Directory

Catalog

324,895 skills · 109,090 with SKILL.md · 9,730 ranked on the leaderboard

All skills

#

Skill

Source

8W Activity

Installs

expression-language-injection >- Expression Language injection playbook. Use when Java EL, SpEL, OGNL, or MVEL expressions may evaluate attacker-co…

yaklang/hack-skills

http-host-header-attacks >- HTTP Host header injection and routing abuse playbook. Use when the application trusts the Host header for generat…

yaklang/hack-skills

spot Binance Spot request using the Binance API. Authentication requires API key and secret key. Supports testnet, mainnet…

binance/binance-skills-hub

git-sync-main Sync local main branch with the latest code from official upstream or origin remote

zc277584121/mygitplugin

kibana-connectors Create and manage Kibana connectors for Slack, PagerDuty, Jira, webhooks, and more via REST API or Terraform. Use whe…

elastic/agent-skills

math-olympiad Official Solve competition math problems (IMO, Putnam, USAMO, AIME) with adversarial verification that catches the errors self…

anthropics/claude-plugins-official

security-detection-rule-management Create, tune, and manage Elastic Security detection rules (SIEM and Endpoint). Use for false positives, exceptions, n…

elastic/agent-skills

kibana-vega Create Vega and Vega-Lite visualizations with ES|QL data sources in Kibana. Use when building custom charts, dashboar…

elastic/agent-skills

sentry-feature-setup Official Configure specific Sentry features beyond basic SDK setup. Use when asked to set up OpenTelemetry pipelines, create a…

getsentry/sentry-for-ai

level-design Design and build playable levels — the blockout/whitebox-to-playable workflow, player metrics and grid layout, pacing…

gamedev-skills/awesome-gamedev-agent-skills

owasp-security Implement secure coding practices following OWASP Top 10.

hoodini/ai-agents-skills

elasticsearch-security-troubleshooting Diagnose and resolve Elasticsearch security errors: 401/403 failures, TLS problems, expired API keys, role mapping mi…

elastic/agent-skills

creative-director AI creative director with recursive self-assessment: 20+ methodologies (SIT, TRIZ, Bisociation, SCAMPER, Synectics), …

nexu-io/open-design

subdomain-takeover >- Subdomain takeover detection and exploitation playbook. Use when targets have dangling CNAME/NS/MX records pointin…

yaklang/hack-skills

jndi-injection >- JNDI injection playbook. Use when Java applications perform JNDI lookups with attacker-controlled names, especiall…

yaklang/hack-skills

csv-formula-injection >- CSV/spreadsheet formula injection (DDE, Excel/LibreOffice, Google Sheets IMPORT*). Use when exports, imports, or u…

yaklang/hack-skills

monetize-service Official Build and deploy a paid API that other agents can pay to use via x402. Use when you or the user want to monetize an A…

coinbase/agentic-wallet-skills

clickjacking >- Clickjacking playbook. Use when testing whether target pages can be framed, whether X-Frame-Options or CSP frame-a…

yaklang/hack-skills

active-directory-acl-abuse >- Active Directory ACL abuse playbook. Use when exploiting misconfigured AD permissions including GenericAll, WriteD…

yaklang/hack-skills

cloud-monitoring-metric-selection Retrieve, query, and identify relevant Google Cloud Monitoring metric descriptors for a GCP service or resource (such…

browser-automation 浏览器自动化控制。【优先使用此 skill，不要用内置 browser 工具】当用户说"打开网页"、"点击"、"填写表单"、"截图"、"网页…

sophieguanongit/openclaw-browser-automation

ads-test Design and evaluate paid-ad experiments with hypotheses, randomization units, sample-size and duration assumptions, g…

agricidaniel/claude-ads

paper-audit Reviewer-style audit and submission gate for academic papers in .tex, .typ, or .pdf. Use for peer-review critique, re…

bahayonghang/academic-writing-skills

saml-sso-assertion-attacks >- SAML SSO assertion attack playbook. Use when testing signature validation, assertion wrapping, audience restrictio…

yaklang/hack-skills

active-directory-kerberos-attacks >- Kerberos attack playbook for Active Directory. Use when targeting AD authentication via AS-REP roasting, Kerberoas…

yaklang/hack-skills

ce-ideate Generate and evaluate grounded ideas. Use when the user wants ideas, improvements, or surprising directions before ch…

everyinc/compounding-engineering-plugin

skill-scanner Official Scan agent skills for security issues. Use when asked to "scan a skill", "audit a skill", "review skill security", "c…

getsentry/skills

lesson-learned Analyze recent code changes via git history and extract software engineering lessons.

softaworks/agent-toolkit

hash-attack-techniques >- Hash attack playbook. Use when exploiting length extension, MD5/SHA1 collisions, HMAC timing leaks, birthday attac…

yaklang/hack-skills

ce-ideate Generate and evaluate grounded ideas. Use when the user wants ideas, improvements, or surprising directions before ch…

everyinc/compound-engineering-plugin

active-directory-certificate-services >- AD Certificate Services attack playbook. Use when targeting misconfigured AD CS for privilege escalation via ESC1-…

yaklang/hack-skills

google-drive Google Drive integration. Manage Drives, Users, Permissions. Use when the user wants to interact with Google Drive da…

membranedev/application-skills

http2-specific-attacks >- HTTP/2 protocol-specific attack playbook. Use when the target supports HTTP/2 and you need to exploit binary frami…

yaklang/hack-skills

competitive-report-structure >- Use after benchmark-methodology has produced scored competitor profile cards. Assembles findings into a decision-g…

arbitrary-write-to-rce >- Arbitrary write to RCE playbook. Use when you have an arbitrary write primitive (from heap exploitation, format st…

yaklang/hack-skills

new-unity-project Use when starting a brand-new Unity game or project from scratch — "make/start/create a new game", "bootstrap a Unity…

unity-technologies/skills

spring-boot-dependency-injection Provides dependency injection patterns for Spring Boot projects, including constructor-first design, optional collabo…

giuseppe-trisciuoglio/developer-kit

dbs-install-skill 将单个 Skill 或 Skill 集合安?

dontbesilent2025/dbskill

google-cloud-global-frontend-configuration Guides agents through a 6-step discovery process to design and deploy Google Cloud global external Application Load B…

nextjs-app-router Provides patterns and code examples for building Next.js 16+ applications with App Router architecture. Use when crea…

giuseppe-trisciuoglio/developer-kit

spring-boot-actuator Provides patterns to configure Spring Boot Actuator for production-grade monitoring, health probes, secured managemen…

giuseppe-trisciuoglio/developer-kit

unit-test-wiremock-rest-api Provides patterns for unit testing external REST APIs using WireMock. Stubs API responses, verifies request details, …

giuseppe-trisciuoglio/developer-kit

azure-verified-modules Official Azure Verified Modules (AVM) requirements and best practices for developing certified Azure Terraform modules. Use wh…

hashicorp/agent-skills

spring-boot-resilience4j Provides fault tolerance patterns for Spring Boot 3.x using Resilience4j. Use when implementing circuit breakers, han…

giuseppe-trisciuoglio/developer-kit

spring-ai-mcp-server-patterns Provides Spring Boot MCP server patterns that create Model Context Protocol servers with Spring AI by defining tool h…

giuseppe-trisciuoglio/developer-kit

nestjs-best-practices Provides comprehensive NestJS best practices including modular architecture, dependency injection scoping, exception …

giuseppe-trisciuoglio/developer-kit

spring-boot-event-driven-patterns Provides Event-Driven Architecture (EDA) patterns for Spring Boot — creates domain events, configures ApplicationEven…

giuseppe-trisciuoglio/developer-kit

ce-setup Check Compound Engineering health and repo-local config.

everyinc/compound-engineering-plugin

spring-boot-cache Provides patterns for implementing Spring Boot caching: configures Redis/Caffeine/EhCache providers with TTL and evic…

giuseppe-trisciuoglio/developer-kit

vueuse-functions Apply VueUse composables where appropriate to build concise, maintainable Vue.js / Nuxt features.