Agent Skills 排行榜 · 关键词 + 语义搜索

/ 聚焦搜索框
正在使用 AI 进行语义搜索...
27,495
总 Skills
162.8M
总安装量
2,744
贡献者
# Skill 仓库 描述 安装量
5601 triage-nda anthropics/knowledge-work-plugins
/triage-nda -- NDA Pre-Screening If you see unfamiliar placeholders or need to check which tools are connected, see CONNECTORS.md . Triage the NDA: @$1 Rapidly triage incoming NDAs against standard screening criteria. Classify the NDA for routing: standard approval, counsel review, or full legal review. Important : You assist with legal workflows but do not provide legal advice. All analysis should be reviewed by qualified legal professionals before being relied upon. Invocation /triage-nda Work...
2.3K
5602 prioritization-advisor deanpeters/product-manager-skills
Purpose Guide product managers in choosing the right prioritization framework by asking adaptive questions about product stage, team context, decision-making needs, and stakeholder dynamics. Use this to avoid "framework whiplash" (switching frameworks constantly) or applying the wrong framework (e.g., using RICE for strategic bets or ICE for data-driven decisions). Outputs a recommended framework with implementation guidance tailored to your context. This is not a scoring calculator—it's a decis...
2.3K
5603 rust-skill-creator actionbook/rust-skills
Rust Skill Creator Version: 2.1.0 | Last Updated: 2025-01-27 Create dynamic skills for Rust crates and std library documentation. When to Use This skill handles requests to create skills for: Third-party crates (tokio, serde, axum, etc.) Rust standard library (std::sync, std::marker, etc.) Any Rust documentation URL Execution Mode Detection CRITICAL: Check if related commands/skills are available. Show more
2.3K
5604 link-workspace-packages nrwl/nx-ai-agents-config
Link Workspace Packages Add dependencies between packages in a monorepo. All package managers support workspaces but with different syntax. Detect Package Manager Check whether there's a packageManager field in the root-level package.json . Alternatively check lockfile in repo root: pnpm-lock.yaml → pnpm yarn.lock → yarn bun.lock / bun.lockb → bun package-lock.json → npm Workflow Identify consumer package (the one importing) Identify provider package(s) (being imported) Add dependency using pack...
2.3K
5605 brainstorm-ideas-existing phuryn/pm-skills
Brainstorm Product Ideas (Existing Product) Multi-perspective ideation for continuous product discovery. Generates ideas from PM, Designer, and Engineer viewpoints, then prioritizes the best five. Context You are supporting a product trio performing continuous product discovery for $ARGUMENTS . If the user provides files (research data, opportunity trees, personas), read them first. If they mention a product URL, use web search to understand the product. Domain Context Product Trio (Teresa Torre...
2.3K
5606 grammar-check phuryn/pm-skills
Grammar and Flow Checking You are an expert copyeditor and writing specialist. Your role is to identify grammar, logical, and flow errors in text, then provide clear, actionable fix suggestions without rewriting the entire document. Purpose Analyze text for grammar, logical, and flow errors. Provide specific, focused suggestions on how to fix each issue. Focus on clarity, correctness, and readability. Input Arguments $OBJECTIVE : What is the intended purpose or goal of the text? (e.g., "persuade...
2.3K
5607 ideal-customer-profile phuryn/pm-skills
Ideal Customer Profile Overview Identify your Ideal Customer Profile (ICP) from research and survey data. This skill synthesizes customer research to define the customer most likely to find value, retain, and expand with your product. When to Use Defining ICP from product-market fit survey data Targeting high-value customer segments Analyzing customer success and expansion patterns Prioritizing sales and marketing efforts Evaluating new customer opportunities for fit Refining target market defin...
2.3K
5608 customer-journey-map phuryn/pm-skills
Customer Journey Map Map the end-to-end customer experience from awareness through advocacy, identifying emotions, pain points, and improvement opportunities at each stage. Context You are creating a customer journey map for $ARGUMENTS . If the user provides files (interview transcripts, survey data, analytics, support tickets, or existing journey maps), read them first. Use web search to understand the product if a URL is provided. Instructions Define the persona : Who is traveling this journey...
2.3K
5609 qodo-get-rules qodo-ai/qodo-skills
Get Qodo Rules Skill Description Fetches repository-specific coding rules from the Qodo platform API before code generation or modification tasks. Rules include security requirements, naming conventions, architectural patterns, style guidelines, and team conventions that must be applied during code generation. Workflow Step 1: Check if Rules Already Loaded If rules are already loaded (look for "Qodo Rules Loaded" in recent messages), skip to step 6. Step 2: Verify working in a git repository Che...
2.3K
5610 cuopt-install nvidia/skills
cuOpt Install (user) Install cuOpt to use it from Python, C, or as a REST server. For building cuOpt from source to contribute or modify it, see cuopt-developer . System requirements GPU : NVIDIA Compute Capability ≥ 7.0 (Volta or newer). Examples: V100, A100, H100, RTX 20xx/30xx/40xx. Not supported: GTX 10xx (Pascal). CUDA : 12.x or 13.x. The package CUDA suffix must match the runtime CUDA (e.g. cuopt-cu12 / libcuopt-cu12 with CUDA 12). Driver : NVIDIA driver compatible with the CUDA version. c...
2.3K
5611 metrics-dashboard phuryn/pm-skills
Product Metrics Dashboard Design a comprehensive product metrics dashboard with the right metrics, visualizations, and alert thresholds. Context You are designing a metrics dashboard for $ARGUMENTS . If the user provides files (existing dashboards, analytics data, OKRs, or strategy docs), read them first. Domain Context Metrics vs KPIs vs NSM : Metrics = all measurable things. KPIs = a few key quantitative metrics tracked over a longer period. North Star Metric = a single customer-centric KPI th...
2.3K
5612 ux-audit jezweb/claude-skills
UX Audit Dogfood web apps by browsing them as a real user would — with their goals, their patience, and their context. Goes beyond "does it work?" to "is it good?" by tracking emotional friction (trust, anxiety, confusion), counting click efficiency, testing resilience, and asking the ultimate question: "would I come back?" Uses Chrome MCP (for authenticated apps with your session) or Playwright for browser automation. Produces structured audit reports with findings ranked by impact. Browser Too...
2.3K
5613 sequence-load anthropics/knowledge-work-plugins
Sequence Load Find, enrich, and load contacts into an outreach sequence — end to end. The user provides targeting criteria and a sequence name via "$ARGUMENTS". Examples /apollo:sequence-load add 20 VP Sales at SaaS companies to my "Q1 Outbound" sequence /apollo:sequence-load SDR managers at fintech startups → Cold Outreach v2 /apollo:sequence-load list sequences (shows all available sequences) /apollo:sequence-load directors of engineering, 500+ employees, US → Demo Follow-up /apollo:sequence-l...
2.3K
5614 tabletopkit dpearson2699/swift-ios-skills
TabletopKit Create multiplayer spatial board games on a virtual table surface using TabletopKit. Handles game layout, equipment interaction, player seating, turn management, state synchronization, and RealityKit rendering. visionOS 2.0+ only. Targets Swift 6.3. Contents Setup Game Configuration Table and Board Equipment (Pieces, Cards, Dice) Player Seats Game Actions and Turns Interactions RealityKit Rendering Group Activities Integration Common Mistakes Review Checklist References Setup Platfor...
2.3K
5615 vitest supabase/supabase
Vitest is a next-generation testing framework powered by Vite. It provides a Jest-compatible API with native ESM, TypeScript, and JSX support out of the box. Vitest shares the same config, transformers, resolvers, and plugins with your Vite app. Key Features: Vite-native: Uses Vite's transformation pipeline for fast HMR-like test updates Jest-compatible: Drop-in replacement for most Jest test suites Smart watch mode: Only reruns affected tests based on module graph Native ESM, TypeScript, JSX su...
2.3K
5616 people-report anthropics/knowledge-work-plugins
/people-report If you see unfamiliar placeholders or need to check which tools are connected, see CONNECTORS.md . Generate people analytics reports from your HR data. Analyze workforce data to surface trends, risks, and opportunities. Usage /people-report $ARGUMENTS Report Types Headcount : Current org snapshot — by team, location, level, tenure Attrition : Turnover analysis — voluntary/involuntary, by team, trends Diversity : Representation metrics — by level, team, pipeline Org Health : Span o...
2.3K
5617 draft-response anthropics/knowledge-work-plugins
/draft-response If you see unfamiliar placeholders or need to check which tools are connected, see CONNECTORS.md . Draft a professional, customer-facing response tailored to the situation, customer relationship, and communication context. Usage /draft-response <context about the customer question, issue, or request> Examples: /draft-response Acme Corp is asking when the new dashboard feature will ship /draft-response Customer escalation — their integration has been down for 2 days /draft-respons...
2.3K
5618 release-notes phuryn/pm-skills
Release Notes Generator Transform technical tickets, PRDs, or internal changelogs into polished, user-facing release notes. Context You are writing release notes for $ARGUMENTS . If the user provides files (JIRA exports, Linear tickets, PRDs, Git logs, or internal changelogs), read them first. If they mention a product URL, use web search to understand the product and audience. Instructions Gather raw material : Read all provided tickets, changelogs, or descriptions. Extract: What changed (featu...
2.3K
5619 meta-cognition-parallel actionbook/rust-skills
Meta-Cognition Parallel Analysis (Experimental) Status: Experimental | Version: 0.2.0 | Last Updated: 2025-01-27 This skill tests parallel three-layer cognitive analysis. Concept Instead of sequential analysis, this skill launches three parallel analyzers - one for each cognitive layer - then synthesizes their results. User Question │ ▼ ┌─────────────────────────────────────────────────────┐ │ meta-cognition-parallel │ │ (Coordinator) ...
2.3K
5620 zai-tts aahl/skills
Zai-TTS Generate high-quality text-to-speech audio using GLM-TTS service via the uvx zai-tts command. Before using this skill, you need to configure the environment variables ZAI_AUDIO_USERID and ZAI_AUDIO_TOKEN , which can be obtained by login audio.z.ai and executing localStorage['auth-storage'] in the console via F12 Developer Tools. Usage uvx zai-tts -t "{msg}" -o { tempdir } / { filename } .wav uvx zai-tts -f path/to/file.txt -o { tempdir } / { filename } .wav Changing speed, volume uvx zai...
2.3K
5621 understand-onboard egonex-ai/understand-anything
/understand-onboard Generate a comprehensive onboarding guide from the project's knowledge graph. Graph Structure Reference The knowledge graph JSON has this structure: project — {name, description, languages, frameworks, analyzedAt, gitCommitHash} nodes[] — each has {id, type, name, filePath?, summary, tags[], complexity, languageNotes?} Code node types: file, function, class, module, concept Non-code node types: config, document, service, table, endpoint, pipeline, schema, resource Domain/know...
2.3K
5622 docx nexu-io/open-design
DOCX creation, editing, and analysis Overview A .docx file is a ZIP archive containing XML files. Quick Reference Task Approach Read/analyze content pandoc or unpack for raw XML Create new document Use docx-js - see Creating New Documents below Edit existing document Unpack → edit XML → repack - see Editing Existing Documents below Converting .doc to .docx Legacy .doc files must be converted before editing: python scripts/office/soffice.py --headless --convert-to docx document.doc Reading Conten...
2.3K
5623 copywriting nexu-io/open-design
Copywriting You are an expert conversion copywriter. Your goal is to write marketing copy that is clear, compelling, and drives action. Before Writing Check for product marketing context first: If .agents/product-marketing-context.md exists (or .claude/product-marketing-context.md in older setups), read it before asking questions. Use that context and only ask for information not already covered or specific to this task. Gather this context (ask if not provided): 1. Page Purpose What type of pag...
2.3K
5624 push-to-registry hashicorp/agent-skills
Configure Packer templates to push build metadata to HCP Packer registry. Reference: [HCP Packer Registry](https://developer.hashicorp.com/hcp/docs/packer) Note: HCP Packer is free for basic use. Builds push metadata only (not actual images), adding minimal overhead (<1 minute). Basic Registry Configuration ``` packer { required_version = ">= 1.7.7" } variable "image_name" { type = string default = "web-server" } locals { timestamp = regex_replace(timestamp(), "[- TZ:]", "") } ...
2.3K
5625 private-connectivity grafana/skills
Grafana Cloud Private Connectivity Docs : https://grafana.com/docs/grafana-cloud/send-data/ Send metrics, logs, traces, and profiles to Grafana Cloud entirely over your cloud provider's private backbone — no public internet exposure, no egress fees. Prerequisites All providers: Grafana Cloud stack must be hosted on the same cloud provider (check: My Account → Stack → Details) Create separate private endpoints for each signal type (Metrics, Logs, Traces, Profiles) AWS PrivateLink Setup Get Servic...
2.3K
5626 wasm-compatibility marimo-team/skills
WASM Compatibility Checker for marimo Notebooks Check whether a marimo notebook can run in a WebAssembly (WASM) environment — the marimo playground, community cloud, or exported WASM HTML. Instructions 1. Read the notebook Read the target notebook file. If the user doesn't specify one, ask which notebook to check. 2. Extract dependencies Collect every package the notebook depends on from both sources: PEP 723 metadata — the /// script block at the top: /// script dependencies = [ "marimo...
2.3K
5627 literature-search-arxiv google-deepmind/science-skills
arXiv Search and Retrieval Prerequisites uv : Read the uv skill and follow its Setup instructions to ensure uv is installed and on PATH. User Notification : If LICENSE_NOTIFICATION.txt does not already exist in this skill directory then (1) prominently notify the user to check the terms at https://info.arxiv.org/help/api/index.html and to always check the license of the papers retrieved by the skill for any restrictions, then (2) create the file recording the notification text and timestamp. Cor...
2.3K
5628 loki-label-analyzer grafana/skills
Loki Label Strategy Evaluator You are an expert in Grafana Loki label strategy. When asked to evaluate, audit, design, or improve a Loki label strategy — or when a user asks why their Loki queries are slow — use this guide to provide structured, actionable advice. Core Concepts Streams are the fundamental unit in Loki. Each unique combination of label key-value pairs creates a new stream. Too many streams = performance problems. Too few = broad, slow queries. Cardinality = the number of unique v...
2.3K
5629 user-personas phuryn/pm-skills
User Personas Purpose Create detailed, actionable user personas from research data that capture the true diversity of your user base. This skill generates research-backed personas with jobs-to-be-done, pain points, desired outcomes, and unexpected behavioral insights to guide product decisions. Instructions You are an experienced product researcher specializing in persona development and user research synthesis. Input Your task is to create 3 refined user personas for $ARGUMENTS . If the user pr...
2.3K
5630 pdf nexu-io/open-design
PDF Processing Guide Overview This guide covers essential PDF processing operations using Python libraries and command-line tools. For advanced features, JavaScript libraries, and detailed examples, see REFERENCE.md. If you need to fill out a PDF form, read FORMS.md and follow its instructions. Quick Start from pypdf import PdfReader , PdfWriter Read a PDF reader = PdfReader ( "document.pdf" ) print ( f"Pages: { len ( reader . pages ) } " ) Extract text text = "" for page in reader . pages : t...
2.3K
5631 muapi-nano-banana samuraigpt/generative-media-skills
🍌 Nano-Banana Expert Skill (Gemini 3 Style) A specialized skill for AI Agents to leverage "Reasoning-Driven" image generation. Based on the advanced prompting architecture of Google's Gemini 3 (Nano Banana Pro), this skill moves beyond keyword stuffing to structured, logic-based creative briefs. Core Competencies Reasoning-Driven Prompting : Using natural language logic to define physics, lighting, and spatial relationships. Structured Creative Briefs : Implementing the "Perfect Prompt" formula:...
2.3K
5632 hatch-pet openai/skills
Hatch Pet Open Design integration. This is the unmodified Codex hatch-pet skill, vendored under skills/hatch-pet/ so any Open Design agent can run it. After the skill finishes packaging, the resulting spritesheet.webp (under ${CODEX_HOME:-$HOME/.codex}/pets/<pet-name>/ ) can be imported into the floating pet companion via Settings → Pets → Import Codex sprite . The import flow auto-detects the 8×9 / 192×208 atlas and lets the user pick which animation row to play (idle, running-right, waving, …)...
2.3K
5633 arize-dataset arize-ai/arize-skills
Arize Dataset Skill SPACE — All --space flags and the ARIZE_SPACE env var accept a space name (e.g., my-workspace ) or a base64 space ID (e.g., U3BhY2U6... ). Find yours with ax spaces list . Concepts Dataset = a versioned collection of examples used for evaluation and experimentation Dataset Version = a snapshot of a dataset at a point in time; updates can be in-place or create a new version Example = a single record in a dataset with arbitrary user-defined fields (e.g., question , answer , con...
2.3K
5634 arize-experiment arize-ai/arize-skills
Arize Experiment Skill SPACE — All --space flags and the ARIZE_SPACE env var accept a space name (e.g., my-workspace ) or a base64 space ID (e.g., U3BhY2U6... ). Find yours with ax spaces list . Concepts Experiment = a named evaluation run against a specific dataset version, containing one run per example Experiment Run = the result of processing one dataset example -- includes the model output, optional evaluations, and optional metadata Dataset = a versioned collection of examples; every exper...
2.3K
5635 pricing-strategy phuryn/pm-skills
Pricing Strategy You are an expert in SaaS pricing and monetization strategy. Your goal is to help design pricing that captures value, drives growth, and aligns with customer willingness to pay. Before Starting Check for product marketing context first: If .agents/product-marketing-context.md exists (or .claude/product-marketing-context.md in older setups), read it before asking questions. Use that context and only ask for information not already covered or specific to this task. Gather this con...
2.3K
5636 aiconfig-snippets launchdarkly/ai-tooling
Deprecated — renamed to snippets This skill has been renamed. Do not follow any instructions here and do not perform the task from this skill. Invoke the snippets skill instead — it contains the current, complete instructions. If you arrived here from an old reference (documentation, a saved prompt, or automation), update it from aiconfig-snippets to snippets . Installs 2.3K Repository launchdarkly/ai-tooling GitHub Stars 25 First Seen May 7, 2026 Security Audits Gen Agent Trust Hub Pass Socket ...
2.3K
5637 grill-me juliusbrussee/skills
Interview me relentlessly about every aspect of this plan until we reach a shared understanding. Walk down each branch of the design tree, resolving dependencies between decisions one-by-one. If a question can be answered by exploring the codebase, explore the codebase instead.
2.3K
5638 caido-mode caido/skills
Caido Mode Skill Overview Full-coverage CLI for Caido's API, built on the official @caido/sdk-client package. Covers: HTTP History - Search, retrieve, replay, edit requests with HTTPQL Replay & Sessions - Sessions, collections, entries, fuzzing Scopes - Create and manage testing scopes (allowlist/denylist patterns) Filter Presets - Save and reuse HTTPQL filter presets Environments - Store test variables (victim IDs, tokens, etc.) Findings - Create, list, update security findings Tasks - Monitor ...
2.3K
5639 pptx nexu-io/open-design
PPTX Skill Quick Reference Task Guide Read/analyze content python -m markitdown presentation.pptx Edit or create from template Read editing.md Create from scratch Read pptxgenjs.md Reading Content Text extraction python -m markitdown presentation.pptx Visual overview python scripts/thumbnail.py presentation.pptx Raw XML python scripts/office/unpack.py presentation.pptx unpacked/ Editing Workflow Read editing.md for full details. Analyze template with thumbnail.py Unpack → manipulate slides → ...
2.3K
5640 spring-data-neo4j giuseppe-trisciuoglio/developer-kit
Spring Data Neo4j Integration Patterns When to Use This Skill To use this skill when you need to: Set up Spring Data Neo4j in a Spring Boot application Create and map graph node entities and relationships Implement Neo4j repositories with custom queries Write Cypher queries using @Query annotations Configure Neo4j connections and dialects Test Neo4j repositories with embedded databases Work with both imperative and reactive Neo4j operations Map complex graph relationships with bidirectional or u...
2.3K
5641 unit-test-security-authorization giuseppe-trisciuoglio/developer-kit
Unit Testing Security and Authorization Overview This skill provides patterns for unit testing Spring Security authorization logic using @PreAuthorize, @Secured, @RolesAllowed, and custom permission evaluators. It covers testing role-based access control (RBAC), expression-based authorization, custom permission evaluators, and verifying access denied scenarios without full Spring Security context. When to Use Use this skill when: Testing @PreAuthorize and @Secured method-level security Testing r...
2.3K
5642 web-renderer-test remotion-dev/remotion
The web renderer is in packages/web-renderer and the test suite is in packages/web-renderer/src/test. It uses visual snapshot testing using vitest. A test file can for example be executed using: bunx vitest src/test/video.test.tsx Example Each test is powered by a fixture in packages/web-renderer/src/test/fixtures. A fixture looks like this for example: import {AbsoluteFill} from 'remotion'; const Component: React.FC = () => { return ( <AbsoluteFill style={{ justifyCont...
2.3K
5643 rust-daily actionbook/rust-skills
Rust Daily Report Version: 2.1.0 | Last Updated: 2025-01-27 Fetch Rust community updates, filtered by time range. Data Sources Category Sources Ecosystem Reddit r/rust, This Week in Rust Official blog.rust-lang.org, Inside Rust Foundation rustfoundation.org (news, blog, events) Parameters time_range : day | week | month (default: week) category : all | ecosystem | official | foundation Show more
2.3K
5644 korean-cinema-search nomadamas/k-skill
Korean Cinema Search What this skill does upstream 원본 hmmhmmhm/daiso-mcp 와 npm package daiso 를 사용해 CGV, 메가박스, 롯데시네마 영화관 검색, 상영작, 시간표, 잔여석 조회 를 안내한다. 이 저장소는 upstream 코드를 vendoring 하지 않는다. 기본 경로는 MCP 서버를 직접 설치하지 않고 CLI로 먼저 확인하는 방식 이다. 핵심 조회 경로: CGV: /api/cgv/theaters , /api/cgv/movies , /api/cgv/timetable 메가박스: /api/megabox/theaters , /api/megabox/movies , /api/megabox/seats 롯데시네마: /api/lottecinema/theaters , /api/lottecinema/movies , /api/lottecinema/seats health check: npx --yes daiso health Whe...
2.3K
5645 nextjs-app-router giuseppe-trisciuoglio/developer-kit
Next.js App Router (Next.js 16+) Build modern React applications using Next.js 16+ with App Router architecture. Overview This skill provides patterns for: Server Components (default) and Client Components ("use client") Server Actions for mutations and form handling Route Handlers for API endpoints Explicit caching with "use cache" directive Parallel and intercepting routes Next.js 16 async APIs and proxy.ts When to Use Activate when user requests involve: "Create a Next.js 16 project", "Set up...
2.3K
5646 react-core copilotkit/copilotkit
CopilotKit React Core @copilotkit/react-core is the React frontend half of CopilotKit: it mounts a provider, speaks AG-UI over SSE to a runtime (or directly to CopilotKit Intelligence in SPA mode), and exposes hooks for every interaction surface. This SKILL.md is the index . Read the reference under references/ that matches your task — do not try to absorb the whole package from this file. Mental model — three shells you compose Show more Installs 522 Repository copilotkit/copilotkit GitHub Star...
2.3K
5647 notion-meeting-intelligence openai/skills
Meeting Intelligence Prep meetings by pulling Notion context, tailoring agendas/pre-reads, and enriching with Codex research. Quick start Confirm meeting goal, attendees, date/time, and decisions needed. Gather context: search with Notion:notion-search , then fetch with Notion:notion-fetch (prior notes, specs, OKRs, decisions). Pick the right template via reference/template-selection-guide.md (status, decision, planning, retro, 1:1, brainstorming). Draft agenda/pre-read in Notion with Notion:not...
2.3K
5648 signature-request anthropics/knowledge-work-plugins
/signature-request -- E-Signature Routing If you see unfamiliar placeholders or need to check which tools are connected, see CONNECTORS.md . Prepare a document for electronic signature — verify completeness, set signing order, and route for execution. Important : This command assists with legal workflows but does not provide legal advice. Verify documents are in final form before sending for signature. Usage /signature-request $ARGUMENTS Prepare for signature: @$1 Workflow Step 1: Accept the Doc...
2.3K
5649 market-sizing phuryn/pm-skills
Estimate Market Size (TAM, SAM, SOM) Purpose Estimate the Total Addressable Market (TAM), Serviceable Addressable Market (SAM), and Serviceable Obtainable Market (SOM) for a product. Includes both top-down and bottom-up estimation approaches, growth projections, and key assumptions to validate. Instructions You are a strategic market analyst specializing in market sizing, opportunity assessment, and growth forecasting. Input Your task is to estimate the market size for $ARGUMENTS within the spec...
2.3K
5650 ghost-bits-cast-attack yaklang/hack-skills
SKILL: Ghost Bits / Cast Attack — Java char to byte Narrowing Playbook AI LOAD INSTRUCTION : This is a Java-only injection-enabling primitive, not a standalone vulnerability class. Whenever you see (1) a Java backend, (2) a WAF/IDS in front of it, and (3) any of {SQLi, deser RCE, file upload, path traversal, CRLF, request smuggling, SMTP injection} on the menu, ALWAYS try Ghost Bits variants of the payload before declaring it "blocked". The root cause is the silent loss of the high 8 bits when J...
2.3K