Agent Skills 排行榜 · 关键词 + 语义搜索

/ 聚焦搜索框
正在使用 AI 进行语义搜索...
21,546
总 Skills
37.2M
总安装量
2,452
贡献者
# Skill 仓库 描述 安装量
9951 cross-site scripting and html injection testing sickn33/antigravity-awesome-skills
Cross-Site Scripting and HTML Injection Testing Purpose Execute comprehensive client-side injection vulnerability assessments on web applications to identify XSS and HTML injection flaws, demonstrate exploitation techniques for session hijacking and credential theft, and validate input sanitization and output encoding mechanisms. This skill enables systematic detection and exploitation across stored, reflected, and DOM-based attack vectors. Inputs / Prerequisites Required Access Target web appli...
190
9952 mongodb-schema-design romiluz13/mongodb-agent-skills
MongoDB Schema Design Data modeling patterns and anti-patterns for MongoDB, maintained by MongoDB. Bad schema is the root cause of most MongoDB performance and cost issues—queries and indexes cannot fix a fundamentally wrong model. When to Apply Reference these guidelines when: Designing a new MongoDB schema from scratch Migrating from SQL/relational databases to MongoDB Reviewing existing data models for performance issues Troubleshooting slow queries or growing document sizes Deciding between ...
189
9953 shodan reconnaissance and pentesting sickn33/antigravity-awesome-skills
Shodan Reconnaissance and Pentesting Purpose Provide systematic methodologies for leveraging Shodan as a reconnaissance tool during penetration testing engagements. This skill covers the Shodan web interface, command-line interface (CLI), REST API, search filters, on-demand scanning, and network monitoring capabilities for discovering exposed services, vulnerable systems, and IoT devices. Inputs / Prerequisites Shodan Account : Free or paid account at shodan.io API Key : Obtained from Shodan acc...
189
9954 wireshark network traffic analysis sickn33/antigravity-awesome-skills
Wireshark Network Traffic Analysis Purpose Execute comprehensive network traffic analysis using Wireshark to capture, filter, and examine network packets for security investigations, performance optimization, and troubleshooting. This skill enables systematic analysis of network protocols, detection of anomalies, and reconstruction of network conversations from PCAP files. Inputs / Prerequisites Required Tools Wireshark installed (Windows, macOS, or Linux) Network interface with capture permissi...
189
9955 cloud penetration testing sickn33/antigravity-awesome-skills
Cloud Penetration Testing Purpose Conduct comprehensive security assessments of cloud infrastructure across Microsoft Azure, Amazon Web Services (AWS), and Google Cloud Platform (GCP). This skill covers reconnaissance, authentication testing, resource enumeration, privilege escalation, data extraction, and persistence techniques for authorized cloud security engagements. Prerequisites Required Tools Azure tools Install-Module -Name Az -AllowClobber -Force Install-Module -Name MSOnline -Force In...
188
9956 data_analysis artificialanalysis/stirrup
Data Analysis Skill Comprehensive data analysis toolkit using Polars - a blazingly fast DataFrame library. This skill provides instructions, reference documentation, and ready-to-use scripts for common data analysis tasks. Iteration Checkpoints Step What to Present User Input Type Data Loading Shape, columns, sample rows "Is this the right data?" Data Exploration Summary stats, data quality issues "Any columns to focus on?" Transformation Before/after comparison "Does this transformation look co...
187
9957 burp suite web application testing sickn33/antigravity-awesome-skills
Burp Suite Web Application Testing Purpose Execute comprehensive web application security testing using Burp Suite's integrated toolset, including HTTP traffic interception and modification, request analysis and replay, automated vulnerability scanning, and manual testing workflows. This skill enables systematic discovery and exploitation of web application vulnerabilities through proxy-based testing methodology. Inputs / Prerequisites Required Tools Burp Suite Community or Professional Edition ...
187
9958 linux privilege escalation sickn33/antigravity-awesome-skills
Linux Privilege Escalation Purpose Execute systematic privilege escalation assessments on Linux systems to identify and exploit misconfigurations, vulnerable services, and security weaknesses that allow elevation from low-privilege user access to root-level control. This skill enables comprehensive enumeration and exploitation of kernel vulnerabilities, sudo misconfigurations, SUID binaries, cron jobs, capabilities, PATH hijacking, and NFS weaknesses. Inputs / Prerequisites Required Access Low-p...
187
9959 red team tools and methodology sickn33/antigravity-awesome-skills
Red Team Tools and Methodology Purpose Implement proven methodologies and tool workflows from top security researchers for effective reconnaissance, vulnerability discovery, and bug bounty hunting. Automate common tasks while maintaining thorough coverage of attack surfaces. Inputs/Prerequisites Target scope definition (domains, IP ranges, applications) Linux-based attack machine (Kali, Ubuntu) Bug bounty program rules and scope Tool dependencies installed (Go, Python, Ruby) API keys for various...
186
9960 sqlmap database penetration testing sickn33/antigravity-awesome-skills
SQLMap Database Penetration Testing Purpose Provide systematic methodologies for automated SQL injection detection and exploitation using SQLMap. This skill covers database enumeration, table and column discovery, data extraction, multiple target specification methods, and advanced exploitation techniques for MySQL, PostgreSQL, MSSQL, Oracle, and other database management systems. Inputs / Prerequisites Target URL : Web application URL with injectable parameter (e.g., ?id=1 ) SQLMap Installation...
186
9961 seedance-prompter pexoai/pexo-skills
Seedance Prompt Designer Skill This skill transforms a user's scattered multimodal assets (images, videos, audio) and ambiguous creative intent into a structured, executable prompt for the Seedance 2.0 video generation model. It acts as an expert prompt engineer, ensuring the highest quality output from the underlying model. When to Use When the user provides multiple assets (images, videos, audio) for video generation. When the user's request is complex and requires careful prompt construction....
186
9962 agent development anthropics/claude-plugins-official
Agent Development for Claude Code Plugins Overview Agents are autonomous subprocesses that handle complex, multi-step tasks independently. Understanding agent structure, triggering conditions, and system prompt design enables creating powerful autonomous capabilities. Key concepts: Agents are FOR autonomous work, commands are FOR user-initiated actions Markdown file format with YAML frontmatter Triggering via description field with examples System prompt defines agent behavior Model and color cu...
186
9963 information-security-manager-iso27001 alirezarezvani/claude-skills
Senior Information Security Manager - ISO 27001/27002 Specialist Expert-level Information Security Management System (ISMS) implementation and cybersecurity governance with comprehensive knowledge of ISO 27001, ISO 27002, and healthcare-specific security requirements. Core ISMS Competencies 1. ISO 27001 ISMS Implementation Design and implement comprehensive Information Security Management Systems aligned with ISO 27001:2022 and healthcare regulatory requirements. ISMS Implementation Framewor...
184
9964 risk-management-specialist alirezarezvani/claude-skills
Senior Risk Management Specialist Expert-level medical device risk management implementing ISO 14971 throughout the complete product lifecycle with comprehensive risk analysis, evaluation, control, and post-production monitoring capabilities. Core Risk Management Competencies 1. Risk Management Process Implementation (ISO 14971) Establish and maintain comprehensive risk management processes integrated throughout the product development and lifecycle. Risk Management Process Framework: ISO 14971 ...
184
9965 active directory attacks sickn33/antigravity-awesome-skills
Active Directory Attacks Purpose Provide comprehensive techniques for attacking Microsoft Active Directory environments. Covers reconnaissance, credential harvesting, Kerberos attacks, lateral movement, privilege escalation, and domain dominance for red team operations and penetration testing. Inputs/Prerequisites Kali Linux or Windows attack platform Domain user credentials (for most attacks) Network access to Domain Controller Tools: Impacket, Mimikatz, BloodHound, Rubeus, CrackMapExec Outputs...
183
9966 network 101 sickn33/antigravity-awesome-skills
Network 101 Purpose Configure and test common network services (HTTP, HTTPS, SNMP, SMB) for penetration testing lab environments. Enable hands-on practice with service enumeration, log analysis, and security testing against properly configured target systems. Inputs/Prerequisites Windows Server or Linux system for hosting services Kali Linux or similar for testing Administrative access to target system Basic networking knowledge (IP addressing, ports) Firewall access for port configuration Outpu...
183
9967 broken authentication testing sickn33/antigravity-awesome-skills
Broken Authentication Testing Purpose Identify and exploit authentication and session management vulnerabilities in web applications. Broken authentication consistently ranks in the OWASP Top 10 and can lead to account takeover, identity theft, and unauthorized access to sensitive systems. This skill covers testing methodologies for password policies, session handling, multi-factor authentication, and credential management. Prerequisites Required Knowledge HTTP protocol and session mechanisms Au...
183
9968 app-store-optimization alirezarezvani/claude-skills
App Store Optimization (ASO) Skill This comprehensive skill provides complete ASO capabilities for successfully launching and optimizing mobile applications on the Apple App Store and Google Play Store. Capabilities Research & Analysis Keyword Research: Analyze keyword volume, competition, and relevance for app discovery Competitor Analysis: Deep-dive into top-performing apps in your category Market Trend Analysis: Identify emerging trends and opportunities in your app category Review Sentimen...
183
9969 quality-documentation-manager alirezarezvani/claude-skills
Senior Quality Documentation Manager Expert-level quality documentation management with comprehensive document control system design, regulatory documentation oversight, change management, and configuration control for medical device organizations. Core Documentation Management Competencies 1. Document Control System Design (ISO 13485 Clause 4.2.3) Design and implement comprehensive document control systems ensuring systematic document management and regulatory compliance. Document Control S...
183
9970 file path traversal testing sickn33/antigravity-awesome-skills
File Path Traversal Testing Purpose Identify and exploit file path traversal (directory traversal) vulnerabilities that allow attackers to read arbitrary files on the server, potentially including sensitive configuration files, credentials, and source code. This vulnerability occurs when user-controllable input is passed to filesystem APIs without proper validation. Prerequisites Required Tools Web browser with developer tools Burp Suite or OWASP ZAP cURL for testing payloads Wordlists for autom...
183
9971 hook development anthropics/claude-plugins-official
Hook Development for Claude Code Plugins Overview Hooks are event-driven automation scripts that execute in response to Claude Code events. Use hooks to validate operations, enforce policies, add context, and integrate external tools into workflows. Key capabilities: Validate tool calls before execution (PreToolUse) React to tool results (PostToolUse) Enforce completion standards (Stop, SubagentStop) Load project context (SessionStart) Automate workflows across the development lifecycle Hook Typ...
182
9972 sentry-setup-metrics getsentry/sentry-agent-skills
Setup Sentry Metrics Configure Sentry's custom metrics for tracking counters, gauges, and distributions. Invoke This Skill When User asks to "add Sentry metrics" or "track custom metrics" User wants counters, gauges, or distributions User asks about Sentry.metrics or sentry_sdk.metrics Quick Reference Platform Min SDK API JavaScript 10.25.0+ Sentry.metrics.* Python 2.44.0+ sentry_sdk.metrics.* Note: Ruby does not have metrics support. Metric Types Type Purpose Example Use Cases Counter Cumul...
182
9973 skill-creator everyinc/compound-engineering-plugin
Skill Creator A skill for creating new skills and iteratively improving them. At a high level, the process of creating a skill goes like this: Decide what you want the skill to do and roughly how it should do it Write a draft of the skill Create a few test prompts and run claude-with-access-to-the-skill on them Help the user evaluate the results both qualitatively and quantitatively While the runs happen in the background, draft some quantitative evals if there aren't any (if there are some, you...
180
9974 generating-sounds-with-ai raphaelsalaja/userinterface-wiki
Review Web Audio API code for sound synthesis best practices. How It Works - Read the specified files (or prompt user for files/pattern) - Check against all rules below - Output findings in `file:line` format Rule Categories | 1 | Context Management | `context-` | 2 | Decay & Envelope | `envelope-` | 3 | Sound Design | `design-` | 4 | Parameters | `param-` Rules Context Management Rules `context-reuse-single` Reuse a single AudioContext instance; do not create new o...
180
9975 video-processing letta-ai/skills
This skill provides guidance for video processing tasks involving frame-level analysis, event detection, and motion tracking using computer vision libraries like OpenCV. It emphasizes verification-first approaches and guards against common pitfalls in video analysis workflows. Core Approach: Verify Before Implementing Before writing detection algorithms, establish ground truth understanding of the video content: - Extract and inspect sample frames - Save key frames as images to visually veri...
180
9976 ssh penetration testing sickn33/antigravity-awesome-skills
SSH Penetration Testing Purpose Conduct comprehensive SSH security assessments including enumeration, credential attacks, vulnerability exploitation, tunneling techniques, and post-exploitation activities. This skill covers the complete methodology for testing SSH service security. Prerequisites Required Tools Nmap with SSH scripts Hydra or Medusa for brute-forcing ssh-audit for configuration analysis Metasploit Framework Python with Paramiko library Required Knowledge SSH protocol fundamentals ...
180
9977 html injection testing sickn33/antigravity-awesome-skills
HTML Injection Testing Purpose Identify and exploit HTML injection vulnerabilities that allow attackers to inject malicious HTML content into web applications. This vulnerability enables attackers to modify page appearance, create phishing pages, and steal user credentials through injected forms. Prerequisites Required Tools Web browser with developer tools Burp Suite or OWASP ZAP Tamper Data or similar proxy cURL for testing payloads Required Knowledge HTML fundamentals HTTP request/response st...
179
9978 regulatory-affairs-head alirezarezvani/claude-skills
Senior Regulatory Affairs Manager (Head of Regulatory Affairs) Expert-level regulatory affairs leadership for HealthTech and MedTech companies with deep knowledge of global regulatory frameworks, submission strategies, and cross-functional team coordination. Core Competencies 1. Strategic Regulatory Planning Develop comprehensive regulatory strategies that align with business objectives and ensure successful market access. Key Activities: Regulatory pathway analysis and optimization Market acces...
178
9979 windows privilege escalation sickn33/antigravity-awesome-skills
Windows Privilege Escalation Purpose Provide systematic methodologies for discovering and exploiting privilege escalation vulnerabilities on Windows systems during penetration testing engagements. This skill covers system enumeration, credential harvesting, service exploitation, token impersonation, kernel exploits, and various misconfigurations that enable escalation from standard user to Administrator or SYSTEM privileges. Inputs / Prerequisites Initial Access : Shell or RDP access as standard...
178
9980 command development anthropics/claude-plugins-official
Command Development for Claude Code Overview Slash commands are frequently-used prompts defined as Markdown files that Claude executes during interactive sessions. Understanding command structure, frontmatter options, and dynamic features enables creating powerful, reusable workflows. Key concepts: Markdown file format for commands YAML frontmatter for configuration Dynamic arguments and file references Bash execution for context Command organization and namespacing Command Basics What is a Slas...
177
9981 mcp integration anthropics/claude-plugins-official
MCP Integration for Claude Code Plugins Overview Model Context Protocol (MCP) enables Claude Code plugins to integrate with external services and APIs by providing structured tool access. Use MCP integration to expose external service capabilities as tools within Claude Code. Key capabilities: Connect to external services (databases, APIs, file systems) Provide 10+ related tools from a single service Handle OAuth and complex authentication flows Bundle MCP servers with plugins for automatic setu...
177
9982 quality-manager-qms-iso13485 alirezarezvani/claude-skills
Senior Quality Manager - QMS ISO 13485 Specialist Expert-level ISO 13485 Quality Management System implementation and maintenance for medical device organizations with deep knowledge of quality processes, documentation control, and continuous improvement. Core QMS Competencies 1. ISO 13485 QMS Implementation Design and implement comprehensive quality management systems aligned with ISO 13485:2016 and regulatory requirements. Implementation Workflow: Gap Analysis and Planning Current state assess...
177
9983 init astronomer/agents
Initialize Playwright Project Set up a production-ready Playwright testing environment. Detect the framework, generate config, folder structure, example test, and CI workflow. Steps 1. Analyze the Project Use the Explore subagent to scan the project: Check package.json for framework (React, Next.js, Vue, Angular, Svelte) Check for tsconfig.json → use TypeScript; otherwise JavaScript Check if Playwright is already installed ( @playwright/test in dependencies) Check for existing test directories (...
176
9984 marketing-demand-acquisition alirezarezvani/claude-skills
Marketing Demand & Acquisition Expert acquisition playbook for Series A+ startups scaling internationally (EU/US/Canada) with hybrid PLG/Sales-Led motion. Keywords demand generation, paid media, paid ads, LinkedIn ads, Google ads, Meta ads, CAC, customer acquisition cost, lead generation, MQL, SQL, pipeline generation, acquisition strategy, performance marketing, paid social, paid search, partnerships, affiliate marketing, SEO strategy, HubSpot campaigns, marketing automation, B2B marketing, ...
176
9985 meta-ads-creative cdeistopened/opened-vault
Meta Ads Creative Skill Purpose Create Meta ad creative that converts using research-driven development, the 6 Elements framework, and format fitting - matching your message to proven ad formats. Core Philosophy: The best Meta ads don't look like ads. Lo-fi > polished. Authentic > produced. Native > interruptive. When to Use Create ad creative for Meta campaigns Develop concepts for retargeting or cold audiences Generate multiple variations for A/B testing Transform testimonials into ad creat...
176
9986 gmail-automation composiohq/awesome-claude-skills
Gmail Lightweight Gmail integration with standalone OAuth authentication. No MCP server required. ⚠️ Requires Google Workspace account. Personal Gmail accounts are not supported. When to Use You need to search, read, or send Gmail messages from the command line without an MCP server. You are automating inbox workflows for a Google Workspace account. You want a lightweight Gmail integration backed by standalone OAuth scripts. First-Time Setup Authenticate with Google (opens browser): python scrip...
176
9987 idor vulnerability testing sickn33/antigravity-awesome-skills
IDOR Vulnerability Testing Purpose Provide systematic methodologies for identifying and exploiting Insecure Direct Object Reference (IDOR) vulnerabilities in web applications. This skill covers both database object references and static file references, detection techniques using parameter manipulation and enumeration, exploitation via Burp Suite, and remediation strategies for securing applications against unauthorized access. Inputs / Prerequisites Target Web Application : URL of application w...
175
9988 smtp penetration testing sickn33/antigravity-awesome-skills
SMTP Penetration Testing Purpose Conduct comprehensive security assessments of SMTP (Simple Mail Transfer Protocol) servers to identify vulnerabilities including open relays, user enumeration, weak authentication, and misconfiguration. This skill covers banner grabbing, user enumeration techniques, relay testing, brute force attacks, and security hardening recommendations. Prerequisites Required Tools Nmap with SMTP scripts sudo apt-get install nmap Netcat sudo apt-get install netcat Hydra fo...
175
9989 capa-officer alirezarezvani/claude-skills
Senior CAPA Officer Expert-level Corrective and Preventive Action (CAPA) management within Quality Management Systems, specializing in systematic problem-solving, root cause analysis, and sustainable corrective action implementation. Core CAPA Competencies 1. CAPA Process Management Lead comprehensive CAPA processes from initiation through effectiveness verification ensuring sustainable problem resolution. CAPA Lifecycle Management: CAPA PROCESS WORKFLOW ├── CAPA Initiation and Evaluation │ ├─...
175
9990 greenlight revylai/greenlight
Greenlight — App Store Pre-Submission Scanner You are an expert at preparing iOS apps for App Store submission. You have access to the greenlight CLI which runs automated compliance checks. Your job is to run the checks, interpret the results, fix every issue, and re-run until the app passes with GREENLIT status. Step 1: Run the scan Run greenlight preflight immediately on the project root. Do NOT try to install greenlight — it is already available in PATH. Just run it: greenlight preflight . If...
174
9991 pencil-to-code phrazzld/claude-config
Pencil to Code Export Pencil .pen designs to production React/Tailwind code. Interface Input: Frame ID to export (or entire document) Target framework: React (default), Vue, HTML Optional: Component name, output path Output: React component(s) with Tailwind classes Tailwind theme configuration (from .pen variables) Optional: Screenshot comparison for validation Workflow 1. Read Design Structure // Get full frame tree mcp__pencil__batch_get({ filePath: "<path>.pen", nodeIds: ["frameId"]...
173
9992 ms365-tenant-manager alirezarezvani/claude-skills
Microsoft 365 Tenant Manager This skill provides expert guidance and automation for Microsoft 365 Global Administrators managing tenant setup, configuration, user lifecycle, security policies, and organizational optimization. Capabilities Tenant Setup & Configuration: Initial tenant setup, domain configuration, DNS records, service provisioning User & Group Management: User lifecycle (create, modify, disable, delete), group creation, license assignment Security & Compliance: Conditional Access...
173
9993 plugin settings anthropics/claude-plugins-official
Plugin Settings Pattern for Claude Code Plugins Overview Plugins can store user-configurable settings and state in .claude/plugin-name.local.md files within the project directory. This pattern uses YAML frontmatter for structured configuration and markdown content for prompts or additional context. Key characteristics: File location: .claude/plugin-name.local.md in project root Structure: YAML frontmatter + markdown body Purpose: Per-project plugin configuration and state Usage: Read from hooks,...
172
9994 solana-dev guibibeau/solana-dev-skill
Solana Development Skill (framework-kit-first) What this Skill is for Use this Skill when the user asks for: Solana dApp UI work (React / Next.js) Wallet connection + signing flows Transaction building / sending / confirmation UX On-chain program development (Anchor or Pinocchio) Client SDK generation (typed program clients) Local testing (LiteSVM, Mollusk, Surfpool) Security hardening and audit-style reviews Confidential transfers (Token-2022 ZK extension) Toolchain setup, version mismatches, G...
172
9995 gdpr-dsgvo-expert alirezarezvani/claude-skills
Senior GDPR/DSGVO Expert and Auditor Expert-level EU General Data Protection Regulation (GDPR) and German Datenschutz-Grundverordnung (DSGVO) compliance with comprehensive data protection auditing, privacy impact assessment, and regulatory compliance verification capabilities. Core GDPR/DSGVO Competencies 1. GDPR/DSGVO Compliance Framework Implementation Design and implement comprehensive data protection compliance programs ensuring systematic GDPR/DSGVO adherence. GDPR Compliance Framework:...
171
9996 isms-audit-expert alirezarezvani/claude-skills
Senior ISMS Audit Expert Expert-level Information Security Management System (ISMS) auditing with comprehensive knowledge of ISO 27001, security audit methodologies, security control assessment, and cybersecurity compliance verification. Core ISMS Auditing Competencies 1. ISO 27001 ISMS Audit Program Management Design and manage comprehensive ISMS audit programs ensuring systematic security evaluation and continuous improvement. ISMS Audit Program Framework: ISMS AUDIT PROGRAM MANAGEMENT ├── Sec...
171
9997 writing hookify rules anthropics/claude-plugins-official
Writing Hookify Rules Overview Hookify rules are markdown files with YAML frontmatter that define patterns to watch for and messages to show when those patterns match. Rules are stored in .claude/hookify.{rule-name}.local.md files. Rule File Format Basic Structure --- name : rule - identifier enabled : true event : bash | file | stop | prompt | all pattern : regex - pattern - here --- Message to show Claude when this rule triggers. Can include markdown formatting, warnings, suggestions, etc. Fro...
171
9998 metasploit framework sickn33/antigravity-awesome-skills
Metasploit Framework ⚠️ AUTHORIZED USE ONLY This skill is for educational purposes or authorized security assessments only. You must have explicit, written permission from the system owner before using this tool. Misuse of this tool is illegal and strictly prohibited. Purpose Leverage the Metasploit Framework for comprehensive penetration testing, from initial exploitation through post-exploitation activities. Metasploit provides a unified platform for vulnerability exploitation, payload generat...
170
9999 fda-consultant-specialist alirezarezvani/claude-skills
Senior FDA Consultant and Specialist Expert-level FDA regulatory consulting with comprehensive knowledge of medical device regulations, Quality System Regulation (QSR), HIPAA compliance, cybersecurity requirements, and FDA submission pathways. Core FDA Regulatory Competencies 1. FDA Pathway Analysis and Selection Provide expert guidance on optimal FDA regulatory pathways ensuring efficient market access and regulatory compliance. FDA Pathway Decision Framework: FDA REGULATORY PATHWAY SELECTION ├...
169
10000 nda-triage anthropics/knowledge-work-plugins
NDA Triage Skill You are an NDA screening assistant for an in-house legal team. You rapidly evaluate incoming NDAs against standard criteria, classify them by risk level, and provide routing recommendations. Important : You assist with legal workflows but do not provide legal advice. All analysis should be reviewed by qualified legal professionals before being relied upon. NDA Screening Criteria and Checklist When triaging an NDA, evaluate each of the following criteria systematically: 1. Agreem...
169