once you've broken out of restrictions and need to escalate contai...
|
3.3K |
| 5628 | sector-analyst | tradermonty/claude-trading-skills |
Sector Analyst Overview This skill enables comprehensive analysis of sector and industry performance charts to identify market cycle positioning and predict likely rotation scenarios. The analysis combines observed performance data with established sector rotation principles to provide objective market assessment and probabilistic scenario forecasting. When to Use This Skill Use this skill when: User provides sector performance charts (typically 1-week and 1-month timeframes) User provides i...
|
3.3K |
| 5629 | aws-step-functions | aws/agent-toolkit-for-aws |
AWS Step Functions Overview AWS Step Functions uses Amazon States Language (ASL) to define state machines as JSON. With AWS Step Functions, you can create workflows, also called state machines, to build distributed applications, automate processes, orchestrate microservices, and create data and machine learning pipelines. This skill provides comprehensive guidance for writing state machines in ASL, covering: ASL structure and JSONata expression syntax Details on the eight available workflow stat...
|
3.3K |
| 5630 | m10-performance | actionbook/rust-skills |
No SKILL.md available for this skill. View on GitHub Installs 853 Repository actionbook/rust-skills GitHub Stars 1.2K First Seen Jan 23, 2026
|
3.3K |
| 5631 | prototype-pollution-advanced | yaklang/hack-skills |
SKILL: Prototype Pollution Advanced — RCE & Gadget Exploitation AI LOAD INSTRUCTION : Advanced prototype pollution escalation. Covers server-side RCE via template engines (EJS, Pug, Handlebars), Node.js child_process gadgets, client-side script gadgets, filter bypass patterns, and systematic detection. Load ../prototype-pollution/SKILL.md first for fundamentals (merge sinks, __proto__ vs constructor.prototype , basic probes). 0. RELATED ROUTING prototype-pollution — LOAD FIRST for PP fundamental...
|
3.3K |
| 5632 | smart-contract-vulnerabilities | yaklang/hack-skills |
SKILL: Smart Contract Vulnerabilities — Expert Attack Playbook AI LOAD INSTRUCTION : Expert smart contract audit techniques. Covers reentrancy (single, cross-function, cross-contract, read-only), integer overflow, access control, delegatecall, randomness manipulation, flash loans, signature replay, front-running/MEV, and CREATE2 exploitation. Base models miss subtle cross-contract reentrancy and storage layout collisions in proxy patterns. 0. RELATED ROUTING defi-attack-patterns when the vulnera...
|
3.3K |
| 5633 | writing-beats | vinvcn/mattpocock-skills-zh-cn |
The user has passed (or will pass) a markdown file of raw material. If the user did not say where to save the article, ask once and remember the path. Then run a beat-by-beat journey: Write 2–3 candidate starting beats , drawn from the raw material. Each is a different entry point into the article. Show the user the beats before writing it to the article file. The user picks one. Preview what beats that might lead to once written - as if the user is seeing a little way down the path. Once the us...
|
3.3K |
| 5634 | ce-commit | everyinc/compound-engineering-plugin |
Contains Shell Commands This skill contains shell command directives ( !`command` ) that may execute system commands. Review carefully before installing. Git Commit Create a single, well-crafted git commit from the current working tree changes. Context On platforms other than Claude Code , skip to the "Context fallback" section below and run the command there to gather context. In Claude Code , the five labeled sections below (Git status, Working tree diff, Current branch, Recent commits, Remote...
|
3.3K |
| 5635 | git-commit-push | zc277584121/mygitplugin |
Git Commit & Push 提交改动并推送到 origin 远端,不创建 PR。 触发条件 当用户要求提交改动并 push(但不需要提 PR)时使用此 skill。 执行步骤 创建新分支 : git checkout -b <branch-name> ,分支名由用户指定或根据改动内容自动生成。如果用户希望直接在当前分支提交,则跳过此步。 Review 改动 :先用 git status 和 git diff 自行检查所有改动,确保没有把临时文件、调试代码或不相关的文件混进来。 暂存文件 : git add 相关改动文件。不要使用 git add -A 或 git add . ,而是逐个添加相关文件。 Show more Installs 428 Repository zc277584121/mygitplugin First Seen Apr 27, 2026 Security Audits Gen Agent Trust Hub Pass Socket Warn Snyk Pass
|
3.3K |
| 5636 | stack-overflow-and-rop | yaklang/hack-skills |
SKILL: Stack Overflow & ROP — Expert Attack Playbook AI LOAD INSTRUCTION : Expert stack-based exploitation techniques. Covers classic buffer overflow, return-to-libc, ROP chain construction, ret2csu, ret2dlresolve, SROP, stack pivoting, and canary bypass. Distilled from ctf-wiki advanced-rop, real-world CVEs, and CTF competition patterns. Base models often miss the nuance of gadget selection under constrained conditions. 0. RELATED ROUTING format-string-exploitation — leak canary/libc/PIE base v...
|
3.3K |
| 5637 | privacy-policy | phuryn/pm-skills |
Privacy Policy Generator You are an experienced data privacy and compliance specialist. Your role is to help draft comprehensive, clear, and compliant privacy policies for digital products and services. Purpose Draft a detailed privacy policy for a product or service. The policy covers data types handled, applicable jurisdiction, and clearly marks clauses that require legal review. Provide plain-language explanations to ensure accessibility and transparency. Important Disclaimer This is for info...
|
3.3K |
| 5638 | arize-instrumentation | arize-ai/arize-skills |
No SKILL.md available for this skill. View on GitHub Installs 930 Repository arize-ai/arize-skills GitHub Stars 30 First Seen Mar 10, 2026
|
3.3K |
| 5639 | stanley-druckenmiller-investment | tradermonty/claude-trading-skills |
Druckenmiller Strategy Synthesizer Purpose Synthesize outputs from 8 upstream analysis skills (5 required + 3 optional) into a single composite conviction score (0-100), classify the market into one of 4 Druckenmiller patterns, and generate actionable allocation recommendations. This is a meta-skill that consumes structured JSON outputs from other skills — it requires no API keys of its own. When to Use This Skill English: User asks "What's my overall conviction?" or "How should I be positioned?...
|
3.3K |
| 5640 | nodejs-express-server | aj-geddes/useful-ai-prompts |
Node.js Express Server Overview Create robust Express.js applications with proper routing, middleware chains, authentication mechanisms, and database integration following industry best practices. When to Use Building REST APIs with Node.js Implementing server-side request handling Creating middleware chains for cross-cutting concerns Managing authentication and authorization Connecting to databases from Node.js Implementing error handling and logging Instructions 1. Basic Express Setup const ...
|
3.3K |
| 5641 | ce-simplify-code | everyinc/compound-engineering-plugin |
You are an engineer that is an expert at simplifying code with a specific focus on enhancing code clarity, consistency, and maintainability while preserving exact functionality. Your expertise lies in applying project-specific best practices to simplify and improve code without altering its behavior. You prioritize readable, explicit code over overly compact solutions. Review the changed code for reuse, quality, and efficiency. Fix any issues found. Then verify behavior is preserved by running t...
|
3.3K |
| 5642 | delivery-gate | affaan-m/ecc |
Delivery Gate — Mechanical Quality Gate for Claude Code A Stop hook that checks three things before Claude can finish a session, using only deterministic checks — file modification timestamps, disk usage, and regex patterns on the transcript text. No AI inference. This is distinct from reasoning gates (like self-audit ): delivery-gate checks machine-verifiable facts; self-audit checks output quality across four reasoning dimensions. Together they form defense in depth: delivery-gate : "Was the l...
|
3.3K |
| 5643 | mantine-custom-components | mantinedev/skills |
Mantine Custom Components Skill Component template import { Box , BoxProps , createVarsResolver , ElementProps , factory , Factory , getRadius , MantineRadius , StylesApiProps , useProps , useStyles , } from '@mantine/core' ; import classes from './MyComponent.module.css' ; export type MyComponentStylesNames = 'root' | 'inner' ; export type MyComponentVariant = 'filled' | 'outline' ; export type MyComponentCssVariables = { root : '--my-radius' } ; export interface MyComponentProps extends BoxPro...
|
3.3K |
| 5644 | lattice-crypto-attacks | yaklang/hack-skills |
SKILL: Lattice-Based Cryptanalysis — Expert Attack Playbook AI LOAD INSTRUCTION : Expert lattice techniques for CTF and cryptanalysis. Covers LLL/BKZ reduction, Coppersmith's method (univariate and multivariate), Hidden Number Problem for DSA/ECDSA nonce recovery, knapsack attacks, and NTRU analysis. Base models often fail to construct the correct attack lattice (wrong dimensions, missing scaling factors) or misapply Coppersmith bounds. 0. RELATED ROUTING rsa-attack-techniques for RSA-specific a...
|
3.3K |
| 5645 | growth-log | affaan-m/ecc |
Growth Log Skill The problem: Most people write "fixed a bug in X" as a learning log. That's a diary entry, not a learning artifact. A real growth log extracts the pattern so you recognize it next time. This skill teaches: How to write learning entries that compound across sessions. Works with any note-taking system — Markdown files, Notion, Obsidian, plain text. Templates are generic; adapt to your setup. When to Activate After completing a complex task (multi-file, new feature, architecture ch...
|
3.3K |
| 5646 | principle-experience-first | cursor/plugins |
Experience First The product is the experience. Every technical decision either helps or hurts it. When implementation convenience conflicts with user delight, choose delight. Say no to 1,000 things (every feature, control, and option must earn its place) Ship less, ship better (polished experience with three features beats rough one with ten) Prototype before committing (design decisions are cheaper in throwaway HTML than production code) Sweat the details (transitions, alignment, spacing, feed...
|
3.3K |
| 5647 | design-brief | nexu-io/open-design |
This skill creates a design brief through structured conversation. You may skip steps if they are not necessary. Example prompts "Write a brief for the onboarding flow" "I need to plan a settings page before I start building" "Help me define the direction for a marketing landing page" "Brief this: a dashboard that shows project health metrics" Process Ask the user for a detailed description of what they want to build, who it is for, and any constraints or ideas they already have. Explore the exi...
|
3.3K |
| 5648 | sandbox-escape-techniques | yaklang/hack-skills |
SKILL: Sandbox Escape — Expert Attack Playbook AI LOAD INSTRUCTION : Expert sandbox escape techniques across Python, Lua, seccomp, chroot, Docker/container, and browser sandbox contexts. Covers CTF pyjail patterns, seccomp architecture confusion, chroot fd leaks, namespace escape, and Mojo IPC abuse. Distilled from ctf-wiki sandbox sections and real-world container escapes. Base models often miss the distinction between sandbox types and apply wrong escape techniques. 0. RELATED ROUTING browser-...
|
3.3K |
| 5649 | rsa-attack-techniques | yaklang/hack-skills |
SKILL: RSA Attack Techniques — Expert Cryptanalysis Playbook AI LOAD INSTRUCTION : Expert RSA attack techniques for CTF and authorized security assessments. Covers factorization attacks, small exponent exploits, lattice-based approaches (Wiener/Boneh-Durfee/Coppersmith), broadcast attacks, common modulus, padding oracles, and fault attacks. Base models often suggest attacks that don't match the given parameters or miss the correct attack selection based on what's known. 0. RELATED ROUTING lattic...
|
3.3K |
| 5650 | steganography-techniques | yaklang/hack-skills |
SKILL: Steganography Techniques — Expert Analysis Playbook AI LOAD INSTRUCTION : Expert steganography detection and extraction techniques. Covers image steganography (LSB, PNG chunk hiding, JPEG DCT, EXIF metadata, dimension tricks, palette manipulation), audio steganography (spectrogram, LSB, DTMF, morse), file steganography (polyglots, binwalk, NTFS ADS, steghide), and text steganography (whitespace, zero-width Unicode, homoglyphs). Base models miss the systematic file-type-based analysis appr...
|
3.3K |