Skill-uri pentru agenți pe care le poți verifica înainte să le instalezi
Skill-uri SKILL.md publice din depozite GitHub cu peste 50 de stele și de la producători, scanate și evaluate. Instalează oricare dintre ele cu o singură comandă în Claude Code, Cursor, Codex, GitHub Copilot sau Gemini CLI.
47.307 skill-uri din 2.272 de depozite · actualizat acum 9 ore
10.066 de skill-uri
- wiki-arsenalEncod3d-Sec/TORCHFast PARALLEL wiki lookup engine over wiki/techniques + wiki/payloads + wiki/tools + wiki/cheatsheets for a surface/service/vuln-class. Two modes - quick (one qmd search, cheap, fire constantly) and deep (4 parallel subagents, one per area, merged ready-to-use arsenal card, cached). This is the fast path arsenal that `arsenal` delegates to; the hunt-* skills each inline their own qmd_query and can hand off here for a parallel lookup. Use for "what do I use against <surface>", "arsenal for <X>", "deep/full arsenal", "tool + payload + technique + cheatsheet for <X>", "fast wiki lookup", "parallel wiki search", any "how do I attack/exploit <service|vuln-class>" where you want the documented tooling + payloads before hand-rolling.AlteleFără avertismente★ 336↓ —
- self-healing-cloud-orchestratorroedyrustam/vibes-plugReal-time log monitoring, crash detection, and auto-hotfixing / Pemantauan log real-time, deteksi crash, dan auto-hotfix kode.AlteleFără avertismente★ 115↓ —
- zero-to-prod-orchestratorroedyrustam/vibes-plugMaster orchestrator to build an application from scratch to a production-ready release, enforcing strict step-by-step progression and continuous documentation / Orkestrator utama untuk membangun aplikasi dari nol hingga rilis siap produksi dengan dokumentasi bertahap.AlteleFără avertismente★ 115↓ —
- sign-receiptrunxhq/runxBind an off-runtime action claim to opaque evidence locators in a signed Runx receipt without pretending Runx verified the external action.AlteleFără avertismente★ 104↓ —
- web-fetchrunxhq/runxFetch and extract one public web source, optionally restrict its hosts, and return the content by digest with full provenance.AlteleFără avertismente★ 104↓ —
- chargerunxhq/runxCollect one exact payment on your selected Stripe, PayPal or x402 merchant account, with native approval and independent readback.AlteleFără avertismente★ 104↓ —
- crystallizeavelikiy/great_ctoDistils repeating patterns from session logs and lessons.md into draft skill files. Run after ≥10 sessions to extract durable knowledge. Output: draft skills/ files + promotion report.AlteleFără avertismente★ 108↓ —
- hunt-sqliEncod3d-Sec/TORCHSQLi and NoSQLi hunting - error-based, boolean-blind, time-based, UNION, NoSQL operator injection. sqlmap automation after manual confirmation. Wiki-first, FIND schema output.AlteleFără avertismente★ 336↓ —
- app-cliprshankras/claude-code-apple-skillsGenerates App Clip targets with invocation URL handling, lightweight experiences, and full app upgrade prompts. Use when user wants NFC/QR/Safari banner invocation, instant app experiences, or App Clip Card setup.AlteleFără avertismente★ 837↓ —
- 1c-erf-validateDesko77/claude-code-skills-1cВалидация внешнего отчета 1С (ERF). Используй после создания или модификации отчета для проверки корректностиAlteleFără avertismente★ 86↓ —
- wikiEncod3d-Sec/TORCHSearch, query, and maintain the qmd-indexed wiki - semantic search, keyword search, re-index after adding pages, check index status.AlteleFără avertismente★ 336↓ —
- whizard-telemetry-rulerkubesphere/kubesphereUse when working with WizTelemetry Ruler extension for KubeSphere, including installation, configuration, alerting rules managementAlteleFără avertismente★ 17,1 K↓ —
- sample-skillkyungseo/skillsteadReplace this reserved identity and describe the concrete user outcome, selection boundary, and important non-goals. Do not use this package before every sample-skill identity has been replaced.AlteleFără avertismente★ 84↓ —
- hunt-mcpEncod3d-Sec/TORCHMCP server attack hunting - tool poisoning, indirect prompt injection via tool output, rug-pull updates, cross-tool shadowing, over-permissioned/excessive-agency tools, lethal trifecta. Wiki-first, FIND schema output.AlteleFără avertismente★ 336↓ —
- prompt-injection-firewallroedyrustam/vibes-plugRuntime defenses against prompt injection, jailbreaks, and SSRF / Pertahanan runtime terhadap prompt injection, jailbreak, dan SSRF.AlteleFără avertismente★ 115↓ —
- hunt-authEncod3d-Sec/TORCHAuth bypass and ATO hunting - legacy protocol matrix (XMLRPC, SharePoint /_vti_bin/, EWS, Citrix, etc.), JWT manipulation, password reset poisoning, SAML auth bypass, session fixation. Wiki-first, FIND schema output.AlteleFără avertismente★ 336↓ —
- claude-md-improverEncod3d-Sec/TORCHOFFLINE FALLBACK for the claude-md-management plugin - prefer that plugin when it is installed. Audit and improve CLAUDE.md files - scan for CLAUDE.md files, evaluate quality against templates, output a report, then make targeted updates. Invoke explicitly (/claude-md-improver) when the plugin is unavailable.AlteleFără avertismente★ 336↓ —
- migrate-pipelineharness/harness-skillsMigrate Harness pipelines from v0 to v1 simplified format via MCP tools. Converts expressions from angle-bracket to ${{ }} syntax, lowercases type names, simplifies structure, and preserves variables, failure strategies, and conditional logic. Use when asked to migrate a pipeline, convert v0 to v1, upgrade pipeline format, modernize pipeline syntax, or compare v0 vs v1. Trigger phrases: migrate pipeline, convert to v1, upgrade pipeline, v0 to v1, modernize pipeline, simplified format.AlteleFără avertismente★ 125↓ —
- claude-env-setupDesko77/claude-code-skills-1cУстановка и обновление рабочего окружения агента: скилы, правила и команды этого набора плюс связанные инструменты (MCP-серверы, плагин EDT, локальная транскрибация, конвертеры документов, утилиты 1С). Работает и на чистой машине, и на уже настроенной - сначала снимает опись того, что стоит, потом показывает план и ставит ТОЛЬКО выбранное. Используй когда пользователь просит поставить или обновить скилы, настроить окружение с нуля, перенести набор на новую машину, доставить недостающие инструменты, проверить что из окружения отвалилось. Триггеры: установить скилы, настроить окружение, поставить на новой машине, обновить набор, доставить недостающее, что у меня стоит, проверить окружение, перенести конфигурацию агента.AlteleFără avertismente★ 86↓ —
- evidenceEncod3d-Sec/TORCHEvidence hygiene before any FIND moves to Completed or enters a report. Cookie redaction, PII black-bar, HAR sanitization, screenshot metadata strip. Run after /triage passes and before final report assembly.AlteleFără avertismente★ 336↓ —
- hunt-smugglingEncod3d-Sec/TORCHHTTP request smuggling / desync hunting - CL.TE, TE.CL, TE.TE, CL.0, and HTTP/2 downgrade. Timing-based detection, differential confirmation, no-blind-claims. Wiki-first, FIND schema output.AlteleFără avertismente★ 336↓ —
- hunt-uploadEncod3d-Sec/TORCHFile upload attack hunting - extension/content-type/magic-byte bypass to web-shell RCE, path traversal in filename, SVG/XML XSS, zip slip, and pixel-flood DoS. Wiki-first, FIND schema output.AlteleFără avertismente★ 336↓ —
- whizard-notificationkubesphere/kubesphereUse when working with WizTelemetry Notification extension for KubeSphere, including installation, configuration, troubleshooting, notification channel setup, alert routing, and silence management.AlteleFără avertismente★ 17,1 K↓ —
- apple-ecosystem-expertroedyrustam/vibes-plugApple ecosystem development: iOS support, Safari WebKit, and HIG / Pengembangan ekosistem Apple: kompatibilitas iOS, Safari, dan HIG.AlteleFără avertismente★ 115↓ —
bounty-recon
26zl/cybersec-toolkit
AlteleActualizat acum 3 zile
De la autor
Use at the start of a bug bounty engagement. Provides scope-aware recon methodology — passive enumeration, subdomain discovery, asset attribution, tech stack fingerprinting, content discovery. Respects scope and program rules. Triggers on "bounty recon", "subdomain enum", "attack surface map", "h1 recon", "bug bounty start".
Instalare
npx skills add 26zl/cybersec-toolkit --skill bounty-recon -a claude-code
Se instalează în .claude/skills/bounty-recon/ · Fiecare comandă descarcă skill-ul direct de pe GitHub cu utilitarul open source skills.
Descarcă .zip
Identic octet cu octet cu commit-ul scanat, cu licența depozitului și un fișier SOURCE.txt.
La ce are acces
Doar instrucțiuniFolosește rețeauaLicență: MIT
Verificări de siguranță pe SKILL.md
Niciun avertisment.
De ce 83
Securitate100
Proveniență63
Întreținere100
Licență100
Adopție33
Fișiere (1)
- SKILL.md