Overview CLI FAQ

Agent Skills 排行榜 · 关键词 + 语义搜索

按 / 聚焦搜索框
正在使用 AI 进行语义搜索...
25,514
总 Skills
97.9M
总安装量
2,625
贡献者
# Skill 仓库 描述 安装量
4201 job-description-analyzer paramchoudhary/resumeskills
Job Description Analyzer When to Use This Skill Use this skill when the user: Wants to analyze a job posting Asks "should I apply to this job?" Wants to know their match percentage for a role Needs help understanding job requirements Wants to tailor their resume for a specific position Mentions: "analyze this job", "am I qualified", "match score", "should I apply" Use this BEFORE resume tailoring to ensure effort is worth it. Core Capabilities Show more
 1.8K
4202 powerpoint-automation aktsmm/agent-skills
PowerPoint Automation AI-powered PPTX generation pipeline using Orchestrator-Workers pattern. Automatically extracts content, translates, applies templates, and performs quality reviews. When to Use This Skill Use this skill when the user wants to: Convert web articles or blog posts to PowerPoint presentations Translate English PPTX to Japanese (or other languages) Create presentations using custom templates Generate technical presentations with code blocks and diagrams Automate presentation...
 1.8K
4203 nuxt-modules onmax/nuxt-skills
Nuxt Module Development Guide for creating Nuxt modules that extend framework functionality. Related skills: nuxt (basics), vue (runtime patterns) Quick Start npx nuxi init -t module my-module cd my-module && npm install npm run dev Start playground npm run dev:build Build in watch mode npm run test Run tests Available Guidance references/development.md - Module anatomy, defineNuxtModule, Kit utilities, hooks references/testing-and-publishing.md - E2E testing, best practices...
 1.8K
4204 wps-office lc2panda/wps-skills
WPS Office 跨应用智能助手 你现在是 WPS Office 跨应用智能助手，能够统一管理和操控 Excel、Word、PPT 三大应用。当用户的需求涉及多个应用或需要通用功能时，你将协调各个专项助手完成任务。 核心能力 1. 应用状态管理 连接检测 ：检测 WPS 各应用的运行状态 应用切换 ：在不同应用间切换 文档管理 ：打开、保存、关闭文档 2. 跨应用操作 数据迁移 ：Excel 数据导入 Word 表格 内容复制 ：跨应用复制粘贴 格式同步 ：统一多个文档的格式风格 3. 批量处理 批量转换 ：批量格式转换（如 doc 转 docx） 批量操作 ：对多个文件执行相同操作 模板应用 ：将模板应用到多个文档 4. 通用功能 文件操作 ：新建、打开、保存、另存为 导出功能 ：导出 PDF、图片等格式 打印功能 ：打印文档 应用识别与路由 当用户提出需求时，首先识别应该使用哪个应用： Excel（表格）场景识别 关键词匹配： 「公式」「函数」「计算」 「表格」「单元格」「工作表」 「图表」「透视表」「数据分析」 「求和」「统计」「筛选」「排序」 「VLOOKUP」「SUMIF...
 1.8K
4205 designing-surveys refoundai/lenny-skills
Designing Surveys Help the user design effective surveys using frameworks from 9 product leaders who have built rigorous research and feedback systems. How to Help When the user asks for help with surveys: Clarify the goal - Determine if they're measuring satisfaction, identifying problems, or prioritizing features Choose the right metric - Help them select between NPS, CSAT, PMF survey, or custom approaches Design clean questions - Ensure each question measures one thing precisely Target the ri...
 1.8K
4206 wiki-agent ar9av/obsidian-wiki
Wiki Agent — Targeted Cross-Agent History Search + Ingest You are doing a query-driven targeted ingest from one specific AI agent's raw conversation history. The user is typically working in a different agent right now and wants to pull in context from another agent's past sessions. This is not bulk ingest. You find sessions about a specific topic, extract the relevant blobs, distill them into the wiki, and return a synthesized answer the user can act on immediately. Command Routing Parse the in...
 1.8K
4207 daily-update ar9av/obsidian-wiki
Daily Update — Wiki Maintenance Cycle You run a lightweight maintenance pass over the wiki: check source freshness, refresh the index, update hot.md, and write the state file that the terminal notification reads. Before You Start Resolve config — follow the Config Resolution Protocol in llm-wiki/SKILL.md (walk up CWD for .env → ~/.obsidian-wiki/config → prompt setup). This gives OBSIDIAN_VAULT_PATH and OBSIDIAN_WIKI_REPO . Derive vault-scoped state dir — all runtime state is scoped to the resolv...
 1.8K
4208 shader-dev minimax-ai/skills
Shader Craft A unified skill covering 36 GLSL shader techniques (ShaderToy-compatible) for real-time visual effects. Invocation /shader-dev <request> $ARGUMENTS contains the user's request (e.g. "create a raymarched SDF scene with soft shadows"). Skill Structure shader-dev/ ├── SKILL.md Core skill (this file) ├── techniques/ Implementation guides (read per routing table) │ ├── ray-marching.md Sphere tracing with SDF │ ├── sdf-3d.md ...
 1.8K
4209 digest anthropics/knowledge-work-plugins
Digest Command If you see unfamiliar placeholders or need to check which tools are connected, see CONNECTORS.md . Scan recent activity across all connected sources and generate a structured digest highlighting what matters. Instructions 1. Parse Flags Determine the time window from the user's input: --daily — Last 24 hours (default if no flag specified) --weekly — Last 7 days The user may also specify a custom range: --since yesterday --since Monday --since 2025-01-20 2. Check Available Sources ...
 1.8K
4210 design-systems refoundai/lenny-skills
Design Systems Help the user build and scale design systems using frameworks from 4 product leaders who have built design systems at companies like Figma and Airbnb. How to Help When the user asks for help with design systems: Assess the need - Determine if they need consistency, speed, or both, and whether they're at the right stage for a design system Define the scope - Clarify whether they need a component library, design tokens, documentation, or all three Design for adoption - Help them mak...
 1.8K
4211 mcp-deepwiki aahl/skills
DeepWiki The DeepWiki MCP server provides programmatic access to DeepWiki’s public repository documentation and search capabilities (Ask Devin). MCP Server URL : https://mcp.deepwiki.com/mcp Ask Question (Recommended) The tool's results are generated by AI, requiring at least 1 minute or more of timeout time. npx -y mcporter call "${MCP_URL}.ask_question" repoName:owner/repo question:"User's questions" Read wiki structure npx -y mcporter call "${MCP_URL}.read_wiki_structure" repoName:owner/repo ...
 1.8K
4212 sequence-load anthropics/knowledge-work-plugins
Sequence Load Find, enrich, and load contacts into an outreach sequence — end to end. The user provides targeting criteria and a sequence name via "$ARGUMENTS". Examples /apollo:sequence-load add 20 VP Sales at SaaS companies to my "Q1 Outbound" sequence /apollo:sequence-load SDR managers at fintech startups → Cold Outreach v2 /apollo:sequence-load list sequences (shows all available sequences) /apollo:sequence-load directors of engineering, 500+ employees, US → Demo Follow-up /apollo:sequence-l...
 1.8K
4213 typescript-magician mcollina/skills
When to use Use this skill proactively for: TypeScript errors and type challenges Eliminating any types from codebases Complex generics and type inference issues When strict typing is needed Instructions You are the Magician - a TypeScript wizard with Matt Pocock's deep expertise in advanced TypeScript patterns and type system mastery. You have zero tolerance for any types and specialize in crafting elegant, type-safe solutions. When invoked: Analyze TypeScript errors and diagnostics thoroughly ...
 1.8K
4214 backtesting-trading-strategies gracefullight/stock-checker
Backtesting Trading Strategies Overview Validate trading strategies against historical data before risking real capital. This skill provides a complete backtesting framework with 8 built-in strategies, comprehensive performance metrics, and parameter optimization. Key Features: 8 pre-built trading strategies (SMA, EMA, RSI, MACD, Bollinger, Breakout, Mean Reversion, Momentum) Full performance metrics (Sharpe, Sortino, Calmar, VaR, max drawdown) Parameter grid search optimization Equity curve vis...
 1.8K
4215 apollo-server apollographql/skills
Apollo Server 4.x Guide Apollo Server is an open-source GraphQL server that works with any GraphQL schema. Version 4.x is framework-agnostic and runs standalone or integrates with Express, Fastify, and serverless environments. Quick Start Step 1: Install npm install @apollo/server graphql For Express integration: npm install @apollo/server express graphql cors Step 2: Define Schema const typeDefs = `graphql type Book { title: String author: String } type Query { books: [...
 1.8K
4216 pipeline-review anthropics/knowledge-work-plugins
/pipeline-review If you see unfamiliar placeholders or need to check which tools are connected, see CONNECTORS.md . Analyze your pipeline health, prioritize deals, and get actionable recommendations for where to focus. Usage /pipeline-review [segment or rep] Review pipeline for: $ARGUMENTS If a file is referenced: @$1 How It Works ┌─────────────────────────────────────────────────────────────────┐ │ PIPELINE REVIEW │ ├─────────────────────────────...
 1.8K
4217 aws-ami-builder hashicorp/agent-skills
Build Amazon Machine Images (AMIs) using Packer's `amazon-ebs` builder. Reference: [Amazon EBS Builder](https://developer.hashicorp.com/packer/integrations/hashicorp/amazon/latest/components/builder/ebs) Note: Building AMIs incurs AWS costs (EC2 instances, EBS storage, data transfer). Builds typically take 10-30 minutes depending on provisioning complexity. Basic AMI Template ``` packer { required_plugins { amazon = { source = "github.com/hashicorp/amazon" version = "~> 1...
 1.8K
4218 okx-ai-support okx/onchainos-skills
OKX.AI Support — Customer Service Guidance Guidance-only skill. It returns a fixed Help Center walkthrough so the user can reach OKX.AI support. It runs entirely in the conversation layer: no CLI call, no network request, no wallet or credential access, no side effects. When to use Trigger and render the template Response You can get help through the OKX.AI Help Center: 🔗 OKX.AI Help Center: https://okx.ai There you can: * Chat with support online — talk in real time to report an issue or file a...
 1.8K
4219 technical-roadmaps refoundai/lenny-skills
Technical Roadmaps Help the user create effective technical roadmaps using frameworks and insights from 1 product leader. How to Help When the user asks for help with technical roadmaps: Understand the context - Ask about their current technical state, team size, and business constraints Ensure it's written down - A strategy that isn't documented can't be debugged or aligned around Apply the Rumelt framework - Structure as Diagnosis (what's the problem), Guiding Policies (principles for decision...
 1.8K
4220 memory-bridge ar9av/obsidian-wiki
Memory Bridge — Cross-Tool Knowledge Browser You are helping the user browse and compare their Obsidian wiki knowledge filtered by which AI tool originally produced it. The wiki tracks source provenance in .manifest.json and page sources: frontmatter — this skill surfaces that metadata as a navigable view. Before You Start Resolve config — follow the Config Resolution Protocol in llm-wiki/SKILL.md (walk up CWD for .env → ~/.obsidian-wiki/config → prompt setup). This gives OBSIDIAN_VAULT_PATH . R...
 1.8K
4221 notion-spec-to-implementation openai/skills
Spec to Implementation Convert a Notion spec into linked implementation plans, tasks, and ongoing status updates. Quick start Locate the spec with Notion:notion-search , then fetch it with Notion:notion-fetch . Parse requirements and ambiguities using reference/spec-parsing.md . Create a plan page with Notion:notion-create-pages (pick a template: quick vs. full). Find the task database, confirm schema, then create tasks with Notion:notion-create-pages . Link spec ↔ plan ↔ tasks; keep status curr...
 1.8K
4222 at-dispatch-v2 pytorch/pytorch
AT_DISPATCH to AT_DISPATCH_V2 Converter This skill helps convert PyTorch's legacy AT_DISPATCH macros to the new AT_DISPATCH_V2 format, as defined in aten/src/ATen/Dispatch_v2.h. When to use this skill Use this skill when: Converting AT_DISPATCH_* macros to AT_DISPATCH_V2 Porting ATen kernels to use the new dispatch API Working with files in aten/src/ATen/native/ that use dispatch macros User mentions "AT_DISPATCH", "dispatch v2", "Dispatch_v2.h", or macro conversion Quick reference Old form...
 1.8K
4223 ce-riffrec-feedback-analysis everyinc/compound-engineering-plugin
Riffrec Feedback Analysis Turn raw product feedback into structured evidence for downstream agents. This skill is the consumption side of Riffrec , a capture tool that records synchronized screen + voice + event sessions and emits a riffrec-*.zip bundle. Choose the path Route to the matching reference based on the input. Read only that reference; do not load the others. Setup — user has no recording yet and asks how to install Riffrec, capture a session, or share feedback. Read references/instal...
 1.8K
4224 product-name phuryn/pm-skills
Product Name Brainstorm unique, memorable product names with rationale aligned to brand values and target audience. Use when naming a new product, rebranding, or exploring name options that strengthen your brand positioning. When to Use Naming a new product or feature Rebranding or renaming existing products Exploring name options before launch Testing names against brand guidelines Triggers: product name, name ideas, brand name, naming, what to call, product naming Prompt You are an experienced...
 1.8K
4225 user-onboarding refoundai/lenny-skills
How to position Starchild Starchild is a personal assistant / intern with a full computer . Anything that can be done on a computer is in scope: browsing, reading, writing, coding, running scripts, connecting services, operating files, building tools, deploying pages, monitoring things, and pushing results back to the user. The honest positioning: Some things Starchild is already very good at — Twitter / X, Gmail, scheduled tasks, research, rapid prototyping, public deploys, database analytics, ...
 1.8K
4226 journal-entry anthropics/knowledge-work-plugins
Journal Entry Preparation If you see unfamiliar placeholders or need to check which tools are connected, see CONNECTORS.md . Important : This command assists with journal entry workflows but does not provide financial advice. All entries should be reviewed by qualified financial professionals before posting. Prepare journal entries with proper debits, credits, supporting detail, and review documentation. Usage /je <type> <period> Arguments type — The journal entry type. One of: ap-accrual — Acco...
 1.8K
4227 prioritizing-roadmap refoundai/lenny-skills
Prioritizing Roadmap Help the user prioritize product roadmaps and backlogs using frameworks from 75 product leaders. How to Help When the user asks for help with prioritization: Understand the decision context - Ask about their goals, constraints, and stakeholder landscape Assess the portfolio - Determine if they need to balance incremental vs big bets, or core vs new Provide frameworks - Recommend appropriate prioritization approaches for their situation Challenge assumptions - Help them quest...
 1.8K
4228 photokit dpearson2699/swift-ios-skills
PhotoKit Modern patterns for photo picking, camera capture, image loading, and media permissions targeting iOS 26+ with Swift 6.3. Patterns are backward-compatible to iOS 16 unless noted. See references/photokit-patterns.md for complete picker recipes and references/camera-capture.md for AVCaptureSession patterns. Contents PhotosPicker (SwiftUI, iOS 16+) Privacy and Permissions Camera Capture Basics Image Loading and Display Common Mistakes Review Checklist References PhotosPicker (SwiftUI, iOS ...
 1.8K
4229 graphql-and-hidden-parameters yaklang/hack-skills
SKILL: GraphQL and Hidden Parameters — Introspection, Batching, and Undocumented Fields AI LOAD INSTRUCTION : Use this skill when GraphQL exists or when REST documentation suggests optional, deprecated, or undocumented fields. Focus on schema discovery, hidden parameter abuse, and batching as a force multiplier. 1. GRAPHQL FIRST PASS query { __typename } query { __schema { types { name } } } If introspection is restricted, continue with: field suggestions and error-based discovery known type pro...
 1.8K
4230 format-string-exploitation yaklang/hack-skills
SKILL: Format String Exploitation — Expert Attack Playbook AI LOAD INSTRUCTION : Expert format string techniques. Covers stack reading, arbitrary write via %n, GOT overwrite, __malloc_hook overwrite, pointer chain exploitation, blind format string, FORTIFY_SOURCE bypass, 64-bit null byte handling, and pwntools automation. Distilled from ctf-wiki fmtstr, CTF patterns, and real-world scenarios. Base models often miscalculate positional parameter offsets or forget 64-bit address placement after for...
 1.8K
4231 wasm-compatibility marimo-team/skills
WASM Compatibility Checker for marimo Notebooks Check whether a marimo notebook can run in a WebAssembly (WASM) environment — the marimo playground, community cloud, or exported WASM HTML. Instructions 1. Read the notebook Read the target notebook file. If the user doesn't specify one, ask which notebook to check. 2. Extract dependencies Collect every package the notebook depends on from both sources: PEP 723 metadata — the /// script block at the top: /// script dependencies = [ "marimo...
 1.8K
4232 arxiv-search langchain-ai/deepagents
arXiv Search Skill Usage Run the bundled Python script using the absolute skills directory path from your system prompt: .venv/bin/python [ YOUR_SKILLS_DIR ] /arxiv-search/arxiv_search.py "your search query" [ --max-papers N ] query (required): Search query string --max-papers (optional): Maximum results to retrieve (default: 10) Example .venv/bin/python ~/.deepagents/agent/skills/arxiv-search/arxiv_search.py "deep learning drug discovery" --max-papers 5 Returns title and abstract for each match...
 1.8K
4233 metal-kernel pytorch/pytorch
Metal Kernel Writing Guide This skill guides you through implementing Metal kernels for PyTorch operators on Apple Silicon. Important: The goal of this skill is to use native Metal capabilities via the c10/metal/ infrastructure, NOT MPSGraph. Native Metal kernels provide better control, performance, and maintainability. Overview There are two workflows covered by this skill: Adding new MPS support - Implementing a new operator from scratch Migrating from MPSGraph - Converting existing MPSGr...
 1.8K
4234 ssti-server-side-template-injection yaklang/hack-skills
SKILL: Server-Side Template Injection (SSTI) — Expert Attack Playbook AI LOAD INSTRUCTION : Expert SSTI techniques. Covers polyglot detection probes, engine fingerprinting, Jinja2/FreeMarker/Twig/ERB RCE chains, client-side Angular SSTI, and bypass techniques. Base models often miss sandbox escape MRO chains and non-Jinja2 engines. For PHP CMS template eval, Jira SSTI, Confluence OGNL, and Spring Cloud Gateway SpEL, load the companion SCENARIOS.md . 0. RELATED ROUTING Before using full engine-sp...
 1.8K
4235 deserialization-insecure yaklang/hack-skills
SKILL: Insecure Deserialization — Expert Attack Playbook AI LOAD INSTRUCTION : Expert deserialization techniques across Java, PHP, and Python. Covers gadget chain selection, traffic fingerprinting, tool usage (ysoserial, PHPGGC), Shiro/WebLogic/Commons Collections specifics, Phar deserialization, and Python pickle abuse. Base models often miss the distinction between finding the sink and finding a usable gadget chain. 0. RELATED ROUTING jndi-injection when deserialization leads to JNDI lookup (e...
 1.8K
4236 xxe-xml-external-entity yaklang/hack-skills
SKILL: XML External Entity Injection (XXE) — Expert Attack Playbook AI LOAD INSTRUCTION : Expert XXE techniques. Covers all injection contexts (SOAP, REST JSON→XML parsers, Office files, SVG), OOB exfiltration (critical when direct read fails), blind XXE detection, and XXE-to-SSRF chain. Base models often miss OOB and non-XML context XXE. For real-world CVE chains, Office docx XXE step-by-step, PHP expect:// RCE, and Solr XXE+RCE, load the companion SCENARIOS.md . 0. RELATED ROUTING Also load: u...
 1.8K
4237 ios-pentesting-tricks yaklang/hack-skills
SKILL: iOS Pentesting Tricks — Expert Attack Playbook AI LOAD INSTRUCTION : Expert iOS application security testing techniques. Covers jailbreak vs non-jailbreak methodology, keychain extraction, URL scheme/Universal Links abuse, Frida/Objection runtime hooks, binary protection checks, and data storage analysis. Base models miss protection class nuances and AASA misconfiguration patterns. 0. RELATED ROUTING Before going deep, consider loading: mobile-ssl-pinning-bypass for in-depth SSL pinning b...
 1.8K
4238 google-flights skillhq/flight-search
Google Flights Search Search Google Flights via agent-browser to find flight prices, schedules, and availability. When to Use User asks to search/find/compare flights or airfare User wants to know flight prices between cities User asks about flight schedules or availability User wants to find the cheapest flight for specific dates When NOT to Use Completing purchases : This skill finds flights and extracts booking links, but do not attempt to complete a purchase on a booking site. Hotels/rental ...
 1.8K
4239 draft-response anthropics/knowledge-work-plugins
/draft-response If you see unfamiliar placeholders or need to check which tools are connected, see CONNECTORS.md . Draft a professional, customer-facing response tailored to the situation, customer relationship, and communication context. Usage /draft-response <context about the customer question, issue, or request> Examples: /draft-response Acme Corp is asking when the new dashboard feature will ship /draft-response Customer escalation — their integration has been down for 2 days /draft-respons...
 1.8K
4240 people-report anthropics/knowledge-work-plugins
/people-report If you see unfamiliar placeholders or need to check which tools are connected, see CONNECTORS.md . Generate people analytics reports from your HR data. Analyze workforce data to surface trends, risks, and opportunities. Usage /people-report $ARGUMENTS Report Types Headcount : Current org snapshot — by team, location, level, tenure Attrition : Turnover analysis — voluntary/involuntary, by team, trends Diversity : Representation metrics — by level, team, pipeline Org Health : Span o...
 1.8K
4241 mapkit dpearson2699/swift-ios-skills
MapKit Build map-based and location-aware features targeting iOS 17+ with SwiftUI MapKit and modern CoreLocation async APIs. Use Map with MapContentBuilder for views, CLLocationUpdate.liveUpdates() for streaming location, and CLMonitor for geofencing. See references/mapkit-patterns.md for extended MapKit patterns and references/mapkit-corelocation-patterns.md for CoreLocation patterns. Contents Workflow SwiftUI Map View (iOS 17+) CoreLocation Modern API Geocoding Search Directions PlaceDescripto...
 1.8K
4242 realitykit dpearson2699/swift-ios-skills
RealityKit Build AR experiences on iOS using RealityKit for rendering and ARKit for world tracking. Covers RealityView , entity management, raycasting, scene understanding, and gesture-based interactions. Targets Swift 6.3 / iOS 26+. Contents Setup RealityView Basics Loading and Creating Entities Anchoring and Placement Raycasting Gestures and Interaction Scene Understanding Common Mistakes Review Checklist References Setup Project Configuration Add NSCameraUsageDescription to Info.plist For iOS...
 1.8K
4243 http-parameter-pollution yaklang/hack-skills
SKILL: HTTP Parameter Pollution (HPP) AI LOAD INSTRUCTION : Model the full request path : browser → CDN/WAF → reverse proxy → app framework → business code. Duplicate keys ( a=1&a=2 ) are not an error at HTTP level; each hop may pick first, last, join, or array-ify. Test HPP when WAF and app disagree, or when internal HTTP clients rebuild query strings. Routing note: when the same parameter appears multiple times, or WAF/backend stacks differ, use the Section 1 matrix to test first/last/merge as...
 1.8K
4244 draft-offer anthropics/knowledge-work-plugins
/draft-offer If you see unfamiliar placeholders or need to check which tools are connected, see CONNECTORS.md . Draft a complete offer letter for a new hire. Usage /draft-offer $ARGUMENTS What I Need From You Role and title : What position? Level : Junior, Mid, Senior, Staff, etc. Location : Where will they be based? (affects comp and benefits) Compensation : Base salary, equity, signing bonus (if applicable) Start date : When should they start? Hiring manager : Who will they report to? If you d...
 1.8K
4245 spritekit dpearson2699/swift-ios-skills
SpriteKit Build 2D games and interactive animations for iOS 26+ using SpriteKit and Swift 6.3. Covers scene lifecycle, node hierarchy, actions, physics, particles, camera, touch handling, and SwiftUI integration. Contents Scene Setup Nodes and Sprites Actions and Animation Physics Touch Handling Camera Particle Effects SwiftUI Integration Common Mistakes Review Checklist References Scene Setup SpriteKit renders content through SKView , which presents an SKScene -- the root node of a tree that th...
 1.8K
4246 product-strategy phuryn/pm-skills
Product Strategy Canvas Metadata Name : product-strategy Description : Generate a comprehensive product strategy using the 9-section Product Strategy Canvas. Covers vision, market segments, costs, value propositions, trade-offs, metrics, growth, capabilities, and defensibility. Triggers : product strategy, strategy canvas, strategic plan, product strategy document Instructions You are an experienced product strategist developing a comprehensive product strategy for $ARGUMENTS. Your task is to cr...
 1.8K
4247 open-redirect yaklang/hack-skills
SKILL: Open Redirect — Expert Attack Playbook AI LOAD INSTRUCTION : Open redirect techniques. Covers parameter-based redirects, JavaScript sinks, filter bypass, and chaining with phishing, CSRF Referer bypass, OAuth token theft, and SSRF. Often underrated but critical for phishing and as a building block in multi-step exploit chains. 1. CORE CONCEPT Open redirect occurs when an application redirects users to a URL derived from user input without validation. The trusted domain acts as a "launchpa...
 1.8K
4248 request-smuggling yaklang/hack-skills
SKILL: HTTP Request Smuggling — Expert Attack Playbook AI LOAD INSTRUCTION : Expert HTTP desync techniques. Covers CL.TE, TE.CL, TE.TE obfuscation variants, HTTP/2 downgrade and pseudo-header confusion, client-side desync (browser fetch pipelines), and tool-assisted fuzzing. Assumes familiarity with raw HTTP/1.1 framing and reverse-proxy topologies. This is not “header injection” — it is message boundary disagreement between hops. Routing note: load this skill when you suspect CDN/reverse-proxy ...
 1.8K
4249 crlf-injection yaklang/hack-skills
SKILL: CRLF Injection — Expert Attack Playbook AI LOAD INSTRUCTION : CRLF injection (HTTP response splitting) techniques. Covers header injection, response body injection via double CRLF, XSS escalation, cache poisoning, and encoding bypass. Often overlooked by scanners but chains into XSS, session fixation, and cache attacks. 1. CORE CONCEPT CRLF = \r\n (Carriage Return + Line Feed, %0D%0A ). HTTP headers are separated by CRLF. If user input is reflected in a response header without sanitizatio...
 1.8K
4250 render-deploy openai/skills
Deploy to Render Render supports Git-backed services and prebuilt Docker image services. This skill covers Git-backed flows: Blueprint Method - Generate render.yaml for Infrastructure-as-Code deployments Direct Creation - Create services instantly via MCP tools Blueprints can also run a prebuilt Docker image by using runtime: image , but the render.yaml still must live in a Git repo. If there is no Git remote, stop and ask the user to either: Create/push a Git remote (can be minimal if only the ...
 1.8K