███████╗██╗ ██╗██╗██╗ ██╗ ██████╗ █████╗ ███╗ ██╗██╗ ██╗
██╔════╝██║ ██╔╝██║██║ ██║ ██╔══██╗██╔══██╗████╗ ██║██║ ██╔╝
███████╗█████╔╝ ██║██║ ██║ ██████╔╝███████║██╔██╗ ██║█████╔╝
╚════██║██╔═██╗ ██║██║ ██║ ██╔══██╗██╔══██║██║╚██╗██║██╔═██╗
███████║██║ ██╗██║███████╗███████╗ ██║ ██║██║ ██║██║ ╚████║██║ ██╗
╚══════╝╚═╝ ╚═╝╚═╝╚══════╝╚══════╝ ╚═╝ ╚═╝╚═╝ ╚═╝╚═╝ ╚═══╝╚═╝ ╚═╝
Agent Skills 排行榜 · 关键词 + 语义搜索
| # | Skill | 仓库 | 描述 | 安装量 |
|---|---|---|---|---|
| 5551 | design-handoff | anthropics/knowledge-work-plugins |
/design-handoff If you see unfamiliar placeholders or need to check which tools are connected, see CONNECTORS.md . Generate comprehensive developer handoff documentation from a design. Usage /design-handoff $ARGUMENTS Generate handoff specs for: @$1 If a Figma URL is provided, pull the design from Figma. Otherwise, work from the provided description or screenshot. What to Include Visual Specifications Exact measurements (padding, margins, widths) Design token references (colors, typography, spac...
|
3.3K |
| 5552 | dependency-confusion | yaklang/hack-skills |
SKILL: Dependency Confusion — Supply Chain Attack Playbook AI LOAD INSTRUCTION : Expert dependency-confusion methodology. Covers how private package names leak, how public registries can win version resolution, ecosystem-specific pitfalls (npm scopes, pip extra indexes, Maven repo order), recon commands, non-destructive PoC patterns (callbacks, not data exfil), and defensive controls. Pair with supply-chain recon workflows when manifests or CI caches are in scope. Only use on systems and program...
|
3.3K |
| 5553 | expression-language-injection | yaklang/hack-skills |
SKILL: Expression Language Injection — Expert Attack Playbook AI LOAD INSTRUCTION : Expert EL injection techniques covering SpEL (Spring), OGNL (Struts2), and Java EL (JSP/JSF). Distinct from SSTI — EL injection targets expression evaluators in Java frameworks, not template engines. Covers sandbox bypass, _memberAccess manipulation, actuator abuse, and real-world CVE chains. 0. RELATED ROUTING ssti-server-side-template-injection for template engines (Jinja2, FreeMarker, Twig) — different attack ...
|
3.3K |
| 5554 | solid | ramziddin/solid-skills |
Solid Skills: Professional Software Engineering You are now operating as a senior software engineer. Every line of code you write, every design decision you make, and every refactoring you perform must embody professional craftsmanship. When This Skill Applies ALWAYS use this skill when: Writing ANY code (features, fixes, utilities) Refactoring existing code Planning or designing architecture Reviewing code quality Debugging issues Creating tests Making design decisions Core Philosophy "Cod...
|
3.3K |
| 5555 | screenshot-optimization | appeeky/aso-skills |
Screenshot Optimization You are an expert in App Store creative optimization with deep knowledge of what converts browsers into downloaders. Your goal is to help the user design screenshots that maximize conversion rate. Initial Assessment Check for app-marketing-context.md — read it for positioning and audience Ask for the App ID (to see current screenshots) Ask for target audience — who is browsing the App Store for this? Ask for top 3 features they want to highlight Ask if they have a designe...
|
3.3K |
| 5556 | subdomain-takeover | yaklang/hack-skills |
SKILL: Subdomain Takeover — Detection & Exploitation Playbook AI LOAD INSTRUCTION : Covers CNAME/NS/MX takeover, per-provider fingerprint matching, claim procedures, and defensive monitoring. Base models often confuse "CNAME exists" with "takeover possible" — the key is whether the resource behind the CNAME is unclaimed and claimable . 0. RELATED ROUTING ssrf-server-side-request-forgery when a subdomain takeover is used to bypass SSRF allowlists trusting *.target.com cors-cross-origin-misconfigu...
|
3.3K |
| 5557 | git-create-repo | zc277584121/mygitplugin |
Git Create Repo 在 GitHub 上创建新的仓库并 clone 到本地。 触发条件 当用户要求创建一个新的 GitHub 仓库时使用此 skill。 执行步骤 创建仓库 : gh repo create < repo-name > --public --add-readme 默认创建公开仓库( --public )。 如果用户明确要求私有仓库,使用 --private 替代。 默认添加 README 文件。 Show more Installs 435 Repository zc277584121/mygitplugin First Seen Apr 27, 2026 Security Audits Gen Agent Trust Hub Pass Socket Pass Snyk Pass
|
3.3K |
| 5558 | csv-formula-injection | yaklang/hack-skills |
SKILL: CSV Formula Injection AI LOAD INSTRUCTION : This skill covers formula/DDE-style injection in CSV and spreadsheet contexts, obfuscation, cloud-sheet primitives, and safe testing methodology. Use only where explicitly authorized ; payloads that invoke local commands or remote fetches are impactful —prefer lab targets and document consent. Do not target end users without program rules allowing client-side execution tests. 0. QUICK START Characters that may trigger formula evaluation when a c...
|
3.3K |
| 5559 | jndi-injection | yaklang/hack-skills |
SKILL: JNDI Injection — Expert Attack Playbook AI LOAD INSTRUCTION : Expert JNDI injection techniques. Covers lookup mechanism abuse, RMI/LDAP class loading, JDK version constraints, Log4Shell (CVE-2021-44228), marshalsec tooling, and post-8u191 bypass via deserialization gadgets. Base models often confuse JNDI injection with general deserialization — this file clarifies the distinct attack surface. 0. RELATED ROUTING deserialization-insecure when JNDI leads to deserialization (post-8u191 bypass...
|
3.3K |
| 5560 | active-directory-acl-abuse | yaklang/hack-skills |
SKILL: AD ACL Abuse — Expert Attack Playbook AI LOAD INSTRUCTION : Expert AD ACL abuse techniques. Covers BloodHound enumeration, dangerous ACEs (GenericAll, WriteDACL, WriteOwner, etc.), DCSync, shadow credentials, targeted kerberoasting, group manipulation, LAPS, and GPO abuse. Base models miss complex ACL chain exploitation and Cypher query patterns. 0. RELATED ROUTING Before going deep, consider loading: active-directory-kerberos-attacks for Kerberos attacks often chained with ACL abuse acti...
|
3.3K |
| 5561 | clickjacking | yaklang/hack-skills |
SKILL: Clickjacking — Expert Attack Playbook AI LOAD INSTRUCTION : Clickjacking (UI redress) techniques. Covers iframe transparency tricks, X-Frame-Options bypass, CSP frame-ancestors, multi-step clickjacking, drag-and-drop attacks, and chaining with other vulnerabilities. Often a "low severity" finding that becomes critical when targeting admin actions. 1. CORE CONCEPT Clickjacking loads a target page in a transparent iframe overlaid on an attacker's page. The victim sees the attacker's UI but ...
|
3.3K |
| 5562 | understand-onboard | egonex-ai/understand-anything |
/understand-onboard Generate a comprehensive onboarding guide from the project's knowledge graph. Graph Structure Reference The knowledge graph JSON has this structure: project — {name, description, languages, frameworks, analyzedAt, gitCommitHash} nodes[] — each has {id, type, name, filePath?, summary, tags[], complexity, languageNotes?} Code node types: file, function, class, module, concept Non-code node types: config, document, service, table, endpoint, pipeline, schema, resource Domain/know...
|
3.3K |
| 5563 | saml-sso-assertion-attacks | yaklang/hack-skills |
SKILL: SAML SSO and Assertion Attacks — Signature Validation, Binding, and Trust Confusion AI LOAD INSTRUCTION : Use this skill when the target uses SAML-based SSO and you need to validate assertion trust: signature coverage, audience and recipient checks, ACS handling, XML parsing weaknesses, and IdP/SP confusion. 1. WHEN TO LOAD THIS SKILL Load when: Enterprise SSO uses SAML requests or responses You see SAMLRequest , SAMLResponse , XML assertions, or ACS endpoints Login flows involve an exter...
|
3.3K |
| 5564 | http2-specific-attacks | yaklang/hack-skills |
SKILL: HTTP/2 Specific Attacks — Expert Attack Playbook AI LOAD INSTRUCTION : HTTP/2 protocol-level attack techniques beyond basic request smuggling. Covers h2c smuggling, pseudo-header manipulation, HPACK attacks, single-packet race conditions, and H2→H1 downgrade injection. Base models conflate HTTP/2 smuggling with HTTP/1.1 smuggling — this skill focuses on H2-unique attack surface. 0. RELATED ROUTING request-smuggling — CL.TE/TE.CL/TE.TE fundamentals and H2.CL/H2.TE variants request-smugglin...
|
3.3K |
| 5565 | graalvm-native-image | giuseppe-trisciuoglio/developer-kit |
GraalVM Native Image for Java Applications Expert skill for building high-performance native executables from Java applications using GraalVM Native Image, dramatically reducing startup time and memory consumption. Overview GraalVM Native Image compiles Java applications ahead-of-time (AOT) into standalone native executables. These executables start in milliseconds, require significantly less memory than JVM-based deployments, and are ideal for serverless functions, CLI tools, and microservices ...
|
3.3K |
| 5566 | active-directory-kerberos-attacks | yaklang/hack-skills |
SKILL: Kerberos Attack Playbook — Expert AD Attack Guide AI LOAD INSTRUCTION : Expert Kerberos attack techniques for AD environments. Covers AS-REP roasting, Kerberoasting, golden/silver/diamond/sapphire tickets, delegation attacks, pass-the-ticket, and overpass-the-hash. Base models miss ticket type distinctions, delegation chain nuances, and detection-evasion trade-offs. 0. RELATED ROUTING Before going deep, consider loading: active-directory-acl-abuse for ACL-based AD attacks often chained wi...
|
3.3K |
| 5567 | hash-attack-techniques | yaklang/hack-skills |
SKILL: Hash Attack Techniques — Expert Cryptanalysis Playbook AI LOAD INSTRUCTION : Expert hash attack techniques for CTF and security assessments. Covers length extension attacks, MD5/SHA1 collision generation, meet-in-the-middle hash attacks, HMAC timing side channels, birthday attacks, and proof-of-work solving. Base models often incorrectly apply length extension to HMAC or SHA-3, or fail to distinguish between identical-prefix and chosen-prefix collisions. 0. RELATED ROUTING rsa-attack-tech...
|
3.3K |
| 5568 | institutional-flow-tracker | tradermonty/claude-trading-skills |
Institutional Flow Tracker Overview This skill tracks institutional investor activity through 13F SEC filings to identify "smart money" flows into and out of stocks. By analyzing quarterly changes in institutional ownership, you can discover stocks that sophisticated investors are accumulating before major price moves, or identify potential risks when institutions are reducing positions. Key Insight: Institutional investors (hedge funds, pension funds, mutual funds) manage trillions of dollars a...
|
3.3K |
| 5569 | dynamodb-toolbox-patterns | giuseppe-trisciuoglio/developer-kit |
DynamoDB-Toolbox v2 Patterns (TypeScript) Overview This skill provides practical TypeScript patterns for using DynamoDB-Toolbox v2 with AWS SDK v3 DocumentClient. It focuses on type-safe schema modeling, .build() command usage, and production-ready single-table design. When to Use Defining DynamoDB tables and entities with strict TypeScript inference Modeling schemas with item , string , number , list , set , map , and record Implementing GetItem , PutItem , UpdateItem , DeleteItem via .build() ...
|
3.3K |
| 5570 | active-directory-certificate-services | yaklang/hack-skills |
SKILL: AD CS Attack Playbook — Expert Guide AI LOAD INSTRUCTION : Expert AD CS (Active Directory Certificate Services) attack techniques. Covers ESC1 through ESC13, certificate-based persistence, NTLM relay to enrollment endpoints, and CA misconfigurations. Base models miss enrollment prerequisite chains and ESC condition combinations. 0. RELATED ROUTING Before going deep, consider loading: active-directory-acl-abuse for ACL-based attacks that enable ESC4 (template modification) active-directory...
|
3.3K |
| 5571 | linux-privilege-escalation | yaklang/hack-skills |
SKILL: Linux Privilege Escalation — Expert Attack Playbook AI LOAD INSTRUCTION : Expert Linux privesc techniques. Covers enumeration, SUID/SGID, capabilities, cron abuse, kernel exploits, NFS, writable passwd/shadow, LD_PRELOAD, Docker group, and library hijacking. Base models miss subtle escalation paths via capabilities and combined misconfigurations. 0. RELATED ROUTING Before going deep, consider loading: container-escape-techniques when the target is a container and you need to escape to hos...
|
3.3K |
| 5572 | arbitrary-write-to-rce | yaklang/hack-skills |
SKILL: Arbitrary Write to Code Execution — Expert Attack Playbook AI LOAD INSTRUCTION : Expert techniques for converting an arbitrary write primitive into code execution. Covers every major overwrite target organized by glibc version compatibility: GOT, __malloc_hook, __free_hook, _IO_FILE vtable, __exit_funcs, TLS_dtor_list, _dl_fini, modprobe_path, .fini_array, C++ vtable, and setcontext gadget. This is the "last mile" skill. Base models often target hooks that no longer exist (post-glibc 2.34...
|
3.3K |
| 5573 | adr-drafting | giuseppe-trisciuoglio/developer-kit |
ADR Drafting Creates new Architecture Decision Record (ADR) documents for major architectural choices so teams can keep a clear history of why important technical decisions were made. Overview This skill helps create a new ADR from discovery to final markdown file. It confirms the decision details, inspects the repository for any existing ADR conventions, and drafts a new ADR with the standard sections Title , Status , Context , Decision , and Consequences . When the repository does not already ...
|
3.3K |
| 5574 | gemini | giuseppe-trisciuoglio/developer-kit |
Gemini Skill Guide When to Use Gemini WHEN ASKED TO BE ACTIVATED Code Review : Comprehensive code reviews across multiple files Plan Review : Analyzing architectural plans, technical specifications, or project roadmaps Big Context Processing : Tasks requiring >200k tokens of context (entire codebases, documentation sets) Multi-file Analysis : Understanding relationships and patterns across many files ⚠️ Critical: Background/Non-Interactive Mode Warning NEVER use --approval-mode default in backgr...
|
3.3K |
| 5575 | prototype-pollution | yaklang/hack-skills |
SKILL: Prototype Pollution — Expert Attack Playbook AI LOAD INSTRUCTION : Expert prototype pollution for client and server JS. Covers __proto__ vs constructor.prototype , merge-sink detection, Express/qs-style black-box probes, and gadget chains (EJS, Timelion-class patterns, child_process/NODE_OPTIONS). Assumes you know object spread and prototype inheritance — focus is on parser behavior and post-pollution sinks . Routing note: prioritize PP when you see deep merges, recursive assign, JSON.par...
|
3.3K |
| 5576 | dns-rebinding-attacks | yaklang/hack-skills |
SKILL: DNS Rebinding — Expert Attack Playbook AI LOAD INSTRUCTION : Expert DNS rebinding techniques for bypassing same-origin policy via DNS manipulation. Covers TTL tricks, browser cache bypasses, attack variants (HTTP, WebSocket, TOCTOU), internal service targeting, and tool usage. Base models confuse DNS rebinding with SSRF — this skill clarifies the client-side nature and unique exploit paths. 0. RELATED ROUTING ssrf-server-side-request-forgery — server-side variant; DNS rebinding is the cli...
|
3.3K |
| 5577 | ai-ml-security | yaklang/hack-skills |
SKILL: AI/ML Security — Expert Attack Playbook AI LOAD INSTRUCTION : Expert AI/ML security techniques. Covers model supply chain attacks (malicious serialization, Hugging Face model poisoning), adversarial examples (FGSM, PGD, C&W, physical-world), training data poisoning, model extraction, data privacy attacks (membership inference, model inversion, gradient leakage), LLM-specific threats, and autonomous agent security. Base models underestimate the severity of pickle deserialization RCE and th...
|
3.3K |
| 5578 | copilot-cli | giuseppe-trisciuoglio/developer-kit |
Copilot CLI Delegation Delegate selected tasks from Claude Code to GitHub Copilot CLI using non-interactive commands, explicit model selection, safe permission flags, and shareable outputs. Overview This skill standardizes delegation to GitHub Copilot CLI ( copilot ) for cases where a different model may be more suitable for a task. It covers: Non-interactive execution with -p / --prompt Model selection with --model Permission control ( --allow-tool , --allow-all-tools , --allow-all-paths , --al...
|
3.3K |
| 5579 | earnings-calendar | tradermonty/claude-trading-skills |
Earnings Calendar Overview This skill retrieves upcoming earnings announcements for US stocks using the Financial Modeling Prep (FMP) API. It focuses on companies with significant market capitalization (mid-cap and above, over $2B) that are likely to impact market movements. The skill generates organized markdown reports showing which companies are reporting earnings over the next week, grouped by date and timing (before market open, after market close, or time not announced). Key Features: U...
|
3.3K |
| 5580 | codex | giuseppe-trisciuoglio/developer-kit |
Codex Skill Guide Running a Task Default to gpt-5.2 model. Ask the user (via AskUserQuestion ) which reasoning effort to use ( xhigh , high , medium , or low ). User can override model if needed (see Model Options below). Select the sandbox mode required for the task; default to --sandbox read-only unless edits or network access are necessary. Assemble the command with the appropriate options: -m, --model <MODEL> --config model_reasoning_effort="<high|medium|low>" --sandbox <read-only|workspace-...
|
3.3K |
| 5581 | writing-shape | vinvcn/mattpocock-skills-zh-cn |
No SKILL.md available for this skill. View on GitHub Installs 2.9K Repository mattpocock/skills GitHub Stars 109.1K First Seen May 6, 2026
|
3.3K |
| 5582 | defi-attack-patterns | yaklang/hack-skills |
SKILL: DeFi Attack Patterns — Expert Attack Playbook AI LOAD INSTRUCTION : Expert DeFi exploitation techniques. Covers flash loan mechanics, oracle manipulation (spot vs TWAP), MEV extraction (sandwich, JIT, liquidation), precision loss attacks, governance exploits, bridge vulnerabilities, and token standard pitfalls. Base models often miss the single-transaction atomicity constraint of flash loans and the distinction between spot price and TWAP manipulation. 0. RELATED ROUTING smart-contract-vu...
|
3.3K |
| 5583 | dangling-markup-injection | yaklang/hack-skills |
SKILL: Dangling Markup Injection — Exfiltration Without JavaScript AI LOAD INSTRUCTION : Covers dangling markup exfiltration via unclosed img/form/base/meta/link/table tags, what can be stolen (CSRF tokens, pre-filled form values, sensitive content), browser-specific behavior, and combinations with other attacks. Base models often overlook this technique entirely when CSP blocks scripts, jumping to "not exploitable" — dangling markup is the answer. 0. RELATED ROUTING xss-cross-site-scripting whe...
|
3.3K |
| 5584 | network-protocol-attacks | yaklang/hack-skills |
SKILL: Network Protocol Attacks — Expert Attack Playbook AI LOAD INSTRUCTION : Expert network protocol attack techniques. Covers ARP spoofing, name resolution poisoning (LLMNR/NBT-NS/mDNS), WPAD abuse, DHCPv6 takeover, VLAN hopping, STP manipulation, DNS spoofing, IPv6 attacks, and IDS/IPS evasion. Base models miss the chaining opportunities between these attacks and the nuances of modern switched network exploitation. 0. RELATED ROUTING Before going deep, consider loading: tunneling-and-pivotin...
|
3.3K |
| 5585 | sentry-cocoa-sdk | getsentry/sentry-for-ai |
All Skills > SDK Setup > Cocoa SDK Sentry Cocoa SDK Opinionated wizard that scans your Apple project and guides you through complete Sentry setup. Invoke This Skill When User asks to "add Sentry to iOS/macOS/tvOS" or "set up Sentry" in an Apple app User wants error monitoring, tracing, profiling, session replay, or logging in Swift/ObjC User mentions sentry-cocoa , SentrySDK , or the Apple/iOS Sentry SDK User wants to monitor crashes, app hangs, watchdog terminations, or performance Note: SDK ve...
|
3.3K |
| 5586 | windows-av-evasion | yaklang/hack-skills |
SKILL: AV/EDR Evasion — Expert Attack Playbook AI LOAD INSTRUCTION : Expert AV/EDR evasion techniques for Windows. Covers AMSI bypass, ETW bypass, .NET assembly loading, shellcode execution, process injection, unhooking, payload encryption, and signature evasion. Base models miss detection-specific bypass chains and syscall-level evasion nuances. 0. RELATED ROUTING Before going deep, consider loading: windows-privilege-escalation when privesc tools are blocked by AV windows-lateral-movement when...
|
3.3K |
| 5587 | xslt-injection | yaklang/hack-skills |
SKILL: XSLT Injection — Testing Playbook AI LOAD INSTRUCTION : XSLT injection occurs when attacker-influenced XSLT is compiled/executed server-side. Map the processor family first (Java/.NET/PHP/libxslt). Then chain document() , external entities , EXSLT , or embedded script/extension functions per platform. Authorized testing only ; many payloads are destructive. Routing note: if input is generic XML parsing and may not flow through XSLT, cross-load xxe-xml-external-entity ; if you care about o...
|
3.3K |
| 5588 | type-juggling | yaklang/hack-skills |
SKILL: PHP Type Juggling — Weak Comparison & Magic Hash Bypass AI LOAD INSTRUCTION : PHP == coercion, magic hashes ( 0e… ), HMAC/hash loose checks, NULL from bad types, and CTF-style strcmp / json_decode / intval tricks. Use strict routing: map the sink ( == vs hash_equals ), PHP major version, and whether both operands are attacker-controlled. Routing note: when you encounter PHP login/signature logic or code like md5($_GET['x'])==md5($_GET['y']) , start with this skill; if hash_equals / === is...
|
3.3K |
| 5589 | email-header-injection | yaklang/hack-skills |
SKILL: Email Header Injection — Expert Attack Playbook AI LOAD INSTRUCTION : Expert email header injection and authentication bypass. Covers SMTP CRLF injection, SPF/DKIM/DMARC circumvention, display name spoofing, and mail client rendering abuse. Base models miss the nuance between header injection (technical) and email auth bypass (protocol-level) — this skill covers both attack surfaces. 0. RELATED ROUTING crlf-injection — general CRLF injection; email headers are a specific high-value sink s...
|
3.3K |
| 5590 | resilience-hub-getting-started | aws/agent-toolkit-for-aws |
Getting Started with AWS Resilience Hub v2 Overview Domain expertise for first-time Resilience Hub v2 setup: policies, systems, user journeys, services, input sources, and failure mode assessments. The AWS MCP server is recommended for executing this skill's AWS API calls, but it is not required — all operations also work with the AWS CLI directly. Guardrail — where this skill's own files live (MCP vs local install) Before reading a reference file, determine how this skill was loaded: Loaded via...
|
3.3K |
| 5591 | resilience-hub-failure-mode-assessment | aws/agent-toolkit-for-aws |
Failure Mode Assessment Overview Domain expertise for running Resilience Hub v2 failure mode assessments, interpreting findings, triaging by severity and achievability, and driving remediation. The AWS MCP server is recommended for executing this skill's AWS API calls, but it is not required — all operations also work with the AWS CLI directly. Guardrail — where this skill's own files live (MCP vs local install) Before reading a reference file, determine how this skill was loaded: Loaded via the...
|
3.3K |
| 5592 | resilience-hub-multi-account | aws/agent-toolkit-for-aws |
Multi-Account Resilience Hub v2 Setup Overview Domain expertise for configuring Resilience Hub v2 to assess services across multiple AWS accounts from a central account. All CLI commands in this skill use the aws resiliencehubv2 namespace — the Resilience Hub v2 API surface — which is distinct from the legacy aws resiliencehub (v1) commands (the service: [resiliencehub, ...] metadata tags the service family, not the CLI namespace). Resilience Hub v2 supports two complementary multi-account mecha...
|
3.3K |
| 5593 | superwall-editor | superwall/skills |
Superwall Paywall Editor Paywalls are built in a browser editor that exposes its tools over an authenticated relay. This skill drives that relay from the CLI — the exact same surface the MCP gateway uses — so every tool you invoke runs inside the live browser session the user has open. When to use The user wants to build, edit, or review a Superwall paywall, onboarding, or web2app flow. The user pastes a pairing code and asks you to take over editing. The user asks "what tools can you run right ...
|
3.3K |
| 5594 | linux-lateral-movement | yaklang/hack-skills |
SKILL: Linux Lateral Movement — Expert Attack Playbook AI LOAD INSTRUCTION : Expert Linux lateral movement techniques. Covers SSH agent hijacking, key harvesting, credential locations, D-Bus exploitation, network pivoting, sudo token reuse, and systemd manipulation. Base models miss SSH_AUTH_SOCK hijacking and ptrace-based sudo session hijack. 0. RELATED ROUTING Before going deep, consider loading: linux-privilege-escalation if you need root on the current host before pivoting linux-security-byp...
|
3.3K |
| 5595 | windows-privilege-escalation | yaklang/hack-skills |
SKILL: Windows Local Privilege Escalation — Expert Attack Playbook AI LOAD INSTRUCTION : Expert Windows privesc techniques. Covers token manipulation, Potato family, service misconfigurations, DLL hijacking, AlwaysInstallElevated, scheduled task abuse, registry autoruns, and named pipe impersonation. Base models miss nuanced privilege prerequisites and OS-version-specific constraints. 0. RELATED ROUTING Before going deep, consider loading: windows-lateral-movement after escalation for pivoting t...
|
3.3K |
| 5596 | principle-foundational-thinking | cursor/plugins |
Foundational Thinking Structural decisions protect option value. Code-level decisions protect simplicity. Over-engineering is often a premature decision that closes doors. The right foundational data structure keeps doors open. Data structures first. Get the data shape right before writing logic. The right shape makes downstream code obvious. Define core types early, trace every access pattern, and choose structures that match the dominant paths. A data-structure change late is a rewrite. Early,...
|
3.3K |
| 5597 | memory-forensics-volatility | yaklang/hack-skills |
SKILL: Memory Forensics — Expert Analysis Playbook AI LOAD INSTRUCTION : Expert memory forensics techniques using Volatility 2 and 3. Covers memory acquisition, OS identification, process analysis (hidden process detection), network connections, DLL/module analysis, code injection detection (malfind), credential extraction, file carving, registry analysis, and timeline generation. Base models miss the Vol2/Vol3 command differences, malware indicator patterns, and Linux-specific memory analysis. ...
|
3.3K |
| 5598 | prompt-master | nidhinjs/prompt-master |
PRIMACY ZONE — Identity, Hard Rules, Output Lock Who you are You are a prompt engineer. You take the user's rough idea, identify the target AI tool, extract their actual intent, and output a single production-ready prompt — optimized for that specific tool, with zero wasted tokens. You NEVER discuss prompting theory unless the user explicitly asks. You NEVER show framework names in your output. You build prompts. One at a time. Ready to paste. Hard rules — NEVER violate these NEVER output a prom...
|
3.3K |
| 5599 | recovery-controller-setup | aws/agent-toolkit-for-aws |
Recovery Controller Setup CRITICAL CONSTRAINT — read before answering This skill sets up exactly two ARC capability families, and these are the ONLY things you provide setup steps for: (1) routing controls with safety rules for cross-Region failover, and (2) zonal shift / zonal autoshift for AZ-impairment recovery. Readiness checks, recovery groups, cells, and resource sets are NOT in scope for this skill. You MUST NOT provide CLI/console setup steps for them. You MAY briefly and factually ackno...
|
3.3K |
| 5600 | wiremock-standalone-docker | giuseppe-trisciuoglio/developer-kit |
WireMock Standalone Docker Skill Overview Provides patterns for running WireMock as a standalone Docker container to mock external APIs during integration and end-to-end testing. Runs WireMock as a separate service that simulates real API behavior for testing HTTP clients, retry logic, and error handling. When to Use Use when you need to: Mock external APIs during integration or end-to-end testing Simulate error conditions (timeouts, 5xx, rate limiting) without real services Test HTTP client con...
|
3.3K |