Agent Skills 排行榜 · 关键词 + 语义搜索

/ 聚焦搜索框
正在使用 AI 进行语义搜索...
27,660
总 Skills
168.0M
总安装量
2,751
贡献者
# Skill 仓库 描述 安装量
15951 wordpress penetration testing sickn33/antigravity-awesome-skills
WordPress Penetration Testing Purpose Conduct comprehensive security assessments of WordPress installations including enumeration of users, themes, and plugins, vulnerability scanning, credential attacks, and exploitation techniques. WordPress powers approximately 35% of websites, making it a critical target for security testing. Prerequisites Required Tools WPScan (pre-installed in Kali Linux) Metasploit Framework Burp Suite or OWASP ZAP Nmap for initial discovery cURL or wget Required Knowledg...
191
15952 framer-motion-best-practices pproenca/dot-skills
Comprehensive performance optimization guide for Framer Motion animations in React applications. Contains 42 rules across 9 categories, prioritized by impact to guide automated refactoring and code generation. When to Apply Reference these guidelines when: - Adding animations to React components with Framer Motion - Optimizing bundle size for animation-heavy applications - Preventing unnecessary re-renders during animations - Implementing layout transitions or shared element animations -...
191
15953 security scanning tools sickn33/antigravity-awesome-skills
Security Scanning Tools Purpose Master essential security scanning tools for network discovery, vulnerability assessment, web application testing, wireless security, and compliance validation. This skill covers tool selection, configuration, and practical usage across different scanning categories. Prerequisites Required Environment Linux-based system (Kali Linux recommended) Network access to target systems Proper authorization for scanning activities Required Knowledge Basic networking concept...
190
15954 cross-site scripting and html injection testing sickn33/antigravity-awesome-skills
Cross-Site Scripting and HTML Injection Testing Purpose Execute comprehensive client-side injection vulnerability assessments on web applications to identify XSS and HTML injection flaws, demonstrate exploitation techniques for session hijacking and credential theft, and validate input sanitization and output encoding mechanisms. This skill enables systematic detection and exploitation across stored, reflected, and DOM-based attack vectors. Inputs / Prerequisites Required Access Target web appli...
190
15955 mongodb-schema-design romiluz13/mongodb-agent-skills
MongoDB Schema Design Data modeling patterns and anti-patterns for MongoDB, maintained by MongoDB. Bad schema is the root cause of most MongoDB performance and cost issues—queries and indexes cannot fix a fundamentally wrong model. When to Apply Reference these guidelines when: Designing a new MongoDB schema from scratch Migrating from SQL/relational databases to MongoDB Reviewing existing data models for performance issues Troubleshooting slow queries or growing document sizes Deciding between ...
189
15956 shodan reconnaissance and pentesting sickn33/antigravity-awesome-skills
Shodan Reconnaissance and Pentesting Purpose Provide systematic methodologies for leveraging Shodan as a reconnaissance tool during penetration testing engagements. This skill covers the Shodan web interface, command-line interface (CLI), REST API, search filters, on-demand scanning, and network monitoring capabilities for discovering exposed services, vulnerable systems, and IoT devices. Inputs / Prerequisites Shodan Account : Free or paid account at shodan.io API Key : Obtained from Shodan acc...
189
15957 wireshark network traffic analysis sickn33/antigravity-awesome-skills
Wireshark Network Traffic Analysis Purpose Execute comprehensive network traffic analysis using Wireshark to capture, filter, and examine network packets for security investigations, performance optimization, and troubleshooting. This skill enables systematic analysis of network protocols, detection of anomalies, and reconstruction of network conversations from PCAP files. Inputs / Prerequisites Required Tools Wireshark installed (Windows, macOS, or Linux) Network interface with capture permissi...
189
15958 cloud penetration testing sickn33/antigravity-awesome-skills
Cloud Penetration Testing Purpose Conduct comprehensive security assessments of cloud infrastructure across Microsoft Azure, Amazon Web Services (AWS), and Google Cloud Platform (GCP). This skill covers reconnaissance, authentication testing, resource enumeration, privilege escalation, data extraction, and persistence techniques for authorized cloud security engagements. Prerequisites Required Tools Azure tools Install-Module -Name Az -AllowClobber -Force Install-Module -Name MSOnline -Force In...
188
15959 data_analysis artificialanalysis/stirrup
Data Analysis Skill Comprehensive data analysis toolkit using Polars - a blazingly fast DataFrame library. This skill provides instructions, reference documentation, and ready-to-use scripts for common data analysis tasks. Iteration Checkpoints Step What to Present User Input Type Data Loading Shape, columns, sample rows "Is this the right data?" Data Exploration Summary stats, data quality issues "Any columns to focus on?" Transformation Before/after comparison "Does this transformation look co...
187
15960 burp suite web application testing sickn33/antigravity-awesome-skills
Burp Suite Web Application Testing Purpose Execute comprehensive web application security testing using Burp Suite's integrated toolset, including HTTP traffic interception and modification, request analysis and replay, automated vulnerability scanning, and manual testing workflows. This skill enables systematic discovery and exploitation of web application vulnerabilities through proxy-based testing methodology. Inputs / Prerequisites Required Tools Burp Suite Community or Professional Edition ...
187
15961 linux privilege escalation sickn33/antigravity-awesome-skills
Linux Privilege Escalation Purpose Execute systematic privilege escalation assessments on Linux systems to identify and exploit misconfigurations, vulnerable services, and security weaknesses that allow elevation from low-privilege user access to root-level control. This skill enables comprehensive enumeration and exploitation of kernel vulnerabilities, sudo misconfigurations, SUID binaries, cron jobs, capabilities, PATH hijacking, and NFS weaknesses. Inputs / Prerequisites Required Access Low-p...
187
15962 red team tools and methodology sickn33/antigravity-awesome-skills
Red Team Tools and Methodology Purpose Implement proven methodologies and tool workflows from top security researchers for effective reconnaissance, vulnerability discovery, and bug bounty hunting. Automate common tasks while maintaining thorough coverage of attack surfaces. Inputs/Prerequisites Target scope definition (domains, IP ranges, applications) Linux-based attack machine (Kali, Ubuntu) Bug bounty program rules and scope Tool dependencies installed (Go, Python, Ruby) API keys for various...
186
15963 sqlmap database penetration testing sickn33/antigravity-awesome-skills
SQLMap Database Penetration Testing Purpose Provide systematic methodologies for automated SQL injection detection and exploitation using SQLMap. This skill covers database enumeration, table and column discovery, data extraction, multiple target specification methods, and advanced exploitation techniques for MySQL, PostgreSQL, MSSQL, Oracle, and other database management systems. Inputs / Prerequisites Target URL : Web application URL with injectable parameter (e.g., ?id=1 ) SQLMap Installation...
186
15964 seedance-prompter pexoai/pexo-skills
Seedance Prompt Designer Skill This skill transforms a user's scattered multimodal assets (images, videos, audio) and ambiguous creative intent into a structured, executable prompt for the Seedance 2.0 video generation model. It acts as an expert prompt engineer, ensuring the highest quality output from the underlying model. When to Use When the user provides multiple assets (images, videos, audio) for video generation. When the user's request is complex and requires careful prompt construction....
186
15965 agent development anthropics/claude-plugins-official
Agent Development for Claude Code Plugins Overview Agents are autonomous subprocesses that handle complex, multi-step tasks independently. Understanding agent structure, triggering conditions, and system prompt design enables creating powerful autonomous capabilities. Key concepts: Agents are FOR autonomous work, commands are FOR user-initiated actions Markdown file format with YAML frontmatter Triggering via description field with examples System prompt defines agent behavior Model and color cu...
186
15966 active directory attacks sickn33/antigravity-awesome-skills
Active Directory Attacks Purpose Provide comprehensive techniques for attacking Microsoft Active Directory environments. Covers reconnaissance, credential harvesting, Kerberos attacks, lateral movement, privilege escalation, and domain dominance for red team operations and penetration testing. Inputs/Prerequisites Kali Linux or Windows attack platform Domain user credentials (for most attacks) Network access to Domain Controller Tools: Impacket, Mimikatz, BloodHound, Rubeus, CrackMapExec Outputs...
183
15967 network 101 sickn33/antigravity-awesome-skills
Network 101 Purpose Configure and test common network services (HTTP, HTTPS, SNMP, SMB) for penetration testing lab environments. Enable hands-on practice with service enumeration, log analysis, and security testing against properly configured target systems. Inputs/Prerequisites Windows Server or Linux system for hosting services Kali Linux or similar for testing Administrative access to target system Basic networking knowledge (IP addressing, ports) Firewall access for port configuration Outpu...
183
15968 broken authentication testing sickn33/antigravity-awesome-skills
Broken Authentication Testing Purpose Identify and exploit authentication and session management vulnerabilities in web applications. Broken authentication consistently ranks in the OWASP Top 10 and can lead to account takeover, identity theft, and unauthorized access to sensitive systems. This skill covers testing methodologies for password policies, session handling, multi-factor authentication, and credential management. Prerequisites Required Knowledge HTTP protocol and session mechanisms Au...
183
15969 file path traversal testing sickn33/antigravity-awesome-skills
File Path Traversal Testing Purpose Identify and exploit file path traversal (directory traversal) vulnerabilities that allow attackers to read arbitrary files on the server, potentially including sensitive configuration files, credentials, and source code. This vulnerability occurs when user-controllable input is passed to filesystem APIs without proper validation. Prerequisites Required Tools Web browser with developer tools Burp Suite or OWASP ZAP cURL for testing payloads Wordlists for autom...
183
15970 hook development anthropics/claude-plugins-official
Hook Development for Claude Code Plugins Overview Hooks are event-driven automation scripts that execute in response to Claude Code events. Use hooks to validate operations, enforce policies, add context, and integrate external tools into workflows. Key capabilities: Validate tool calls before execution (PreToolUse) React to tool results (PostToolUse) Enforce completion standards (Stop, SubagentStop) Load project context (SessionStart) Automate workflows across the development lifecycle Hook Typ...
182
15971 sentry-setup-metrics getsentry/sentry-agent-skills
Setup Sentry Metrics Configure Sentry's custom metrics for tracking counters, gauges, and distributions. Invoke This Skill When User asks to "add Sentry metrics" or "track custom metrics" User wants counters, gauges, or distributions User asks about Sentry.metrics or sentry_sdk.metrics Quick Reference Platform Min SDK API JavaScript 10.25.0+ Sentry.metrics.* Python 2.44.0+ sentry_sdk.metrics.* Note: Ruby does not have metrics support. Metric Types Type Purpose Example Use Cases Counter Cumul...
182
15972 skill-creator everyinc/compound-engineering-plugin
Skill Creator A skill for creating new skills and iteratively improving them. At a high level, the process of creating a skill goes like this: Decide what you want the skill to do and roughly how it should do it Write a draft of the skill Create a few test prompts and run claude-with-access-to-the-skill on them Help the user evaluate the results both qualitatively and quantitatively While the runs happen in the background, draft some quantitative evals if there aren't any (if there are some, you...
180
15973 generating-sounds-with-ai raphaelsalaja/userinterface-wiki
Review Web Audio API code for sound synthesis best practices. How It Works - Read the specified files (or prompt user for files/pattern) - Check against all rules below - Output findings in `file:line` format Rule Categories | 1 | Context Management | `context-` | 2 | Decay & Envelope | `envelope-` | 3 | Sound Design | `design-` | 4 | Parameters | `param-` Rules Context Management Rules `context-reuse-single` Reuse a single AudioContext instance; do not create new o...
180
15974 video-processing letta-ai/skills
This skill provides guidance for video processing tasks involving frame-level analysis, event detection, and motion tracking using computer vision libraries like OpenCV. It emphasizes verification-first approaches and guards against common pitfalls in video analysis workflows. Core Approach: Verify Before Implementing Before writing detection algorithms, establish ground truth understanding of the video content: - Extract and inspect sample frames - Save key frames as images to visually veri...
180
15975 ssh penetration testing sickn33/antigravity-awesome-skills
SSH Penetration Testing Purpose Conduct comprehensive SSH security assessments including enumeration, credential attacks, vulnerability exploitation, tunneling techniques, and post-exploitation activities. This skill covers the complete methodology for testing SSH service security. Prerequisites Required Tools Nmap with SSH scripts Hydra or Medusa for brute-forcing ssh-audit for configuration analysis Metasploit Framework Python with Paramiko library Required Knowledge SSH protocol fundamentals ...
180
15976 html injection testing sickn33/antigravity-awesome-skills
HTML Injection Testing Purpose Identify and exploit HTML injection vulnerabilities that allow attackers to inject malicious HTML content into web applications. This vulnerability enables attackers to modify page appearance, create phishing pages, and steal user credentials through injected forms. Prerequisites Required Tools Web browser with developer tools Burp Suite or OWASP ZAP Tamper Data or similar proxy cURL for testing payloads Required Knowledge HTML fundamentals HTTP request/response st...
179
15977 windows privilege escalation sickn33/antigravity-awesome-skills
Windows Privilege Escalation Purpose Provide systematic methodologies for discovering and exploiting privilege escalation vulnerabilities on Windows systems during penetration testing engagements. This skill covers system enumeration, credential harvesting, service exploitation, token impersonation, kernel exploits, and various misconfigurations that enable escalation from standard user to Administrator or SYSTEM privileges. Inputs / Prerequisites Initial Access : Shell or RDP access as standard...
178
15978 command development anthropics/claude-plugins-official
Command Development for Claude Code Overview Slash commands are frequently-used prompts defined as Markdown files that Claude executes during interactive sessions. Understanding command structure, frontmatter options, and dynamic features enables creating powerful, reusable workflows. Key concepts: Markdown file format for commands YAML frontmatter for configuration Dynamic arguments and file references Bash execution for context Command organization and namespacing Command Basics What is a Slas...
177
15979 mcp integration anthropics/claude-plugins-official
MCP Integration for Claude Code Plugins Overview Model Context Protocol (MCP) enables Claude Code plugins to integrate with external services and APIs by providing structured tool access. Use MCP integration to expose external service capabilities as tools within Claude Code. Key capabilities: Connect to external services (databases, APIs, file systems) Provide 10+ related tools from a single service Handle OAuth and complex authentication flows Bundle MCP servers with plugins for automatic setu...
177
15980 init astronomer/agents
Initialize Playwright Project Set up a production-ready Playwright testing environment. Detect the framework, generate config, folder structure, example test, and CI workflow. Steps 1. Analyze the Project Use the Explore subagent to scan the project: Check package.json for framework (React, Next.js, Vue, Angular, Svelte) Check for tsconfig.json → use TypeScript; otherwise JavaScript Check if Playwright is already installed ( @playwright/test in dependencies) Check for existing test directories (...
176
15981 meta-ads-creative cdeistopened/opened-vault
Meta Ads Creative Skill Purpose Create Meta ad creative that converts using research-driven development, the 6 Elements framework, and format fitting - matching your message to proven ad formats. Core Philosophy: The best Meta ads don't look like ads. Lo-fi > polished. Authentic > produced. Native > interruptive. When to Use Create ad creative for Meta campaigns Develop concepts for retargeting or cold audiences Generate multiple variations for A/B testing Transform testimonials into ad creat...
176
15982 gmail-automation composiohq/awesome-claude-skills
Gmail Lightweight Gmail integration with standalone OAuth authentication. No MCP server required. ⚠️ Requires Google Workspace account. Personal Gmail accounts are not supported. When to Use You need to search, read, or send Gmail messages from the command line without an MCP server. You are automating inbox workflows for a Google Workspace account. You want a lightweight Gmail integration backed by standalone OAuth scripts. First-Time Setup Authenticate with Google (opens browser): python scrip...
176
15983 idor vulnerability testing sickn33/antigravity-awesome-skills
IDOR Vulnerability Testing Purpose Provide systematic methodologies for identifying and exploiting Insecure Direct Object Reference (IDOR) vulnerabilities in web applications. This skill covers both database object references and static file references, detection techniques using parameter manipulation and enumeration, exploitation via Burp Suite, and remediation strategies for securing applications against unauthorized access. Inputs / Prerequisites Target Web Application : URL of application w...
175
15984 smtp penetration testing sickn33/antigravity-awesome-skills
SMTP Penetration Testing Purpose Conduct comprehensive security assessments of SMTP (Simple Mail Transfer Protocol) servers to identify vulnerabilities including open relays, user enumeration, weak authentication, and misconfiguration. This skill covers banner grabbing, user enumeration techniques, relay testing, brute force attacks, and security hardening recommendations. Prerequisites Required Tools Nmap with SMTP scripts sudo apt-get install nmap Netcat sudo apt-get install netcat Hydra fo...
175
15985 greenlight revylai/greenlight
Greenlight — App Store Pre-Submission Scanner You are an expert at preparing iOS apps for App Store submission. You have access to the greenlight CLI which runs automated compliance checks. Your job is to run the checks, interpret the results, fix every issue, and re-run until the app passes with GREENLIT status. Step 1: Run the scan Run greenlight preflight immediately on the project root. Do NOT try to install greenlight — it is already available in PATH. Just run it: greenlight preflight . If...
174
15986 pencil-to-code phrazzld/claude-config
Pencil to Code Export Pencil .pen designs to production React/Tailwind code. Interface Input: Frame ID to export (or entire document) Target framework: React (default), Vue, HTML Optional: Component name, output path Output: React component(s) with Tailwind classes Tailwind theme configuration (from .pen variables) Optional: Screenshot comparison for validation Workflow 1. Read Design Structure // Get full frame tree mcp__pencil__batch_get({ filePath: "<path>.pen", nodeIds: ["frameId"]...
173
15987 plugin settings anthropics/claude-plugins-official
Plugin Settings Pattern for Claude Code Plugins Overview Plugins can store user-configurable settings and state in .claude/plugin-name.local.md files within the project directory. This pattern uses YAML frontmatter for structured configuration and markdown content for prompts or additional context. Key characteristics: File location: .claude/plugin-name.local.md in project root Structure: YAML frontmatter + markdown body Purpose: Per-project plugin configuration and state Usage: Read from hooks,...
172
15988 solana-dev guibibeau/solana-dev-skill
Solana Development Skill (framework-kit-first) What this Skill is for Use this Skill when the user asks for: Solana dApp UI work (React / Next.js) Wallet connection + signing flows Transaction building / sending / confirmation UX On-chain program development (Anchor or Pinocchio) Client SDK generation (typed program clients) Local testing (LiteSVM, Mollusk, Surfpool) Security hardening and audit-style reviews Confidential transfers (Token-2022 ZK extension) Toolchain setup, version mismatches, G...
172
15989 writing hookify rules anthropics/claude-plugins-official
Writing Hookify Rules Overview Hookify rules are markdown files with YAML frontmatter that define patterns to watch for and messages to show when those patterns match. Rules are stored in .claude/hookify.{rule-name}.local.md files. Rule File Format Basic Structure --- name : rule - identifier enabled : true event : bash | file | stop | prompt | all pattern : regex - pattern - here --- Message to show Claude when this rule triggers. Can include markdown formatting, warnings, suggestions, etc. Fro...
171
15990 metasploit framework sickn33/antigravity-awesome-skills
Metasploit Framework ⚠️ AUTHORIZED USE ONLY This skill is for educational purposes or authorized security assessments only. You must have explicit, written permission from the system owner before using this tool. Misuse of this tool is illegal and strictly prohibited. Purpose Leverage the Metasploit Framework for comprehensive penetration testing, from initial exploitation through post-exploitation activities. Metasploit provides a unified platform for vulnerability exploitation, payload generat...
170
15991 nda-triage anthropics/knowledge-work-plugins
NDA Triage Skill You are an NDA screening assistant for an in-house legal team. You rapidly evaluate incoming NDAs against standard criteria, classify them by risk level, and provide routing recommendations. Important : You assist with legal workflows but do not provide legal advice. All analysis should be reviewed by qualified legal professionals before being relied upon. NDA Screening Criteria and Checklist When triaging an NDA, evaluate each of the following criteria systematically: 1. Agreem...
169
15992 plugin structure anthropics/claude-plugins-official
Plugin Structure for Claude Code Overview Claude Code plugins follow a standardized directory structure with automatic component discovery. Understanding this structure enables creating well-organized, maintainable plugins that integrate seamlessly with Claude Code. Key concepts: Conventional directory layout for automatic discovery Manifest-driven configuration in .claude-plugin/plugin.json Component-based organization (commands, agents, skills, hooks) Portable path references using ${CLAUDE_PL...
168
15993 smithery smithery-ai/cli
Smithery The marketplace for AI agents. Connect to 100K+ skills and thousands of MCP tools instantly. Quick Start 1. Install the CLI npm install -g @smithery/cli 2. Authenticate (requires human to confirm in browser) smithery auth login 3. Search for MCP servers smithery mcp search "github" smithery mcp search "slack" 4. Search for skills smithery skill search "code review" 5. Connect to a tool (e.g., Exa search) smithery mcp add "https://server.smithery.ai/exa" 6. List tools from your con...
168
15994 self-improvement sundial-org/awesome-openclaw-skills
Self-Improvement Skill Log learnings and errors to markdown files for continuous improvement. Coding agents can later process these into fixes, and important learnings get promoted to project memory. Quick Reference Situation Action Command/operation fails Log to .learnings/ERRORS.md User corrects you Log to .learnings/LEARNINGS.md with category correction User wants missing feature Log to .learnings/FEATURE_REQUESTS.md API/external tool fails Log to .learnings/ERRORS.md with integration details...
167
15995 tailwindcss-development coollabsio/coolify
Tailwind CSS Development When to Apply Activate this skill when: Adding styles to components or pages Working with responsive design Implementing dark mode Extracting repeated patterns into components Debugging spacing or layout issues Documentation Use search-docs for detailed Tailwind CSS v3 patterns and documentation. Basic Usage Use Tailwind CSS classes to style HTML. Check and follow existing Tailwind conventions in the project before introducing new patterns. Offer to extract repeated ...
167
15996 privilege escalation methods sickn33/antigravity-awesome-skills
Privilege Escalation Methods Purpose Provide comprehensive techniques for escalating privileges from a low-privileged user to root/administrator access on compromised Linux and Windows systems. Essential for penetration testing post-exploitation phase and red team operations. Inputs/Prerequisites Initial low-privilege shell access on target system Kali Linux or penetration testing distribution Tools: Mimikatz, PowerView, PowerUpSQL, Responder, Impacket, Rubeus Understanding of Windows/Linux priv...
167
15997 knowledge boshu2/agentops
Knowledge Skill YOU MUST EXECUTE THIS WORKFLOW. Do not just describe it. Find and retrieve knowledge from past work. Execution Steps Given /knowledge <query> : Step 1: Search with ao CLI (if available) ao search "<query>" --limit 10 2 > /dev/null If results found, read the relevant files. Step 2: Search .agents/ Directory Search learnings grep -r "<query>" .agents/learnings/ 2 > /dev/null | head -10 Search patterns grep -r "<query>" .agents/patterns/ 2 > /dev/null | head -10 Search research g...
166
15998 nansen-smart-money nansen-ai/nansen-cli
Smart Money All commands: nansen research smart-money <sub> [options] Subcommands Netflow — what tokens are smart money accumulating? nansen research smart-money netflow --chain solana --limit 10 DEX trades — real-time spot trades by smart money nansen research smart-money dex-trades --chain solana --labels "Smart Trader" --limit 20 Holdings — aggregated SM portfolio nansen research smart-money holdings --chain solana --limit 10 Perp trades — Hyperliquid only (no --chain needed) nansen resea...
165
15999 code-quality samhvw8/dotfiles
Code Quality Review Review $ARGUMENTS (or the whole app if no argument is given) for code quality issues. Work through every step below in order and report all findings with file paths and line numbers. Step 1 — Run the linter first Before reading any code manually, get a baseline from the automated tools: pnpm run lint List every error and warning. Fix all errors before proceeding — lint errors are not negotiable. Warnings should be reviewed and resolved unless there is a documented exception. ...
165
16000 deep-debug jezweb/claude-skills
Deep Debug - Multi-Agent Investigation Status : Production Ready Last Updated : 2026-02-02 Dependencies : Chrome MCP tools (optional), debugger agent, code-reviewer agent When to Use Going in circles - You've tried multiple fixes but nothing works Browser + API interaction bugs - Need to see Network tab, console logs Symptoms don't match expectations - Something deeper is wrong Complex state management bugs - React hooks, closures, race conditions Quick Start /deep-debug [description of the bug]...
164