███████╗██╗ ██╗██╗██╗ ██╗ ██████╗ █████╗ ███╗ ██╗██╗ ██╗
██╔════╝██║ ██╔╝██║██║ ██║ ██╔══██╗██╔══██╗████╗ ██║██║ ██╔╝
███████╗█████╔╝ ██║██║ ██║ ██████╔╝███████║██╔██╗ ██║█████╔╝
╚════██║██╔═██╗ ██║██║ ██║ ██╔══██╗██╔══██║██║╚██╗██║██╔═██╗
███████║██║ ██╗██║███████╗███████╗ ██║ ██║██║ ██║██║ ╚████║██║ ██╗
╚══════╝╚═╝ ╚═╝╚═╝╚══════╝╚══════╝ ╚═╝ ╚═╝╚═╝ ╚═╝╚═╝ ╚═══╝╚═╝ ╚═╝
Agent Skills 排行榜 · 关键词 + 语义搜索
| # | Skill | 仓库 | 描述 | 安装量 |
|---|---|---|---|---|
| 9451 | gpui-action | longbridge/gpui-component |
Overview Actions provide declarative keyboard-driven UI interactions in GPUI. Key Concepts: Define actions with actions! macro or [derive(Action)] Bind keys with cx.bind_keys() Handle with .on_action() on elements Context-aware via key_context() Quick Start Simple Actions use gpui::actions; actions!(editor, [MoveUp, MoveDown, Save, Quit]); const CONTEXT: &str = "Editor"; pub fn init(cx: &mut App) { cx.bind_keys([ KeyBinding::new("up", MoveUp, Some(CONTEXT)), KeyBinding:...
|
218 |
| 9452 | gpui-entity | longbridge/gpui-component |
Overview An Entity<T> is a handle to state of type T, providing safe access and updates. Key Methods: entity.read(cx) → &T - Read-only access entity.read_with(cx, |state, cx| ...) → R - Read with closure entity.update(cx, |state, cx| ...) → R - Mutable update entity.downgrade() → WeakEntity<T> - Create weak reference entity.entity_id() → EntityId - Unique identifier Entity Types: Entity<T>: Strong reference (increases ref count) WeakEntity<T>: Weak reference (doesn't prevent cleanup, return...
|
218 |
| 9453 | bundle-splitting | patternsdev/skills |
Bundle Splitting When building a modern web application, bundlers such as Webpack or Rollup take an application's source code, and bundle this together into one or more bundles. When a user visits a website, the bundle is requested and loaded in order to display the data to the user's screen. JavaScript engines such as V8 are able to parse and compile data that's been requested by the user as it's being loaded. Although modern browsers have evolved to parse and compile the code as quickly and pe...
|
218 |
| 9454 | bruno-collection-generator | patricio0312rev/skills |
Bruno Collection Generator Generate Bruno collection files for the open-source, Git-friendly API client. Core Workflow Scan routes: Find all API route definitions Extract metadata: Methods, paths, params, bodies Create collection: Initialize bruno.json manifest Generate .bru files: One file per request Organize folders: Group by resource Add environments: Dev, staging, production Bruno Collection Structure collection/ ├── bruno.json Collection manifest ├── environments/ │ ├── D...
|
218 |
| 9455 | finance | anton-roos/finance |
No SKILL.md available for this skill. View on GitHub
|
218 |
| 9456 | ssti-server-side-template-injection | yaklang/hack-skills |
SKILL: Server-Side Template Injection (SSTI) — Expert Attack Playbook AI LOAD INSTRUCTION : Expert SSTI techniques. Covers polyglot detection probes, engine fingerprinting, Jinja2/FreeMarker/Twig/ERB RCE chains, client-side Angular SSTI, and bypass techniques. Base models often miss sandbox escape MRO chains and non-Jinja2 engines. For PHP CMS template eval, Jira SSTI, Confluence OGNL, and Spring Cloud Gateway SpEL, load the companion SCENARIOS.md . 0. RELATED ROUTING Before using full engine-sp...
|
218 |
| 9457 | cypress-author | cypress-io/ai-toolkit |
Cypress Author Use this skill when: The user wants to create, add, or write tests (including component tests or tests for a file); fix or update tests; or change test code. Use this skill even if they only say "tests" and do not mention Cypress, or if they mention cy.* (the word "cy", a period, and a suffix indicating a Cypress command). Do NOT use this skill when: The user states they do not want to use Cypress; when the user mentions an alternative testing tool without referencing migrating to...
|
218 |
| 9458 | race-condition | yaklang/hack-skills |
SKILL: Race Conditions — Testing & Exploitation Playbook AI LOAD INSTRUCTION : Treat race conditions as authorization/state integrity issues: non-atomic read-then-write lets multiple requests observe stale state. Prioritize one-time or balance-like operations. Combine parallel transport (HTTP/1.1 last-byte sync, HTTP/2 single-packet, Turbo Intruder gates) with application evidence (duplicate success responses, inconsistent balances, duplicate ledger rows). Authorized testing only. Routing note: ...
|
218 |
| 9459 | gpd-id-resolver | rudrankriyam/app-store-connect-cli-skills |
GPD ID Resolver Use this skill to map names to IDs needed by other gpd commands. Package name (app ID) Package name is the primary identifier: com.example.app . Always pass --package explicitly for deterministic results. Track names Common tracks: internal , alpha , beta , production . List tracks: gpd publish tracks --package com.example.app Version codes and release status Use release status to find version codes on a track: gpd publish status --package com.example.app --track production Teste...
|
217 |
| 9460 | axiom-ios-concurrency | charleswiltgen/axiom |
iOS Concurrency Router You MUST use this skill for ANY concurrency, async/await, threading, or Swift 6 concurrency work. When to Use Use this router when: Writing async/await code Seeing concurrency errors (data races, actor isolation) Working with @MainActor Dealing with Sendable conformance Optimizing Swift performance Migrating to Swift 6 concurrency App freezes during loading (likely main thread blocking) Conflict Resolution ios-concurrency vs ios-performance: When app freezes or feels ...
|
217 |
| 9461 | axiom-ios-performance | charleswiltgen/axiom |
iOS Performance Router You MUST use this skill for ANY performance issue including memory leaks, slow execution, battery drain, or profiling. When to Use Use this router when: App feels slow or laggy Memory usage grows over time Battery drains quickly Device gets hot during use High energy usage in Battery Settings Diagnosing performance with Instruments Memory leaks or retain cycles App crashes with memory warnings Routing Logic Memory Issues Memory leaks (Swift) → /skill axiom-memory-debu...
|
217 |
| 9462 | threejs-3d-graphics | omer-metin/skills-for-antigravity |
Threejs 3D Graphics Identity Role: Senior WebGL/Three.js Developer Voice: I'm a graphics programmer who's shipped everything from product configurators to full 3D games in the browser. I've optimized scenes from 5fps to 60fps, debugged shader nightmares at 3am, and learned why "it works on my machine" is especially painful with WebGL. I think in draw calls and triangles. Personality: Obsessed with performance (every draw call counts) Visual debugging mindset (if you can't see it, you can't f...
|
217 |
| 9463 | hummingbot | hummingbot/skills |
hummingbot When the skill is loaded, print this ASCII art: *,. *,,.* ,,,, .,* *,,,,,,,( .,, *,,,,,,,, .,,, * /,,,,,,,,,, .*,,,,,,, .,,,,,,,,,,, .,,,,,,,,,,* // ,,,,,,,,,,,,,,,,,,,,,,,,,,*% .,,,,,,,. *,,,,,,,,,,,,,,,,,,,,,,,,,,,,,%%%%&@ ,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,%%%%%%%& ,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,%%%%%%%%& /*,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,((%%%& . ,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,((((((((. ...
|
217 |
| 9464 | tlc-spec-driven | tech-leads-club/agent-skills |
Tech Lead's Club - Spec-Driven Development Plan and implement projects with precision. Granular tasks. Clear dependencies. Right tools. Zero ceremony. ┌──────────┐ ┌──────────┐ ┌─────────┐ ┌─────────┐ │ SPECIFY │ → │ DESIGN │ → │ TASKS │ → │ EXECUTE │ └──────────┘ └──────────┘ └─────────┘ └─────────┘ required optional* optional* required * Agent auto-skips when scope doesn't need it Auto-Sizing: The Core Principle The complexity determines the depth, not a fixed pi...
|
217 |
| 9465 | alicloud-platform-openclaw-setup-test | cinience/alicloud-skills |
Category: test OpenClaw Setup Minimal Smoke Test Prerequisites Target host has Node.js 20+ installed. openclaw command is available. DashScope API key and DingTalk/Feishu app credentials or Discord bot token are prepared (masked placeholders are acceptable). Target skill: skills/platform/openclaw/alicloud-platform-openclaw-setup/ . Test Steps Run openclaw --version and verify CLI availability. Open https://docs.openclaw.ai/channels/index and verify target channel is discoverable from official li...
|
217 |
| 9466 | symfony:writing-plans | makfly/superpowers-symfony |
$ npx skills add https://github.com/makfly/superpowers-symfony --skill symfony:writing-plans<div
|
217 |
| 9467 | llm-application-dev | skillcreatorai/ai-agent-skills |
LLM Application Development Prompt Engineering Structured Prompts const systemPrompt = `You are a helpful assistant that answers questions about our product. RULES: - Only answer questions about our product - If you don't know, say "I don't know" - Keep responses concise (under 100 words) - Never make up information CONTEXT: {context}`; const userPrompt = `Question: {question}`; Few-Shot Examples const prompt = `Classify the sentiment of customer feedback. Examples: Input: "Love this produc...
|
217 |
| 9468 | memory-defrag | basicmachines-co/basic-memory-skills |
Memory Defrag Reorganize memory files for clarity, efficiency, and relevance. Like filesystem defragmentation but for knowledge. When to Run Periodic : Weekly or biweekly via cron (recommended) On demand : User asks to clean up, reorganize, or defrag memory Threshold : When MEMORY.md exceeds ~500 lines or daily notes accumulate without consolidation Process 1. Audit Current State Inventory all memory files: MEMORY.md — long-term memory memory/ — daily notes, tasks, topical ...
|
217 |
| 9469 | triage-ci-flake | payloadcms/payload |
Triage CI Failure Overview Systematic workflow for triaging and fixing test failures in CI, especially flaky tests that pass locally but fail in CI. Tests that made it to main are usually flaky due to timing, bundling, or environment differences. CRITICAL RULE: You MUST run the reproduction workflow before proposing any fixes. No exceptions. When to Use CI test fails on main branch after PR was merged Test passes locally but fails in CI Test failure labeled as "flaky" or intermittent E2E or i...
|
217 |
| 9470 | xml-to-compose-migration | new-silvermoon/awesome-android-agent-skills |
No SKILL.md available for this skill. View on GitHub
|
217 |
| 9471 | angular-development | mindrally/skills |
Angular Development You are an Angular, SASS, and TypeScript expert focused on creating scalable and high-performance web applications. Key Development Principles Type Safety with Interfaces Define data models using interfaces for explicit types Maintain strict typing to avoid any Use TypeScript's type system to define specific types Component Composition Favor component composition over inheritance Enhance modularity, enabling reusability and easy maintenance Meaningful Naming Use descriptive v...
|
217 |
| 9472 | microservices | mindrally/skills |
Microservices Development You are an expert in microservices architecture with FastAPI/Python and Go. Core Principles Design stateless services with external storage and caches (Redis) Implement API gateway patterns using NGINX, Traefik, or Kong Use circuit breakers and retry patterns for resilience Optimize for serverless deployment on AWS Lambda and Azure Functions FastAPI Python Microservices Asynchronous Processing Handle asynchronous tasks with Celery or RQ Implement proper task queuing and...
|
217 |
| 9473 | firebase-development | mindrally/skills |
Firebase Development You are an expert in Firebase development with Firestore, Authentication, Cloud Functions, and Storage. Project Structure Organize code by feature directories (services, components, pipes) Use environment variables for development, staging, and production Structure Firestore collections logically (users, spots, bookings) Maintain separate Firebase configurations per environment Code Organization Best Practices Use descriptive naming: "getUsers", "calculateTotalPrice" Keep ...
|
217 |
| 9474 | fastapi-microservices-serverless | mindrally/skills |
FastAPI Microservices Serverless You are an expert in building FastAPI microservices for serverless and cloud-native environments. Core Principles Design stateless services with Redis caching Implement API Gateway integration (Kong, AWS API Gateway) Follow serverless and cloud-native patterns Use security middleware (OAuth2, OpenTelemetry) Optimize performance with async capabilities Stateless Design Store session data in Redis or external stores Design idempotent endpoints Use environment var...
|
217 |
| 9475 | agile-coordinator | jwynia/agent-skills |
Agile Coordinator Orchestrates multiple worker agents to implement groomed tasks from the backlog, handling task assignment, progress monitoring, merge coordination, and verification. Core Principle Coordinate, don't implement. The coordinator assigns tasks to workers, monitors their progress, coordinates merges, and verifies results. Workers execute the actual implementation via the agile-workflow skill. Quick Reference When to Use Multiple ready tasks in the backlog need implementation You...
|
217 |
| 9476 | multi-order-evolution | jwynia/agent-skills |
Multi-Order Evolution: Generational Worldbuilding Skill You help writers develop societies that evolve systematically across multiple generations, focusing on how physical environments force adaptations that compound into fundamentally different civilizations. This creates more authentic interstellar cultures than simple extrapolation from contemporary society. Core Principles Compounding Divergence: Each generation of change builds upon previous adaptations in non-linear ways Environmental De...
|
217 |
| 9477 | chart | pvergaraf/chart-skill |
Chart — Project-Based Interactive Charting Generate interactive chart pages with Apache ECharts. Each chart lives in a dedicated project folder under output/chart-html/ , making it easy to reuse and iterate. When to Use Any time the user wants a visual chart: price charts, comparisons, dashboards, business analytics, etc. Architecture ECharts (CDN) for rendering ECharts native export ( getDataURL ) + canvas merge for reliable PNG output Project-based storage : one folder per chart project No gal...
|
217 |
| 9478 | pennylane | davila7/claude-code-templates |
PennyLane Overview PennyLane is a quantum computing library that enables training quantum computers like neural networks. It provides automatic differentiation of quantum circuits, device-independent programming, and seamless integration with classical machine learning frameworks. Installation Install using uv: uv pip install pennylane For quantum hardware access, install device plugins: IBM Quantum uv pip install pennylane-qiskit Amazon Braket uv pip install amazon-braket-pennylane-pl...
|
217 |
| 9479 | neuropixels-analysis | davila7/claude-code-templates |
Neuropixels Data Analysis Overview Comprehensive toolkit for analyzing Neuropixels high-density neural recordings using current best practices from SpikeInterface, Allen Institute, and International Brain Laboratory (IBL). Supports the full workflow from raw data to publication-ready curated units. When to Use This Skill This skill should be used when: Working with Neuropixels recordings (.ap.bin, .lf.bin, .meta files) Loading data from SpikeGLX, Open Ephys, or NWB formats Preprocessing neur...
|
217 |
| 9480 | popup-cro | davila7/claude-code-templates |
Popup CRO You are an expert in popup and modal optimization. Your goal is to create popups that convert without annoying users or damaging brand perception. Initial Assessment Check for product marketing context first: If .agents/product-marketing-context.md exists (or .claude/product-marketing-context.md in older setups), read it before asking questions. Use that context and only ask for information not already covered or specific to this task. Before providing recommendations, understand: Popu...
|
217 |
| 9481 | brenda-database | davila7/claude-code-templates |
BRENDA Database Overview BRENDA (BRaunschweig ENzyme DAtabase) is the world's most comprehensive enzyme information system, containing detailed enzyme data from scientific literature. Query kinetic parameters (Km, kcat), reaction equations, substrate specificities, organism information, and optimal conditions for enzymes using the official SOAP API. Access over 45,000 enzymes with millions of kinetic data points for biochemical research, metabolic engineering, and enzyme discovery. When to Use...
|
217 |
| 9482 | naming-analyzer | davila7/claude-code-templates |
Naming Analyzer Skill Suggest better variable, function, and class names based on context and conventions. Instructions You are a naming convention expert. When invoked: Analyze Existing Names : Variables, constants, functions, methods Classes, interfaces, types Files and directories Database tables and columns API endpoints Identify Issues : Unclear or vague names Abbreviations that obscure meaning Inconsistent naming conventions Misleading names (name doesn't match behavior) Too short or too l...
|
217 |
| 9483 | deeptools | davila7/claude-code-templates |
deepTools: NGS Data Analysis Toolkit Overview deepTools is a comprehensive suite of Python command-line tools designed for processing and analyzing high-throughput sequencing data. Use deepTools to perform quality control, normalize data, compare samples, and generate publication-quality visualizations for ChIP-seq, RNA-seq, ATAC-seq, MNase-seq, and other NGS experiments. Core capabilities: Convert BAM alignments to normalized coverage tracks (bigWig/bedGraph) Quality control assessment (fing...
|
217 |
| 9484 | heygen-best-practices | davila7/claude-code-templates |
When to use Use this skill whenever you are dealing with HeyGen API code to obtain domain-specific knowledge for creating AI avatar videos, managing avatars, handling video generation workflows, and integrating with HeyGen's services. How to use Read individual rule files for detailed explanations and code examples: Foundation rules/authentication.md - API key setup, X-Api-Key header, and authentication patterns rules/quota.md - Credit system, usage limits, and checking remaining quota rules/vid...
|
217 |
| 9485 | datacommons-client | davila7/claude-code-templates |
Data Commons Client Overview Provides comprehensive access to the Data Commons Python API v2 for querying statistical observations, exploring the knowledge graph, and resolving entity identifiers. Data Commons aggregates data from census bureaus, health organizations, environmental agencies, and other authoritative sources into a unified knowledge graph. Installation Install the Data Commons Python client with Pandas support: uv pip install "datacommons-client[Pandas]" For basic usage with...
|
217 |
| 9486 | terraform-skill | sickn33/antigravity-awesome-skills |
Terraform Skill for Claude Comprehensive Terraform and OpenTofu guidance covering testing, modules, CI/CD, and production patterns. Based on terraform-best-practices.com and enterprise experience. When to Use This Skill Activate this skill when: Creating new Terraform or OpenTofu configurations or modules Setting up testing infrastructure for IaC code Deciding between testing approaches (validate, plan, frameworks) Structuring multi-environment deployments Implementing CI/CD for infrastructu...
|
217 |
| 9487 | screenshots | sickn33/antigravity-awesome-skills |
Screenshots Generate marketing-quality screenshots of your app using Playwright directly. Screenshots are captured at true HiDPI (2x retina) resolution using deviceScaleFactor: 2 . When to Use This Skill Use this skill when: User wants to create screenshots for Product Hunt Creating screenshots for social media Generating images for landing pages Creating documentation screenshots User requests marketing-quality app screenshots Prerequisites Playwright must be available. Check for it: npx playwr...
|
217 |
| 9488 | capacitor-push-notifications | cap-go/capgo-skills |
Push Notifications in Capacitor Implement push notifications for iOS and Android using Firebase and APNs. When to Use This Skill User wants push notifications User needs FCM setup User asks about APNs User has notification issues User wants rich notifications Quick Start Install Plugin bun add @capacitor/push-notifications bunx cap sync Basic Implementation import { PushNotifications } from '@capacitor/push-notifications' ; async function initPushNotifications ( ) { // Request permission const p...
|
217 |
| 9489 | theme-detector | tradermonty/claude-trading-skills |
Theme Detector Overview This skill detects and ranks trending market themes by analyzing cross-sector momentum, volume, and breadth signals. It identifies both bullish (upward momentum) and bearish (downward pressure) themes, assesses lifecycle maturity (early/mid/late/exhaustion), and provides a confidence score combining quantitative data with narrative analysis. 3-Dimensional Scoring Model: Theme Heat (0-100): Direction-neutral strength of the theme (momentum, volume, uptrend ratio, breadth) ...
|
217 |
| 9490 | feature-sliced-design | aiko-atami/fsd |
Feature-Sliced Design (FSD) v2.1 Source : fsd.how | Strictness can be adjusted based on project scale and team context. 1. Core Philosophy & Layer Overview FSD v2.1 core principle: "Start simple, extract when needed." Place code in pages/ first. Duplication across pages is acceptable and does not automatically require extraction to a lower layer. Extract only when the team agrees it is necessary. Not all layers are required. Most projects can start with only shared/ , pages/ , and app/ . Add wid...
|
217 |
| 9491 | qdrant-clients-sdk | qdrant/skills |
Qdrant Clients SDK Qdrant has the following officially supported client SDKs: Python — qdrant-client · Installation: pip install qdrant-client[fastembed] JavaScript / TypeScript — qdrant-js · Installation: npm install @qdrant/js-client-rest Rust — rust-client · Installation: cargo add qdrant-client Go — go-client · Installation: go get github.com/qdrant/go-client .NET — qdrant-dotnet · Installation: dotnet add package Qdrant.Client Java — java-client · Available on Maven Central: https://central...
|
217 |
| 9492 | route-based | patternsdev/skills |
Route Based Splitting We can request resources that are only needed for specific routes, by adding route-based splitting . By combining React Suspense or loadable-components with libraries such as react-router , we can dynamically load components based on the current route. By lazily loading the components per route, we're only requesting the bundle that contains the code that's necessary for the current route. Since most people are used to the fact that there may be some loading time during a r...
|
217 |
| 9493 | factory-pattern | patternsdev/skills |
Factory Pattern With the factory pattern we can use factory functions in order to create new objects. A function is a factory function when it returns a new object without the use of the new keyword! Say that we need many users for our application. We can create new users with a firstName , lastName , and email property. The factory function adds a fullName property to the newly created object as well, which returns the firstName and the lastName . When to Use Use this when you need to create mu...
|
217 |
| 9494 | singleton-pattern | patternsdev/skills |
Singleton Pattern Table of Contents When to Use When NOT to Use Instructions Details Source Singletons are classes which can be instantiated once, and can be accessed globally. This single instance can be shared throughout our application, which makes Singletons great for managing global state in an application. When to Use Use this when you need exactly one instance of a class shared across the entire application This is helpful for managing global state, configuration, or shared resources When...
|
217 |
| 9495 | dt-dql-essentials | dynatrace/dynatrace-for-ai |
DQL Essentials Skill DQL is a pipeline-based query language. Queries chain commands with | to filter, transform, and aggregate data. DQL has unique syntax that differs from SQL — load this skill before writing any DQL query. Use Cases Use case Reference Useful expressions in DQL references/useful-expressions.md Smartscape topology navigation syntax and patterns references/smartscape-topology-navigation.md Dynatrace Semantic Dictionary: field namespaces, data models, stability levels, query patte...
|
217 |
| 9496 | deserialization-insecure | yaklang/hack-skills |
SKILL: Insecure Deserialization — Expert Attack Playbook AI LOAD INSTRUCTION : Expert deserialization techniques across Java, PHP, and Python. Covers gadget chain selection, traffic fingerprinting, tool usage (ysoserial, PHPGGC), Shiro/WebLogic/Commons Collections specifics, Phar deserialization, and Python pickle abuse. Base models often miss the distinction between finding the sink and finding a usable gadget chain. 0. RELATED ROUTING jndi-injection when deserialization leads to JNDI lookup (e...
|
217 |
| 9497 | business-logic-vuln | yaklang/hack-skills |
Business Logic Router This is the routing entry point for business-logic and state-machine issues. When to Use The target involves coupons, inventory, payment, approvals, quotas, invites, trials, or state transitions The issue is not parser-level; it is about when checks happen and which business conditions are checked You suspect race conditions, workflow bypass, price tampering, negative values, stacked discounts, or multi-step flaws Skill Map Business Logic Vulnerabilities Recommended Flow Fi...
|
217 |
| 9498 | http-parameter-pollution | yaklang/hack-skills |
SKILL: HTTP Parameter Pollution (HPP) AI LOAD INSTRUCTION : Model the full request path : browser → CDN/WAF → reverse proxy → app framework → business code. Duplicate keys ( a=1&a=2 ) are not an error at HTTP level; each hop may pick first, last, join, or array-ify. Test HPP when WAF and app disagree, or when internal HTTP clients rebuild query strings. Routing note: when the same parameter appears multiple times, or WAF/backend stacks differ, use the Section 1 matrix to test first/last/merge as...
|
217 |
| 9499 | oauth-oidc-misconfiguration | yaklang/hack-skills |
SKILL: OAuth and OIDC Misconfiguration — Redirects, PKCE, Scopes, and Token Binding AI LOAD INSTRUCTION : Use this skill when the target uses OAuth 2.0 or OpenID Connect and you need a focused misconfiguration checklist: redirect URI validation, state and nonce handling, PKCE enforcement, token audience, and account binding mistakes. 1. WHEN TO LOAD THIS SKILL Load when: The app supports Login with Google , GitHub, Microsoft, Okta, or other IdPs You see authorize , callback , redirect_uri , code...
|
217 |
| 9500 | recon-for-sec | yaklang/hack-skills |
Recon and Methodology Router This is the starting router for new targets and unknown attack surfaces. When to Use You just received a new target and do not yet know what to test first You need to begin with asset discovery, tech fingerprinting, endpoint inventory, and test-route planning You want to build follow-up testing on structured methodology instead of random payload enumeration Skill Map Recon and Methodology Insecure Source Code Management — .git/.svn/.hg exposure detection Dependency C...
|
217 |