Search

Find skills by name, source, slug, or description across the full catalog.

Feature your product here Catalog & search unit · reach builders installing agent skills View pricing →

#

Skill

Source

Installs

ssti-server-side-template-injection yaklang/hack-/ssti-server-side-template-injection >- SSTI playbook. Use when template expressions, server-side rendering, preview features, or templating engines may e…

permissionkit dpearson2699/swift-ios-/permissionkit Create child communication safety experiences using PermissionKit to request parental permission for children.

dpearson2699/swift-ios-

vueuse-functions vueuse//vueuse-functions Apply VueUse composables where appropriate to build concise, maintainable Vue.js / Nuxt features.

xxe-xml-external-entity yaklang/hack-/xxe-xml-external-entity >- XXE playbook. Use when XML, SVG, OOXML, SOAP, or parser-driven imports may resolve external entities, files, or in…

om-apply-upgrade-notes open-mercato//om-apply-upgrade-notes Apply the collection's UPGRADE_NOTES.md after an upgrade. Re-syncs installed tracker and browser-provider desc…

signal-postmortem tradermonty/claude-trading-/signal-postmortem Record and analyze post-trade outcomes for signals generated by edge pipeline and other . Track false positives…

tradermonty/claude-trading-

format-string-exploitation yaklang/hack-/format-string-exploitation >- Format string exploitation playbook. Use when printf-family functions receive user-controlled format strings, enab…

file-access-vuln yaklang/hack-/file-access-vuln >- Entry P1 category router for file access and upload workflows. Use when testing download endpoints, file paths, lo…

kernel-exploitation yaklang/hack-/kernel-exploitation >- Linux kernel exploitation playbook. Use when exploiting kernel vulnerabilities (UAF, OOB, race condition, type con…

swiftui-ui-patterns dimillian//swiftui-ui-patterns Best practices and example-driven guidance for building SwiftUI views and components, including navigation hierarchie…

canslim-screener tradermonty/claude-trading-/canslim-screener Screen US stocks using William O'Neil's CANSLIM growth stock methodology. Use when user requests CANSLIM stock screen…

tradermonty/claude-trading-

http-parameter-pollution yaklang/hack-/http-parameter-pollution >- HTTP Parameter Pollution (HPP): duplicate query/body keys parsed differently by servers, proxies, WAFs, and app fr…

request-smuggling yaklang/hack-/request-smuggling >- HTTP request smuggling and desynchronization testing. Use when front proxies, CDNs, or load balancers disagree wit…

deserialization-insecure yaklang/hack-/deserialization-insecure >- Insecure deserialization playbook. Use when Java, PHP, or Python applications deserialize untrusted data via Objec…

race-condition yaklang/hack-/race-condition >- Race condition and TOCTOU testing for web apps. Use when testing one-time operations, concurrent HTTP abuse, rate-…

csp-bypass-advanced yaklang/hack-/csp-bypass-advanced >- Advanced Content Security Policy bypass techniques. Use when XSS or data exfiltration is blocked by CSP and you ne…

longbridge-research longbridge//longbridge-research Institution ratings, consensus price targets, EPS/revenue forecasts, finance calendar, shareholder data, fund holders…

browser-exploitation-v8 yaklang/hack-/browser-exploitation-v8 >- Browser and V8 exploitation playbook. Use when exploiting JavaScript engine vulnerabilities including JIT type con…

open-redirect yaklang/hack-/open-redirect >- Open redirect playbook. Use when URL parameters, form actions, or JavaScript sinks control navigation targets and …

symbolic-execution-tools yaklang/hack-/symbolic-execution-tools >- Symbolic execution and constraint solving playbook. Use when solving CTF reversing challenges, recovering keys, by…

institutional-flow-tracker tradermonty/claude-trading-/institutional-flow-tracker Use this skill to track institutional investor ownership changes and portfolio flows using 13F filings data.

tradermonty/claude-trading-

swift-codable dpearson2699/swift-ios-/swift-codable Implement Swift Codable models for JSON and property-list encoding and decoding with JSONDecoder, JSONEncoder, Coding…

dpearson2699/swift-ios-

mobile-ssl-pinning-bypass yaklang/hack-/mobile-ssl-pinning-bypass >- Mobile SSL pinning bypass playbook. Use when intercepting HTTPS traffic from mobile applications that implement ce…

crlf-injection yaklang/hack-/crlf-injection >- CRLF injection playbook. Use when user input reaches HTTP response headers, Location redirects, Set-Cookie values,…

energykit dpearson2699/swift-ios-/energykit Query grid electricity forecasts and submit load events using EnergyKit to help users optimize home electricity usage.

dpearson2699/swift-ios-

http-host-header-attacks yaklang/hack-/http-host-header-attacks >- HTTP Host header injection and routing abuse playbook. Use when the application trusts the Host header for generat…

insecure-source-code-management yaklang/hack-/insecure-source-code-management >- Source control and artifact exposure (.git, .svn, .hg, backups, .env). Use when recon finds VCS paths, 403 on hidd…

web-cache-deception yaklang/hack-/web-cache-deception >- Web cache deception and poisoning playbook. Use when CDN, reverse proxy, or application caching may serve sensitiv…

subdomain-takeover yaklang/hack-/subdomain-takeover >- Subdomain takeover detection and exploitation playbook. Use when targets have dangling CNAME/NS/MX records pointin…

dependency-confusion yaklang/hack-/dependency-confusion >- Supply-chain testing via package-manager dependency confusion: when internal package names resolve to attacker-con…

superwall-editor superwall//superwall-editor Build and edit live Superwall paywalls from the CLI.

expression-language-injection yaklang/hack-/expression-language-injection >- Expression Language injection playbook. Use when Java EL, SpEL, OGNL, or MVEL expressions may evaluate attacker-co…

conventional-git samber/cc-/conventional-git Conventional Commits v1.0.0 branch naming, worktree naming, and commit message standards for GitHub and GitLab projec…

product-manager-toolkit sickn33/agentic-awesome-/product-manager-toolkit Essential tools and frameworks for modern product management, from discovery to delivery.

sickn33/agentic-awesome-

youtube-api fetcher-sh/fetcher-/youtube-api >- A YouTube API alternative on fetcher.sh — pay-per-call in USDC via x402, or prepaid credits with a Bearer key, no …

fetcher-sh/fetcher-

csv-formula-injection yaklang/hack-/csv-formula-injection >- CSV/spreadsheet formula injection (DDE, Excel/LibreOffice, Google Sheets IMPORT*). Use when exports, imports, or u…

active-directory-acl-abuse yaklang/hack-/active-directory-acl-abuse >- Active Directory ACL abuse playbook. Use when exploiting misconfigured AD permissions including GenericAll, WriteD…

exposure-coach tradermonty/claude-trading-/exposure-coach Generate a one-page Market Posture summary with net exposure ceiling, growth-vs-value bias, participation breadth, an…

tradermonty/claude-trading-

jndi-injection yaklang/hack-/jndi-injection >- JNDI injection playbook. Use when Java applications perform JNDI lookups with attacker-controlled names, especiall…

clickjacking yaklang/hack-/clickjacking >- Clickjacking playbook. Use when testing whether target pages can be framed, whether X-Frame-Options or CSP frame-a…

google-maps fetcher-sh/fetcher-/google-maps >- A Google Maps API alternative and Google Places API alternative on fetcher.sh — pay-per-call in USDC via x402, or …

fetcher-sh/fetcher-

google-news fetcher-sh/fetcher-/google-news >- A Google News API alternative on fetcher.sh — pay-per-call in USDC via x402, or prepaid credits with a Bearer key,…

fetcher-sh/fetcher-

http2-specific-attacks yaklang/hack-/http2-specific-attacks >- HTTP/2 protocol-specific attack playbook. Use when the target supports HTTP/2 and you need to exploit binary frami…

earnings-calendar tradermonty/claude-trading-/earnings-calendar This skill retrieves upcoming earnings announcements for US stocks using the Financial Modeling Prep (FMP) API. Use t…

tradermonty/claude-trading-

saml-sso-assertion-attacks yaklang/hack-/saml-sso-assertion-attacks >- SAML SSO assertion attack playbook. Use when testing signature validation, assertion wrapping, audience restrictio…

active-directory-kerberos-attacks yaklang/hack-/active-directory-kerberos-attacks >- Kerberos attack playbook for Active Directory. Use when targeting AD authentication via AS-REP roasting, Kerberoas…

shareplay-activities dpearson2699/swift-ios-/shareplay-activities Build shared real-time experiences using GroupActivities and SharePlay. Use when implementing shared media playback, …

dpearson2699/swift-ios-

hash-attack-techniques yaklang/hack-/hash-attack-techniques >- Hash attack playbook. Use when exploiting length extension, MD5/SHA1 collisions, HMAC timing leaks, birthday attac…

arbitrary-write-to-rce yaklang/hack-/arbitrary-write-to-rce >- Arbitrary write to RCE playbook. Use when you have an arbitrary write primitive (from heap exploitation, format st…

linux-privilege-escalation yaklang/hack-/linux-privilege-escalation >- Linux privilege escalation playbook. Use when you have low-privilege shell access and need to escalate to root via…