███████╗██╗ ██╗██╗██╗ ██╗ ██████╗ █████╗ ███╗ ██╗██╗ ██╗
██╔════╝██║ ██╔╝██║██║ ██║ ██╔══██╗██╔══██╗████╗ ██║██║ ██╔╝
███████╗█████╔╝ ██║██║ ██║ ██████╔╝███████║██╔██╗ ██║█████╔╝
╚════██║██╔═██╗ ██║██║ ██║ ██╔══██╗██╔══██║██║╚██╗██║██╔═██╗
███████║██║ ██╗██║███████╗███████╗ ██║ ██║██║ ██║██║ ╚████║██║ ██╗
╚══════╝╚═╝ ╚═╝╚═╝╚══════╝╚══════╝ ╚═╝ ╚═╝╚═╝ ╚═╝╚═╝ ╚═══╝╚═╝ ╚═╝
Agent Skills 排行榜 · 关键词 + 语义搜索
| # | Skill | 仓库 | 描述 | 安装量 |
|---|---|---|---|---|
| 6651 | webgpu | cazala/webgpu-skill |
WebGPU Skill This skill helps any agent design, implement, and debug WebGPU applications and GPU compute pipelines. It is framework-agnostic and focuses on reusable WebGPU/WGSL patterns. What this skill covers WebGPU initialization, device setup, and surface configuration Compute pipelines, workgroup sizing, and storage buffer layout Render pipelines, render passes, and post-processing patterns GPU/CPU synchronization and safe readback strategies Performance and debugging practices Architectur...
|
530 |
| 6652 | ecommerce-platform-specialist | qodex-ai/ai-agent-skills |
Shopify Development Expert Purpose Provide comprehensive, accurate guidance for building on Shopify's platform based on 24+ official documentation files. Cover all aspects of app development, theme customization, API integration, checkout extensions, and e-commerce features. Documentation Coverage Full access to official Shopify documentation (when available): Location: docs/shopify/ Files: 25 markdown files Coverage: Complete API reference, guides, best practices, and implementation pattern...
|
530 |
| 6653 | salesforce-apex-quality | github/awesome-copilot |
Salesforce Apex Quality Guardrails Apply these checks to every Apex class, trigger, and test file you write or review. Step 1 — Governor Limit Safety Check Scan for these patterns before declaring any Apex file acceptable: SOQL and DML in Loops — Automatic Fail // ❌ NEVER — causes LimitException at scale for ( Account a : accounts ) { List < Contact > contacts = [ SELECT Id FROM Contact WHERE AccountId = :a . Id ] ; // SOQL in loop update a ; // DML in loop } // ✅ ALWAYS — collect, then query/up...
|
530 |
| 6654 | cloud-manage-project | elastic/agent-skills |
Manage Serverless Project Perform day-2 operations on Elastic Cloud Serverless projects using the Serverless REST API. Prerequisites and permissions Ensure EC_API_KEY is configured. If not, run cloud-setup skill first. Updating project settings requires Admin or Editor role on the target project. This skill does not perform a separate role pre-check. Attempt the requested operation and let the API enforce authorization. If the API returns an authorization error (for example, 403 Forbidden ), sto...
|
530 |
| 6655 | api-documenter | charon-fan/agent-playbook |
API Documenter Specialist in creating comprehensive API documentation using OpenAPI/Swagger specifications. When This Skill Activates Activates when you: Ask to document an API Create OpenAPI/Swagger specs Need API reference documentation Mention "API docs" OpenAPI Specification Structure openapi : 3.0.3 info : title : API Title version : 1.0.0 description : API description servers : - url : https : //example.com/api/v1 paths : /users : get : summary : List users operationId : listUsers tags : -...
|
530 |
| 6656 | setting-up-cloudwatch-alarm-notifications | aws/agent-toolkit-for-aws |
Setting Up CloudWatch Alarm Notifications Overview Domain expertise for configuring Amazon CloudWatch alarm notification channels using Amazon SNS topics and subscriptions. Covers creating encrypted SNS topics, setting up subscriptions for email, SMS, and webhook endpoints, configuring topic policies for CloudWatch access, and linking alarms to notification actions. Set up alarm notifications To configure notification channels for a CloudWatch alarm, follow the procedure exactly. See CloudWatch ...
|
530 |
| 6657 | windows-lateral-movement | yaklang/hack-skills |
SKILL: Windows Lateral Movement — Expert Attack Playbook AI LOAD INSTRUCTION : Expert Windows lateral movement techniques. Covers PsExec, WMI, WinRM, DCOM, SMB, RDP, SSH, pass-the-hash, overpass-the-hash, pass-the-ticket, and pivoting. Base models miss execution method fingerprints, OPSEC trade-offs, and credential type requirements per method. 0. RELATED ROUTING Before going deep, consider loading: windows-privilege-escalation after landing on a new host for local escalation windows-av-evasion ...
|
530 |
| 6658 | ads-plan | agricidaniel/claude-ads |
Strategic Paid Advertising Plan Process 1. Discovery Business type, products/services, target audience Current advertising status (active platforms, spend, performance) Goals: brand awareness, lead generation, e-commerce sales, app installs Budget range (monthly/quarterly) Timeline and urgency In-house team capacity vs agency needs 2. Competitive Analysis Identify top 3-5 competitors Analyze their ad presence across platforms (Google Ads Transparency, Meta Ad Library) Estimate competitor spend l...
|
530 |
| 6659 | brains-trust | jezweb/claude-skills |
Brains Trust Consult other leading AI models for a second opinion. Not limited to code — works for architecture, strategy, prompting, debugging, writing, or any question where a fresh perspective helps. Defaults (When User Just Says "Brains Trust") If the user triggers this skill without specifying what to consult about, apply these defaults: Pattern : Consensus (2 models from different providers) — it's called "brains trust", not "single opinion" Scope : Whatever Claude has been working on in t...
|
529 |
| 6660 | zoom-oauth | anthropics/knowledge-work-plugins |
Zoom OAuth Background reference for Zoom auth and token lifecycle behavior. Prefer setup-zoom-oauth first, then use this skill for the exact flow, scope, and error details. Zoom OAuth Authentication and authorization for Zoom APIs. 📖 Complete Documentation For comprehensive guides, production patterns, and troubleshooting, see Integrated Index section below . Quick navigation: 5-Minute Runbook - Preflight checks before deep debugging OAuth Flows - Which flow to use and how each works Token Lifec...
|
529 |
| 6661 | plan-zoom-integration | anthropics/knowledge-work-plugins |
/plan-zoom-integration If you see unfamiliar placeholders or need to check which tools are connected, see CONNECTORS.md . Create a practical build plan for a Zoom integration or app. Usage /plan-zoom-integration $ARGUMENTS Workflow Capture the target user flow and success criteria. Choose the correct Zoom surface and supporting services. Define auth requirements, scopes, and account assumptions. Break implementation into phases: prototype, core integration, reliability, and launch. Call out hard...
|
529 |
| 6662 | grow-sustainably | slavingia/skills |
You are a business advisor channeling the philosophy of The Minimalist Entrepreneur by Sahil Lavingia. Help the user grow their business sustainably without running out of money or energy. Core Principle Profitability is a superpower. It gives you infinite runway, clarity, and control. Spend less than you make. It sounds simple, but it's not easy. When you're profitable, you can take your time, make the right decisions, and move at your own pace — not someone else's. Don't Spend Money You Don't ...
|
529 |
| 6663 | home-assistant-automation-scripts | bradsjm/hassio-addons |
Home Assistant Automations & Scripts Workflow Determine whether the request is instance-specific or general syntax. Discover entities and services before drafting config. When decisions involve templates, helpers, automation modes, entity/device IDs, or refactoring existing config, follow home-assistant-best-practices and its references. Provide minimal, valid YAML/JSON or tool-driven changes. Validate templates and troubleshoot with traces and logs. Tooling map (ha-mcp) Discover entities: ha_ge...
|
529 |
| 6664 | api integration specialist | davila7/claude-code-templates |
API Integration Specialist Expert guidance for integrating external APIs into applications with production-ready patterns, security best practices, and comprehensive error handling. When to Use This Skill Use this skill when: Integrating third-party APIs (Stripe, Twilio, SendGrid, etc.) Building API client libraries or wrappers Implementing OAuth 2.0, API keys, or JWT authentication Setting up webhooks and event-driven integrations Handling rate limits, retries, and circuit breakers Transforming...
|
529 |
| 6665 | instagram-content-generation | eachlabs/skills |
Instagram Content Generation Generate engaging Instagram content using each::sense. This skill creates images and videos optimized for Instagram's various placements, formats, and visual best practices. Features Feed Posts : Square 1:1 images for maximum compatibility Stories & Reels : Vertical 9:16 content for immersive full-screen experiences Carousel Posts : Multiple cohesive images for storytelling Quote Graphics : Typography-focused content for engagement Product Showcases : E-commerce and ...
|
529 |
| 6666 | senior-prompt-engineer | alirezarezvani/claude-skills |
Senior Prompt Engineer World-class senior prompt engineer skill for production-grade AI/ML/Data systems. Quick Start Main Capabilities Core Tool 1 python scripts/prompt_optimizer.py --input data/ --output results/ Core Tool 2 python scripts/rag_evaluator.py --target project/ --analyze Core Tool 3 python scripts/agent_orchestrator.py --config config.yaml --deploy Core Expertise This skill covers world-class capabilities in: Advanced production patterns and architectures Scalable syste...
|
528 |
| 6667 | byok-custom-model | starchild-ai-agent/official-skills |
🔑 BYOK — Custom LLM Models Register a custom LLM endpoint to the model selector. Bypasses the platform proxy — the user supplies their own API key, the agent hits the vendor / aggregator directly (OpenRouter, DashScope, Anthropic native, self-hosted, etc.). This is a script-mode skill — no tools registered. Read this file, then call the exports from a bash block. See also config/context/references/model-onboarding.md — broader model selection / OAuth context chatgpt-codex-onboarding skill — for ...
|
528 |
| 6668 | huggingface-gradio | huggingface/skills |
Gradio Gradio is a Python library for building interactive web UIs and ML demos. This skill covers the core API, patterns, and examples. Guides Detailed guides on specific topics (read these when relevant): Quickstart The Interface Class Blocks and Event Listeners Controlling Layout More Blocks Features Custom CSS and JS Streaming Outputs Streaming Inputs Sharing Your App Custom HTML Components Getting Started with the Python Client Getting Started with the JS Client Core Patterns Interface (hig...
|
528 |
| 6669 | openspec-archiving | forztf/open-skilled-sdd |
Archives completed change proposals and merges their spec deltas into the living specification documentation. Quick Start Archiving involves two main operations: - Move change folder to archive with timestamp - Merge spec deltas into living specs (ADDED/MODIFIED/REMOVED operations) Critical rule: Verify all tasks are complete before archiving. Archiving signifies deployment and completion. Workflow Copy this checklist and track progress: ``` Archive Progress: - [ ] Step 1: Verify imple...
|
528 |
| 6670 | zapier-make-patterns | sickn33/antigravity-awesome-skills |
Zapier & Make Patterns You are a no-code automation architect who has built thousands of Zaps and Scenarios for businesses of all sizes. You've seen automations that save companies 40% of their time, and you've debugged disasters where bad data flowed through 12 connected apps. Your core insight: No-code is powerful but not unlimited. You know exactly when a workflow belongs in Zapier (simple, fast, maximum integrations), when it belongs in Make (complex branching, data transformation, budget)...
|
528 |
| 6671 | prompt-caching | sickn33/antigravity-awesome-skills |
Prompt Caching You're a caching specialist who has reduced LLM costs by 90% through strategic caching. You've implemented systems that cache at multiple levels: prompt prefixes, full responses, and semantic similarity matches. You understand that LLM caching is different from traditional caching—prompts have prefixes that can be cached, responses vary with temperature, and semantic similarity often matters more than exact match. Your core principles: Cache at the right level—prefix, response...
|
528 |
| 6672 | ai-agents-architect | davila7/claude-code-templates |
AI Agents Architect Role : AI Agent Systems Architect I build AI systems that can act autonomously while remaining controllable. I understand that agents fail in unexpected ways - I design for graceful degradation and clear failure modes. I balance autonomy with oversight, knowing when an agent should ask for help vs proceed independently. Capabilities Agent architecture design Tool and function calling Agent memory systems Planning and reasoning strategies Multi-agent orchestration Agent evalua...
|
528 |
| 6673 | camoufox-cli | bin-huang/camoufox-cli |
Anti-Detect Browser Automation with camoufox-cli What Makes This Different camoufox-cli is built on Camoufox (anti-detect Firefox) with C++-level fingerprint spoofing: navigator.webdriver = false Real browser plugins, randomized canvas/WebGL/audio fingerprints Real Firefox UA string -- passes bot detection on sites that block Chromium automation Use camoufox-cli instead of agent-browser when the target site has bot detection. Core Workflow Every browser automation follows this pattern: Navigate ...
|
527 |
| 6674 | wrap | camacho/ai-skills |
Wrap Session wrap-up: reflect, clean worktrees, prepare for /clear. 1. Reflect Invoke /reflect via the Skill tool. Wait for it to complete before proceeding. Do NOT inline reflect logic — invoke the skill. It handles MEMORY.md, Basic Memory vault, GitHub issues, plan finalization, and .last-reflect-ts . 2. Session Cleanup After reflect completes, clean up session worktrees: REPO_ROOT = " $( git rev-parse --show-toplevel ) " git -C " $REPO_ROOT " worktree list For each entry under .worktrees/ (ne...
|
527 |
| 6675 | mysql-patterns | affaan-m/everything-claude-code |
MySQL Patterns Use this skill when working on MySQL or MariaDB schema design, migrations, slow-query investigation, queue-style transactions, connection pools, or production database configuration. Prefer exact version checks before applying a feature-specific pattern because MySQL and MariaDB have diverged in several SQL details. Activation Designing MySQL or MariaDB tables, indexes, and constraints Reviewing migrations before they run on large production tables Debugging slow queries, lock wai...
|
527 |
| 6676 | webhook-integration | dodopayments/skills |
Dodo Payments Webhook Integration Reference: docs.dodopayments.com/developer-resources/webhooks Webhooks provide real-time notifications when payment events occur. Use them to automate workflows, update databases, send notifications, and keep your systems synchronized. Quick Setup 1. Configure Webhook in Dashboard Go to Dashboard → Developer → Webhooks Click "Create Webhook" Enter your endpoint URL Select events to subscribe to Copy the webhook secret 2. Environment Variables DODO_PAYMENTS_WEBHO...
|
527 |
| 6677 | ads-budget | agricidaniel/claude-ads |
Budget Allocation & Bidding Strategy Process Collect budget and performance data across all active platforms Read ads/references/budget-allocation.md for allocation framework Read ads/references/bidding-strategies.md for strategy decision trees Read ads/references/benchmarks.md for CPC/CPA benchmarks Read ads/references/scoring-system.md for health score algorithm Evaluate budget allocation, bidding strategy, and scaling readiness Generate recommendations with kill list and scale list Budget All...
|
527 |
| 6678 | animejs | freshtechbro/claudedesignskills |
Anime.js for HyperFrames HyperFrames can seek Anime.js instances through its animejs runtime adapter. The composition owns the animation objects; HyperFrames owns the clock. Contract Create animations or timelines synchronously during composition initialization. Set autoplay: false so Anime.js does not advance on its own clock. Register every returned animation or timeline on window.__hfAnime . Use finite durations and loop counts. Avoid callbacks that mutate DOM based on wall-clock time, networ...
|
527 |
| 6679 | babylonjs-engine | freshtechbro/claudedesignskills |
Babylon.js Engine Skill
|
527 |
| 6680 | tg-bot-binding | starchild-ai-agent/official-skills |
Telegram Bot Binding Guide When the user asks about Telegram Bot binding, setup, connection, verification, or any related topic, provide them with the following guide. Always respond in the user's language. Overview Starchild allows you to connect your own Telegram Bot so you can interact with your AI agent directly in Telegram. The binding process involves 3 main steps: Create a Bot on Telegram Add the Bot Token in Starchild Dashboard Verify ownership in Telegram Step-by-Step Binding Process St...
|
526 |
| 6681 | data-visualizer | daffy0208/ai-dev-standards |
Data Visualizer Skill I help you build beautiful, interactive data visualizations and dashboards. What I Do Chart Creation: Line charts, bar charts, pie charts Area charts, scatter plots, heatmaps Complex visualizations (Sankey, treemaps, network graphs) Dashboard Building: KPI cards and metrics Real-time data dashboards Interactive filters and drill-downs Responsive layouts Data Presentation: Data storytelling Color schemes and accessibility Animation and interactions Export capabilitie...
|
526 |
| 6682 | automate-github-issues | google-labs-code/jules-skills |
Automate GitHub Issues with Jules You are setting up a repository to automatically analyze open GitHub issues, plan implementation tasks, and dispatch parallel Jules coding agents to fix them. What You're Setting Up A 5-phase automated pipeline that runs via GitHub Actions (or locally): Analyze — Fetch open issues and format as structured markdown Plan — A Jules session performs deep code-level triage and produces self-contained task prompts Validate — Verify no two tasks modify the same file (p...
|
526 |
| 6683 | setup-api-key | vapiai/skills |
ElevenLabs API Key Setup Guide the user through obtaining and configuring an ElevenLabs API key. Workflow Step 1: Request the API key Tell the user: To set up ElevenLabs, open the API keys page: https://elevenlabs.io/app/settings/api-keys (Need an account? Create one at https://elevenlabs.io/app/sign-up first) If you don't have an API key yet: Click "Create key" Name it (or use the default) Set permission for your key. If you provide a key with "User" permission set to "Read" this skill will aut...
|
526 |
| 6684 | cicd-expert | martinholovsky/claude-skills-generator |
CI/CD Pipeline Expert 1. Overview You are an elite CI/CD pipeline engineer with deep expertise in: GitHub Actions: Workflows, reusable actions, matrix builds, caching strategies, self-hosted runners GitLab CI: Pipeline configuration, DAG pipelines, parent-child pipelines, dynamic child pipelines Jenkins: Declarative/scripted pipelines, shared libraries, distributed builds Security: SAST/DAST integration, secrets management, supply chain security, artifact signing Deployment Strategies: Blue/gr...
|
526 |
| 6685 | setup-zoom-oauth | anthropics/knowledge-work-plugins |
/setup-zoom-oauth Use this skill when auth is the blocker or when auth choices will shape the entire integration. Scope App type selection OAuth grant selection Scope planning Token exchange and refresh Auth debugging and environment assumptions Workflow Determine the app model and who is authorizing whom. Choose the correct grant flow. Identify minimum scopes for the user flow. Define token storage and refresh behavior. Route into the deepest relevant reference docs only after the above is clea...
|
526 |
| 6686 | choose-zoom-approach | anthropics/knowledge-work-plugins |
Choose Zoom Approach Pick the smallest correct Zoom surface for the job, then layer in only the supporting pieces that are actually required. Decision Framework Problem Type Primary Zoom Surface Deterministic backend automation, account management, reporting, scheduled jobs rest-api Event delivery to your backend webhooks or websockets Embed Zoom meetings into your app meeting-sdk Build a fully custom video experience video-sdk Build inside the Zoom client zoom-apps-sdk AI-agent tool workflows o...
|
526 |
| 6687 | videodb | video-db/skills |
VideoDB Skill Perception + memory + actions for video, live streams, and desktop sessions. When to use Desktop Perception Start/stop a desktop session capturing screen, mic, and system audio Stream live context and store episodic session memory Run real-time alerts/triggers on what's spoken and what's happening on screen Produce session summaries , a searchable timeline, and playable evidence links Video ingest + stream Ingest a file or URL and return a playable web stream link Transcode/normali...
|
526 |
| 6688 | db-seed | jezweb/claude-skills |
Database Seed Generator Generate seed scripts that populate databases with realistic, domain-appropriate sample data. Reads your schema and produces ready-to-run seed files. Workflow 1. Find the Schema Scan the project for schema definitions: Source Location pattern Drizzle schema src/db/schema.ts , src/schema/*.ts , db/schema.ts D1 migrations drizzle/*.sql , migrations/*.sql Raw SQL schema.sql , db/*.sql Prisma prisma/schema.prisma Read all schema files. Build a mental model of: Tables and thei...
|
526 |
| 6689 | prompt-library | sickn33/antigravity-awesome-skills |
📝 Prompt Library A comprehensive collection of battle-tested prompts inspired by awesome-chatgpt-prompts and community best practices. When to Use This Skill Use this skill when the user: Needs ready-to-use prompt templates Wants role-based prompts (act as X) Asks for prompt examples or inspiration Needs task-specific prompt patterns Wants to improve their prompting Prompt Categories 🎭 Role-Based Prompts Expert Developer Act as an expert software developer with 15+ years of experience. You s...
|
526 |
| 6690 | opencode-mirror | different-ai/openwork |
$ npx skills add https://github.com/different-ai/openwork --skill opencode-mirror<div
|
526 |
| 6691 | agent-browser | everyinc/compound-engineering-plugin |
Browser Automation with agent-browser The CLI uses Chrome/Chromium via CDP directly. Install via npm i -g agent-browser , brew install agent-browser , or cargo install agent-browser . Run agent-browser install to download Chrome. Core Workflow Every browser automation follows this pattern: Navigate : agent-browser open <url> Snapshot : agent-browser snapshot -i (get element refs like @e1 , @e2 ) Interact : Use refs to click, fill, select Re-snapshot : After navigation or DOM changes, get fresh r...
|
525 |
| 6692 | stock-sector-monitoring | zuoa/aj-skills |
Stock Sector Monitoring Skill 用于基于 Tushare 的 A 股市场监测,重点支持: 概念板块监测( sector ) 龙虎榜每日明细( lhb , top_list / doc_id=106) 将结果输出并保存为 Markdown 文件 When to Use 当用户出现以下意图时使用本 skill: “监控概念板块/行业热度/涨幅榜” “查询龙虎榜数据” “过滤 ST 股票后输出结果” “把监控结果保存成 markdown/md 文件” Prerequisites 在 skill 根目录执行: cd /Users/yujian/Code/py/aj-skills/skills/stock-sector-monitoring 依赖准备: python3 -m venv .venv source .venv/bin/activate python3 -m pip install -U pip python3 -m pip install tushare pandas Tushare token 约定从 ~/.aj-skills/.env 读取: ~/....
|
525 |
| 6693 | literature-review | affaan-m/everything-claude-code |
Literature Review Overview Conduct systematic, comprehensive literature reviews following rigorous academic methodology. Search multiple literature databases, synthesize findings thematically, verify all citations for accuracy, and generate professional output documents in markdown and PDF formats. This skill integrates with multiple scientific skills for database access (gget, bioservices, datacommons-client) and provides specialized tools for citation verification, result aggregation, and do...
|
525 |
| 6694 | ceo-advisor | alirezarezvani/claude-skills |
CEO Advisor Strategic frameworks and tools for chief executive leadership, organizational transformation, and stakeholder management. Keywords CEO, chief executive officer, executive leadership, strategic planning, board governance, investor relations, board meetings, board presentations, financial modeling, strategic decisions, organizational culture, company culture, leadership development, stakeholder management, executive strategy, crisis management, organizational transformation, investo...
|
525 |
| 6695 | earnings-preview | himself65/finance-skills |
Contains Shell Commands This skill contains shell command directives ( !`command` ) that may execute system commands. Review carefully before installing. Earnings Preview Skill Generates a pre-earnings briefing using Yahoo Finance data via yfinance . Pulls together upcoming earnings date, consensus estimates, historical accuracy, analyst sentiment, and key financial context — everything you need before an earnings call. Important : Data is for research and educational purposes only. Not financia...
|
525 |
| 6696 | pricing | slavingia/skills |
Pricing Strategy You are an expert in SaaS pricing and monetization strategy. Your goal is to help design pricing that captures value, drives growth, and aligns with customer willingness to pay. Before Starting Check for product marketing context first: If .agents/product-marketing.md exists (or .claude/product-marketing.md , or the legacy product-marketing-context.md filename, in older setups), read it before asking questions. Use that context and only ask for information not already covered or...
|
525 |
| 6697 | data-scientist | sickn33/antigravity-awesome-skills |
Use this skill when Working on data scientist tasks or workflows Needing guidance, best practices, or checklists for data scientist Do not use this skill when The task is unrelated to data scientist You need a different domain or tool outside this scope Instructions Clarify goals, constraints, and required inputs. Apply relevant best practices and validate outcomes. Provide actionable steps and verification. If detailed examples are required, open resources/implementation-playbook.md . You are a...
|
525 |
| 6698 | pptx | appautomaton/document-skills |
PPTX Skill Quick Reference Task Guide Read/analyze content python -m markitdown presentation.pptx Edit or create from template Read editing.md Create from scratch Read pptxgenjs.md Reading Content Text extraction python -m markitdown presentation.pptx Visual overview python scripts/thumbnail.py presentation.pptx Raw XML python scripts/office/unpack.py presentation.pptx unpacked/ Editing Workflow Read editing.md for full details. Analyze template with thumbnail.py Unpack → manipulate slides → ...
|
525 |
| 6699 | csp-bypass-advanced | yaklang/hack-skills |
SKILL: CSP Bypass — Advanced Techniques AI LOAD INSTRUCTION : Covers per-directive bypass techniques, nonce/hash abuse, trusted CDN exploitation, data exfiltration despite CSP, and framework-specific bypasses. Base models often suggest unsafe-inline bypass without checking if the CSP actually uses it, or miss the critical base-uri and object-src gaps. 0. RELATED ROUTING xss-cross-site-scripting for XSS vectors to deliver after CSP bypass dangling-markup-injection when CSP blocks scripts but HTML...
|
525 |
| 6700 | defi-attack-patterns | yaklang/hack-skills |
SKILL: DeFi Attack Patterns — Expert Attack Playbook AI LOAD INSTRUCTION : Expert DeFi exploitation techniques. Covers flash loan mechanics, oracle manipulation (spot vs TWAP), MEV extraction (sandwich, JIT, liquidation), precision loss attacks, governance exploits, bridge vulnerabilities, and token standard pitfalls. Base models often miss the single-transaction atomicity constraint of flash loans and the distinction between spot price and TWAP manipulation. 0. RELATED ROUTING smart-contract-vu...
|
525 |