4,624 skills sorted by stars.
Use when asked to security-review a pull request, a commit range, or staged changes, to check a diff for vulnerabilities...
Adversarial premortem for England & Wales civil litigation - builds the strongest version of a case, then attacks it fro...
Systematic pre-release audit that walks the codebase area-by-area, triages findings honestly, and files them to Linear (...
This skill should be used right before deploying or shipping to production — a fast security review of the finished code...
Use when an idea, plan, design, or scope needs to be stress-tested before anyone builds it, when the user says "pressure...
Use when building any server-side endpoint that performs state-changing operations (POST, PUT, PATCH, DELETE) and is acc...
Use when rendering user-supplied content in HTML, writing JavaScript that inserts data into the DOM, or building APIs wh...
Use when parsing XML in any context — file uploads, SOAP APIs, RSS/Atom feeds, SVG processing, document conversion, or a...
Audits any SaaS pricing page URL against 12 pricing psychology principles and outputs a ranked improvement report with s...
Use when building apps that collect user data. Ensures privacy protections are built in from the start—data minimization...
Use to assess Privacy by Design compliance and GDPR/data protection alignment for a feature or system.
Use this skill when implementing GDPR or CCPA compliance, designing consent management, conducting DPIAs, or managing da...
Privacy, consent, and sanctions operational integrity for mid-2026 — confusable/homoglyph normalization before sanctions...
Use when identifying data privacy and protection laws that apply to your software product. Covers GDPR, CCPA/CPRA, LGPD,...
Use when encountering "potential witness-value disclosure" compiler errors, implementing commit-reveal patterns, working...
メール取得を伴う機能のプライバシー設計レビューを行う。メールアドレスを保存する機能を実装する前、PII取得の設計確認時に使う。
Use when implementing privacy-preserving logic in Compact, working with hashes, commitments, Merkle trees, nullifier pat...
Draft privacy-policy language and a review checklist tailored to a business model, data practices, and relevant jurisdic...
Use when implementing differential privacy, PII detection, federated learning, secure aggregation, or ensuring ML system...
Privacy by design, data protection, and responsible AI principles.
Use when work must identify trust boundaries, permissions, sensitive data, abuse paths, privacy impact, compliance depen...
Use when the agent needs the conceptual model for private vs permissioned vs permissionless Avalanche L1s, the access-pr...
Windows local privilege escalation from a low-privilege shell to Administrator or SYSTEM. Covers quiet vs loud enumerati...
This skill should be used when the user asks to "escalate privileges", "get root access", "become administrator", "prive...
Performs a Privileged Access Management (PAM) review against CIS Controls v8 (Controls 5.4, 6.5) and NIST SP 800-53 AC-6...
Create and manage agentic wallets with Privy. Use for autonomous onchain transactions, wallet creation, policy managemen...
将 AI Agent 从任务执行者转变为主动伙伴，能够预测需求并持续改进。现包含 WAL 协议、工作缓冲区、自主定时任务和经过实战检验的模式。Hal Stack 的一部分 🦞
Integration with OWASP ZAP/Burp Suite, penetration test planning, DAST execution, and vulnerability scanning. Used for d...
Integrating OWASP ZAP/Burp Suite/Nuclei, planning penetration tests, executing DAST, and scanning for vulnerabilities. F...
Converts raw problem brain dumps into a BLUF-format problem statement optimized for DoD/defense context
Use when processing pull request code review feedback. Finds the latest PR for a task, resolves review comments, updates...
Execute advanced evasion by injecting malicious code into the memory space of a legitimate, suspended process (Process...
Route vendor evaluation, RFP response operations, and statement-of-work review before award, bid submission, negotiation...
Sets up the product catalog and the product sets that let ads pull live inventory instead of static images, treating eac...
Put on the product-manager hat for emisar — decide what to build, what to cut, and what order; define the smallest valua...
Audit what telemetry a codebase actually emits, including event calls, identity handling, properties, and dead instrumen...
Guia Definitivo e Padrões de Engenharia para OWASP ZAP (zaproxy.org), cobrindo o scanner dinâmico de segurança de aplica...
Evaluate HackerOne / Bugcrowd / Intigriti programs before committing time. Decide signal-to-noise, payout history, respo...
Use when a page must paint before its JavaScript runs.
Maintain a CHANGELOG.md following the Keep a Changelog standard. Use after commits, on /commit, when the user asks to up...
Heuristics + operating manual for the project-explorer runtime agent that bootstraps a DDD domain wiki under docs/domain...
Explicit-invocation broad repository diagnosis across architecture, correctness, security, performance, dependencies, te...
Heuristics + operating manual for the project-overview runtime agent that bootstraps a human-readable narrative tree und...
Guide for storing secrets securely using app_secure_storage package with platform-native storage (project)
Продающие страницы и представительские тексты на русском языке: лендинги, промостраницы, страницы продукта, услуги, текс...
Generates copy-paste-ready ChefFlow build prompts from raw ideas using repo-grounded context, build-queue rules, domain...
Design and evaluate prompts or LLM workflows on representative tasks. Triggers on "prompt engineering", "提示词工程".
Detect and neutralize prompt injection attacks in OpenClaw skill content, user inputs, and external data sources. Preven...