Search

Find skills by name, source, slug, or description across the full catalog.

#

Skill

Source

Installs

api-database-mongodb s-inc/skills/api-database-mongodb Native MongoDB driver (the mongodb npm package) - MongoClient lifecycle, typed collections, CRUD result shapes, curso…

api-spectral secops/secopskit/api-spectral API specification linting and security validation using Stoplight's Spectral with support for OpenAPI, AsyncAPI, and …

secops/secopskit

container-grype secops/secopskit/container-grype Container vulnerability scanning and dependency risk assessment using Grype with CVSS severity ratings, EPSS exploit …

secops/secopskit

crack-hashcat secops/secopskit/crack-hashcat Advanced password recovery and hash cracking tool supporting multiple algorithms and attack modes. Use when: (1) Perf…

secops/secopskit

dast-nuclei secops/secopskit/dast-nuclei Fast, template-based vulnerability scanning using ProjectDiscovery's Nuclei with extensive community templates coveri…

secops/secopskit

iac-checkov secops/secopskit/iac-checkov Infrastructure as Code (IaC) security scanning using Checkov with 750+ built-in policies for Terraform, CloudFormatio…

secops/secopskit

ir-velociraptor secops/secopskit/ir-velociraptor Endpoint visibility, digital forensics, and incident response using Velociraptor Query Language (VQL) for evidence co…

secops/secopskit

policy-opa secops/secopskit/policy-opa Policy-as-code enforcement and compliance validation using Open Policy (OPA). Use when: (1) Enforcing security …

secops/secopskit

recon-nmap secops/secopskit/recon-nmap Network reconnaissance and security auditing using Nmap for port scanning, service enumeration, and vulnerability det…

secops/secopskit

reviewdog secops/secopskit/reviewdog Automated code review and security linting integration for CI/CD pipelines using reviewdog. Aggregates findings from …

secops/secopskit

sast-bandit secops/secopskit/sast-bandit Python security vulnerability detection using Bandit SAST with CWE and OWASP mapping. Use when: (1) Scanning Python c…

secops/secopskit

sbom-syft secops/secopskit/sbom-syft Software Bill of Materials (SBOM) generation using Syft for container images, filesystems, and archives. Detects pack…

secops/secopskit

web-i18n-react-intl s-inc/skills/web-i18n-react-intl ICU message format internationalization for React — FormattedMessage, useIntl, defineMessages, and the FormatJS extra…

web-ui-mantine s-inc/skills/web-ui-mantine Mantine v7 component library — theming, styling, hooks, forms, notifications

webapp-nikto secops/secopskit/webapp-nikto Web server vulnerability scanner for identifying security issues, misconfigurations, and outdated software versions. …

secops/secopskit

webapp-sqlmap secops/secopskit/webapp-sqlmap Automated SQL injection detection and exploitation tool for web application security testing. Use when: (1) Testing w…

secops/secopskit

ai-orchestration-langchain s-inc/skills/ai-orchestration-langchain LangChain.js patterns for building LLM applications — chat models, LCEL chains, prompt templates, structured output, …

ai-infrastructure-litellm s-inc/skills/ai-infrastructure-litellm LiteLLM proxy server setup, TypeScript client patterns via OpenAI SDK, model routing, fallbacks, load balancing, spen…

api-framework-fastify s-inc/skills/api-framework-fastify Fastify routes, JSON Schema validation, plugin system, TypeScript type providers

chengfeng-export-talking-head chengfeng/chengfeng-videocut-skills/chengfeng-export-talking-head 把剪好的口播烧成一个成片文件：账本切片段、推近、字幕、HTML 画面层，一次全部烧进 mp4。用户说导出、出成片、烧字幕、渲染…

chengfeng/chengfeng-videocut-skills

chengfeng-subtitle-talking-head chengfeng/chengfeng-videocut-skills/chengfeng-subtitle-talking-head

chengfeng/chengfeng-videocut-skills

cli-framework-cli-commander s-inc/skills/cli-framework-cli-commander Node.js CLI development with Commander.js and @clack/prompts - command structure, interactive prompts, wizard state m…

container-hadolint secops/secopskit/container-hadolint Dockerfile security linting and best practice validation using Hadolint with 100+ built-in rules aligned to CIS Docke…

secops/secopskit

detection-sigma secops/secopskit/detection-sigma Generic detection rule creation and management using Sigma, the universal SIEM rule format. Sigma provides vendor-agn…

secops/secopskit

forensics-osquery secops/secopskit/forensics-osquery SQL-powered forensic investigation and system interrogation using osquery to query operating systems as relational da…

secops/secopskit

ot-security-assessment secops/secopskit/ot-security-assessment Operational Technology (OT) security assessment using a two-stage methodology: (1) Identification/Discovery of OT dev…

secops/secopskit

pentest-metasploit secops/secopskit/pentest-metasploit Penetration testing framework for exploit development, vulnerability validation, and authorized security assessments …

secops/secopskit

pytm secops/secopskit/pytm Python-based threat modeling using pytm library for programmatic STRIDE analysis, data flow diagram generation, and a…

secops/secopskit

web-data-fetching-graphql-apollo s-inc/skills/web-data-fetching-graphql-apollo Apollo Client GraphQL patterns — normalized cache and type policies, queries, mutations with optimistic updates, pagi…

web-forms-vee-validate s-inc/skills/web-forms-vee-validate VeeValidate v4 patterns - useForm, useField, defineField, useFieldArray, schema validation with Composition API

web-state-mobx s-inc/skills/web-state-mobx MobX observable state management patterns with mobx-react-lite. Use when implementing reactive client state with obse…

web-state-redux-toolkit s-inc/skills/web-state-redux-toolkit Redux Toolkit patterns for complex client state. Use when managing enterprise-scale state, needing DevTools, entity n…

web-testing-cypress-e2e s-inc/skills/web-testing-cypress-e2e Cypress E2E testing patterns - test structure, data-cy selectors, cy.intercept() mocking, custom commands, fixtures, …

web-testing-vue-test-utils s-inc/skills/web-testing-vue-test-utils Vue Test Utils — mount vs shallowMount, the wrapper API, awaiting DOM updates, flushPromises, testing composables, an…

web-tooling-storybook s-inc/skills/web-tooling-storybook Storybook patterns - CSF 3.0, args, controls, autodocs, play functions, interaction testing, visual testing, addons c…

web-ui-mui s-inc/skills/web-ui-mui Material UI component library patterns for React

web-utilities-vueuse s-inc/skills/web-utilities-vueuse VueUse composable utility collection for Vue 3 - browser, sensor, network, state, animation, and component utilities

ai-observability-langfuse s-inc/skills/ai-observability-langfuse LLM observability with Langfuse — OpenTelemetry-based tracing, evaluations, prompt management, datasets, and producti…

ai-provider-openai-sdk s-inc/skills/ai-provider-openai-sdk Official OpenAI SDK patterns for TypeScript/Node.js — client setup, Chat Completions, Responses API, streaming, struc…

api-database-mongoose s-inc/skills/api-database-mongoose MongoDB ODM with schemas, validation, middleware, and TypeScript support

api-framework-hono s-inc/skills/api-framework-hono Hono routes, OpenAPI, Zod validation

dast-ffuf secops/secopskit/dast-ffuf Fast web fuzzer for DAST testing with directory enumeration, parameter fuzzing, and virtual host discovery. Written i…

secops/secopskit

privesc-linpeas secops/secopskit/privesc-linpeas Linux privilege escalation enumeration and attack surface analysis using LinPEAS (Linux Privilege Escalation Awesome …

secops/secopskit

sast-horusec secops/secopskit/sast-horusec Multi-language static application security testing using Horusec with support for 18+ programming languages and 20+ s…

secops/secopskit

sca-blackduck secops/secopskit/sca-blackduck Software Composition Analysis (SCA) using Synopsys Black Duck for identifying open source vulnerabilities, license co…

secops/secopskit

vuln-defectdojo secops/secopskit/vuln-defectdojo Vulnerability management and findings aggregation using DefectDojo. Centralizes security findings from all SecOpsAgen…

secops/secopskit

web-dnd-dnd-kit s-inc/skills/web-dnd-dnd-kit Drag and drop with @dnd-kit - draggable, droppable, sortable, collision detection, sensors, accessibility

web-framework-angular-standalone s-inc/skills/web-framework-angular-standalone Angular 17–19 standalone components, signals, built-in control flow, inject() DI, the resource API. Load when writing…

web-i18n-vue-i18n s-inc/skills/web-i18n-vue-i18n Type-safe i18n for Vue 3 Composition API — useI18n, pipe-syntax plurals, i18n-t/d/n components, lazy-loaded locales. …

web-state-jotai s-inc/skills/web-state-jotai Atomic state management with auto-dependency tracking