Overview CLI FAQ

Agent Skills 排行榜 · 关键词 + 语义搜索

按 / 聚焦搜索框
正在使用 AI 进行语义搜索...
29,255
总 Skills
225.4M
总安装量
2,811
贡献者
# Skill 仓库 描述 安装量
5551 product-manager-toolkit sickn33/antigravity-awesome-skills
Product Manager Toolkit Essential tools and frameworks for modern product management, from discovery to delivery. Quick Start For Feature Prioritization python scripts/rice_prioritizer.py sample Create sample CSV python scripts/rice_prioritizer.py sample_features.csv --capacity 15 For Interview Analysis python scripts/customer_interview_analyzer.py interview_transcript.txt Show more Installs 3.4K Repository sickn33/agentic…e-skills GitHub Stars 45.5K First Seen Jan 19, 2026 Security Audits Gen ...
 3.3K
5552 wechat-article-writer iamzhihuix/happy-claude-skills
公众号文章写作流程 4 步完成高质量公众号文章：搜索资料 → 撰写文章 → 生成标题 → 排版优化 Step 1: 搜索资料 使用 WebSearch 工具搜索主题相关资料： 搜索要求： 1. 并行搜索多个来源（官方文档、X/Twitter、Reddit、技术论坛） 2. 优先获取最新资料（当月/当季） 3. 可启动多个并行 Task 加速搜索 4. 深度总结搜索结果 Step 2: 撰写文章 必须先读取用户的 CLAUDE.md 获取写作风格 撰写要求： 1000-1500 字 故事化开头，带情感色彩（兴奋/焦虑/好奇） 准备 2-3 个备选标题 结构：效果展示 → 问题描述 → 步骤教学 → 升华总结 遵循 CLAUDE.md 中定义的写作风格和结尾语 Step 3: 生成标题 生成 5 个爆款标题，特点： 痛点明确：直击读者痛处（"还在手动..."） 数字吸引：具体数字更有说服力（"3分钟"、"5个技巧"） 结果导向：承诺具体收益（"效率暴涨10倍"） 情绪调动：惊、神技、秘籍等词汇 悬念设置：引发好奇心 Step 4: 排版优化 优化建议： 段落结构：每...
 3.3K
5553 github steipete/clawdis
GitHub Patterns Tools Use gh CLI for all GitHub operations. Prefer CLI over GitHub MCP servers for lower context usage. Quick Commands Create a PR from the current branch gh pr create --title "feat: add feature" --body "Description" Squash-merge a PR gh pr merge < PR_NUMBER > --squash --title "feat: add feature (<PR_NUMBER>)" View PR status and checks gh pr status gh pr checks < PR_NUMBER > Stacked PR Workflow Summary When merging a chain of stacked PRs (each targeting the previous branch): M...
 3.3K
5554 nextjs-cache-architecture mohamed-hossam1/nextjs-cache-architecture
Next.js Cache Architecture Architect caching in a Next.js 16+ App Router project from day one — not just dropping "use cache" where it happens to fit, but structuring the tag registry, revalidation utilities, Suspense boundaries, and mutation wiring so the cache stays correct as the codebase grows. How to use this skill Apply every rule and template below to the user's actual project. Replace placeholders like [Entity] and [collection] with names from their codebase before writing any code. $ARG...
 3.3K
5555 blogwatcher steipete/clawdis
blogwatcher Track blog and RSS/Atom feed updates with the blogwatcher CLI. Install Go: go install github.com/Hyaxia/blogwatcher/cmd/blogwatcher@latest Quick start blogwatcher --help Common commands Add a blog: blogwatcher add "My Blog" https://example.com List blogs: blogwatcher blogs Scan for updates: blogwatcher scan List articles: blogwatcher articles Mark an article read: blogwatcher read 1 Mark all articles read: blogwatcher read-all Remove a blog: blogwatcher remove "My Blog" Example outpu...
 3.3K
5556 sonoscli steipete/clawdis
Sonos CLI Use sonos to control Sonos speakers on the local network. Quick start sonos discover sonos status --name "Kitchen" sonos play|pause|stop --name "Kitchen" sonos volume set 15 --name "Kitchen" Common tasks Grouping: sonos group status|join|unjoin|party|solo Favorites: sonos favorites list|open Queue: sonos queue list|play|clear Spotify search (via SMAPI): sonos smapi search --service "Spotify" --category tracks "query" Notes If SSDP fails, specify --ip <speaker-ip> . Spotify Web API sear...
 3.3K
5557 model-usage steipete/clawdis
Model usage Overview Get per-model usage cost from CodexBar's local cost logs. Supports "current model" (most recent daily entry) or "all models" summaries for Codex or Claude. TODO: add Linux CLI support guidance once CodexBar CLI install path is documented for Linux. Quick start Fetch cost JSON via CodexBar CLI or pass a JSON file. Use the bundled script to summarize by model. python { baseDir } /scripts/model_usage.py --provider codex --mode current python { baseDir } /scripts/model_usage.py ...
 3.3K
5558 spotify-player steipete/clawdis
spogo / spotify_player Use spogo (preferred) for Spotify playback/search. Fall back to spotify_player if needed. Requirements Spotify Premium account. Either spogo or spotify_player installed. spogo setup Import cookies: spogo auth import --browser chrome Common CLI commands Search: spogo search track "query" Playback: spogo play|pause|next|prev Devices: spogo device list , spogo device set "<name|id>" Status: spogo status spotify_player commands (fallback) Search: spotify_player search "query" ...
 3.3K
5559 notion steipete/clawdis
notion Use the Notion API to create/read/update pages, data sources (databases), and blocks. Setup Create an integration at https://notion.so/my-integrations Copy the API key (starts with ntn_ or secret_ ) Store it: mkdir -p ~/.config/notion echo "ntn_your_key_here" > ~/.config/notion/api_key Share target pages/databases with your integration (click "..." → "Connect to" → your integration name) API Basics All requests need: NOTION_KEY = $( cat ~/.config/notion/api_key ) curl -X GET "https://api....
 3.3K
5560 openai-whisper-api steipete/clawdis
OpenAI Whisper API (curl) Transcribe an audio file via OpenAI’s /v1/audio/transcriptions endpoint. Quick start { baseDir } /scripts/transcribe.sh /path/to/audio.m4a Defaults: Model: whisper-1 Output: <input>.txt Useful flags { baseDir } /scripts/transcribe.sh /path/to/audio.ogg --model whisper-1 --out /tmp/transcript.txt { baseDir } /scripts/transcribe.sh /path/to/audio.m4a --language en { baseDir } /scripts/transcribe.sh /path/to/audio.m4a --prompt "Speaker names: Peter, Daniel" { baseDir } /sc...
 3.3K
5561 desktop-computer-automation web-infra-dev/midscene-skills
Desktop Computer Automation CRITICAL RULES — VIOLATIONS WILL BREAK THE WORKFLOW: Never run midscene commands in the background. Each command must run synchronously so you can read its output (especially screenshots) before deciding the next action. Background execution breaks the screenshot-analyze-act loop. Run only one midscene command at a time. Wait for the previous command to finish, read the screenshot, then decide the next action. Never chain multiple commands together. Allow enough time ...
 3.3K
5562 github openclaw/openclaw
GitHub Patterns Tools Use gh CLI for all GitHub operations. Prefer CLI over GitHub MCP servers for lower context usage. Quick Commands Create a PR from the current branch gh pr create --title "feat: add feature" --body "Description" Squash-merge a PR gh pr merge < PR_NUMBER > --squash --title "feat: add feature (<PR_NUMBER>)" View PR status and checks gh pr status gh pr checks < PR_NUMBER > Stacked PR Workflow Summary When merging a chain of stacked PRs (each targeting the previous branch): M...
 3.3K
5563 opencli joeseesun/qiaomu-opencli-skills
opencli CLI tool that turns websites into CLI interfaces, reusing Chrome's login state. Zero credentials needed. Rule: use opencli for supported sites instead of playwright or browser tools. Syntax opencli < site > < command > [ --option value ] [ -f json ] Common flags (all commands): -f json — machine-readable output (preferred for parsing) --limit N — number of results (default varies, usually 20) -f table|json|yaml|md|csv Quick Examples 读取/浏览 opencli bilibili hot --limit 10 -f json opencli ...
 3.3K
5564 blogwatcher openclaw/openclaw
blogwatcher Track blog and RSS/Atom feed updates with the blogwatcher CLI. Install Go: go install github.com/Hyaxia/blogwatcher/cmd/blogwatcher@latest Quick start blogwatcher --help Common commands Add a blog: blogwatcher add "My Blog" https://example.com List blogs: blogwatcher blogs Scan for updates: blogwatcher scan List articles: blogwatcher articles Mark an article read: blogwatcher read 1 Mark all articles read: blogwatcher read-all Remove a blog: blogwatcher remove "My Blog" Example outpu...
 3.3K
5565 sonoscli openclaw/openclaw
Sonos CLI Use sonos to control Sonos speakers on the local network. Quick start sonos discover sonos status --name "Kitchen" sonos play|pause|stop --name "Kitchen" sonos volume set 15 --name "Kitchen" Common tasks Grouping: sonos group status|join|unjoin|party|solo Favorites: sonos favorites list|open Queue: sonos queue list|play|clear Spotify search (via SMAPI): sonos smapi search --service "Spotify" --category tracks "query" Notes If SSDP fails, specify --ip <speaker-ip> . Spotify Web API sear...
 3.3K
5566 model-usage openclaw/openclaw
Model usage Overview Get per-model usage cost from CodexBar's local cost logs. Supports "current model" (most recent daily entry) or "all models" summaries for Codex or Claude. TODO: add Linux CLI support guidance once CodexBar CLI install path is documented for Linux. Quick start Fetch cost JSON via CodexBar CLI or pass a JSON file. Use the bundled script to summarize by model. python { baseDir } /scripts/model_usage.py --provider codex --mode current python { baseDir } /scripts/model_usage.py ...
 3.3K
5567 spotify-player openclaw/openclaw
spogo / spotify_player Use spogo (preferred) for Spotify playback/search. Fall back to spotify_player if needed. Requirements Spotify Premium account. Either spogo or spotify_player installed. spogo setup Import cookies: spogo auth import --browser chrome Common CLI commands Search: spogo search track "query" Playback: spogo play|pause|next|prev Devices: spogo device list , spogo device set "<name|id>" Status: spogo status spotify_player commands (fallback) Search: spotify_player search "query" ...
 3.3K
5568 notion openclaw/openclaw
notion Use the Notion API to create/read/update pages, data sources (databases), and blocks. Setup Create an integration at https://notion.so/my-integrations Copy the API key (starts with ntn_ or secret_ ) Store it: mkdir -p ~/.config/notion echo "ntn_your_key_here" > ~/.config/notion/api_key Share target pages/databases with your integration (click "..." → "Connect to" → your integration name) API Basics All requests need: NOTION_KEY = $( cat ~/.config/notion/api_key ) curl -X GET "https://api....
 3.3K
5569 openai-whisper-api openclaw/openclaw
OpenAI Whisper API (curl) Transcribe an audio file via OpenAI’s /v1/audio/transcriptions endpoint. Quick start { baseDir } /scripts/transcribe.sh /path/to/audio.m4a Defaults: Model: whisper-1 Output: <input>.txt Useful flags { baseDir } /scripts/transcribe.sh /path/to/audio.ogg --model whisper-1 --out /tmp/transcript.txt { baseDir } /scripts/transcribe.sh /path/to/audio.m4a --language en { baseDir } /scripts/transcribe.sh /path/to/audio.m4a --prompt "Speaker names: Peter, Daniel" { baseDir } /sc...
 3.3K
5570 contacts joelhooks/joelclaw
Contacts Manage contacts in ~/Vault/Contacts/ . Each contact is a markdown file with YAML frontmatter. Contact File Location ~/Vault/Contacts/<Name>.md Index file: ~/Vault/Contacts/index.md — wikilink list of all contacts. Frontmatter Schema Show more Installs 416 Repository joelhooks/joelclaw GitHub Stars 57 First Seen Feb 27, 2026 Security Audits Gen Agent Trust Hub Pass Socket Warn Snyk Warn
 3.3K
5571 monetization-strategy eronred/aso-skills
Monetization Strategy You are an expert in mobile app monetization with deep knowledge of subscription economics, paywall psychology, and pricing strategy. Your goal is to help the user maximize revenue while maintaining user satisfaction. Initial Assessment Check for app-marketing-context.md — read it for context Ask for current monetization model (free, freemium, paid, subscription, ads) Ask for current pricing (if applicable) Ask for conversion rate (free to paid, trial to subscription) Ask f...
 3.3K
5572 playwright-testing alinaqi/maggy
Playwright E2E Testing Skill For end-to-end testing of web applications with Playwright - cross-browser, fast, reliable. Sources: Playwright Best Practices | Playwright Docs | Better Stack Guide Setup Installation New project npm init playwright@latest Show more Installs 2.8K Repository alinaqi/maggy GitHub Stars 705 First Seen Jan 20, 2026 Security Audits Gen Agent Trust Hub Pass Socket Pass Snyk Fail
 3.3K
5573 skill-creator composio-community/skills
Skill Creator A skill for creating new skills and iteratively improving them. At a high level, the process of creating a skill goes like this: Decide what you want the skill to do and roughly how it should do it Write a draft of the skill Create a few test prompts and run claude-with-access-to-the-skill on them Help the user evaluate the results both qualitatively and quantitatively While the runs happen in the background, draft some quantitative evals if there aren't any (if there are some, you...
 3.3K
5574 legal-response anthropics/knowledge-work-plugins
/legal-response -- Generate Response from Templates If you see unfamiliar placeholders or need to check which tools are connected, see CONNECTORS.md . Generate a response to a common legal inquiry using configured templates. Customizes the response with specific details and includes escalation triggers for situations that should not use a templated response. Important : This command assists with legal workflows but does not provide legal advice. Generated responses should be reviewed by qualifie...
 3.3K
5575 weatherkit dpearson2699/swift-ios-skills
WeatherKit Fetch current conditions, hourly and daily forecasts, weather alerts, and historical statistics using WeatherService . Display required Apple Weather attribution. Targets Swift 6.2 / iOS 26+. Contents Setup Fetching Current Weather Forecasts Weather Alerts Selective Queries Attribution Availability Common Mistakes Review Checklist References Setup Project Configuration Enable the WeatherKit capability in Xcode (adds the entitlement) Enable WeatherKit for your App ID in the Apple Devel...
 3.3K
5576 valyu-best-practices valyuai/skills
This skill provides instructions for using the Valyu API to perform search, content extraction, AI-powered answers, and deep research tasks. Quick Reference: Choosing the Right API Use this decision tree to select the appropriate Valyu API: ``` What do you need? ├─ Find information across multiple sources │ └─ Use Search API │ ├─ Extract content from specific URLs │ └─ Use Contents API │ ├─ Get an AI-synthesized answer with citations │ └─ Use Answer API │ ├─ Generate a comprehensive rese...
 3.3K
5577 notion-knowledge-capture openai/skills
Knowledge Capture Convert conversations and notes into structured, linkable Notion pages for easy reuse. Quick start Clarify what to capture (decision, how-to, FAQ, learning, documentation) and target audience. Identify the right database/template in reference/ (team wiki, how-to, FAQ, decision log, learning, documentation). Pull any prior context from Notion with Notion:notion-search → Notion:notion-fetch (existing pages to update/link). Draft the page with Notion:notion-create-pages using the ...
 3.3K
5578 speech openai/skills
Speech Generation Skill Generate spoken audio for the current project (narration, product demo voiceover, IVR prompts, accessibility reads). Defaults to gpt-4o-mini-tts-2025-12-15 and built-in voices, and prefers the bundled CLI for deterministic, reproducible runs. When to use Generate a single spoken clip from text Generate a batch of prompts (many lines, many files) Decision tree (single vs batch) If the user provides multiple lines/prompts or wants many outputs -> batch Else -> single Work...
 3.3K
5579 netlify-deploy openai/skills
Netlify Deployment Skill Deploy web projects to Netlify using the Netlify CLI with intelligent detection of project configuration and deployment context. Overview This skill automates Netlify deployments by: Verifying Netlify CLI authentication Detecting project configuration and framework Linking to existing sites or creating new ones Deploying to production or preview environments Prerequisites Netlify CLI : Installed via npx (no global install required) Authentication : Netlify account with a...
 3.3K
5580 design-handoff anthropics/knowledge-work-plugins
/design-handoff If you see unfamiliar placeholders or need to check which tools are connected, see CONNECTORS.md . Generate comprehensive developer handoff documentation from a design. Usage /design-handoff $ARGUMENTS Generate handoff specs for: @$1 If a Figma URL is provided, pull the design from Figma. Otherwise, work from the provided description or screenshot. What to Include Visual Specifications Exact measurements (padding, margins, widths) Design token references (colors, typography, spac...
 3.3K
5581 solid ramziddin/solid-skills
Solid Skills: Professional Software Engineering You are now operating as a senior software engineer. Every line of code you write, every design decision you make, and every refactoring you perform must embody professional craftsmanship. When This Skill Applies ALWAYS use this skill when: Writing ANY code (features, fixes, utilities) Refactoring existing code Planning or designing architecture Reviewing code quality Debugging issues Creating tests Making design decisions Core Philosophy "Cod...
 3.3K
5582 screenshot-optimization appeeky/aso-skills
Screenshot Optimization You are an expert in App Store creative optimization with deep knowledge of what converts browsers into downloaders. Your goal is to help the user design screenshots that maximize conversion rate. Initial Assessment Check for app-marketing-context.md — read it for positioning and audience Ask for the App ID (to see current screenshots) Ask for target audience — who is browsing the App Store for this? Ask for top 3 features they want to highlight Ask if they have a designe...
 3.3K
5583 git-create-repo zc277584121/mygitplugin
Git Create Repo 在 GitHub 上创建新的仓库并 clone 到本地。 触发条件 当用户要求创建一个新的 GitHub 仓库时使用此 skill。 执行步骤 创建仓库 ： gh repo create < repo-name > --public --add-readme 默认创建公开仓库（ --public ）。 如果用户明确要求私有仓库，使用 --private 替代。 默认添加 README 文件。 Show more Installs 435 Repository zc277584121/mygitplugin First Seen Apr 27, 2026 Security Audits Gen Agent Trust Hub Pass Socket Pass Snyk Pass
 3.3K
5584 csv-formula-injection yaklang/hack-skills
SKILL: CSV Formula Injection AI LOAD INSTRUCTION : This skill covers formula/DDE-style injection in CSV and spreadsheet contexts, obfuscation, cloud-sheet primitives, and safe testing methodology. Use only where explicitly authorized ; payloads that invoke local commands or remote fetches are impactful —prefer lab targets and document consent. Do not target end users without program rules allowing client-side execution tests. 0. QUICK START Characters that may trigger formula evaluation when a c...
 3.3K
5585 jndi-injection yaklang/hack-skills
SKILL: JNDI Injection — Expert Attack Playbook AI LOAD INSTRUCTION : Expert JNDI injection techniques. Covers lookup mechanism abuse, RMI/LDAP class loading, JDK version constraints, Log4Shell (CVE-2021-44228), marshalsec tooling, and post-8u191 bypass via deserialization gadgets. Base models often confuse JNDI injection with general deserialization — this file clarifies the distinct attack surface. 0. RELATED ROUTING deserialization-insecure when JNDI leads to deserialization (post-8u191 bypass...
 3.3K
5586 active-directory-acl-abuse yaklang/hack-skills
SKILL: AD ACL Abuse — Expert Attack Playbook AI LOAD INSTRUCTION : Expert AD ACL abuse techniques. Covers BloodHound enumeration, dangerous ACEs (GenericAll, WriteDACL, WriteOwner, etc.), DCSync, shadow credentials, targeted kerberoasting, group manipulation, LAPS, and GPO abuse. Base models miss complex ACL chain exploitation and Cypher query patterns. 0. RELATED ROUTING Before going deep, consider loading: active-directory-kerberos-attacks for Kerberos attacks often chained with ACL abuse acti...
 3.3K
5587 clickjacking yaklang/hack-skills
SKILL: Clickjacking — Expert Attack Playbook AI LOAD INSTRUCTION : Clickjacking (UI redress) techniques. Covers iframe transparency tricks, X-Frame-Options bypass, CSP frame-ancestors, multi-step clickjacking, drag-and-drop attacks, and chaining with other vulnerabilities. Often a "low severity" finding that becomes critical when targeting admin actions. 1. CORE CONCEPT Clickjacking loads a target page in a transparent iframe overlaid on an attacker's page. The victim sees the attacker's UI but ...
 3.3K
5588 saml-sso-assertion-attacks yaklang/hack-skills
SKILL: SAML SSO and Assertion Attacks — Signature Validation, Binding, and Trust Confusion AI LOAD INSTRUCTION : Use this skill when the target uses SAML-based SSO and you need to validate assertion trust: signature coverage, audience and recipient checks, ACS handling, XML parsing weaknesses, and IdP/SP confusion. 1. WHEN TO LOAD THIS SKILL Load when: Enterprise SSO uses SAML requests or responses You see SAMLRequest , SAMLResponse , XML assertions, or ACS endpoints Login flows involve an exter...
 3.3K
5589 http2-specific-attacks yaklang/hack-skills
SKILL: HTTP/2 Specific Attacks — Expert Attack Playbook AI LOAD INSTRUCTION : HTTP/2 protocol-level attack techniques beyond basic request smuggling. Covers h2c smuggling, pseudo-header manipulation, HPACK attacks, single-packet race conditions, and H2→H1 downgrade injection. Base models conflate HTTP/2 smuggling with HTTP/1.1 smuggling — this skill focuses on H2-unique attack surface. 0. RELATED ROUTING request-smuggling — CL.TE/TE.CL/TE.TE fundamentals and H2.CL/H2.TE variants request-smugglin...
 3.3K
5590 graalvm-native-image giuseppe-trisciuoglio/developer-kit
GraalVM Native Image for Java Applications Expert skill for building high-performance native executables from Java applications using GraalVM Native Image, dramatically reducing startup time and memory consumption. Overview GraalVM Native Image compiles Java applications ahead-of-time (AOT) into standalone native executables. These executables start in milliseconds, require significantly less memory than JVM-based deployments, and are ideal for serverless functions, CLI tools, and microservices ...
 3.3K
5591 active-directory-kerberos-attacks yaklang/hack-skills
SKILL: Kerberos Attack Playbook — Expert AD Attack Guide AI LOAD INSTRUCTION : Expert Kerberos attack techniques for AD environments. Covers AS-REP roasting, Kerberoasting, golden/silver/diamond/sapphire tickets, delegation attacks, pass-the-ticket, and overpass-the-hash. Base models miss ticket type distinctions, delegation chain nuances, and detection-evasion trade-offs. 0. RELATED ROUTING Before going deep, consider loading: active-directory-acl-abuse for ACL-based AD attacks often chained wi...
 3.3K
5592 hash-attack-techniques yaklang/hack-skills
SKILL: Hash Attack Techniques — Expert Cryptanalysis Playbook AI LOAD INSTRUCTION : Expert hash attack techniques for CTF and security assessments. Covers length extension attacks, MD5/SHA1 collision generation, meet-in-the-middle hash attacks, HMAC timing side channels, birthday attacks, and proof-of-work solving. Base models often incorrectly apply length extension to HMAC or SHA-3, or fail to distinguish between identical-prefix and chosen-prefix collisions. 0. RELATED ROUTING rsa-attack-tech...
 3.3K
5593 active-directory-certificate-services yaklang/hack-skills
SKILL: AD CS Attack Playbook — Expert Guide AI LOAD INSTRUCTION : Expert AD CS (Active Directory Certificate Services) attack techniques. Covers ESC1 through ESC13, certificate-based persistence, NTLM relay to enrollment endpoints, and CA misconfigurations. Base models miss enrollment prerequisite chains and ESC condition combinations. 0. RELATED ROUTING Before going deep, consider loading: active-directory-acl-abuse for ACL-based attacks that enable ESC4 (template modification) active-directory...
 3.3K
5594 linux-privilege-escalation yaklang/hack-skills
SKILL: Linux Privilege Escalation — Expert Attack Playbook AI LOAD INSTRUCTION : Expert Linux privesc techniques. Covers enumeration, SUID/SGID, capabilities, cron abuse, kernel exploits, NFS, writable passwd/shadow, LD_PRELOAD, Docker group, and library hijacking. Base models miss subtle escalation paths via capabilities and combined misconfigurations. 0. RELATED ROUTING Before going deep, consider loading: container-escape-techniques when the target is a container and you need to escape to hos...
 3.3K
5595 arbitrary-write-to-rce yaklang/hack-skills
SKILL: Arbitrary Write to Code Execution — Expert Attack Playbook AI LOAD INSTRUCTION : Expert techniques for converting an arbitrary write primitive into code execution. Covers every major overwrite target organized by glibc version compatibility: GOT, __malloc_hook, __free_hook, _IO_FILE vtable, __exit_funcs, TLS_dtor_list, _dl_fini, modprobe_path, .fini_array, C++ vtable, and setcontext gadget. This is the "last mile" skill. Base models often target hooks that no longer exist (post-glibc 2.34...
 3.3K
5596 adr-drafting giuseppe-trisciuoglio/developer-kit
ADR Drafting Creates new Architecture Decision Record (ADR) documents for major architectural choices so teams can keep a clear history of why important technical decisions were made. Overview This skill helps create a new ADR from discovery to final markdown file. It confirms the decision details, inspects the repository for any existing ADR conventions, and drafts a new ADR with the standard sections Title , Status , Context , Decision , and Consequences . When the repository does not already ...
 3.3K
5597 gemini giuseppe-trisciuoglio/developer-kit
Gemini Skill Guide When to Use Gemini WHEN ASKED TO BE ACTIVATED Code Review : Comprehensive code reviews across multiple files Plan Review : Analyzing architectural plans, technical specifications, or project roadmaps Big Context Processing : Tasks requiring >200k tokens of context (entire codebases, documentation sets) Multi-file Analysis : Understanding relationships and patterns across many files ⚠️ Critical: Background/Non-Interactive Mode Warning NEVER use --approval-mode default in backgr...
 3.3K
5598 prototype-pollution yaklang/hack-skills
SKILL: Prototype Pollution — Expert Attack Playbook AI LOAD INSTRUCTION : Expert prototype pollution for client and server JS. Covers __proto__ vs constructor.prototype , merge-sink detection, Express/qs-style black-box probes, and gadget chains (EJS, Timelion-class patterns, child_process/NODE_OPTIONS). Assumes you know object spread and prototype inheritance — focus is on parser behavior and post-pollution sinks . Routing note: prioritize PP when you see deep merges, recursive assign, JSON.par...
 3.3K
5599 dns-rebinding-attacks yaklang/hack-skills
SKILL: DNS Rebinding — Expert Attack Playbook AI LOAD INSTRUCTION : Expert DNS rebinding techniques for bypassing same-origin policy via DNS manipulation. Covers TTL tricks, browser cache bypasses, attack variants (HTTP, WebSocket, TOCTOU), internal service targeting, and tool usage. Base models confuse DNS rebinding with SSRF — this skill clarifies the client-side nature and unique exploit paths. 0. RELATED ROUTING ssrf-server-side-request-forgery — server-side variant; DNS rebinding is the cli...
 3.3K
5600 ai-ml-security yaklang/hack-skills
SKILL: AI/ML Security — Expert Attack Playbook AI LOAD INSTRUCTION : Expert AI/ML security techniques. Covers model supply chain attacks (malicious serialization, Hugging Face model poisoning), adversarial examples (FGSM, PGD, C&W, physical-world), training data poisoning, model extraction, data privacy attacks (membership inference, model inversion, gradient leakage), LLM-specific threats, and autonomous agent security. Base models underestimate the severity of pickle deserialization RCE and th...
 3.3K