Skill-uri pentru agenți pe care le poți verifica înainte să le instalezi
Skill-uri SKILL.md publice din depozite GitHub cu peste 50 de stele și de la producători, scanate și evaluate. Instalează oricare dintre ele cu o singură comandă în Claude Code, Cursor, Codex, GitHub Copilot sau Gemini CLI.
45.605 skill-uri din 2.205 depozite · actualizat acum 8 minute
45.605 skill-uri
- offensive-request-smugglingSnailSploit/Claude-Redclaude-red is a curated library of offensive security skills designed for the Claude skills system. Each skill is a structured SKILL.md file that primes Claude with expert-level methodology for a specific attack surface — from SQLi to shellcode, EDR evasion to exploit development.SecuritateFără avertismente★ 9 K↓ —
- angular-architectJeffallan/claude-skillsGenerates Angular 17+ standalone components, configures advanced routing with lazy loading and guards, implements NgRx state management, applies RxJS patterns, and optimizes bundle performance. Use when building Angular 17+ applications with standalone components or signals, setting up NgRx stores, establishing RxJS reactive patterns, performance tuning, or writing Angular tests for enterprise apps.PlanificareFără avertismente★ 12,1 K↓ —
- offensive-crypto-attacksSnailSploit/Claude-RedSystematic methodology for identifying and exploiting cryptographic implementation weaknesses in real-world applications. Covers padding oracle attacks against CBC-mode ciphers with PKCS7 padding (Vaudenay's original attack through modern padbuster automation), ECB mode exploitation including block cut-and-paste and byte-at-a-time decryption, hash length extension attacks against SHA1/SHA256/MD5-based MACs using HashPump, RSA vulnerabilities including small public exponent, common modulus, Bleichenbacher PKCS1v1.5 padding oracle, and Coppersmith's method for partial key recovery. Addresses weak PRNG exploitation targeting time-seeded generators and Mersenne Twister MT19937 state recovery from observed outputs, timing side-channel attacks against comparison operations, nonce reuse in AES-GCM leading to authentication key recovery, and key derivation weaknesses including insufficient iteration counts and missing salts. Primary tooling includes padbuster, RsaCtfTool, hashpump, and PyCryptodome for building custoFinanțeFără avertismente★ 9 K↓ —
- meeting-notesnexu-io/html-anything标题 + 出席 + 议程 + 决议 + action items + 下次ProductivitateFără avertismente★ 9,2 K↓ —
- deck-simplenexu-io/html-anything通用 horizontal-swipe HTML deck, 不要 magazine 调DocumenteFără avertismente★ 9,2 K↓ —Apare și în 1 alt depozit
- hive.chart-creation-foundationsaden-hive/hiveRequired reading whenever any chart_* tool is available. Teaches the one-tool embedding contract (call chart_render → live chart appears in chat AND a downloadable PNG lands in the queen session dir), the ECharts (data viz) vs Mermaid (structural diagrams) decision, the BI/financial-grade aesthetic baseline (no chartjunk, restrained palette, proper typography, single message per chart), and the canonical spec patterns for the 12 most-common chart types. Skipping this leads to 1990s-Excel charts, missing downloads, and the agent writing markdown image links by hand instead of letting chart_render drive the UI.DocumenteFără avertismente★ 11,1 K↓ —
- skill-templateanbeime/skill技能创建模板。复制此目录并修改 SKILL.md 即可创建新技能。请将所有 <占位符> 替换为实际内容。AlteleFără avertismente★ 8,6 K↓ —
- hive.telegram-notifications-setupaden-hive/hiveSet up a Telegram notification channel (Sentinel) for a colony by driving the browser — create a bot via @BotFather in Telegram Web, store its token, detect the chat to notify, and turn Sentinel on so the colony can ping the user on Telegram and accept replies. Use when the user asks to "set up Telegram notifications", "get pinged on Telegram", "connect Telegram for alerts", "set up Sentinel on Telegram", or clicks the in-app "Set this up with the agent" button on the Telegram step. Requires hive.browser-automation.BrowserFără avertismente★ 11,1 K↓ —
- deck-replitnexu-io/html-anythingReplit Slides 八套主题 (helix/holm/vance/bevel/world/atlas/bluehouse)DocumenteFără avertismente★ 9,2 K↓ —Apare și în 1 alt depozit
- finishing-a-development-branchjnMetaCode/superpowers-zh当实现完成、所有测试通过、需要决定如何集成这份工作时使用AlteleFără avertismente★ 8,4 K↓ —
- nextjs-developerJeffallan/claude-skillsUse when building Next.js 14+ applications with App Router, server components, or server actions. Invoke to configure route handlers, implement middleware, set up API routes, add streaming SSR, write generateMetadata for SEO, scaffold loading.tsx/error.tsx boundaries, or deploy to Vercel. Triggers on: Next.js, Next.js 14, App Router, RSC, use server, Server Components, Server Actions, React Server Components, generateMetadata, loading.tsx, Next.js deployment, Vercel, Next.js performance.DevOpsFără avertismente★ 12,1 K↓ —
- requesting-code-reviewjnMetaCode/superpowers-zh完成任务、实现重要功能或合并前使用，用于验证工作成果是否符合要求InginerieFără avertismente★ 8,4 K↓ —
- legacy-modernizerJeffallan/claude-skillsDesigns incremental migration strategies, identifies service boundaries, produces dependency maps and migration roadmaps, and generates API facade designs for aging codebases. Use when modernizing legacy systems, implementing strangler fig pattern or branch by abstraction, decomposing monoliths, upgrading frameworks or languages, or reducing technical debt without disrupting business operations.InginerieFără avertismente★ 12,1 K↓ —
- ads-researchAgriciDaniel/claude-adsRefresh Claude Ads platform, API, policy, regulation, benchmark, issue, pull-request, fork, and repository evidence. Use for ads research refresh, expired refresh_due dates, stale API or platform claims, reverify-or-demote decisions, release-current claim validation, ecosystem review, current platform changes, or updating paid-media knowledge.ȘtiințăFără avertismente★ 10,4 K↓ —
- ads-pinterestAgriciDaniel/claude-adsAudit Pinterest Ads measurement, Pinterest Tag and Conversions API, catalog and shopping readiness, visual creative, audiences, Performance+ intent, budgets, brand safety, and reporting. Use for Pinterest Ads, promoted Pins, shopping ads, catalog sales, Pinterest Tag, Pinterest Conversions API, or Pinterest Performance+.MarketingFără avertismente★ 10,4 K↓ —
- monitoring-expertJeffallan/claude-skillsConfigures monitoring systems, implements structured logging pipelines, creates Prometheus/Grafana dashboards, defines alerting rules, and instruments distributed tracing. Implements Prometheus/Grafana stacks, conducts load testing, performs application profiling, and plans infrastructure capacity. Use when setting up application monitoring, adding observability to services, debugging production issues with logs/metrics/traces, running load tests with k6 or Artillery, profiling CPU/memory bottlenecks, or forecasting capacity needs.TestareFără avertismente★ 12,1 K↓ —
- motion-framesnexu-io/html-anything可循环 CSS 动效组合: 旋转环、地球仪、计时器、视差标签DesignFără avertismente★ 9,2 K↓ —
- ip-as-logoanbeime/skillGenerate extremely simple, cute, personified square character images with rounded heavy forms, two purposeful character colors, one solid background color, and a dominant lower-corner composition. Use when creating an animal, creature, robot, ghost, plant, object, or other character image, including when the agent should infer three product-relevant directions and propose six independent candidates for approval.MediaFără avertismente★ 8,6 K↓ —
- hive.terminal-tools-job-controladen-hive/hiveUse when launching anything that runs longer than a minute, anything that streams logs, anything you want to keep running while doing other work — or when terminal_exec auto-backgrounded on you and returned a job_id. Teaches the start→poll→wait pattern with terminal_job_logs offset bookkeeping, bounded blocking polls, platform-specific process control via terminal_job_manage capabilities, and the hard rule that jobs die when the terminal-tools server restarts. Read before calling terminal_job_start, or right after terminal_exec auto-backgrounded.PlanificareFără avertismente★ 11,1 K↓ —
- offensive-jwtSnailSploit/Claude-RedJWT attack methodology for penetration testers. Covers algorithm confusion (alg:none, RS256→HS256), weak HMAC secret brute force, kid parameter injection (SQLi, path traversal), jku/x5u/jwk header injection, JWKS cache poisoning, JWS/JWE confusion, timing attacks, and mobile JWT storage extraction. Use when testing JWT-based authentication, hunting auth bypass via token manipulation, or evaluating JWT implementation security in web or mobile apps.SecuritateFără avertismente★ 9 K↓ —
- invoicenexu-io/html-anything标准发票: 寄件/收件 + 明细 + 税 + 总额 + 付款指引AlteleFără avertismente★ 9,2 K↓ —
- nestjs-expertJeffallan/claude-skillsCreates and configures NestJS modules, controllers, services, DTOs, guards, and interceptors for enterprise-grade TypeScript backend applications. Use when building NestJS REST APIs or GraphQL services, implementing dependency injection, scaffolding modular architecture, adding JWT/Passport authentication, integrating TypeORM or Prisma, or working with .module.ts, .controller.ts, and .service.ts files. Invoke for guards, interceptors, pipes, validation, Swagger documentation, and unit/E2E testing in NestJS projects.TestareFără avertismente★ 12,1 K↓ —
- info-funnelnexu-io/html-anything3-6 阶递减漏斗, 突出转化率 / 筛选比例 / 流量损耗。竖图适合 IG Story / 小红书AlteleFără avertismente★ 9,2 K↓ —
- dispatching-parallel-agentsjnMetaCode/superpowers-zh当面对 2 个以上可以独立进行、无共享状态或顺序依赖的任务时使用AlteleFără avertismente★ 8,4 K↓ —
offensive-z-wave
SnailSploit/Claude-Red
TestareActualizat 12 oct. 2026
De la autor
Z-Wave attack methodology — sniffing with Z-Force / EZ-Wave / RTL-SDR + ZniffMobile, S0 (legacy) network-key derivation flaw and key reuse, S2 (modern) ECDH commissioning analysis, replay/injection on unauthenticated nodes, default-key brute-force on test deployments, and home-automation hub pivots. Use when targeting Z-Wave smart home devices (door locks, sensors, garage controllers) — common in mid-2010s smart home deployments still in production.
Instalare
npx skills add SnailSploit/Claude-Red --skill offensive-z-wave -a claude-code
Se instalează în .claude/skills/offensive-z-wave/ · Fiecare comandă descarcă skill-ul direct de pe GitHub cu utilitarul open source skills.
Descarcă .zip
Identic octet cu octet cu commit-ul scanat, cu licența depozitului și un fișier SOURCE.txt.
La ce are acces
Doar instrucțiuniNu am văzut acces la rețeaLicență: MIT
Verificări de siguranță pe SKILL.md
Niciun avertisment.
De ce 92
Securitate100
Proveniență87
Întreținere100
Licență100
Adopție61
Fișiere (1)
- SKILL.md