Search

Find skills by name, source, slug, or description across the full catalog.

Feature your product here Catalog & search unit · reach builders installing agent skills View pricing →

#

Skill

Source

Installs

csv-formula-injection yaklang/hack-/csv-formula-injection >- CSV/spreadsheet formula injection (DDE, Excel/LibreOffice, Google Sheets IMPORT*). Use when exports, imports, or u…

active-directory-acl-abuse yaklang/hack-/active-directory-acl-abuse >- Active Directory ACL abuse playbook. Use when exploiting misconfigured AD permissions including GenericAll, WriteD…

exposure-coach tradermonty/claude-trading-/exposure-coach Generate a one-page Market Posture summary with net exposure ceiling, growth-vs-value bias, participation breadth, an…

tradermonty/claude-trading-

jndi-injection yaklang/hack-/jndi-injection >- JNDI injection playbook. Use when Java applications perform JNDI lookups with attacker-controlled names, especiall…

clickjacking yaklang/hack-/clickjacking >- Clickjacking playbook. Use when testing whether target pages can be framed, whether X-Frame-Options or CSP frame-a…

google-maps fetcher-sh/fetcher-/google-maps >- A Google Maps API alternative and Google Places API alternative on fetcher.sh — pay-per-call in USDC via x402, or …

fetcher-sh/fetcher-

google-news fetcher-sh/fetcher-/google-news >- A Google News API alternative on fetcher.sh — pay-per-call in USDC via x402, or prepaid credits with a Bearer key,…

fetcher-sh/fetcher-

http2-specific-attacks yaklang/hack-/http2-specific-attacks >- HTTP/2 protocol-specific attack playbook. Use when the target supports HTTP/2 and you need to exploit binary frami…

earnings-calendar tradermonty/claude-trading-/earnings-calendar This skill retrieves upcoming earnings announcements for US stocks using the Financial Modeling Prep (FMP) API. Use t…

tradermonty/claude-trading-

saml-sso-assertion-attacks yaklang/hack-/saml-sso-assertion-attacks >- SAML SSO assertion attack playbook. Use when testing signature validation, assertion wrapping, audience restrictio…

active-directory-kerberos-attacks yaklang/hack-/active-directory-kerberos-attacks >- Kerberos attack playbook for Active Directory. Use when targeting AD authentication via AS-REP roasting, Kerberoas…

shareplay-activities dpearson2699/swift-ios-/shareplay-activities Build shared real-time experiences using GroupActivities and SharePlay. Use when implementing shared media playback, …

dpearson2699/swift-ios-

hash-attack-techniques yaklang/hack-/hash-attack-techniques >- Hash attack playbook. Use when exploiting length extension, MD5/SHA1 collisions, HMAC timing leaks, birthday attac…

arbitrary-write-to-rce yaklang/hack-/arbitrary-write-to-rce >- Arbitrary write to RCE playbook. Use when you have an arbitrary write primitive (from heap exploitation, format st…

linux-privilege-escalation yaklang/hack-/linux-privilege-escalation >- Linux privilege escalation playbook. Use when you have low-privilege shell access and need to escalate to root via…

active-directory-certificate-services yaklang/hack-/active-directory-certificate-services >- AD Certificate Services attack playbook. Use when targeting misconfigured AD CS for privilege escalation via ESC1-…

doca-gpunetio-ib-write-lat Official nvidia//doca-gpunetio-ib-write-lat Use this skill when the user is measuring GPU-kernel-initiated RDMA WRITE latency through doca-gpunetio — building an…

doca-telemetry-exporter Official nvidia//doca-telemetry-exporter Use this skill when the user is doing hands-on DOCA Telemetry Exporter programming on a host where DOCA is installed …

ai-ml-security yaklang/hack-/ai-ml-security >- AI/ML security playbook. Use when assessing model supply chain attacks (pickle RCE, poisoned weights), adversarial…

prototype-pollution yaklang/hack-/prototype-pollution >- Prototype pollution testing for JavaScript stacks. Use when user input is merged into objects (query parsers, JSON…

dns-rebinding-attacks yaklang/hack-/dns-rebinding-attacks >- DNS rebinding attack playbook. Use when testing applications that trust DNS resolution for origin checks, interact…

yelp fetcher-sh/fetcher-/yelp >- A Yelp API alternative on fetcher.sh — pay-per-call in USDC via x402, or prepaid credits with a Bearer key, no Yel…

fetcher-sh/fetcher-

dangling-markup-injection yaklang/hack-/dangling-markup-injection >- Dangling markup injection playbook. Use when HTML injection is possible but JavaScript execution is blocked (CSP, …

defi-attack-patterns yaklang/hack-/defi-attack-patterns >- DeFi attack pattern playbook. Use when analyzing flash loan attacks, price oracle manipulation, MEV sandwich attac…

mantine-custom-components mantinedev//mantine-custom-components Build custom components that integrate with Mantine's theming, Styles API, and core features. Use this skill when: (1…

network-protocol-attacks yaklang/hack-/network-protocol-attacks >- Network protocol attack playbook. Use when exploiting layer 2/3 protocols including ARP spoofing, LLMNR/NBT-NS/mDN…

edge-signal-aggregator tradermonty/claude-trading-/edge-signal-aggregator Aggregate and rank signals from multiple edge-finding (edge-candidate-agent, theme-detector, sector-analyst, i…

tradermonty/claude-trading-

app-store fetcher-sh/fetcher-/app-store >- An Apple App Store API alternative on fetcher.sh — pay-per-call in USDC via x402, or prepaid credits with a Bearer…

fetcher-sh/fetcher-

windows-av-evasion yaklang/hack-/windows-av-evasion >- AV/EDR evasion playbook for Windows. Use when bypassing AMSI, ETW, .NET assembly detection, shellcode execution, p…

xslt-injection yaklang/hack-/xslt-injection >- XSLT injection testing: processor fingerprinting, XXE and document() SSRF, EXSLT write primitives, PHP/Java/.NET e…

email-header-injection yaklang/hack-/email-header-injection >- Email header injection and spoofing playbook. Use when testing contact forms, email APIs, password reset flows, or…

memory-forensics-volatility yaklang/hack-/memory-forensics-volatility >- Memory forensics playbook using Volatility 2/3. Use when analyzing memory dumps for malware analysis, credential e…

type-juggling yaklang/hack-/type-juggling >- PHP type juggling and weak comparison (`==`) bypass. Use when authentication, HMAC/signature checks, or token vali…

mcp-duckgo aahl//mcp-duckgo for web search and content scraping via DuckDuckGo MCP Server. Used when users need online searching and web s…

sector-analyst tradermonty/claude-trading-/sector-analyst This skill should be used when analyzing sector rotation patterns and market cycle positioning.

tradermonty/claude-trading-

windows-privilege-escalation yaklang/hack-/windows-privilege-escalation >- Windows local privilege escalation playbook. Use when you have low-privilege shell access on Windows and need to e…

container-escape-techniques yaklang/hack-/container-escape-techniques >- Container escape playbook. Use when operating inside a Docker container, LXC, or Kubernetes pod and need to escape…

influence-and-negotiation samber/cc-/influence-and-negotiation Influence and negotiation toolkit for any interaction needing another person's agreement, even when the user never sa…

instagram-scraper jeniok//instagram-scraper >- Scrape public Instagram data without logging in and without a Meta developer account — profiles, posts, reels, sto…

linux-lateral-movement yaklang/hack-/linux-lateral-movement >- Linux lateral movement playbook. Use after gaining initial access to pivot across Linux hosts via SSH hijacking, c…

modern-web-design freshtechbro/claudedesign/modern-web-design Modern web design trends, principles, and implementation patterns for 2024-2025. Use this skill when designing websit…

freshtechbro/claudedesign

graphviz markdown-viewer//graphviz Create directed/undirected graphs using DOT language with automatic layout. Best for dependency trees, call graphs, p…

markdown-viewer/

wait-what vinvcn/--zh-cn/wait-what 停一下。刚才那条消息没有说清楚——重新表述一遍。

m10-performance actionbook/rust-/m10-performance CRITICAL: Use for performance optimization. Triggers: performance, optimization, benchmark, profiling, flamegraph, cr…

actionbook/rust-

reddit resciencelab/opc-/reddit Search and retrieve content from Reddit. Get posts, comments, subreddit info, and user profiles via the public JSON A…

resciencelab/opc-

classical-cipher-analysis yaklang/hack-/classical-cipher-analysis >- Classical cipher analysis playbook. Use when encountering substitution ciphers, Vigenere, transposition, XOR, or e…

stanley-druckenmiller-investment tradermonty/claude-trading-/stanley-druckenmiller-investment Druckenmiller Strategy Synthesizer - Integrates 8 upstream skill outputs (Market Breadth, Uptrend Analysis, Market To…

tradermonty/claude-trading-

beautiful-article conardli/garden-/beautiful-article 把用户提供的素材（网页 URL / PDF / DOCX / Markdown / 纯文本 / 截图 / 粘贴材料）编辑、设计成一篇美丽的、可离线打开和分…

conardli/garden-

tailwindcss hairyf//tailwindcss Tailwind CSS utility-first CSS framework. Use when styling web applications with utility classes, building responsive…

tunneling-and-pivoting yaklang/hack-/tunneling-and-pivoting >- Tunneling and pivoting playbook. Use when establishing network tunnels through compromised hosts including SSH tun…