.context

In the author's own words, from each skill's SKILL.md — showing the first 30 of 40 files.

• broken-access-control

  Replay captured requests with swapped identities and bumped object IDs to surface broken access control. Use when testing for IDOR or authz flaws.

  skills/applicative-pentest/broken-access-control/SKILL.md on GitHub (opens in a new tab)

• cdn-peek

  Uncover the real origin IP behind a CDN or WAF like Cloudflare, using only standard tools. Use to bypass a CDN/WAF or check if an origin leaks.

  skills/applicative-pentest/cdn-peek/SKILL.md on GitHub (opens in a new tab)

• http-request-smuggling

  Detect HTTP request smuggling by desynchronising front-end and back-end request parsing, using raw-socket timing and differential probes. Use when testing for HTTP desync (CL.TE, TE.CL).

  skills/applicative-pentest/http-request-smuggling/SKILL.md on GitHub (opens in a new tab)

• jwt-attacks

  Forge and re-sign captured JWTs to test signature validation - algorithm confusion (alg:none, RS256 to HS256), key injection, and secret cracking. Use when testing JWT or bearer-token auth.

  skills/applicative-pentest/jwt-attacks/SKILL.md on GitHub (opens in a new tab)

• ssrf-oob

  Prove blind SSRF by injecting an out-of-band callback into URL params and forwarding headers, then watching for the hit. Use when testing for SSRF.

  skills/applicative-pentest/ssrf-oob/SKILL.md on GitHub (opens in a new tab)

• webapp-probe

  Probe a web app for what it exposes or leaks - passively from captured traffic and actively against the target. Use to assess a web app's exposure or review Burp/ZAP history.

  skills/applicative-pentest/webapp-probe/SKILL.md on GitHub (opens in a new tab)

• blockchain-forensics

  Expert blockchain forensics assistant for investigators and auditors, including threat recognition, incident scoping, data collection, transaction tracking, chain analysis, attribution, OSINT, advanced demixing, cross-chain tracing, graph clustering, and reporting.

  skills/blockchain/blockchain-forensics/SKILL.md on GitHub (opens in a new tab)

• foundry-poc

  Generates a Foundry PoC for smart contracts that scientifically proves the path from no special privileges to funds lost. Focused on proof of concept for EVM using `forge test`.

  skills/blockchain/foundry-poc/SKILL.md on GitHub (opens in a new tab)

• safe-hunt

  Sweeps DeFi protocol Safe multisig wallets for governance misconfigurations and security weaknesses. Given a protocol name, Safe address, or "sweep all", fetches live config and tx history from the Safe Transaction Service API, scores each Safe against a finding pattern library, and produces an audit-ready ranked report. Use when auditing a protocol's admin controls, hunting for misconfigured mul…

  skills/blockchain/safe-hunt/SKILL.md on GitHub (opens in a new tab)

• smart-contract-audit

  Comprehensive smart contract security audit framework with multi-expert analysis. Use for full audits of Ethereum / EVM Solidity and Vyper, Solana / SVM Anchor Rust, TON / FunC / Tact, or Sui / Move projects.

  skills/blockchain/smart-contract-audit/SKILL.md on GitHub (opens in a new tab)

• cloud-bucket-brute

  Discover publicly readable cloud storage by permuting a company name into likely bucket names and probing AWS S3, Google Cloud, DigitalOcean, Alibaba, Oracle, and Vultr. Use to find exposed buckets.

  skills/cloud/cloud-bucket-brute/SKILL.md on GitHub (opens in a new tab)

• infrastructure-audit

  Comprehensive infrastructure security audit framework for IaC, Docker, Kubernetes, and cloud configurations. Use for full infrastructure audits.

  skills/cloud/infrastructure-audit/SKILL.md on GitHub (opens in a new tab)

• dylib-hijack-scan

  Scan macOS for hijackable dynamic libraries, separating exploitable privesc hijacks from harmless ones. Use to check if an app is hijackable.

  skills/defensive/dylib-hijack-scan/SKILL.md on GitHub (opens in a new tab)

• endpoint-threat-hunt

  Hunt a live macOS, Linux, or Windows endpoint for malware across process, network, and persistence. Use to scan for threats or check for compromise.

  skills/defensive/endpoint-threat-hunt/SKILL.md on GitHub (opens in a new tab)

• parse-security

  The last gate before untrusted instruction content is ingested. Screens a skill, goal or workflow fetched from git or any remote source for prompt injection, reading it as evidence rather than as instructions, on the assumption that its author wrote it to defeat this exact review. Use before installing, enabling, updating or reviewing any agent instruction content that did not come from the user…

  skills/defensive/parse-security/SKILL.md on GitHub (opens in a new tab)

• agent-onboarding

  Onboard yourself to a repo where several agents work in parallel, syncing through a shared TODO.md. Use when joining the team on a shared codebase.

  skills/generic-utils/agent-onboarding/SKILL.md on GitHub (opens in a new tab)

• agentic-seo

  Turn a public-facing website into optimized for search engines and generative search engines by using all efficient means

  skills/generic-utils/agentic-seo/SKILL.md on GitHub (opens in a new tab)

• context-window-to-skill

  Takes the active conversation as reference to understand how a skill can be created, with all the lessons learned from the user's needs in the conversation.

  skills/generic-utils/context-window-to-skill/SKILL.md on GitHub (opens in a new tab)

• git-commit

  Commit to Git safely: runs tests, security-reviews the diff, strips secrets and dead code, and enforces clean messages. Use before any commit or push.

  skills/generic-utils/git-commit/SKILL.md on GitHub (opens in a new tab)

• keen-eyes

  Make agent chat turns concise and battery-included in behavior, setup and accuracy.

  skills/generic-utils/keen-eyes/SKILL.md on GitHub (opens in a new tab)

• no-aispeak

  Generate textual content as the user will normally write without the disliked common AI way of writing

  skills/generic-utils/no-aispeak/SKILL.md on GitHub (opens in a new tab)

• secure-1pass-access

  Let the agent access local 1pass CLI credentials, without compromising security standards

  skills/generic-utils/secure-1pass-access/SKILL.md on GitHub (opens in a new tab)

• self-improve

  Audit the conversation and the project for what could have gone better, then turn the generalizable lessons into committed improvements in the repo that hosts this skill. Use at the end of a task or conversation where the agent needed correction, repeated work, or took a longer path than necessary.

  skills/generic-utils/self-improve/SKILL.md on GitHub (opens in a new tab)

• shadow-partner

  Use X MCP to aggregate a persona's posts for alpha - the transferable tips, tools, workflows and rules of thumb to pick up for a task.

  skills/generic-utils/shadow-partner/SKILL.md on GitHub (opens in a new tab)

• training-guide

  Build an interactive visual course as one self-contained HTML page, one idea per screen. Use to explain or teach a subject visually, step by step.

  skills/generic-utils/training-guide/SKILL.md on GitHub (opens in a new tab)

• variant-table

  Lay draft copy out as a table with three distinct rewrites per line and a top pick. Use to compare wording for posts, headlines, CTAs, or microcopy.

  skills/generic-utils/variant-table/SKILL.md on GitHub (opens in a new tab)

• audit-scope

  Draft a security-audit scope from GitHub repos or API access, with a protocol narrative and a sizing table. Use when scoping a new engagement.

  skills/hunter-utils/audit-scope/SKILL.md on GitHub (opens in a new tab)

• auditor-quiz

  Quiz an auditor on a codebase's mechanics and vulnerabilities, drawn from its own code and docs. Use to test understanding before or during a review.

  skills/hunter-utils/auditor-quiz/SKILL.md on GitHub (opens in a new tab)

• evidence-video

  Turn a user story or a bug reproduction into a short, evidence-backed walkthrough video where every scene is a real capture, hash-chained so nothing can be faked, and the ending discusses insight, impact and risk with a blast-radius map. Use when a reported bug, an auth or access flow, or a feature walkthrough needs a reproducible video a reader can trust, not a screen recording or a hand-drawn d…

  skills/hunter-utils/evidence-video/SKILL.md on GitHub (opens in a new tab)

• external-enumeration

  Passively map a company's domains, subdomains, DNS ownership, tech stack, and CDNs. Use to recon an external attack surface or enumerate subdomains.

  skills/hunter-utils/external-enumeration/SKILL.md on GitHub (opens in a new tab)

No skill matches that filter.

Similar skills

• ui-ux-pro-max-skillby nextlevelbuilder An AI skill that provides design intelligence for building professional UI/UX across multiple platforms. 145k stars · 7 skills
• SkillSpectorby NVIDIA Security scanner for AI agent skills. Detect vulnerabilities, malicious patterns, security risks, prompt injection, data exfiltration, and… 24.4k stars · 26 skills
• cangjie-skillby kangarooking 把书、长视频、播客等高价值内容蒸馏成可执行的 Agent Skills（Distill high-value content from books, long-form videos, podcasts, and more into executable Agent Skill… 12.1k stars · 21 skills
• claude-code-ultimate-guideby FlorianBruniaux The most comprehensive Claude Code guide: agentic workflows, hooks, skills, MCP servers, quizzes, and production-ready templates. 430K+ lin… 6.4k stars · 27 skills
• reaby morluto Reverse engineer anything with agents, from app behavior down to native binaries. 431k stars · 5 skills
• skillsby mattpocock Skills for Real Engineers. Straight from my .agents directory. 313k stars · 30 skills