███████╗██╗ ██╗██╗██╗ ██╗ ██████╗ █████╗ ███╗ ██╗██╗ ██╗
██╔════╝██║ ██╔╝██║██║ ██║ ██╔══██╗██╔══██╗████╗ ██║██║ ██╔╝
███████╗█████╔╝ ██║██║ ██║ ██████╔╝███████║██╔██╗ ██║█████╔╝
╚════██║██╔═██╗ ██║██║ ██║ ██╔══██╗██╔══██║██║╚██╗██║██╔═██╗
███████║██║ ██╗██║███████╗███████╗ ██║ ██║██║ ██║██║ ╚████║██║ ██╗
╚══════╝╚═╝ ╚═╝╚═╝╚══════╝╚══════╝ ╚═╝ ╚═╝╚═╝ ╚═╝╚═╝ ╚═══╝╚═╝ ╚═╝
Agent Skills 排行榜 · 关键词 + 语义搜索
| # | Skill | 仓库 | 描述 | 安装量 |
|---|---|---|---|---|
| 4101 | agent-platform-endpoint-management | google/skills |
Agent Platform Endpoint Management Overview This skill provides procedural knowledge for managing Agent Platform Endpoints. Endpoints are logical serving hosts that provide a stable URL for online predictions. You must create an endpoint before you can deploy a model to it. Safety & Confirmation Tiers (CRITICAL) Before executing any commands on behalf of the user, you MUST adhere to the following safety tiers based on the action requested: Show more Installs 481 Repository google/skills GitHub S...
|
1.9K |
| 4102 | connecting-to-data-source | aws/agent-toolkit-for-aws |
Connect to Data Source Register an external data source with AWS Glue so downstream skills (ingesting-into-data-lake) can move data from it. A Glue connection stores the network config, driver, and credential reference for one source. Create once per source, reuse across jobs. Philosophy A connection is a named pipe, not a pipeline. This skill produces a tested, reusable Glue connection. It does not move data. Common Tasks You MUST execute commands using AWS MCP server tools when connected -- th...
|
1.9K |
| 4103 | ecosystem-primer | langchain-ai/langchain-skills |
Deep Agents (top layer, harness ) — batteries-included toolkit built on LangChain + LangGraph. Ships with planning, file management, subagent spawning, and memory out of the box. LangGraph (middle layer, runtime ) — low-level orchestration for durable execution, custom control flow, and stateful workflows. LangChain agents run on top of LangGraph. LangChain (bottom layer, framework ) — abstractions for models, tools, and the agent loop. Provider-agnostic, easiest to start with. LangSmith (cross-...
|
1.9K |
| 4104 | create-client-tool | cognitedata/builder-skills |
No SKILL.md available for this skill. View on GitHub Installs 665 Repository cognitedata/bui…r-skills GitHub Stars 4 First Seen May 7, 2026
|
1.9K |
| 4105 | performance | cognitedata/builder-skills |
Performance optimization Deep performance optimization based on Lighthouse performance audits. Focuses on loading speed, runtime efficiency, and resource optimization. How it works Identify performance bottlenecks in code and assets Prioritize by impact on Core Web Vitals Provide specific optimizations with code examples Measure improvement with before/after metrics Performance budget Resource Budget Rationale Total page weight < 1.5 MB 3G loads in ~4s JavaScript (compressed) < 300 KB Parsing ...
|
1.9K |
| 4106 | pull-changes-resolve-conflicts | cognitedata/builder-skills |
Pull changes & resolve merge conflicts Use this skill whenever integrating another branch (usually main ) into the current feature branch, or when git status shows unmerged paths after a merge or rebase. Applies to any Git-based team workflow; Flows/React apps are a common case where conflicts cluster in app shells and shared libraries. Goals Preserve intentional work on the current branch; do not assume “main wins” or “ours wins” without analysis. Make trade-offs visible to the user before any ...
|
1.9K |
| 4107 | risk-management | 0xhubed/agent-trading-arena |
Risk Management Last updated: 2026-01-17 20:31 UTC Active patterns: 40 Total samples: 13385 Confidence threshold: 60% Core Principles These rules are derived from analyzing profitable vs losing trades: Rule Success Rate Samples Confidence Seen Trade count inversely correlates with pe... 95% 861 55% 1x Trade frequency should adapt to market r... 95% 950 95% 1x Validate risk per trade explicitly befor... 92% 157 65% 1x Validate risk per trade explicitly befor... 92% 164 70% 1x Trade frequency ...
|
1.9K |
| 4108 | company-research | browserbase/skills |
Company Research Skill Overview I help you conduct comprehensive company research for investment decisions, business development, or competitive intelligence. I analyze business models, competitive positioning, market dynamics, and management quality. What I can do: Business model canvas analysis Competitive landscape mapping SWOT and Porter's Five Forces analysis Market size and growth assessment Management and governance review Risk identification What I cannot do: Access proprietary databases...
|
1.9K |
| 4109 | onboarding | anthropics/knowledge-work-plugins |
Onboarding CRO You are an expert in user onboarding and activation. Your goal is to help users reach their "aha moment" as quickly as possible and establish habits that lead to long-term retention. Initial Assessment Check for product marketing context first: If .agents/product-marketing.md exists (or .claude/product-marketing.md , or the legacy product-marketing-context.md filename, in older setups), read it before asking questions. Use that context and only ask for information not already cove...
|
1.9K |
| 4110 | observability-logs-search | elastic/agent-skills |
Logs Search Search and filter logs to support incident investigation. The workflow mirrors Kibana Discover: apply a time range and scope filter, then iteratively add exclusion filters (NOT) until a small, interesting subset of logs remains—either the root cause or the key document. Optionally view logs in context (preceding and following that document) or pivot to another entity and start a fresh search. Use ES|QL only ( POST /_query ); do not use Query DSL. When NOT to use Metrics or traces — u...
|
1.9K |
| 4111 | business-logic-vuln | yaklang/hack-skills |
Business Logic Router This is the routing entry point for business-logic and state-machine issues. When to Use The target involves coupons, inventory, payment, approvals, quotas, invites, trials, or state transitions The issue is not parser-level; it is about when checks happen and which business conditions are checked You suspect race conditions, workflow bypass, price tampering, negative values, stacked discounts, or multi-step flaws Skill Map Business Logic Vulnerabilities Recommended Flow Fi...
|
1.9K |
| 4112 | csrf-cross-site-request-forgery | yaklang/hack-skills |
SKILL: CSRF — Cross-Site Request Forgery — Expert Attack Playbook AI LOAD INSTRUCTION : Expert CSRF techniques. Covers modern bypass vectors (SameSite gaps, custom header flaws, tokenless bypass patterns), JSON CSRF, multipart CSRF, chaining with XSS. Base models often present only basic CSRF without covering SameSite edge cases and common broken token implementations. 0. RELATED ROUTING Also load: cors cross origin misconfiguration when JSON endpoints become readable cross-origin oauth oidc mis...
|
1.9K |
| 4113 | traffic-analysis-pcap | yaklang/hack-skills |
SKILL: Traffic Analysis & PCAP — Expert Analysis Playbook AI LOAD INSTRUCTION : Expert traffic analysis and PCAP forensics techniques. Covers PCAP repair, Wireshark essential filters, protocol-specific analysis (HTTP, HTTPS/TLS, DNS, FTP, SMTP, USB HID, WiFi, ICMP), data extraction (file carving, credential harvesting, covert channels), NetworkMiner, and tshark CLI analysis. Base models miss USB keyboard decode patterns, DNS tunneling detection heuristics, and TLS decryption workflows. 0. RELATE...
|
1.9K |
| 4114 | loki | grafana/skills |
Grafana Loki - Log Aggregation Docs : https://grafana.com/docs/loki/latest/ Indexes only metadata (labels), not full log content — dramatically cheaper than full-text search systems. LogQL Quick Reference Log Stream Selector (required in every query) {app="nginx"} exact match {app!="nginx"} not equal {app=~"nginx|apache"} regex match {app!~"debug.*"} regex not match {app="nginx", env="prod"} AND (multip...
|
1.9K |
| 4115 | caveman | juliusbrussee/skills |
Respond terse like smart caveman. All technical substance stay. Only fluff die. Persistence ACTIVE EVERY RESPONSE. No revert after many turns. No filler drift. Still active if unsure. Off only: "stop caveman" / "normal mode". Default: full . Switch: /caveman lite|full|ultra . Rules Drop: articles (a/an/the), filler (just/really/basically/actually/simply), pleasantries (sure/certainly/of course/happy to), hedging. Fragments OK. Short synonyms (big not extensive, fix not "implement a solution for"...
|
1.9K |
| 4116 | longbridge-technical | longbridge/skills |
longbridge-technical Computes seven classic technical indicators from 200 days of OHLCV data and produces a composite buy / sell / neutral signal via a multi-dimensional voting mechanism. Response language : match the user's input language — Simplified Chinese / Traditional Chinese / English. When to use "NVDA MACD 金叉了吗" , "TSLA RSI 超买了吗" , "700.HK 技术指标怎么看" "600519.SH 布林带收口" , "AAPL 技術分析信號" , "ADX 趋势强吗" "technical analysis for NVDA" , "is TSLA overbought on RSI" , "MACD signal" Workflow Show mor...
|
1.9K |
| 4117 | cypress-docs | cypress-io/ai-toolkit |
Cypress Documentation Purpose Enable the agent to retrieve accurate, up-to-date, and verifiable information about the Cypress testing framework by prioritizing official documentation and structured sources. When to use Apply this skill whenever the task depends on finding, reading, or quoting Cypress documentation rather than general testing intuition: Look up facts : commands, APIs, assertions, lifecycle hooks, configuration options, environment variables, CLI flags, plugins, or TypeScript type...
|
1.9K |
| 4118 | ads | agricidaniel/claude-ads |
Paid Ads You are an expert performance marketer with direct access to ad platform accounts. Your goal is to help create, optimize, and scale paid advertising campaigns that drive efficient customer acquisition. Before Starting Check for product marketing context first: If .agents/product-marketing.md exists (or .claude/product-marketing.md , or the legacy product-marketing-context.md filename, in older setups), read it before asking questions. Use that context and only ask for information not al...
|
1.9K |
| 4119 | caido-mode | caido/skills |
Caido Mode Skill Overview Full-coverage CLI for Caido's API, built on the official @caido/sdk-client package. Covers: HTTP History - Search, retrieve, replay, edit requests with HTTPQL Replay & Sessions - Sessions, collections, entries, fuzzing Scopes - Create and manage testing scopes (allowlist/denylist patterns) Filter Presets - Save and reuse HTTPQL filter presets Environments - Store test variables (victim IDs, tokens, etc.) Findings - Create, list, update security findings Tasks - Monitor ...
|
1.9K |
| 4120 | mcp-vods | aahl/skills |
追剧/追番技能 通过 npx -y mcporter 连接 mcp-vods 在多个源站中搜索影视、动漫、短剧、综艺等节目信息或更新进度。 并支持通过配置可选的电视IP环境变量,实现投屏到电视上播放。 搜索工具 该工具需要在多个源站搜索,比较耗时,需要更多的超时时间,如果遇到超时,可以重新尝试。 npx -y mcporter call --stdio 'uvx mcp-vods' vods_search keyword="影视名称" npx -y mcporter call --stdio 'uvx mcp-vods' vods_search keyword="影视名称" page=2 小米电视投屏工具 需要配置环境变量 MITV_LOCAL_IP 或 MITV_LIST_CFG 才能使用此工具。 npx -y mcporter call --stdio 'uvx mcp-vods' mitv_play_media url="影视URL" addr="小米电视IP" 安卓电视投屏工具 需要配置环境变量 TVBOX_LOCAL_IP 或 TVBOX_LIST_CFG 并在电视上安装Tv...
|
1.9K |
| 4121 | yeet | paulrberg/agent-skills |
Prerequisites Require GitHub CLI gh . Check gh --version . If missing, ask the user to install gh and stop. Require authenticated gh session. Run gh auth status . If not authenticated, ask the user to run gh auth login (and re-run gh auth status ) before continuing. Naming conventions Branch: {description} when starting from main/master/default. Commit: {description} (terse). PR title: {description} summarizing the full diff. PR template discovery Before creating the PR, resolve the repository r...
|
1.9K |
| 4122 | design-audit | bencium/bencium-marketplace |
Design Audit Skill You are a UI/UX architect. You do not write features or touch functionality. You make apps feel inevitable — like no other design was ever possible. If a user needs to think about how to use it, you've failed. If an element can be removed without losing meaning, it must be removed. Before You Start Read and internalize before forming any opinion: DESIGN_SYSTEM (.md) — tokens, colors, typography, spacing, shadows, radii FRONTEND_GUIDELINES (.md) — component engineering, state m...
|
1.9K |
| 4123 | cloudkit | dpearson2699/swift-ios-skills |
CloudKit Sync data across devices using CloudKit, iCloud key-value storage, and iCloud Drive. Covers container setup, record CRUD, queries, subscriptions, CKSyncEngine, SwiftData integration, conflict resolution, and error handling. Targets iOS 26+ with Swift 6.3; older availability noted where relevant. Contents Container and Database Setup CKRecord CRUD CKQuery CKSubscription CKSyncEngine (iOS 17+) SwiftData + CloudKit NSUbiquitousKeyValueStore iCloud Drive File Sync Account Status and Error H...
|
1.9K |
| 4124 | activitykit | dpearson2699/swift-ios-skills |
ActivityKit Build real-time, glanceable experiences on the Lock Screen, Dynamic Island, StandBy, CarPlay, and a paired Mac using ActivityKit. Patterns target iOS 26+ with Swift 6.3, backward-compatible to iOS 16.1 unless noted. See references/activitykit-patterns.md for complete code patterns including push payload formats, concurrent activities, state observation, and testing. Contents Workflow ActivityAttributes Definition Activity Lifecycle Lock Screen Presentation Dynamic Island Push-to-Upda...
|
1.9K |
| 4125 | pptx-html-fidelity-audit | nexu-io/open-design |
PPTX ↔ HTML Fidelity Audit A repeatable workflow for catching the ways a python-pptx export silently drifts from its HTML source — and fixing them with a layout discipline that prevents the same regressions on the next pass. When this skill applies The user has: A source HTML slide deck (typically a single-file deck with <section class="slide"> blocks): < section class = " slide light " > < div class = " chrome " > 2026 · Q2 review </ div > < span class = " kicker " > Pillar 03 </ span > < h2 cl...
|
1.9K |
| 4126 | agent-platform-inference | google/skills |
Agent Platform GenAI Inference Skill This skill provides instructions for authenticating and connecting to Google Cloud Agent Platform to use Generative AI models. It covers both First-Party (Gemini) and Third-Party (OpenMaaS) models. Phase 0: Environment Setup CRITICAL : Before running any of the Python sample scripts in the scripts/ directory (e.g., scripts/openmaas_openai_sdk.py ), you MUST ensure the environment is correctly initialized by following these steps: Show more Installs 479 Reposi...
|
1.9K |
| 4127 | plan | launchdarkly/agent-skills |
Generate integration plan (SDK install) Based on what you detected, choose the right SDK and plan the minimal set of changes needed. This skill is nested under LaunchDarkly SDK Install (onboarding) ; the parent Step 2 is plan . Prior: Detect repository stack . Next: Apply code changes . Choose the right SDK Use the SDK recipes reference to match the detected stack to an SDK. Start with Top 10 SDKs (start here) in that file for common stacks; use the (other) sections for less common SDKs. The key...
|
1.9K |
| 4128 | first-flag | launchdarkly/agent-skills |
Create first feature flag The SDK is connected. Now help the user create their first feature flag and see it work end-to-end. This skill is nested under LaunchDarkly onboarding ; the parent Step 6 is first flag . Prior: Apply code changes . Optional -- Flag Create skill already installed: If the launchdarkly-flag-create skill from github.com/launchdarkly/ai-tooling is available in the session (install with npx skills add launchdarkly/ai-tooling --skill launchdarkly-flag-create -y --agent <agent>...
|
1.9K |
| 4129 | apply | launchdarkly/agent-skills |
Apply code changes (SDK install) Execute the integration plan. Install the SDK(s) and add the minimal code needed to initialize each tracked surface. This skill is nested under LaunchDarkly SDK Install (onboarding) ; the parent Step 3 is apply . Prior: Generate integration plan . Next: Start the application . Dual SDK: If the approved plan is dual SDK ( plan: Dual SDK integrations ), you must complete Steps 1-3 for both tracks -- two packages in the manifest, two install commands run (or equival...
|
1.9K |
| 4130 | detect | launchdarkly/agent-skills |
Detect repository stack (SDK install) Before installing anything, you must understand the project. Identify what the project is built with and whether LaunchDarkly is already present. This skill is nested under LaunchDarkly SDK Install (onboarding) ; the parent Step 1 is detect . Next: Generate integration plan unless the decision tree sends you elsewhere. 1. Language and framework Look for the indicator files below (and related root layout), then read the relevant manifests to infer language an...
|
1.9K |
| 4131 | mcp-configure | launchdarkly/agent-skills |
Configure Dataverse MCP for GitHub Copilot This skill configures the Dataverse MCP server for GitHub Copilot with your organization's environment URL. Each organization is registered with a unique server name based on the org identifier (e.g., DataverseMcporgbc9a965c ). If the user provided a URL it is: $ARGUMENTS. Instructions 0. Ask for MCP scope Ask the user whether they want to configure the MCP server globally or for this project only: Would you like to configure the Dataverse MCP server: G...
|
1.9K |
| 4132 | sdk-install | launchdarkly/agent-skills |
LaunchDarkly SDK Install (onboarding) Installs and initializes the right LaunchDarkly SDK for the user’s project by following three nested skills in order . Do not skip ahead to feature flags here—the parent LaunchDarkly onboarding continues with Step 6: First feature flag using Create first feature flag . Prerequisites Project context from parent Step 1: Explore the Project (reuse it; only re-run deep detection if something is unclear) SDK key / client-side ID / mobile key: Needed when you reac...
|
1.9K |
| 4133 | launchdarkly-experiment-setup | launchdarkly/agent-skills |
LaunchDarkly Experiment Setup You're using a skill that will guide you through setting up and running experiments in LaunchDarkly. Your job is to design the experiment, create it with the right metrics and treatments, start data collection, and verify it's running. Prerequisites This skill requires the remotely hosted LaunchDarkly MCP server to be configured in your environment. Required MCP tools: create-experiment -- create a new experiment with metrics and treatments start-experiment-iteratio...
|
1.9K |
| 4134 | launchdarkly-guarded-rollout | launchdarkly/agent-skills |
LaunchDarkly Guarded Rollouts You're using a skill that will guide you through configuring guarded rollouts in LaunchDarkly. Your job is to design rollout stages, select monitoring metrics, configure regression thresholds, and start the rollout. Prerequisites This skill requires the remotely hosted LaunchDarkly MCP server to be configured in your environment. Required MCP tools: start-guarded-rollout -- start a progressive rollout with monitoring get-flag -- inspect the flag and its variations l...
|
1.9K |
| 4135 | tanstack-pacer | tanstack-skills/tanstack-skills |
Overview TanStack Pacer provides a unified, type-safe toolkit for controlling function execution timing. It offers class-based APIs, factory functions, and React hooks for debouncing, throttling, rate limiting, queuing, and batching. Core: @tanstack/pacer React: @tanstack/react-pacer Status: Beta Installation npm install @tanstack/pacer npm install @tanstack/react-pacer React hooks Debouncing Delays execution until after a period of inactivity. Class API import { Debouncer } from '@tanstack/pac...
|
1.9K |
| 4136 | nestjs | giuseppe-trisciuoglio/developer-kit |
NestJS Framework with Drizzle ORM When to Use Building REST APIs or GraphQL servers with NestJS Setting up authentication and authorization Implementing middleware, guards, or interceptors Working with databases (TypeORM, Drizzle ORM) Creating microservices architecture Writing unit and integration tests Setting up OpenAPI/Swagger documentation Core Architecture Module Structure import { Module } from '@nestjs/common'; @Module({ imports: [/* other modules */], controllers: [/* controllers *...
|
1.9K |
| 4137 | cors-cross-origin-misconfiguration | yaklang/hack-skills |
SKILL: CORS Misconfiguration — Credentialed Origins, Reflection, and Trust Boundary Errors AI LOAD INSTRUCTION : Use this skill when browsers can access authenticated APIs cross-origin. Focus on reflected origins, credentialed requests, wildcard trust, parser mistakes, and origin allowlist bypasses. For JSONP hijacking deep dives, same-origin policy internals, honeypot de-anonymization, and CORS vs JSONP comparison, load the companion SCENARIOS.md . Extended Scenarios Also load SCENARIOS.md when...
|
1.9K |
| 4138 | longbridge-portfolio | longbridge/skills |
longbridge-portfolio Prompt-only skill for account-level analysis. Distinguished from longbridge-positions (snapshot lookup): this skill answers "how am I doing" , not "what do I hold" . Response language : match the user's input language — Simplified Chinese / Traditional Chinese / English. Privacy : returns the user's private P&L. Only render detailed numbers in direct conversation; if you suspect screen-sharing or third-party observation, ask before showing exact figures. Never echo amounts i...
|
1.9K |
| 4139 | extension-querying-oql | caffeinelabs/skills |
Querying OQL — quick reference An OQL canister exposes two read-only methods: Method Returns Purpose schema() one JSON Text Catalogue of the canister's entities: each entity's primary key, fields, and edges. execute(qJson : text) typed Candid Result Runs a JSON-encoded query and returns matching rows. Calling the canister The icp CLI is already installed and configured in the sandbox; the canister name backend resolves to the project's canister (no identity, no canister ID). Both methods are que...
|
1.9K |
| 4140 | chart-visualization | bytedance/deer-flow |
Chart Visualization Skill This skill provides a comprehensive workflow for transforming data into visual charts. It handles chart selection, parameter extraction, and image generation. Workflow To visualize data, follow these steps: 1. Intelligent Chart Selection Analyze the user's data features to determine the most appropriate chart type. Use the following guidelines (and consult references/ for detailed specs): Time Series: Use generate_line_chart (trends) or generate_area_chart (accumu...
|
1.9K |
| 4141 | startup-canvas | phuryn/pm-skills |
Startup Canvas Metadata Name : startup-canvas Description : Generate a Startup Canvas for a new product. Combines the 9-section Product Strategy Canvas with a Business Model (Cost Structure + Revenue Streams). Designed specifically for startups and new products. Triggers : startup canvas, new product canvas, startup strategy, startup business model Domain Context Startup Canvas vs Business Model Canvas vs Lean Canvas Popular approaches like Business Model Canvas (Strategyzer) and Lean Canvas (As...
|
1.9K |
| 4142 | add-uint-support | pytorch/pytorch |
Add Unsigned Integer (uint) Support to Operators This skill helps add support for unsigned integer types (uint16, uint32, uint64) to PyTorch operators by updating their AT_DISPATCH macros. When to use this skill Use this skill when: Adding uint16, uint32, or uint64 support to an operator User mentions "unsigned types", "uint support", "barebones unsigned types" Enabling support for kUInt16, kUInt32, kUInt64 in kernels Working with operator implementations that need expanded type coverage Qui...
|
1.9K |
| 4143 | hf-cli | huggingface/skills |
Install: curl -LsSf https://hf.co/cli/install.sh | bash -s . The Hugging Face Hub CLI tool hf is available. IMPORTANT: The hf command replaces the deprecated huggingface-cli command. Use hf --help to view available functions. Note that auth commands are now all under hf auth e.g. hf auth whoami . Generated with huggingface_hub v1.6.0 . Run hf skills add --force to regenerate. Commands hf download REPO_ID — Download files from the Hub. hf env — Print information about the environment. hf sync — S...
|
1.9K |
| 4144 | path-traversal-lfi | yaklang/hack-skills |
SKILL: Path Traversal / Local File Inclusion (LFI) — Expert Attack Playbook AI LOAD INSTRUCTION : Expert path traversal and LFI techniques. Covers encoding bypass sequences, OS differences, filter bypass, PHP wrapper exploitation, log poisoning to RCE, and the critical distinction between path traversal (read only) vs LFI (execution). Base models miss encoding chains and RCE escalation paths. 0. RELATED ROUTING Before deep exploitation, you can first load: upload insecure files when the primary ...
|
1.9K |
| 4145 | file-access-vuln | yaklang/hack-skills |
File Access Router 这是文件系统、下载接口、上传链路与文件预览处理的分类入口。 When to Use 参数、文件名、下载接口或导入流程会影响文件路径 目标支持上传、预览、转码、解压、分享、下载或代理文件访问 你需要判断当前更偏向路径穿越、LFI,还是上传验证与处理链问题 Skill Map Path Traversal LFI : 路径穿越、文件读取、wrapper、包含链 Upload Insecure Files : 上传校验、存储路径、处理链、覆盖、预览与分享边界 Recommended Flow 先看入口是路径参数、下载接口还是上传流程 再看问题出现在 accept、store、process、serve 哪一段 小样本路径链和上传绕过样本已经并入主专题 skill,不再单独走 payload 入口 Related Categories injection-checking business-logic-vuln
|
1.9K |
| 4146 | cmdi-command-injection | yaklang/hack-skills |
SKILL: OS Command Injection — Expert Attack Playbook AI LOAD INSTRUCTION : Expert command injection techniques. Covers all shell metacharacters, blind injection, time-based detection, OOB exfiltration, polyglot payloads, and real-world code patterns. Base models miss subtle injection through unexpected input vectors. 0. RELATED ROUTING Before going deep, you can first load: upload insecure files when the shell sink is part of a broader upload, import, or conversion workflow First-pass payload fa...
|
1.9K |
| 4147 | threejs-webgl | freshtechbro/claudedesignskills |
Three.js WebGL/WebGPU Development Overview Three.js is the industry-standard JavaScript library for creating 3D graphics in web browsers using WebGL and WebGPU. This skill provides comprehensive guidance for building performant, interactive 3D experiences including scenes, cameras, renderers, geometries, materials, lights, textures, and animations. Core Concepts Scene Graph Architecture Three.js uses a hierarchical scene graph where all 3D objects are organized in a tree structure: Scene ├── Cam...
|
1.9K |
| 4148 | agent-platform-migrate-from-ai-studio | google/skills |
Migrating from Gemini API in AI Studio to Agent Platform Use this skill when you need to transition an application from the developer-centric Google AI Studio ecosystem ( generativelanguage.googleapis.com ) to the enterprise-grade Google Cloud Agent Platform ( aiplatform.googleapis.com ). When to Invoke This Skill Show more Installs 476 Repository google/skills GitHub Stars 12.4K First Seen 5 days ago
|
1.9K |
| 4149 | next-cache-components-optimizer | vercel/next.js |
No SKILL.md available for this skill. View on GitHub Installs 583 Repository vercel/next.js GitHub Stars 140.2K First Seen May 25, 2026
|
1.9K |
| 4150 | next-cache-components-adoption | vercel/next.js |
No SKILL.md available for this skill. View on GitHub Installs 597 Repository vercel/next.js GitHub Stars 140.2K First Seen 6 days ago
|
1.9K |