Reverse shell techniques playbook. Use when establishing remote shells including language one-liners, encrypted shells (OpenSSL/socat/ncat), web shells, PTY upgrades, file transfer methods, PowerShell shells, and Windows payload generation.
日本語の概要は準備中です。原文の説明を表示しています。
yaklang/hack-skills☆ 2,4372026年9月13日 更新
WAF bypass methodology and generic evasion techniques. Use when a web application firewall blocks injection payloads (SQLi, XSS, RCE) and you need to craft bypasses using encoding, protocol-level tricks, or WAF-specific weaknesses.
日本語の概要は準備中です。原文の説明を表示しています。
yaklang/hack-skills☆ 2,4372026年9月13日 更新
Draw a testable attack surface from one authorized target URL or one application. Use when the user says 攻击面, 供给面, 画攻击面, map the surface, application recon, find the business host, JS inventory, or when the only visible page is login. Derive hosts, APIs, keys, and the object graph from what the app already exposes. Do not open with directory brute or payload spray. Use when the user runs /attack-surface-mapping.
日本語の概要は準備中です。原文の説明を表示しています。
yaklang/hack-skills☆ 2,4372026年9月13日 更新
Use this skill to create fillable Word forms (.docx) with real Content Controls (SDT) + legacy FormField checkboxes + MERGEFIELD mail-merge placeholders + document protection. Trigger on: 'fillable form', 'form fields', 'content controls', 'SDT', 'word form', 'fill in', 'only editable fields', 'protect document', 'onboarding form', 'HR intake', 'survey template', 'contract / SOW template', 'mail-merge template', 'compliance checklist', 'medical intake questionnaire'. Output is a single .docx where specific fields are editable and the rest is locked. This skill is INDEPENDENT, not a scene layer on docx — payload is `<w:sdt>` + `<w:ffData>` + `<w:fldChar>` + `documentProtection`, none of which docx base skill covers. Do NOT trigger for regular reports, letters, memos, academic papers, pitch decks, or any document with no user-fillable fields — route those to officecli-docx or its scene layers.
日本語の概要は準備中です。原文の説明を表示しています。
zhu1090093659/deepseek-pp☆ 1,8632026年8月14日 更新
Implement secure webhook verification — HMAC signature validation, replay attack prevention, idempotency keys, and webhook payload processing.
日本語の概要は準備中です。原文の説明を表示しています。
a5c-ai/babysitter☆ 1,8412026年9月17日 更新
Qdrant vector database with filtering, payloads, and quantization support
日本語の概要は準備中です。原文の説明を表示しています。
a5c-ai/babysitter☆ 1,8412026年9月17日 更新
Apply when context is filling up: large outputs, long files, repeated reads, fan-out planning. Route bulk to subagents; keep summaries in the main thread, not raw payloads.
日本語の概要は準備中です。原文の説明を表示しています。
michael-denyer/pstack-claude☆ 1,8372026年10月12日 更新
Use this skill to create fillable Word forms (.docx) with real Content Controls (SDT) + legacy FormField checkboxes + MERGEFIELD mail-merge placeholders + document protection. Trigger on: 'fillable form', 'form fields', 'content controls', 'SDT', 'word form', 'fill in', 'only editable fields', 'protect document', 'onboarding form', 'HR intake', 'survey template', 'contract / SOW template', 'mail-merge template', 'compliance checklist', 'medical intake questionnaire'. Output is a single .docx where specific fields are editable and the rest is locked. This skill is INDEPENDENT, not a scene layer on docx — payload is `<w:sdt>` + `<w:ffData>` + `<w:fldChar>` + `documentProtection`, none of which docx base skill covers. Do NOT trigger for regular reports, letters, memos, academic papers, pitch decks, or any document with no user-fillable fields — route those to officecli-docx or its scene layers.
日本語の概要は準備中です。原文の説明を表示しています。
Team-Commonly/commonly☆ 1,3612026年10月10日 更新
Governs Event Schema Sets, the Fabric registries of event types and message payload schemas. Covers create, rename, update and delete of a definition, and listing, property reads or base64 decoding. Every Event Schema Set task belongs here. Ingestion pipelines are eventstream-cli.
日本語の概要は準備中です。原文の説明を表示しています。
microsoft/skills-for-fabric☆ 1,2432026年10月5日 更新
Use when the user provides 1-50 concrete bad-case search queries for one Viking Search app and wants local deterministic fixes. This skill only verifies request-level fine-operation interventions against a read-only baseline scene and delivers a console-ready configuration sheet, validated payloads, and a replay script. It must not mutate scenes, apps, dictionaries, datasets, recall core parameters, or online defaults.
日本語の概要は準備中です。原文の説明を表示しています。
volcengine/SearchCLI☆ 1,1942026年10月10日 更新
Implement, review, or debug push notifications in iOS/macOS apps — local notifications, remote (APNs) notifications, rich notifications, notification actions, silent pushes, and notification service/content extensions. Use when working with UNUserNotificationCenter, registering for remote notifications, handling notification payloads, setting up notification categories and actions, creating rich notification content, or debugging notification delivery. Also use when working with alerts, badges, sounds, background pushes, or user notification permissions in Swift apps.
日本語の概要は準備中です。原文の説明を表示しています。
dpearson2699/swift-ios-skills☆ 1,1902026年8月1日 更新
Maintain, debug, and recover MTGA's Trae native custom-model route. Use when Trae native integration fails, Trae updates shift ai_agent.dll hook offsets, errors such as 4028/4054/429 appear, native rewriter or SseOpenPayload URL rewriting needs diagnosis, or Codex needs to avoid repeating prior renderer-JS/private-protocol dead ends.
日本語の概要は準備中です。原文の説明を表示しています。
BiFangKNT/mtga☆ 1,1692026年6月18日 更新
Create a Telegram-ready Neva release announcement from a GitHub release payload. Use for official Neva Telegram release posts.
日本語の概要は準備中です。原文の説明を表示しています。
nevalang/neva☆ 1,0842026年8月23日 更新
Create a Discord-ready Neva release announcement from a GitHub release payload. Use for official Neva Discord release posts.
日本語の概要は準備中です。原文の説明を表示しています。
nevalang/neva☆ 1,0842026年8月23日 更新
Produce a detailed report on APIError events from Agent Monitor data — counts over time, which sessions and models are affected, and the likely root cause (rate limits, overload/529, or context-window pressure) inferred from each event's summary and data payload. Use when API errors spike or when you need to explain why requests are failing.
日本語の概要は準備中です。原文の説明を表示しています。
hoangsonww/Claude-Code-Agent-Monitor☆ 1,0662026年10月12日 更新
Generate a single-file MCP App widget for an MCP tool, with either bundled runtime code or user-approved public CDN imports. Describe the visual and provide a plain structured payload or a full tool result with content, structuredContent, and meta.
日本語の概要は準備中です。原文の説明を表示しています。
microsoft/power-platform-skills☆ 9932026年10月12日 更新
Expert knowledge for Azure Confidential Ledger development including troubleshooting, decision making, security, integrations & coding patterns, and deployment. Use when configuring ACL auth/attestation, integrating with Blob/Cosmos, using MST payloads, or deploying via ARM/Terraform, and other Azure Confidential Ledger related development tasks. Not for Azure Confidential Computing (use azure-confidential-computing), Azure Key Vault (use azure-key-vault), Azure Dedicated HSM (use azure-dedicated-hsm), Azure Payment Hsm (use azure-payment-hsm).
日本語の概要は準備中です。原文の説明を表示しています。
MicrosoftDocs/Agent-Skills☆ 7782026年10月11日 更新
Use when you need to add or review fuzz testing for Java APIs with CATS — including contract-driven negative testing, malformed payload validation, boundary input exploration, CI integration, reproducible failures, and local execution guidance. This should trigger for requests such as Add fuzz testing to a Java project; Use CATS for API negative testing; Review CI quality gates for API contract robustness; Improve boundary and malformed input test coverage; Run CATS fuzz tests against an OpenAPI contract. Part of Plinth Toolkit
日本語の概要は準備中です。原文の説明を表示しています。
jabrena/plinth☆ 4482026年10月8日 更新
Security-first SOP for multi-tenant RAG systems. Activate when a calling agent is building, reviewing, or debugging any retrieval pipeline whose vector store is shared across more than one user, organisation, workspace, customer, or permission scope. Encodes the single non-negotiable rule — **filter at the vector store query, never after retrieval / never after rerank** — together with the per-vendor query-time filter APIs (Pinecone namespaces + `$eq`/`$in`, Weaviate `multiTenancyConfig` + tenant handle, Qdrant `is_tenant` payload index + `Filter.must`, Chroma `where`, pgvector RLS), and the cross-framework adapters (LlamaIndex `MetadataFilters`, LangChain `filter=` dict). Frame the work as preventing CVE-2024-41892 / EchoLeak / Slack-AI-class cross-tenant leakage, not as "adding a filter for relevance".
日本語の概要は準備中です。原文の説明を表示しています。
agentsope/SkillAlchemy☆ 4432026年10月9日 更新
Background memory consolidation — overnight review, merge, and injection payload for memory files.
日本語の概要は準備中です。原文の説明を表示しています。
notque/vexjoy-agent☆ 4412026年10月12日 更新
Use when about to take any outward or offensive action (request, payload, persistence, lateral movement, exfil, or feeding captured traffic to the model) — to decide detection footprint, cleanup, and secret redaction first
日本語の概要は準備中です。原文の説明を表示しています。
hypnguyen1209/offensive-claude☆ 3892026年9月28日 更新
Use when bypassing EDR/AV to run a payload — hook unhooking, direct/indirect syscalls, PPID spoofing, process injection, AMSI bypass, ETW patching, memory/sleep encryption, behavioral evasion
日本語の概要は準備中です。原文の説明を表示しています。
hypnguyen1209/offensive-claude☆ 3892026年9月28日 更新
Use when gaining initial access to a target — phishing, payload delivery, HTML smuggling, ISO/IMG/MOTW bypass, supply-chain, credential stuffing, exposed-service exploitation
日本語の概要は準備中です。原文の説明を表示しています。
hypnguyen1209/offensive-claude☆ 3892026年9月28日 更新
Use when adding cross-cutting concerns to durable functions — structured logging or tracing across all functions, error tracking with Sentry, payload encryption for sensitive data, dependency injection of clients (DB, Stripe, etc.) into function handlers, custom telemetry, or behavior that should apply uniformly across many functions. Covers Inngest middleware lifecycle, creating custom middleware, dependencyInjectionMiddleware, @inngest/middleware-encryption, @inngest/middleware-sentry, and custom middleware patterns.
日本語の概要は準備中です。原文の説明を表示しています。
Asymmetric-al/core☆ 3812026年10月12日 更新