4,624 skills sorted by stars.
Ghost Security — combined security report. Aggregates findings from all scan skills (scan-deps, scan-secrets, scan-code)...
Ghost Security - SAST code scanner. Finds security vulnerabilities in source code by planning and executing targeted sca...
This skill should be used when the user asks to "validate a finding", "check if a vulnerability is real", "triage a secu...
Perform coordinate reference system (CRS) projections, spatial joins, buffering, and terrain surface modeling.
· Handle git branches, commits, remotes, conflicts, hooks, signing, releases, PR/MR workflows. Triggers: 'git', 'commit'...
Detects leaked secrets in Git repositories using pattern-based scanning with Gitleaks rule definitions and the GitHub Se...
Install a Claude-Code PreToolUse hook that blocks destructive git commands (push variants including force-push, hard res...
This skill should be used when the user asks to "create git commit", "manage branches", "follow git workflow", "use Conv...
Work with GitHub — pull requests, issues, Actions, code review, project boards, releases.
Security hardening reviewer for GitHub Actions workflow files (.github/workflows/*.yml). Reasons about the Actions threa...
Validates GitHub Actions workflows via actionlint, act dry-run, and 11 security checks. Use when auditing CI/CD security...
Turn saved gh exports of one GitHub repository into ISO 27001 and SOC 2 evidence rows for change and vulnerability manag...
Assess whether a GitHub repository is trustworthy, overhyped, star-inflated, or safe to adopt. Use when the user shares...
Add a comment to a GitHub issue or pull request
Use for creating, reviewing, or debugging GitHub Copilot custom agents in Visual Studio Code, including .agent.md roles,...
Sets up the GitHub repo for a new Umbraco package: README, LICENSE, CONTRIBUTING.md, a bug report template and a Dependa...
Create a GitHub issue in a specified repository
List open issues in a GitHub repository with filters
Use when implementing GitHub OAuth + GitHub App authentication with Nango - provides two-connection pattern for user log...
List open pull requests in a GitHub repository
Review one exact GitHub pull-request head from bounded changed-file patches and check evidence, producing source-line fi...
Write or repair an accurate, repository-specific README based on verified project files and requirements.
Assess and guide safer github.com repository releases. Use when an existing private GitHub repository becomes public for...
List repositories for a GitHub user or organization
Security Code Pro. Comprehensive security review for pull requests, identifying vulnerabilities and SOC2 compliance gaps...
Configure GitHub repository security with branch protection, Dependabot, security scanning, and CI workflows. Integrates...
Draft, rewrite, or audit concise product and engineering documentation using an independently expressed interpretation o...
Scan repository for hardcoded secrets and credentials
Workflows for auditing and hardening the security of GKE workloads.
Multi-jurisdiction GRC mapping — EU (GDPR/NIS2/DORA/EU AI Act/CRA), UK, AU, SG, JP, IN, CA, ISO 27001:2022, CSA CCM v4
Data validation strategies for stock_picker_bot using Pydantic models and SQLAlchemy constraints. Covers API input valid...
Implement server-side validation with allowlists, specific error messages, type checking, and sanitization to prevent se...
Implement comprehensive validation on both server and client sides with specific error messages, input sanitization, and...
Implement comprehensive input validation with server-side security, client-side UX feedback, sanitization, and consisten...
Use when a source text has been re-vendored, re-collated, or corrected and translations, glosses, or image prompts were...
OAuth2 login for a Go CLI client, with three explicit modes and cached token refresh. Use when a CLI tool authenticates...
Security patterns, OWASP, authentication, authorization
Security best practices and vulnerability prevention for Golang. Covers injection prevention, cryptography, and secure c...
Audit Go security across named trust boundaries; not PR review or fixes.
Convert an explicit user request into a Codex goal and pass its chosen coder, Lev, omo/omp, SDD, or Fable execution flag...
Drafts copy-paste-ready /goal commands for goal mode in Claude Code and Codex. Use when the user asks to create, write,...
Develop lightweight 2D and 3D games using Godot 4, node trees, GDScript/C#, and custom shader materials.
在 Godot 4 里新做关卡、房间、HUD、菜单、NPC、道具、背景时用，决定内容摆进 .tscn 还是代码运行时搭。新建项目第一个场景，往已有项目加场景，打开场景一片空看不到东西，美术策划要在编辑器里直接看和调，自定义显示节点在编辑器里...
Use this skill when building Solana-enabled games or apps in Godot 4 with the Godot Solana SDK. Triggers include: Solana...
Idiomatic context.Context usage in Golang — creation, propagation, cancellation, timeouts, deadlines, context values, an...
Dependency management for Golang projects — go.mod and go.sum, `go get` install and upgrade flows, Minimal Version Selec...
Golang package and module lookup via `godig`, a pkg.go.dev API client (CLI + MCP server). Use for any Go/Golang library'...
Security best practices and vulnerability prevention for Golang — injection (SQL, command, XSS), cryptography, path trav...