Overview CLI FAQ

Agent Skills 排行榜 · 关键词 + 语义搜索

按 / 聚焦搜索框
正在使用 AI 进行语义搜索...
24,465
总 Skills
91.0M
总安装量
2,582
贡献者
# Skill 仓库 描述 安装量
4501 tabletopkit dpearson2699/swift-ios-skills
TabletopKit Create multiplayer spatial board games on a virtual table surface using TabletopKit. Handles game layout, equipment interaction, player seating, turn management, state synchronization, and RealityKit rendering. visionOS 2.0+ only. Targets Swift 6.3. Contents Setup Game Configuration Table and Board Equipment (Pieces, Cards, Dice) Player Seats Game Actions and Turns Interactions RealityKit Rendering Group Activities Integration Common Mistakes Review Checklist References Setup Platfor...
 1.3K
4502 pubmed-database affaan-m/everything-claude-code
PubMed Database Use this skill when a task needs biomedical literature from PubMed rather than general web search. When to Use Searching MEDLINE or life-sciences literature. Building PubMed queries with MeSH terms, field tags, dates, or article types. Looking up PMIDs, abstracts, publication metadata, or related citations. Running systematic-review search passes that need repeatable search strings. Using NCBI E-utilities directly from Python, shell, or another HTTP client. Query Construction Sta...
 1.3K
4503 video-marketing kostja94/marketing-skills
Content: Video Marketing Guides video marketing strategy and script creation for short-form and long-form content. Short-form commands ~82% of internet traffic with 2.5× more engagement than long-form; 71% of viewers decide within 3 seconds whether to continue. Use this skill when planning video content, writing scripts, or optimizing for platforms. When invoking : On first use , if helpful, open with 1–2 sentences on what this skill covers and why it matters, then provide the main output. On su...
 1.3K
4504 bailian-docs-llm-wiki modelstudioai/skills
百炼文档知识库 阿里云百炼平台的完整技术文档知识库，涵盖模型使用、应用开发、API 参考等内容。 何时使用 当用户涉及以下场景时激活此 Skill： 查询百炼平台的模型列表、模型参数、调用方式（含具体模型的 contextWindow、QPM、定价、sample code 等结构化字段 → 查 models/ ） 查阅百炼 API 参数、请求/响应格式、错误码 了解百炼应用开发（智能体、RAG、知识库、记忆、插件等） 选择模型、比较模型能力、了解模型定价与限流 使用百炼 SDK / OpenAI 兼容接口 语音识别、语音合成、图片生成、视频生成等多模态能力 Token Plan、计费、免费额度等商务问题 何时 不要 使用 下面这些场景与百炼文档无关， 不要激活 本 Skill： Show more
 1.3K
4505 clean-architecture giuseppe-trisciuoglio/developer-kit
Clean Architecture Framework A disciplined approach to structuring software so that business rules remain independent of frameworks, databases, and delivery mechanisms. Apply these principles when designing system architecture, reviewing module boundaries, or advising on dependency management. Core Principle Source code dependencies must point inward -- toward higher-level policies. Nothing in an inner circle can know anything about something in an outer circle. This single rule, applied consist...
 1.3K
4506 paseo getpaseo/paseo
Paseo CLI Commands Use these CLI commands to manage agents: List agents (directory-scoped by default) paseo ls Only shows agents for current directory paseo ls -g All agents across all projects (global) paseo ls --json JSON output for parsing Create and run an agent (blocks until completion by default, no timeout) paseo run --mode bypass "<prompt>" paseo run --mode bypass --name "Task Name" "<prompt>" paseo run --mode bypass --model opus "<prompt>" paseo run --mode full-access --provider co...
 1.3K
4507 gsap-framer-scroll-animation github/awesome-copilot
GSAP & Framer Motion — Scroll Animations Skill Production-grade scroll animations with GitHub Copilot prompts, ready-to-use code recipes, and deep API references. Design Companion: This skill provides the technical implementation for scroll-driven motion. For the creative philosophy , design principles, and premium aesthetics that should guide how and when to animate, always cross-reference the premium-frontend-ui skill. Together they form a complete approach: premium-frontend-ui decides the wha...
 1.3K
4508 ui-ux-pro-max likaia/nginxpulse
UI/UX Pro Max - Design Intelligence Comprehensive design guide for web and mobile applications. Contains 50+ styles, 161 color palettes, 57 font pairings, 161 product types with reasoning rules, 99 UX guidelines, and 25 chart types across 10 technology stacks. Searchable database with priority-based recommendations. When to Apply This Skill should be used when the task involves UI structure, visual design decisions, interaction patterns, or user experience quality control . Must Use This Skill m...
 1.3K
4509 pixijs-accessibility pixijs/pixijs-skills
Enable screen reader and keyboard navigation via PixiJS's AccessibilitySystem. The system creates an invisible shadow DOM overlay positioned over accessible containers so assistive technology can discover and activate them. Quick Start const button = new Sprite ( await Assets . load ( "button.png" ) ) ; button . accessible = true ; button . accessibleTitle = "Play game" ; button . accessibleHint = "Starts a new game session" ; button . eventMode = "static" ; button . tabIndex = 0 ; app . stage ....
 1.3K
4510 create-branch ruchernchong/claude-kit
Create Branch Create a git branch following Sentry naming conventions. Keep this workflow non-interactive unless the user explicitly asks to choose the name manually. Workflow Resolve the prefix: First try gh api user --jq .login Then git config github.user Then the local part of git config user.email Then whoami Sanitize to lowercase ASCII letters, digits, and hyphens; if empty, use local Resolve the work description: If $ARGUMENTS is present, use it Otherwise inspect: git diff git diff --cache...
 1.3K
4511 nutritional-specialist ailabs-393/ai-labs-claude-skills
Nutritional Specialist Overview This skill transforms Claude into a personalized nutritional advisor by maintaining a persistent database of user food preferences, allergies, goals, and dietary restrictions. The skill ensures all food-related advice is tailored to the individual user's needs and constraints. When to Use This Skill Invoke this skill for any food-related query, including: Meal planning and suggestions Recipe recommendations Nutritional advice and information Dietary planning f...
 1.3K
4512 scroll-experience sickn33/antigravity-awesome-skills
Scroll Experience Role: Scroll Experience Architect You see scrolling as a narrative device, not just navigation. You create moments of delight as users scroll. You know when to use subtle animations and when to go cinematic. You balance performance with visual impact. You make websites feel like movies you control with your thumb. Capabilities Scroll-driven animations Parallax storytelling Interactive narratives Cinematic web experiences Scroll-triggered reveals Progress indicators Sticky se...
 1.3K
4513 37signals-way wondelai/skills
The 37signals Product Development Framework A complete system for building profitable software products without bloat, bureaucracy, or burnout. Over fifteen years, 37signals distilled their approach into three books: Getting Real (2006) established the "build less" ethos, Rework (2010) challenged conventional business wisdom, and Shape Up (2019) operationalized everything into a repeatable development process. Together they form a philosophy, a mindset, and a method for small teams that ship mea...
 1.3K
4514 aws-messaging-and-streaming aws/agent-toolkit-for-aws
AWS Messaging & Streaming Services When answering AWS messaging and streaming questions, verify specific numbers, versions, limits, and behavioral details from service-specific skills or official AWS documentation. When uncertain, search skills or docs rather than guessing. Fabricated configuration options or incorrect version numbers are worse than admitting uncertainty. When a question asks about recommended configurations (CloudWatch alarm settings, thresholds, missing data treatment), search...
 1.3K
4515 xss-cross-site-scripting yaklang/hack-skills
SKILL: Cross-Site Scripting (XSS) — Expert Attack Playbook AI LOAD INSTRUCTION : This skill covers non-obvious XSS techniques, context-specific payload selection, WAF bypass, CSP bypass, and post-exploitation. Assume the reader already knows — this file only covers what base models typically miss. For real-world CVE cases, HttpOnly bypass strategies, XS-Leaks side channels, and session fixation attacks, load the companion SCENARIOS.md . 0. RELATED ROUTING Extended Scenarios Also load SCENARIOS....
 1.3K
4516 shadcn vercel-labs/json-render
shadcn/ui A framework for building ui, components and design systems. Components are added as source code to the user's project via the CLI. IMPORTANT: Run all CLI commands using the project's package runner: npx shadcn@latest , pnpm dlx shadcn@latest , or bunx --bun shadcn@latest — based on the project's packageManager . Examples below use npx shadcn@latest but substitute the correct runner for the project. Current Project Context !`npx shadcn@latest info --json 2 >/dev/ null || echo ' { "error...
 1.3K
4517 stable-diffusion-image-generation davila7/claude-code-templates
Stable Diffusion Image Generation Comprehensive guide to generating images with Stable Diffusion using the HuggingFace Diffusers library. When to use Stable Diffusion Use Stable Diffusion when: Generating images from text descriptions Performing image-to-image translation (style transfer, enhancement) Inpainting (filling in masked regions) Outpainting (extending images beyond boundaries) Creating variations of existing images Building custom image generation workflows Key features: Text-to...
 1.3K
4518 epic-hypothesis deanpeters/product-manager-skills
Purpose Frame epics as testable hypotheses using an if/then structure that articulates the action or solution, the target beneficiary, the expected outcome, and how you'll validate success. Use this to manage uncertainty in product development by making assumptions explicit, defining lightweight experiments ("tiny acts of discovery"), and establishing measurable success criteria before committing to full build-out. This is not a requirements spec—it's a hypothesis you're testing, not a feature y...
 1.3K
4519 apple-search-ads eronred/aso-skills
Apple Search Ads You are a specialist in Apple Search Ads (ASA) — the only ad platform that places ads natively within the App Store. ASA drives highly qualified installs because users are already in purchase intent. Why ASA Is Different Users are actively searching the App Store — highest intent of any channel Ads appear exactly like organic results (only "Ad" badge distinguishes them) No audience targeting (demographics, interests) — only keyword-based Conversion data is reliable (no ATT/SKAdN...
 1.3K
4520 implementing-agent-modes posthog/posthog
Use the steps below to plan or implement a new mode. A mode is a way to manage the context of the agent and inject tools, prompts, and mode-related behavior relevant to a product, use case, JTBD, etc. The agent has the `switch_mode` tool that allows it to switch itself to another mode, which might change tools, prompt, and executables, preserving the current context. Some previously created tools are contextual, meaning they're injected on particular pages of the frontend. The modes change the a...
 1.3K
4521 clickhouse-architecture-advisor clickhouse/agent-skills
ClickHouse Architecture Advisor This skill adds workload-aware architecture decisioning on top of clickhouse-best-practices . Official docs remain the source of truth. This skill must always prefer official ClickHouse documentation when available. Required behavior Before producing recommendations: Identify the workload shape observability security / SIEM product analytics IoT / telemetry market data / financial services mixed OLAP with point-lookups Read the relevant decision rule files in rule...
 1.3K
4522 user-stories phuryn/pm-skills
User Stories Create user stories following the 3 C's (Card, Conversation, Confirmation) and INVEST criteria. Generates stories with descriptions, design links, and acceptance criteria. Use when: Writing user stories, breaking down features into stories, creating backlog items, or defining acceptance criteria. Arguments: $PRODUCT : The product or system name $FEATURE : The new feature to break into stories $DESIGN : Link to design files (Figma, Miro, etc.) $ASSUMPTIONS : Key assumptions or contex...
 1.3K
4523 problem-framing-canvas deanpeters/product-manager-skills
Purpose Guide product managers through the MITRE Problem Framing Canvas process by asking structured questions across three phases: Look Inward (examine your own assumptions and biases), Look Outward (understand who experiences the problem and who doesn't), and Reframe (synthesize insights into an actionable problem statement and "How Might We" question). Use this to ensure you're solving the right problem before jumping to solutions—avoiding confirmation bias, overlooked stakeholders, and solut...
 1.3K
4524 spring-boot-crud-patterns giuseppe-trisciuoglio/developer-kit
Spring Boot CRUD Patterns Overview Deliver feature-aligned CRUD services that separate domain, application, presentation, and infrastructure layers while preserving Spring Boot 3.5+ conventions. This skill distills the essential workflow and defers detailed code listings to reference files for progressive disclosure. When to Use Implement REST endpoints for create/read/update/delete workflows backed by Spring Data JPA. Refine feature packages following DDD-inspired architecture with aggregates, ...
 1.3K
4525 mysql-patterns affaan-m/everything-claude-code
MySQL Patterns Use this skill when working on MySQL or MariaDB schema design, migrations, slow-query investigation, queue-style transactions, connection pools, or production database configuration. Prefer exact version checks before applying a feature-specific pattern because MySQL and MariaDB have diverged in several SQL details. Activation Designing MySQL or MariaDB tables, indexes, and constraints Reviewing migrations before they run on large production tables Debugging slow queries, lock wai...
 1.3K
4526 agent-architecture-audit affaan-m/everything-claude-code
Agent Architecture Audit A diagnostic workflow for agent systems that hide failures behind wrapper layers, stale memory, retry loops, or transport/rendering mutations. When to Activate MANDATORY for: Releasing any agent or LLM-powered application to production Shipping features with tool calling, memory, or multi-step workflows Agent behavior degrades after adding wrapper layers User reports "the agent is getting worse" or "tools are flaky" Same model works in playground but breaks inside your w...
 1.3K
4527 adk botpress/skills
Botpress ADK Guidelines Use this skill when you've got questions about the Botpress Agent Development Kit (ADK) - like when you're building a feature that involves tables, actions, tools, workflows, conversations, files, knowledge bases, triggers, or Zai. What is the ADK? The Botpress ADK is a convention-based TypeScript framework where file structure maps directly to bot behavior. Place files in the correct directories, and they automatically become available as bot capabilities. The ADK pr...
 1.3K
4528 api-sec yaklang/hack-skills
API Security Router 这是 API 安全测试的分类入口。 先用这个 skill 判断当前 API 更像是文档和资产发现、对象授权、令牌信任问题，还是 GraphQL 与隐藏参数问题，再进入更细的专题 skill。 When to Use 目标暴露 REST API、移动端后端或 GraphQL 接口 你需要先确定 API 测试顺序，再进入具体专题 你想把对象授权、JWT、GraphQL、隐藏字段这些方向分开处理 Skill Map API Recon and Docs : OpenAPI、Swagger、版本漂移、隐藏文档 API Authorization and BOLA : BOLA、BFLA、方法滥用、隐藏可写字段 API Auth and JWT Abuse : Bearer token、Header 信任、Claim 滥用、限流绕过 GraphQL and Hidden Parameters : introspection、batching、未公开字段、隐藏参数 Quick Triage Observation Route Swagger 或 OpenAP...
 1.3K
4529 poster-design-generation eachlabs/skills
Poster Design Generation Generate stunning, professional poster designs using each::sense. This skill creates high-quality poster artwork for movies, events, products, travel, sports, social causes, and various creative applications. Features Movie Posters : Cinematic key art with dramatic compositions and typography space Event/Concert Posters : Eye-catching promotional materials for live events Motivational Posters : Inspirational designs with impactful imagery Product Launch Posters : Commerc...
 1.3K
4530 product-name phuryn/pm-skills
Product Name Brainstorm unique, memorable product names with rationale aligned to brand values and target audience. Use when naming a new product, rebranding, or exploring name options that strengthen your brand positioning. When to Use Naming a new product or feature Rebranding or renaming existing products Exploring name options before launch Testing names against brand guidelines Triggers: product name, name ideas, brand name, naming, what to call, product naming Prompt You are an experienced...
 1.3K
4531 redis-patterns affaan-m/everything-claude-code
Redis Patterns Quick reference for Redis best practices across common backend use cases. How It Works Redis is an in-memory data structure store that supports strings, hashes, lists, sets, sorted sets, streams, and more. Individual Redis commands are atomic on a single instance; multi-step workflows require Lua scripts, MULTI/EXEC transactions, or explicit synchronization to stay atomic. Data is optionally persisted via RDB snapshots or AOF logs. Clients communicate over TCP using the RESP proto...
 1.3K
4532 vite-patterns affaan-m/everything-claude-code
Vite Patterns Build tool and dev server patterns for Vite 8+ projects. Covers configuration, environment variables, proxy setup, library mode, dependency pre-bundling, and common production pitfalls. When to Use Configuring vite.config.ts or vite.config.js Setting up environment variables or .env files Configuring dev server proxy for API backends Optimizing build output (chunks, minification, assets) Publishing libraries with build.lib Troubleshooting dependency pre-bundling or CJS/ESM interop ...
 1.3K
4533 homelab-network-setup affaan-m/everything-claude-code
Homelab Network Setup Use this skill to design a home or small-lab network that can grow without needing a full rebuild. When to Use Planning a new home network or redesigning an ISP-router-only setup. Choosing gateway, switch, and access point roles. Designing IP ranges, DHCP scopes, static reservations, and DNS. Preparing for future VLANs, Pi-hole, NAS, lab servers, or VPN access. Troubleshooting a new network that has double NAT, unstable Wi-Fi, or changing server addresses. How It Works Star...
 1.3K
4534 aws-sdk-js-v3-usage aws/agent-toolkit-for-aws
Do not use emojis in any code, comments, or output when this skill is active. AWS SDK for JavaScript v3 Package Structure @aws-sdk/client-* — one per service, generated by smithy-typescript ; one-to-one with AWS services and operations @aws-sdk/lib-* — higher-level helpers (e.g. lib-dynamodb , lib-storage ) @aws-sdk/* (no prefix) — utility packages (mostly internal; don't import deep paths) Always import from the package root: import { S3Client } from "@aws-sdk/client-s3" ; // correct // NOT: im...
 1.3K
4535 windows-desktop-e2e affaan-m/everything-claude-code
Windows Desktop E2E Testing End-to-end testing for Windows native desktop applications using pywinauto backed by Windows UI Automation (UIA). Covers WPF, WinForms, Win32/MFC, and Qt (5.x / 6.x) — with Qt-specific guidance as a dedicated section. When to Activate Writing or running E2E tests for a Windows native desktop application Setting up a desktop GUI test suite from scratch Diagnosing flaky or failing desktop automation tests Adding testability (AutomationId, accessible names) to an existin...
 1.3K
4536 browser-screenshot zc277584121/marketing-skills
Skill: Browser Screenshot Take focused screenshots of specific regions on web pages — a Reddit post, a tweet, an article section, a chart, etc. — not just a full-page dump. Prerequisite : agent-browser must be installed and Chrome must have remote debugging enabled. See references/agent-browser-setup.md if unsure. Overview This skill handles the full pipeline: Research the best page to screenshot (web search, fetch) Navigate to the right page in the browser Locate the target element/region on th...
 1.3K
4537 ssrf-server-side-request-forgery yaklang/hack-skills
SKILL: Server-Side Request Forgery (SSRF) — Expert Attack Playbook AI LOAD INSTRUCTION : Expert SSRF techniques. Covers URL filter bypass, cloud metadata endpoints, protocol exploitation, blind SSRF detection, and chaining to RCE. Base models know basic 169.254.169.254 — this file covers what they miss. For real-world CVE chains, DNS Rebinding deep dives, K8s SSRF, and SSRF → Redis → RCE full exploitation, load the companion SCENARIOS.md . 0. QUICK START Extended Scenarios Also load SCENARIOS.md...
 1.3K
4538 api-recon-and-docs yaklang/hack-skills
SKILL: API Recon and Docs — Endpoints, Schemas, and Version Surface AI LOAD INSTRUCTION : Use this skill first when the target is a REST, mobile, or GraphQL API and you need to enumerate endpoints, documentation, versions, and hidden surface area before exploitation. 1. PRIMARY GOALS Discover all reachable API entrypoints. Extract schemas, optional fields, and role differences. Identify old versions, mobile paths, GraphQL endpoints, and undocumented parameters. 2. RECON CHECKLIST JavaScript and ...
 1.3K
4539 recon-and-methodology yaklang/hack-skills
SKILL: Recon and Methodology — Expert Bug Bounty Playbook AI LOAD INSTRUCTION : Systematic recon and bug-finding methodology from top bug hunters. Covers subdomain enumeration, endpoint discovery, tech fingerprinting, and the hunter's mental model for finding bugs that others miss. Key insight: most high-severity bugs are found through systematic coverage, not just clever payloads. 1. RECON HIERARCHY Target Selection └── Scope Definition (in-scope assets) └── Asset Discovery (subdomains, IPs, do...
 1.3K
4540 android-pentesting-tricks yaklang/hack-skills
SKILL: Android Pentesting Tricks — Expert Attack Playbook AI LOAD INSTRUCTION : Expert Android application security testing techniques. Covers SSL pinning bypass (Frida/Objection/LSPosed), component exposure, WebView exploitation, intent redirection, root detection bypass, and Play Integrity evasion. Base models miss Frida hook specifics and multi-layer bypass chains. 0. RELATED ROUTING Before going deep, consider loading: mobile-ssl-pinning-bypass for in-depth cross-platform SSL pinning bypass ...
 1.3K
4541 asc-aso-audit rudrankriyam/app-store-connect-cli-skills
asc ASO audit Run a two-phase ASO audit: offline checks against local metadata files, then keyword gap analysis via Astro MCP. Preconditions Metadata pulled locally via asc migrate export or asc localizations download . For Astro gap analysis: app tracked in Astro MCP (optional — offline checks run without it). Before You Start Read references/aso_rules.md to understand the rules each check enforces. Identify the latest version directory under metadata/version/ (highest semantic version number)....
 1.3K
4542 finance-based-pricing-advisor deanpeters/product-manager-skills
Purpose Evaluate the financial impact of pricing changes (price increases, new tiers, add-ons, discounts) using ARPU/ARPA analysis, conversion impact, churn risk, NRR effects, and CAC payback implications. Use this to make data-driven go/no-go decisions on proposed pricing changes with supporting math and risk assessment. What this is: Financial impact evaluation for pricing decisions you're already considering. What this is NOT: Comprehensive pricing strategy design, value-based pricing framewo...
 1.3K
4543 alibabacloud-find-skills aliyun/alibabacloud-aiops-skills
Alibaba Cloud Agent Skills Search & Discovery This skill helps users search, discover, and install Alibaba Cloud official Agent Skills through the agentexplorer CLI plugin. Scenario Description This skill enables users to: Search Skills — Find Alibaba Cloud Agent Skills by keyword, category, or both Browse Categories — Explore available skill categories and subcategories View Skill Details — Get detailed information about specific skills Install Skills — Guide users through skill installation pr...
 1.3K
4544 prompt-engineering giuseppe-trisciuoglio/developer-kit
Prompt Engineering Overview Use this skill to design prompt systems that are clear, testable, and reusable. It covers prompt drafting, optimization, evaluation, and production-oriented patterns for few-shot prompting, reasoning workflows, templates, and system prompts. Keep the main workflow in this file and load the targeted reference files only for the pattern you are applying. When to Use Use this skill when: A user asks to write, rewrite, or improve a prompt A prompt needs better structure, ...
 1.3K
4545 bencium-impact-designer bencium/bencium-marketplace
Innovative Designer for impact Create distinctive, production-grade frontend interfaces that avoid generic "AI slop" aesthetics. Implement real working code with exceptional attention to aesthetic details and creative choices. Expert UI/UX design skill that helps create unique, and thoughtfully designed interfaces. This skill emphasizes design decision collaboration, breaking away from generic patterns, and building interfaces that stand out. This skill emphasizes bold creative commitment , brea...
 1.3K
4546 ui-typography bencium/bencium-marketplace
UI Typography Skill Attribution These rules are distilled from Matthew Butterick's Practical Typography ( https://practicaltypography.com ). Butterick is a typographer, writer, and type designer whose work bridges professional typography and everyday digital writing. Thank you, Matthew, for making this knowledge accessible and encyclopedic. If you find this skill valuable, consider supporting his work directly. Mode of Operation These are permanent rules — not trends, not opinions. They come fro...
 1.3K
4547 ios-icon-gen affaan-m/everything-claude-code
iOS Icon Generator Generate PNG icon imagesets for Xcode asset catalogs from two sources. When to Activate Generating icon assets for an iOS/macOS Xcode project Searching for icons across open source collections Creating PNG imagesets (1x, 2x, 3x) for asset catalogs Replacing placeholder icons with production-quality assets Matching existing icon styles in an Xcode project Core Principles 1. Two Sources, One Output Format Both sources produce identical Xcode-compatible imagesets. Choose based on...
 1.3K
4548 ui-to-vue affaan-m/everything-claude-code
UI To Vue Batch-convert UI design screenshots into Vue 3 Composition API component code. When to Use The user provides a directory of design screenshots or design-export images. The target application is Vue 3. The user wants a first pass of page components, shared components, and router wiring. The user specifies Vant, Element Plus, or Ant Design Vue as the component library. When Not to Use The user has only one screenshot and wants a bespoke component. The target project is not Vue. The desig...
 1.3K
4549 api-auth-and-jwt-abuse yaklang/hack-skills
SKILL: API Auth and JWT Abuse — Token Trust, Header Tricks, and Rate Limits AI LOAD INSTRUCTION : Use this skill when APIs rely on JWT, bearer tokens, API keys, or weak request identity signals. Focus on token trust boundaries, claim misuse, header spoofing, and rate-limit bypass. 1. TOKEN TRIAGE Inspect: alg , kid , jku , x5u role, org, tenant, scope, or privilege claims issuer and audience mismatches reuse of mobile and web tokens across products 2. QUICK ATTACK PICKS Pattern First Test alg:no...
 1.3K
4550 recon-for-sec yaklang/hack-skills
Recon and Methodology Router This is the starting router for new targets and unknown attack surfaces. When to Use You just received a new target and do not yet know what to test first You need to begin with asset discovery, tech fingerprinting, endpoint inventory, and test-route planning You want to build follow-up testing on structured methodology instead of random payload enumeration Skill Map Recon and Methodology Insecure Source Code Management — .git/.svn/.hg exposure detection Dependency C...
 1.3K