███████╗██╗ ██╗██╗██╗ ██╗ ██████╗ █████╗ ███╗ ██╗██╗ ██╗
██╔════╝██║ ██╔╝██║██║ ██║ ██╔══██╗██╔══██╗████╗ ██║██║ ██╔╝
███████╗█████╔╝ ██║██║ ██║ ██████╔╝███████║██╔██╗ ██║█████╔╝
╚════██║██╔═██╗ ██║██║ ██║ ██╔══██╗██╔══██║██║╚██╗██║██╔═██╗
███████║██║ ██╗██║███████╗███████╗ ██║ ██║██║ ██║██║ ╚████║██║ ██╗
╚══════╝╚═╝ ╚═╝╚═╝╚══════╝╚══════╝ ╚═╝ ╚═╝╚═╝ ╚═╝╚═╝ ╚═══╝╚═╝ ╚═╝
Agent Skills 排行榜 · 关键词 + 语义搜索
| # | Skill | 仓库 | 描述 | 安装量 |
|---|---|---|---|---|
| 6351 | go-data-structures | cxuu/golang-skills |
Go Data Structures Source: Effective Go This skill covers Go's built-in data structures and allocation primitives. Allocation: new vs make Go has two allocation primitives: new and make. They do different things. new new(T) allocates zeroed storage for a new item of type T and returns *T: p := new(SyncedBuffer) // type *SyncedBuffer, zeroed var v SyncedBuffer // type SyncedBuffer, zeroed Zero-value design: Design data structures so the zero value is useful without further initial...
|
565 |
| 6352 | unbrowse | unbrowse-ai/unbrowse |
Unbrowse — Drop-in Browser Replacement for Agents Browse once, cache the APIs, reuse them instantly. First call discovers and learns the site's APIs (~20-80s). Every subsequent call uses cached skills (<200ms for server-fetch, ~2s for sites requiring browser execution). IMPORTANT: Always use the CLI ( unbrowse , or npx unbrowse when the CLI is not globally installed). NEVER pipe output to node -e , python -c , or jq — this causes shell escaping failures. Use --path , --extract , and --limit flag...
|
564 |
| 6353 | brand-strategist | borghei/claude-skills |
Brand Strategist Expert-level brand strategy for market differentiation. Core Competencies Brand positioning Brand identity development Brand architecture Messaging frameworks Visual identity systems Brand governance Competitive differentiation Brand measurement Brand Strategy Framework Brand Pyramid ┌─────────────┐ │ PURPOSE │ Why we exist │ │ ┌───┴─────────────┴───┐ │ VALUES ...
|
564 |
| 6354 | release | boshu2/agentops |
Release Workflow This skill provides a systematic workflow for creating and publishing releases for the linear-cli project. It handles changelog management, version bumping, testing, and tagging. When to Use Use this skill when preparing to release a new version of linear-cli. The workflow ensures all changes are documented, tests pass, and versions are properly tagged before publishing. Prerequisites Ensure the following tools are available: changelog skill for changelog management svbump for v...
|
564 |
| 6355 | forge | boshu2/agentops |
Forge Skill Typically runs automatically via SessionEnd hook. Extract knowledge from session transcripts. How It Works The SessionEnd hook runs: ao forge transcript --last-session --queue --quiet This queues the session for knowledge extraction. Flags Flag Default Description --promote off Process pending extractions from .agents/knowledge/pending/ and promote to .agents/learnings/ . Absorbs the former extract skill. Promote Mode Given /forge --promote : Promote Step 1: Find Pending Files ls -lt...
|
564 |
| 6356 | inject | boshu2/agentops |
DEPRECATED (removal target: v3.0.0) — Use ao lookup --query "topic" for on-demand learnings retrieval, or see .agents/AGENTS.md for knowledge navigation. This skill and the ao inject CLI command still work but are no longer called from hooks or other skills. Inject Skill On-demand knowledge retrieval. Not run automatically at startup (since ag-8km). Inject relevant prior knowledge into the current session. How It Works In the default manual startup mode, MEMORY.md is auto-loaded by Claude Code a...
|
564 |
| 6357 | document-illustrator | op7418/document-illustrator-skill |
Document Illustrator Skill 基于 AI 智能分析的文档配图生成工具。无需依赖特定格式,自动理解内容并生成专业配图。 🎯 核心特点 ✨ AI 智能归纳:自动理解文档内容,智能提取核心主题 🎨 格式无关:支持任何格式的文档(Markdown、纯文本、PDF 等) 📐 灵活比例:支持 16:9(横屏)和 3:4(竖屏) 🖼️ 封面图可选:可生成概括全文的封面图 🎭 三种风格:渐变玻璃卡片、票据风格、矢量插画 🚀 使用方法 直接告诉 Claude 帮我为这个文档生成配图:/path/to/document.md 或者: 我想为这篇文章生成一些配图 📝 完整工作流程 第 1 步:Claude 读取和理解文档 当你请求生成配图时,Claude 会: 使用 Read 工具读取完整文档 AI 分析理解文档内容和结构 识别核心主题和要点 无需担心文档格式: ✅ 标准 Markdown(、) ✅ 分隔线格式(======、------) ✅ 纯文本段落 ✅ 任何其他格式 第 2 步:配置选项(3 个问题) Claude 会询问你的偏好: 问题 1:图片比例...
|
564 |
| 6358 | arize-ai-provider-integration | arize-ai/arize-skills |
Arize AI Integration Skill Concepts AI Integration = stored LLM provider credentials registered in Arize; used by evaluators to call a judge model and by other Arize features that need to invoke an LLM on your behalf Provider = the LLM service backing the integration (e.g., openAI , anthropic , awsBedrock ) Integration ID = a base64-encoded global identifier for an integration (e.g., TGxtSW50ZWdyYXRpb246MTI6YUJjRA== ); required for evaluator creation and other downstream operations Scoping = vis...
|
564 |
| 6359 | firebase-data-connect | firebase/skills |
Firebase Data Connect Firebase Data Connect is a relational database service using Cloud SQL for PostgreSQL with GraphQL schema, auto-generated queries/mutations, and type-safe SDKs. Project Structure dataconnect/ ├── dataconnect.yaml Service configuration ├── schema/ │ └── schema.gql Data model (types with @table) └── connector/ ├── connector.yaml Connector config + SDK generation ├── queries.gql Queries └── mutations.gql Mutations Development Workflow Follow thi...
|
564 |
| 6360 | deployer | uniswap/uniswap-ai |
CCA Deployment Deploy Continuous Clearing Auction (CCA) smart contracts using the ContinuousClearingAuctionFactory with CREATE2 for consistent addresses across chains. Runtime Compatibility: This skill uses AskUserQuestion for interactive prompts. If AskUserQuestion is not available in your runtime, collect the same parameters through natural language conversation instead. Instructions for Claude Code When the user invokes this skill, guide them through the CCA deployment process with appropriat...
|
564 |
| 6361 | topic-monitor | sundial-org/awesome-openclaw-skills |
Topic Monitor Monitor what matters. Get notified when it happens. Topic Monitor transforms your assistant from reactive to proactive by continuously monitoring topics you care about and intelligently alerting you only when something truly matters. Core Capabilities Topic Configuration - Define subjects with custom parameters Scheduled Monitoring - Automated searches at configurable intervals AI Importance Scoring - Smart filtering: immediate alert vs digest vs ignore Contextual Summaries - Not j...
|
563 |
| 6362 | homelab-network-readiness | affaan-m/everything-claude-code |
Homelab Network Readiness Use this skill before changing a home or small-lab network that mixes VLANs, Pi-hole or another local DNS resolver, firewall rules, and remote VPN access. This is a planning and review skill. Do not turn it into copy-paste router, firewall, or VPN configuration unless the target platform, current topology, rollback path, console access, and maintenance window are all known. When to Use Show more
|
563 |
| 6363 | init | mcollina/skills |
Initialize Playwright Project Set up a production-ready Playwright testing environment. Detect the framework, generate config, folder structure, example test, and CI workflow. Steps 1. Analyze the Project Use the Explore subagent to scan the project: Check package.json for framework (React, Next.js, Vue, Angular, Svelte) Check for tsconfig.json → use TypeScript; otherwise JavaScript Check if Playwright is already installed ( @playwright/test in dependencies) Check for existing test directories (...
|
563 |
| 6364 | bootstrap | mindrally/skills |
Bootstrap Development You are an expert in Bootstrap for building responsive, maintainable web interfaces. Core Principles Write clear, concise, and technical responses with precise Bootstrap examples Utilize Bootstrap's components and utilities for responsive, maintainable development Prioritize clean coding practices and descriptive class naming Minimize custom CSS by leveraging built-in components Grid System & Layout Leverage Bootstrap's grid system for responsive layouts Use container, ro...
|
563 |
| 6365 | upload-insecure-files | yaklang/hack-skills |
SKILL: Upload Insecure Files — Validation Bypass, Storage Abuse, and Processing Chains AI LOAD INSTRUCTION : Expert file upload attack playbook. Use when the target accepts files, imports, avatars, media, documents, or archives and you need the full workflow: validation bypass, storage path abuse, post-upload access, parser exploitation, multi-tenant overwrite, and chaining into XSS, XXE, CMDi, traversal, or business logic impact. For web server parsing vulnerabilities, PUT method exploitation, ...
|
563 |
| 6366 | querying-data-lake | aws/agent-toolkit-for-aws |
Query Data Lake Execute SQL queries on Amazon Athena across default and federated catalogs (Glue, S3 Tables, Redshift) with workgroup selection, statement classification, and error recovery. Overview Executes and manages Athena SQL queries across default and federated catalogs. Selects a workgroup, resolves target assets (delegating fuzzy references to finding-data-lake-assets ), classifies statements for safety, and reports cost and data scanned. Use the AWS MCP server for sandboxed execution a...
|
563 |
| 6367 | go-defensive | cxuu/golang-skills |
Go Defensive Programming Patterns Verify Interface Compliance Source: Uber Go Style Guide Verify interface compliance at compile time using zero-value assertions. Bad type Handler struct{} func (h *Handler) ServeHTTP(w http.ResponseWriter, r *http.Request) { // ... } Good type Handler struct{} var _ http.Handler = (*Handler)(nil) func (h *Handler) ServeHTTP(w http.ResponseWriter, r *http.Request) { // ... } Use nil for pointer types, slices, maps; empty struct {} for value receiv...
|
563 |
| 6368 | feishu-cli-search | riba2534/feishu-cli |
飞书搜索 搜索飞书云文档、消息和应用。所有搜索命令 必须使用 User Access Token 。 执行流程 每次执行搜索前,按以下流程操作: 1. 检查 Token 状态 feishu-cli auth status -o json 根据返回结果判断: logged_in=false → 需要登录(步骤 2) access_token_valid=true + scope 包含所需权限 → 直接搜索(步骤 3) access_token_valid=false + refresh_token_valid=true → 无需操作,下次搜索时自动刷新 access_token_valid=false + refresh_token_valid=false → 需要重新登录(步骤 2) scope 缺少所需权限 → 需要重新登录并补充 scope(步骤 2) 2. 登录获取 Token(如需要) 使用两步式非交互登录, 始终使用最大 scope 范围 (覆盖搜索 + wiki + 日历 + 任务等全部功能): 步骤 A:生成授权 URL(最大 scope) feishu-cli aut...
|
563 |
| 6369 | nestjs-testing-expert | shipshitdev/library |
NestJS Testing Expert You build reliable Jest test suites for NestJS modules, services, and controllers. When to Use Writing unit or integration tests for NestJS Setting up TestModule, mocking providers, or database fakes Debugging flaky tests Testing Pyramid Unit tests for pure logic and services Integration tests for modules with real providers E2E tests for HTTP APIs Common Patterns Use Test.createTestingModule with explicit providers. Mock external services with jest.fn or test doubles. Fo...
|
562 |
| 6370 | academic-paper-review | bytedance/deer-flow |
Academic Paper Review Skill Overview This skill produces structured, peer-review-quality analyses of academic papers and research publications. It follows established academic review standards used by top-tier venues (NeurIPS, ICML, ACL, Nature, IEEE) to provide rigorous, constructive, and balanced assessments. The review covers summary, strengths, weaknesses, methodology assessment, contribution evaluation, literature positioning, and actionable recommendations — all grounded in evidence from t...
|
562 |
| 6371 | wechatpay-product-coupon | wechatpay-apiv3/wechatpay-skills |
微信支付商品券接入指引 能力概览 匹配券类型 — 用户描述业务场景、不确定用哪种券时,智能匹配对应的券类型(10种) 示例代码 — 用户需要接入代码时,检索对应的 API 请求示例代码(含签名),仅替换参数 业务知识速查 — 开发参数获取、参数校验、业务知识问答 接入质量评估 — 上线前检查签名验签、业务逻辑完整性和回调处理规范 接口排障 — 接口报错、回调异常、签名失败等问题的诊断与排查 接入模式 :使用任何能力前需先确认——品牌直连(品牌方自行接入,在品牌经营平台操作)或 服务商(服务商代品牌方接入,在商户平台操作)。 全局交互规范 ‼️ 以下规则适用于本技能所有能力、所有对话轮次,优先级高于各能力的局部规则。 所有问题必须得到用户明确回答后才能继续。 如果一次提出了多个问题,必须逐一检查每个问题是否都已获得用户的明确答复。对于未回答的问题,必须再次追问, 严禁对未回答的问题自行假设、推断或使用默认值 。 分步确认协议 (简单知识问答除外,需要帮用户排查、分析或执行操作时必须遵守): ① 明确需求 :先理解用户问题,给出初步判断或原因分析,不要一上来就堆参数清单。 ② 征得同意 :...
|
562 |
| 6372 | openspec-context-loading | forztf/open-skilled-sdd |
Discovers and loads project specifications, active changes, and requirements to provide context. Quick Start Context loading helps answer: - What specs exist in this project? - What changes are currently active? - What requirements are defined? - What capabilities does the system have? - Where is a specific feature specified? Basic pattern: Search → Read → Summarize Discovery Commands List All Specifications ``` Find all spec files find spec/specs -name "spec.md" -type f Find al...
|
562 |
| 6373 | pyautogui-automation | steelan9199/wechat-publisher |
PyAutoGUI 自动化操作 功能概览 功能类别 支持的操作 截图 全屏截图、区域截图、截图到剪贴板 鼠标控制 点击、双击、移动、相对移动、拖拽、滚动、按下/释放 颜色操作 获取像素颜色、查找颜色位置 键盘操作 输入文本、按键、组合键、快捷操作(复制/粘贴/全选等) 图像识别 在屏幕上查找图片位置、等待图片出现/消失 对话框 警告、确认、输入对话框 系统信息 屏幕分辨率、鼠标位置、窗口信息 工具 等待、暂停 快速开始 基本使用模式 python scripts/automation.py < action > [ 参数 .. . ] 所有操作返回 JSON 格式结果。 脚本位置 : scripts/automation.py 操作详解 截图 全屏截图(自动生成文件名) python scripts/automation.py screenshot 指定输出路径 python scripts/automation.py screenshot --output my_screenshot.png 区域截图 python scripts/automation.py screensho...
|
562 |
| 6374 | llm-security | semgrep/skills |
Comprehensive security rules for building secure LLM applications. Based on the OWASP Top 10 for Large Language Model Applications 2025 - the authoritative guide to LLM security risks. How It Works - When building or reviewing LLM applications, reference these security guidelines - Each rule includes vulnerable patterns and secure implementations - Rules cover the complete LLM application lifecycle: training, deployment, and inference Categories Critical Impact - LLM01: Prompt Injectio...
|
562 |
| 6375 | go-control-flow | cxuu/golang-skills |
Go Control Flow Source: Effective Go. Go's control structures are related to C but differ in important ways. Understanding these differences is essential for writing idiomatic Go code. Go has no do or while loop—only a generalized for. There are no parentheses around conditions, and bodies must always be brace-delimited. If Statements Basic Form Go's if requires braces and has no parentheses around the condition: if x > 0 { return y } If with Initialization if and switch accept an opt...
|
562 |
| 6376 | gws-licensing | googleworkspace/cli |
licensing (v1) PREREQUISITE: Read ../gws-shared/SKILL.md for auth, global flags, and security rules. If missing, run gws generate-skills to create it. gws licensing < resource > < method > [ flags ] API Resources licenseAssignments delete — Revoke a license. get — Get a specific user's license by product SKU. insert — Assign a license. listForProduct — List all users assigned licenses for a specific product SKU. listForProductAndSku — List all users assigned licenses for a specific product SKU. ...
|
561 |
| 6377 | zoom-mcp | anthropics/knowledge-work-plugins |
Zoom MCP Guidance for the bundled Zoom MCP connector in this Claude plugin. Prefer design-mcp-workflow or setup-zoom-mcp first, then route here for tool-surface details, auth expectations, and MCP-specific constraints. Zoom MCP Server This plugin bundles Zoom's hosted MCP server at mcp-us.zoom.us for AI-agent access to: semantic meeting search meeting-linked asset retrieval recording resource retrieval Zoom Docs are exposed through a separate bundled server: zoom-docs-mcp at mcp.zoom.us purpose-...
|
561 |
| 6378 | ratchet | boshu2/agentops |
Ratchet Skill Track progress through the RPI workflow with permanent gates. Note: /ratchet tracks and locks progress. It does not “run the loop” by itself—pair it with /crank (epic loop) or /swarm (Ralph loop) to actually execute work. The Brownian Ratchet Progress = Chaos × Filter → Ratchet Phase What Happens Chaos Multiple attempts (exploration, implementation) Filter Validation gates (tests, /vibe, review) Ratchet Lock progress permanently (merged, closed, stored) Key insight: Progress is per...
|
561 |
| 6379 | lbo-model | anthropics/financial-services-plugins |
TEMPLATE REQUIREMENT This skill uses templates for LBO models. Always check for an attached template file first. Before starting any LBO model: If a template file is attached/provided : Use that template's structure exactly - copy it and populate with the user's data If no template is attached : Ask the user: "Do you have a specific LBO template you'd like me to use? If not, I can use the standard template which includes Sources & Uses, Operating Model, Debt Schedule, and Returns Analysis." If u...
|
561 |
| 6380 | session-logger | charon-fan/agent-playbook |
A skill for automatically saving conversation history to persistent session log files. When This Skill Activates This skill activates when you: - Say "保存对话信息" or "保存对话" - Say "记录会话内容" or "保存session" - Say "save session" or "save conversation" - Ask to save the current conversation Session File Location All sessions are saved to: `sessions/YYYY-MM-DD-{topic}.md` What Gets Logged For each session, log: - Metadata Date and duration - Context/working directory - Main topic - Summ...
|
561 |
| 6381 | lossless-claw | martian-engineering/lossless-claw |
Lossless Claw Use this skill when the task is about operating, tuning, or debugging the lossless-claw OpenClaw plugin. Start here: Confirm whether the user needs configuration help, diagnostics, recall-tool guidance, or session-lifecycle guidance. If they need a quick health check, tell them to run /lossless ( /lcm is the shorter alias). If they suspect summary corruption or truncation, use /lossless doctor . If they want high-confidence junk/session cleanup guidance, use /lossless doctor clean ...
|
561 |
| 6382 | go-packages | cxuu/golang-skills |
Go Packages and Imports This skill covers package organization and import management following Google's and Uber's Go style guides. Package Organization Avoid Util Packages Advisory: This is a best practice recommendation. Package names should describe what the package provides. Avoid generic names like util, helper, common, or similar—they make code harder to read and cause import conflicts. // Good: Meaningful package names db := spannertest.NewDatabaseFromFile(...) _, err := f.Seek(0, io...
|
561 |
| 6383 | code-reviewer | sickn33/antigravity-awesome-skills |
Code Reviewer This skill guides the agent in conducting professional and thorough code reviews for both local development and remote Pull Requests. Workflow 1. Determine Review Target Remote PR : If the user provides a PR number or URL (e.g., "Review PR 123"), target that remote PR. Local Changes : If no specific PR is mentioned, or if the user asks to "review my changes", target the current local file system states (staged and unstaged changes). 2. Preparation For Remote PRs: Checkout : Use the...
|
561 |
| 6384 | notion-template-business | sickn33/antigravity-awesome-skills |
Notion Template Business Role: Template Business Architect You know templates are real businesses that can generate serious income. You've seen creators make six figures selling Notion templates. You understand it's not about the template - it's about the problem it solves. You build systems that turn templates into scalable digital products. Capabilities Notion template design Template pricing strategies Gumroad/Lemon Squeezy setup Template marketing Notion marketplace strategy Template supp...
|
561 |
| 6385 | xmind | mitscherlich/skills |
XMind 思维导图处理技能 此技能提供 XMind 文件( .xmind )的完整处理能力:解析、创建和更新。通过配套的 Python 工具脚本实现文件操作,将思维导图内容转换为 Markdown 格式作为会话级记忆,便于用户与模型持续交流和编辑。 工具脚本 本技能依赖 scripts/xmind_tool.py (相对于本技能目录),使用 Python 标准库(零第三方依赖)。执行方式: python skills/xmind/scripts/xmind_tool.py --session < session-id > < command > [ args .. . ] 会话管理 所有命令都需要 --session <id> 参数,用于隔离不同会话的记忆文件。 会话 ID 获取规则(按优先级): 从上下文中获取:如果当前对话上下文中已存在之前使用过的 session ID,直接复用 生成新 ID:如果上下文中没有可用的 session ID,在首次调用前生成一个 UUID v4 格式的字符串(例如 f47ac10b-58cc-4372-a567-0e02b2c3d479 ),并在后...
|
561 |
| 6386 | gws-install | jezweb/claude-skills |
Google Workspace CLI — Quick Install Install gws on an additional machine using OAuth credentials from a previous setup. Produces an authenticated CLI with all agent skills ready to use. Prerequisite : The user must have client_secret.json from a previous gws-setup (or from Google Cloud Console). If they don't have it, use the gws-setup skill instead. Workflow Step 1: Pre-flight Checks which gws && gws --version ls ~/.config/gws/client_secret.json gws auth status If already authenticated with th...
|
561 |
| 6387 | gget | affaan-m/everything-claude-code |
gget Use this skill when a task needs quick bioinformatics lookup across genomic reference databases with the gget CLI or Python package. When to Use Finding Ensembl IDs, gene metadata, transcript details, or sequences. Running quick BLAST or BLAT lookups without building a full local pipeline. Fetching reference genome links and annotations from Ensembl. Querying protein structure, pathway, cancer, expression, or disease-association modules through a single interface. Creating a reproducible fi...
|
560 |
| 6388 | error-handling | affaan-m/everything-claude-code |
Error Handling Patterns Consistent, robust error handling patterns for production applications. When to Activate Designing error types or exception hierarchies for a new module or service Adding retry logic or circuit breakers for unreliable external dependencies Reviewing API endpoints for missing error handling Implementing user-facing error messages and feedback Debugging cascading failures or silent error swallowing Core Principles Fail fast and loudly — surface errors at the boundary where ...
|
560 |
| 6389 | kernel-exploitation | yaklang/hack-skills |
SKILL: Linux Kernel Exploitation — Expert Attack Playbook AI LOAD INSTRUCTION : Expert kernel exploitation techniques. Covers environment setup (QEMU), vulnerability classes, privilege escalation targets, kernel ROP, ret2usr, stack pivoting, and cross-cache attacks. Distilled from ctf-wiki kernel-mode sections and real-world kernel CVEs. Base models often confuse user-mode and kernel-mode exploitation constraints, especially regarding SMEP/SMAP/KPTI. 0. RELATED ROUTING binary-protection-bypass —...
|
560 |
| 6390 | configuring-vpc-endpoints-for-private-aws-service-access | aws/agent-toolkit-for-aws |
Configuring VPC Endpoints for Private AWS Service Access Overview Domain expertise for configuring VPC endpoints to enable private access to AWS services without routing traffic through the internet. Covers both gateway endpoints (S3, DynamoDB) and interface endpoints (EC2, SSM, Secrets Manager, etc.) powered by AWS PrivateLink. Configure VPC endpoints To create and configure VPC endpoints for private AWS service access, follow the procedure exactly. See VPC endpoints configuration procedure . T...
|
560 |
| 6391 | deserialization-insecure | yaklang/hack-skills |
SKILL: Insecure Deserialization — Expert Attack Playbook AI LOAD INSTRUCTION : Expert deserialization techniques across Java, PHP, and Python. Covers gadget chain selection, traffic fingerprinting, tool usage (ysoserial, PHPGGC), Shiro/WebLogic/Commons Collections specifics, Phar deserialization, and Python pickle abuse. Base models often miss the distinction between finding the sink and finding a usable gadget chain. 0. RELATED ROUTING jndi-injection when deserialization leads to JNDI lookup (e...
|
560 |
| 6392 | http-host-header-attacks | yaklang/hack-skills |
SKILL: HTTP Host Header Attacks — Injection & Routing Abuse AI LOAD INSTRUCTION : Covers Host header injection for password reset poisoning, cache poisoning, SSRF via routing, and virtual host bypass. Includes bypass techniques for Host validation and framework-specific behaviors. Base models often miss the double-Host trick, absolute-URI override, and connection-state attacks. 0. RELATED ROUTING web-cache-deception when Host injection is combined with cache behavior ssrf-server-side-request-for...
|
560 |
| 6393 | roadmap | jezweb/claude-skills |
Roadmap Generate a comprehensive technical roadmap for building an entire application. Detailed enough that Claude Code can pick up any phase and execute it autonomously for hours. This is not a high-level strategy doc. It's a delivery blueprint — every phase has concrete tasks, every task is actionable, and the whole thing is ordered so you can build from phase 1 through to launch without backtracking. When to Use Starting a major new product (after deep-research, or from a product brief) Conve...
|
560 |
| 6394 | prd-writer | pmprompt/claude-plugin-product-management |
Domain Context This skill implements a proven product management framework. The approach combines best practices from industry leaders and is designed for practical application in day-to-day PM work. Input Requirements Context about your product, feature, or problem Relevant data, research, or constraints (recommended but optional) Clear articulation of what you're trying to achieve PRD Writer When to Use Starting a new feature or product initiative Need to document requirements for the engineer...
|
560 |
| 6395 | uk-business-english | jezweb/claude-skills |
UK Business English Professional and measured. Polite without being obsequious. Direct without being abrupt. Naturally British without being a caricature. Write like a competent professional who happens to be British -- not like a Dickens character, not like an American tech startup, and not like someone who just discovered the word "whilst". Spelling (EN-GB) Pattern British Not -our colour, favour, honour, behaviour color, favor -ise organise, realise, specialise, recognise organize, realize -r...
|
560 |
| 6396 | infsh-cli | inference-sh/skills |
No SKILL.md available for this skill. View on GitHub
|
559 |
| 6397 | safe-browser | browserbase/skills |
Safe Browser Build a local browser-agent demo where the generated runtime agent has exactly one browser capability: safe_browser . The tool owns the Playwright/CDP session, enables Fetch interception for all requests, and fails any request whose host is not allowlisted. This skill is a builder guide. The skill itself is not the runtime boundary; the generated Claude Agent SDK app is. When to Use The user asks for a browser agent that must stay on an allowlisted site. The user wants to demonstrat...
|
559 |
| 6398 | code-reviewer | charon-fan/agent-playbook |
Code Reviewer This skill guides the agent in conducting professional and thorough code reviews for both local development and remote Pull Requests. Workflow 1. Determine Review Target Remote PR : If the user provides a PR number or URL (e.g., "Review PR 123"), target that remote PR. Local Changes : If no specific PR is mentioned, or if the user asks to "review my changes", target the current local file system states (staged and unstaged changes). 2. Preparation For Remote PRs: Checkout : Use the...
|
559 |
| 6399 | open-multi-agent-orchestration | aradotso/trending-skills |
Open Multi-Agent Orchestration Skill by ara.so — Daily 2026 Skills collection. open-multi-agent is a TypeScript framework for building AI agent teams where agents with different roles, models, and tools collaborate on complex goals. The framework handles task dependency resolution (DAG scheduling), parallel execution, shared memory, and inter-agent communication — all in-process with no subprocess overhead. Installation npm install @jackchen_me/open-multi-agent or pnpm add @jackchen_me/open-mul...
|
559 |
| 6400 | youtube-thumbnail-design | inference-sh/skills |
YouTube Thumbnail Design Create high-CTR YouTube thumbnails with AI image generation via inference.sh CLI. Quick Start Requires inference.sh CLI ( belt ). Install instructions belt login Generate a thumbnail belt app run falai/flux-dev-lora --input '{ "prompt": "YouTube thumbnail style, close-up of a person with surprised excited expression looking at a glowing laptop screen, vibrant blue and orange color scheme, dramatic studio lighting, shallow depth of field, high contrast, cinematic", "widt...
|
558 |