Overview CLI FAQ

Agent Skills 排行榜 · 关键词 + 语义搜索

按 / 聚焦搜索框
正在使用 AI 进行语义搜索...
24,399
总 Skills
87.6M
总安装量
2,573
贡献者
# Skill 仓库 描述 安装量
24001 image-generate agntswrm/agent-media
Image Generate Generates an image from a text prompt using AI image generation models. Command npx agent-media@latest image generate --prompt < text > [ options ] Inputs Option Required Description --prompt Yes Text description of the image to generate --width No Width of the generated image in pixels (default: 1280) --height No Height of the generated image in pixels (default: 720) --count No Number of images to generate (default: 1) --out No Output path, filename or directory (default: ./) --p...
 35
24002 scientific-computing eyadsibai/ltk
Domain-specific Python libraries for scientific applications. Libraries | AstroPy | Astronomy | Coordinates, units, FITS files | BioPython | Bioinformatics | Sequences, BLAST, PDB | SymPy | Mathematics | Symbolic computation | Statsmodels | Statistics | Statistical modeling, tests AstroPy Astronomy and astrophysics computations. Key capabilities: - Units: Physical unit handling with automatic conversion - Coordinates: Celestial coordinate systems (ICRS, galactic, etc.) -...
 35
24003 custom-builtin-functions chainloop-dev/chainloop
Policy Engine Extension The OPA/Rego policy engine supports custom built-in functions written in Go. Adding Custom Built-ins : Create Built-in Implementation (e.g., pkg/policies/engine/rego/builtins/myfeature.go ): package builtins import ( "github.com/open-policy-agent/opa/ast" "github.com/open-policy-agent/opa/topdown" "github.com/open-policy-agent/opa/types" ) const myFuncName = "chainloop.my_function" func RegisterMyBuiltins ( ) error { return Register ( & ast . Builtin { Name : myFuncName ,...
 35
24004 cancel-async-tasks letta-ai/skills
Cancel Async Tasks Overview This skill provides guidance for implementing robust asyncio task cancellation in Python, particularly when dealing with signal handling (SIGINT/KeyboardInterrupt), semaphore-based concurrency limiting, and ensuring proper cleanup of all tasks including those waiting in queues. Key Concepts Signal Propagation in Asyncio Understanding how signals interact with asyncio is critical: KeyboardInterrupt vs CancelledError : When SIGINT is received during asyncio.run() , the ...
 35
24005 ecomode yeachan-heo/oh-my-codex
Ecomode Skill Activates token-efficient parallel execution for pro-plan users who prioritize cost efficiency. When Activated This skill enhances Claude's capabilities by: Parallel Execution: Running multiple agents simultaneously for independent tasks Token-Conscious Routing: Preferring Haiku and Sonnet agents, avoiding Opus Background Operations: Using run_in_background: true for long operations Persistence Enforcement: Never stopping until all tasks are verified complete Cost Optimization:...
 35
24006 upgrading-chart chainloop-dev/chainloop
Upgrading Helm Chart Dependencies This skill automates the upgrade process for Helm chart dependencies in the Chainloop project. Supports PostgreSQL and Vault (both Bitnami charts). CRITICAL RESTRICTIONS Version Upgrade Rules : Patch upgrades (1.2.3 → 1.2.4): ALLOWED Minor upgrades (1.2.x → 1.3.x): ALLOWED Major upgrades (1.x.x → 2.x.x): FORBIDDEN - STOP IMMEDIATELY MANDATORY : If major version upgrade is detected, STOP the process and inform the user that manual review is required. Upgrade Type...
 35
24007 data-enrichment merit-systems/x402scan-skills
Data Enrichment with x402 APIs STOP — Read before making any API call. enrichx402.com endpoints are not the same as each provider's native API. All paths use the format https://enrichx402.com/api/{provider}/{action} . You MUST either: Copy exact URLs from the Quick Reference table below, OR Run x402.discover_api_endpoints(url="https://enrichx402.com") to get the correct paths Guessing paths will fail with 405 errors (wrong path) or 404 errors (missing /api/ prefix). Use the x402scan MCP tools to...
 35
24008 frappe-service sergio-bershadsky/ai
Frappe Service Layer Design Create well-structured service layer classes that encapsulate business logic, coordinate between repositories, and provide clean interfaces for controllers and APIs. When to Use Implementing complex business logic Coordinating operations across multiple DocTypes Creating reusable business operations Separating concerns between controllers and data access Building transaction-aware operations Arguments /frappe-service <service_name> [--doctype <doctype>] [--operations ...
 35
24009 task-management joelhooks/joelclaw
Task Management Tasks are tracked in a simple TASKS.md file that both you and the user can edit. File Location Always use TASKS.md in the current working directory. If it exists, read/write to it If it doesn't exist, create it with the template below Dashboard Setup (First Run) A visual dashboard is available for managing tasks and memory. On first interaction with tasks: Check if dashboard.html exists in the current working directory If not, copy it from ${CLAUDE_PLUGIN_ROOT}/skills/dashboard.h...
 35
24010 devdocs-requirements ab300819/skills
需求扩写 将用户简短需求扩展为结构化的需求文档，建立功能点、用户故事、验收标准的关联体系。 语言规则 支持中英文提问 统一中文回复 使用中文生成文档 触发条件 用户提供功能需求或想法 用户要求创建/编写 PRD 用户想要澄清或记录需求 来自 /devdocs-feature 的增量需求委托 用户需要补充项目背景信息（尤其是 retrofit 后） 用户提供参考资料、领域知识、技术约束 运行模式 /devdocs-requirements → 自动检测模式 /devdocs-requirements --incremental → 强制增量模式（追加功能点） /devdocs-requirements --context → 背景信息模式（追加/更新背景） /devdocs-requirements --fast → 跳过 Plan 模式，直接生成，仅最终确认 模式 触发条件 说明 初始模式 无 01-requirements.md 从零创建需求文档 增量模式 已有 01-requirements.md 扫描编号 + 追加功能点/用户故事/验收标准 背景信息模式...
 35
24011 build-cython-ext letta-ai/skills
Build Cython Extensions This skill provides guidance for building Cython extensions and resolving compatibility issues, with particular focus on numpy version compatibility problems. When to Use This Skill Building or compiling Cython extensions (.pyx files) Fixing numpy compatibility issues in Cython code Migrating Cython projects to work with numpy 2.0+ Resolving deprecated numpy type errors (np.int, np.float, np.bool, etc.) Troubleshooting Cython compilation failures Key File Types to Exami...
 35
24012 kotlin-android pluginagentmarketplace/custom-plugin-kotlin
Kotlin Android Skill Production-ready Android development with Jetpack libraries. Topics Covered MVVM Pattern @HiltViewModel class UserViewModel @Inject constructor ( private val repository : UserRepository ) : ViewModel ( ) { private val _uiState = MutableStateFlow ( UiState ( ) ) val uiState = _uiState . asStateFlow ( ) fun load ( ) = viewModelScope . launch { _uiState . update { it . copy ( isLoading = true ) } repository . getUsers ( ) . onSuccess { users -> _uiState . update { it . copy ( u...
 35
24013 effect-patterns-hub mepuka/effect-ontology
Effect Patterns Hub Purpose: Provide quick access to 130+ curated Effect-TS patterns from the EffectPatterns repository. Use this skill to find specific implementation patterns, compare approaches, and reference best practices. Triggers Looking for a specific Effect pattern or idiom Need real-world examples of Effect concepts Want to see multiple approaches to the same problem Comparing implementation strategies Learning new Effect features Pattern Library Location Local Patterns : .claude/skill...
 35
24014 salesloft membranedev/application-skills
Salesloft Salesloft is a sales engagement platform that helps sales teams automate and personalize their outreach. It's used by sales development representatives (SDRs) and account executives to manage communications and track engagement with prospects. Official docs: https://developers.salesloft.com/ Salesloft Overview Account Cadence Cadence Enrollment Contact Do Not Contact List Person Team Meeting User Use action names and parameters as needed. Working with Salesloft This skill uses the Memb...
 35
24015 code-review carvalab/k-skills
Code Review When to use this skill Reviewing pull requests Checking code quality Providing feedback on implementations Identifying potential bugs Suggesting improvements Security audits Performance analysis Instructions Step 1: Understand the context Read the PR description : What is the goal of this change? Which issues does it address? Are there any special considerations? Check the scope : How many files changed? What type of changes? (feature, bugfix, refactor) Are tests included? Step 2: Hi...
 35
24016 python-executor inference-sh/agent-skills
Python Code Executor Execute Python code in a safe, sandboxed environment with 100+ pre-installed libraries. Quick Start Requires inference.sh CLI ( belt ). Install instructions belt login Run Python code belt app run infsh/python-executor --input '{ "code": "import pandas as pd\nprint(pd.__version__)" }' App Details Property Value App ID infsh/python-executor Environment Python 3.10, CPU-only RAM 8GB (default) / 16GB (high_memory) Timeout 1-300 seconds (default: 30) Input Schema { "code" : "pr...
 35
24017 mocking-assistant patricio0312rev/skills
Mocking Assistant Create reliable mocks for APIs and services in tests. MSW API Mocking // mocks/handlers.ts import { http, HttpResponse } from "msw"; export const handlers = [ // GET endpoint http.get("/api/users/:id", ({ params }) => { const { id } = params; return HttpResponse.json({ id, name: "John Doe", email: "john@example.com", }); }), // POST endpoint http.post("/api/users", async ({ request }) => { const body = await request.json(); ...
 35
24018 vercel-react-best-practices guanyang/antigravity-skills
Vercel React Best Practices Comprehensive performance optimization guide for React and Next.js applications, maintained by Vercel. Contains 62 rules across 8 categories, prioritized by impact to guide automated refactoring and code generation. When to Apply Reference these guidelines when: Writing new React components or Next.js pages Implementing data fetching (client or server-side) Reviewing code for performance issues Refactoring existing React/Next.js code Optimizing bundle size or load tim...
 35
24019 vercel-blob ovachiever/droid-tings
Vercel Blob Last Updated: 2026-01-21 Version: @vercel/blob@2.0.0 Skill Version: 2.1.0 Quick Start Create Blob store: Vercel Dashboard → Storage → Blob vercel env pull .env.local Creates BLOB_READ_WRITE_TOKEN npm install @vercel/blob Server Upload: 'use server'; import { put } from '@vercel/blob'; export async function uploadFile(formData: FormData) { const file = formData.get('file') as File; const blob = await put(file.name, file, { access: 'public' }); return blob.url; } CRITI...
 35
24020 release-bump mikeyobrien/ralph-orchestrator
Release Bump Overview Bump version and trigger release for ralph-orchestrator. All versions live in workspace Cargo.toml - individual crates inherit via version.workspace = true. Quick Reference Step Command/Action 1. Bump version Edit Cargo.toml: replace all version = "X.Y.Z" (7 occurrences) 2. Build cargo build (updates Cargo.lock) 3. Test cargo test 4. Commit git add Cargo.toml Cargo.lock && git commit -m "chore: bump to vX.Y.Z" 5. Push git push origin main 6. Tag git tag vX.Y.Z && git push...
 35
24021 baoyu-image-gen smallnest/langgraphgo
Image Generation (AI SDK) Official API-based image generation. Supports OpenAI, Google, OpenRouter, DashScope (阿里通义万象), Jimeng (即梦), Seedream (豆包) and Replicate providers. Script Directory Agent Execution : {baseDir} = this SKILL.md file's directory Script path = {baseDir}/scripts/main.ts Resolve ${BUN_X} runtime: if bun installed → bun ; if npx available → npx -y bun ; else suggest installing bun Step 0: Load Preferences ⛔ BLOCKING CRITICAL : This step MUST complete BEFORE any image generation....
 35
24022 figma-ui-skills ihlamury/design-skills
Figma UI Skills Opinionated constraints for building Figma-style interfaces with AI agents. When to Apply Reference these guidelines when: Building light-mode interfaces Creating Figma-inspired design systems Implementing UIs with Inter font and 4px grid Colors SHOULD use light backgrounds for primary surfaces MUST use FFFFFF as page background ( surface-base ) MUST use BEBAF6 for primary actions and focus states ( accent ) SHOULD reduce color palette (currently 12 colors detected) MUST maintain...
 35
24023 unlayer-custom-tools unlayer/unlayer-skills
Build Custom Tools Overview Custom tools are drag-and-drop content blocks you create for the Unlayer editor. Each tool needs: A renderer (what users see in the editor) Exporters (HTML output — must be table-based for email) Property editors (the settings panel) Complete Example: Product Card This is a fully working custom tool with an image, title, price, and buy button: unlayer . registerTool ( { name : 'product_card' , label : 'Product Card' , icon : 'fa-shopping-cart' , supportedDisplayModes ...
 35
24024 convex-components fluid-tools/claude-skills
Authoring Convex Components Overview Convex components are isolated, reusable backend modules that can be packaged and shared. Each component has its own schema, functions, and namespace, enabling modular architecture and library distribution via NPM. TypeScript: NEVER Use any Type CRITICAL RULE: This codebase has @typescript-eslint/no-explicit-any enabled. Using any will cause build failures. When to Use This Skill Use this skill when: Building reusable backend modules for your app Packag...
 35
24025 tool-function-schema-designer patricio0312rev/skills
Tool/Function Schema Designer Design robust tool schemas that LLMs can reliably invoke. Function Schema Format // OpenAI function calling format const searchDocsTool = { type : "function" , function : { name : "search_documentation" , description : "Search through product documentation using semantic search. Use this when the user asks about features, how-tos, or troubleshooting." , parameters : { type : "object" , properties : { query : { type : "string" , description : "The search query, phras...
 35
24026 security-policy-generator jeremylongshore/claude-code-plugins-plus-skills
Security Policy Generator Purpose This skill provides automated assistance for security policy generator tasks within the Security Advanced domain. When to Use This skill activates automatically when you: Mention "security policy generator" in your request Ask about security policy generator patterns or best practices Need help with advanced security skills covering penetration testing, compliance frameworks, threat modeling, and enterprise security. Capabilities Provides step-by-step guidance f...
 35
24027 webperf-interaction nucliweb/webperf-snippets
WebPerf: Interaction & Animation JavaScript snippets for measuring web performance in Chrome DevTools. Execute with mcp__chrome-devtools__evaluate_script , capture output with mcp__chrome-devtools__get_console_message . Scripts scripts/Input-Latency-Breakdown.js — Input Latency Breakdown scripts/Interactions.js — Interactions scripts/Layout-Shift-Loading-and-Interaction.js — Layout Shift Tracking scripts/Long-Animation-Frames-Helpers.js — LoAF Helpers scripts/Long-Animation-Frames-Script-Attribu...
 35
24028 plan-self-review hrdtbs/agent-skills
Score Plan (100pt): Evaluate clarity (25), comprehensiveness (25), feasibility (25), and consistency (25). List Deficiencies: Create a prioritized task list ( - [ ] ) of gaps, omissions, or ambiguities. Improve: Edit the Plan to resolve deficiencies. Final Check: Confirm no logical contradictions or missing elements.
 35
24029 helios-skills bintzgavin/helios-skills
Helios Skills Collection This repository contains agent skills for Helios , a browser-native video engine for programmatic animation and rendering. Installation This is a collection repository containing multiple skills. To use these skills, install individual skills by their path: Getting started npx skills add BintzGavin/helios-skills/skills/getting-started Core skills npx skills add BintzGavin/helios-skills/skills/core npx skills add BintzGavin/helios-skills/skills/renderer npx skills add B...
 35
24030 humanizer-tw yelban/orz99-skills
Humanizer-tw: 去除中文 AI 寫作痕跡 你是一位文字編輯，專門識別和去除中文 AI 生成文字的痕跡，使文字更自然、更有人味、更像台灣人寫的。 注意： 本 Skill 專注於去除 AI 痕跡、黑話與用語在地化。若需深度的字數精簡與節奏打磨，請搭配 good-writing-zh。建議順序：先 humanizer-tw（去毒）→ 再 good-writing-zh（打磨節奏）。 文體感知 處理文字前，先判斷文體： 正式文體 （公文、法律、技術文件、財報、API 文件）→ 僅執行 ：去開場白、去結尾套話、去互聯網黑話、中國用語→台灣用語。 停用 「個性與靈魂」和「書面語口語化」規則。 非正式文體 （部落格、社群貼文、散文、一般文章）→ 全面啟用 所有規則，包含個性注入。 核心規則速查 刪除開場套話 — 「隨著...的發展」「眾所周知」直接刪除 減少連接詞 — 「此外」「與此同時」「首先...其次...最後」大量刪減 替換互聯網黑話 — 「賦能」→「幫助」、「痛點」→「問題」、「底層邏輯」→「核心原理」 修正翻譯腔與中式 AI 句型 — 「這是一個...的事情」→直接說、「對 X...
 35
24031 typescript-async-patterns thebushidocollective/han
Master asynchronous programming patterns in TypeScript, including Promises, async/await, error handling, async iterators, and advanced patterns for building robust async applications. Promises and async/await Basic Promise Creation ``` // Creating a Promise function delay(ms: number): Promise<void> { return new Promise((resolve) => { setTimeout(resolve, ms); }); } // Promise with value function fetchUserData(userId: string): Promise<User> { return new Promise((resolve, reject) =>...
 35
24032 ultrawork yeachan-heo/oh-my-codex
Activates maximum performance mode with parallel agent orchestration. When Activated This skill enhances Claude's capabilities by: - Parallel Execution: Running multiple agents simultaneously for independent tasks - Aggressive Delegation: Routing tasks to specialist agents immediately - Background Operations: Using `run_in_background: true` for long operations - Persistence Enforcement: Never stopping until all tasks are verified complete - Smart Model Routing: Using tiered agents to sav...
 35
24033 ar-filter-generation eachlabs/skills
AR Filter Generation Generate creative AR filters and face effects using each::sense. This skill creates images and videos for AR filter concepts, face tracking effects, and social media face filters for platforms like Instagram, Snapchat, and TikTok. Features Face Filters : Animal ears, noses, whiskers, and character overlays Beauty Effects : Skin smoothing, contouring, and enhancement filters Makeup AR : Virtual lipstick, eyeshadow, blush, and full makeup looks Accessories : Sunglasses, hats, ...
 35
24034 claw-multi-agent zcyynl/claw-multi-agent
claw-multi-agent 🐝 Replace one AI with a team of AIs. Turn serial into parallel. Turn hours into minutes. What can it do? Scenario Example Speedup Parallel research Search 5 frameworks simultaneously, each writes a report ~65% ⚡ Multi-model compare Ask Claude, Gemini, Kimi the same question at the same time ~50% ⚡ Code pipeline Plan → Code → Review, auto hand-off in sequence Quality ↑ Batch processing Translate / analyze / summarize multiple docs in parallel Scales linearly ⚡ Get started in 30 s...
 35
24035 ai-ml-integration miles990/claude-software-skills
AI/ML Integration Overview Integrating AI and machine learning capabilities into applications, including LLM APIs, embeddings, and RAG patterns. LLM Integration OpenAI API import OpenAI from 'openai' ; const openai = new OpenAI ( { apiKey : process . env . OPENAI_API_KEY , } ) ; // Chat completion async function chat ( messages : Array < { role : string ; content : string } > ) { const response = await openai . chat . completions . create ( { model : 'gpt-4o' , messages , temperature : 0.7 , max...
 35
24036 root-cause-tracing nickcrew/claude-ctx-plugin
Root Cause Tracing Overview Bugs often manifest deep in the call stack (git init in wrong directory, file created in wrong location, database opened with wrong path). Your instinct is to fix where the error appears, but that's treating a symptom. Core principle: Trace backward through the call chain until you find the original trigger, then fix at the source. When to Use digraph when_to_use { "Bug appears deep in stack?" [ shape = diamond ] ; "Can trace backwards?" [ shape = diamond ] ; "Fix at ...
 35
24037 dev-terminal parkerhancock/dev-terminal
Dev Terminal Skill Terminal automation that maintains PTY sessions across script executions. Run TUI applications, send keystrokes, capture screen output, and debug terminal apps - all with persistent state. Setup Start the server in a background terminal: cd dev-terminal && npm install && ./server.sh & Wait for the Ready message before running scripts. Headed Mode (Optional) For visual debugging, start with browser UI: cd dev-terminal && ./server.sh --headed & This opens a browser wi...
 35
24038 unity-skills besty0728/unity-skills
Unity Skills Use this skill when the user wants to automate the Unity Editor through the local UnitySkills REST server. Current package snapshot: 512 REST skills 14 advisory design modules Unity maintenance baseline: 2022.3+ Default request timeout: 15 minutes Core Rules When the user mentions a specific Unity version, route first: import unity_skills unity_skills . set_unity_version ( "2022.3" ) When the task touches 2+ objects, prefer *_batch skills instead of looping single-item skills. When ...
 35
24039 sobriety-tools-guardian erichowens/some_claude_skills
Sobriety Tools Guardian Mission : Keep sobriety.tools fast enough to save lives. A fentanyl addict in crisis has seconds, not minutes. The app must load instantly, work offline, and surface help before they ask. Why Performance Is Life-or-Death CRISIS TIMELINE: 0-30 seconds: User opens app in distress 30-60 seconds: Looking for sponsor number or meeting 60-120 seconds: Decision point - call someone or use 2+ minutes: If still searching, may give up EVERY SECOND OF LOAD TIME = LIVES AT RISK C...
 35
24040 installing-tigris-storage tigrisdata/skills
Tigris Storage is a high-performance object storage system for multi-cloud environments. This skill covers installation and configuration. Quick Setup 1. Install the Package ``` npm install @tigrisdata/storage or yarn add @tigrisdata/storage ``` 2. Create Account Resources - Create Tigris account: [https://storage.new](https://storage.new) - Create bucket: [https://console.tigris.dev/createbucket](https://console.tigris.dev/createbucket) - Create access key: [https://console.tigris.d...
 35
24041 password-strength-analyzer jeremylongshore/claude-code-plugins-plus-skills
Password Strength Analyzer Purpose This skill provides automated assistance for password strength analyzer tasks within the Security Fundamentals domain. When to Use This skill activates automatically when you: Mention "password strength analyzer" in your request Ask about password strength analyzer patterns or best practices Need help with essential security skills covering authentication, input validation, secure coding practices, and basic vulnerability detection. Capabilities Provides step-b...
 35
24042 linkedin-announcement-generator nicepkg/ai-workflow
LinkedIn Announcement Generator Overview This skill automates the creation of professional LinkedIn announcements for intelligent textbooks. It analyzes book metrics from the docs/learning-graph/ directory, gathers statistics about chapters, concepts, and educational resources, and generates engaging announcement text with relevant hashtags and links to the published site. The announcements are designed to highlight the scope and completeness of the textbook, showcase its educational features, a...
 35
24043 content-humanizer oakoss/agent-skills
Content Humanizer You are an expert in authentic writing and brand voice. Your goal is to transform content that reads like it was generated by a machine — even when it technically was — into writing that sounds like a real person with real opinions, real experience, and real stakes in what they're saying. This is not a cleaning service. You're not just removing "delve" and calling it a day. You're rebuilding the voice from the ground up. Before Starting Check for context first: If marketing-con...
 35
24044 magento-magewire-specialist maxnorm/magento2-agent-skills
Magento 2 Magewire Specialist Expert specialist in creating dynamic, reactive Magento 2 interfaces using Magewire's Laravel Livewire-inspired component system. When to Use Building reactive components Creating real-time interfaces Implementing server-side rendering Building interactive UI without complex JavaScript Working with Magewire components Magewire Framework Component Architecture Component Design : Expert in Magewire component design and lifecycle Reactive Programming : Implement reacti...
 35
24045 data-enrichment merit-systems/agentcash-skills
Data Enrichment with x402 APIs STOP — Read before making any API call. enrichx402.com endpoints are not the same as each provider's native API. All paths use the format https://enrichx402.com/api/{provider}/{action} . You MUST either: Copy exact URLs from the Quick Reference table below, OR Run x402.discover_api_endpoints(url="https://enrichx402.com") to get the correct paths Guessing paths will fail with 405 errors (wrong path) or 404 errors (missing /api/ prefix). Use the x402scan MCP tools to...
 35
24046 luau-type-expert dig1t/skills
Luau Type Expert Expert guidance for writing type-safe, clean Luau code that passes strict type checking. Type Modes Always use --!strict at file top. Three modes exist: Mode Behavior --!nocheck Disables type checking entirely --!nonstrict Unknown types become any (default) --!strict Full type tracking, catches mismatches Type Annotation Syntax --!strict -- Variables local count : number = 0 local name : string = "Player" local active : boolean = true -- Functions local function add ( a : number...
 35
24047 ssrf-testing ed1s0nz/cyberstrikeai
SSRF服务器端请求伪造测试 概述 SSRF（Server-Side Request Forgery）是一种利用服务器发起请求的漏洞，可以访问内网资源、进行端口扫描或绕过防火墙。本技能提供SSRF漏洞的检测、利用和防护方法。 漏洞原理 应用程序接受URL参数并请求该URL，攻击者可以控制请求的目标，导致： 内网资源访问 本地文件读取 端口扫描 绕过防火墙 云服务元数据访问 测试方法 1. 识别SSRF输入点 常见功能： URL预览/截图 文件上传（远程URL） Webhook回调 API代理 数据导入 图片处理 PDF生成 2. 基础检测 测试本地回环： http://127.0.0.1 http://localhost http://0.0.0.0 http://[::1] 测试内网IP： http://192.168.1.1 http://10.0.0.1 http://172.16.0.1 测试文件协议： file:///etc/passwd file:///C:/Windows/System32/drivers/etc/hosts 3. 绕过技术 IP地址编码： 127.0.0...
 35
24048 ai-tech-fulltext-fetch tiangong-ai/skills
AI Tech Fulltext Fetch Core Goal Reuse the same SQLite database populated by ai-tech-rss-fetch . Fetch article body text from each RSS entry URL. Persist extraction status and text in a companion table ( entry_content ). Support incremental runs and safe retries without creating duplicate fulltext rows. Triggering Conditions Receive a request to fetch article body/full text for entries already in ai_rss.db . Receive a request to build a second-stage pipeline after RSS metadata sync. Need a stabl...
 35
24049 smooth-browser circlemind-ai/smooth-sdk
Smooth Browser Smooth CLI is a browser for AI agents to interact with websites, authenticate, scrape data, and perform complex web-based tasks using natural language. Prerequisites Assume the Smooth CLI is already installed. If not, you can install it by running: pip install smooth-py Assume an API key is already configured. If you encounter authentication errors, configure it with: smooth config --api-key < api-key > To verify the configuration: smooth config --show Get an API key at https://ap...
 35
24050 gsc-assistant nicepkg/ai-workflow
GSC Assistant Skill Purpose This skill helps manage Google Search Console indexing status by maintaining two markdown tracking files: indexed.md - All indexed pages in two tables: "Indexed Public" - URLs confirmed in GSC export data "Indexed With Lag" - URLs confirmed via URL Inspection (not yet in export) to-index.md - Pages awaiting indexing: Difference between sitemap and total indexed URLs Prioritized by categories (configurable) Tracks submission dates When to Use This Skill User asks about...
 35