4,624 skills sorted by stars.
Use when committing work or writing a commit message — produces a subject and body any developer from junior to CTO can...
Write website or landing-page copy from verified product facts, customer language, decision context, objections, and a d...
Use after completing any substantive security workflow with this project, including CTF, bug bounty, CVE validation, gui...
Review docs/prose for Writing Guidelines compliance. Use when asked to "review my docs", "check writing style", "audit p...
Creates behavioral rules in markdown to block dangerous commands or restrict AI behavior. Use when adding safety guardra...
Writes new science files following academic prose standards: third-person voice, present tense for laws, in-universe ter...
Fact-check audit: extract every claim of fact from a draft and report which are sourced, unsourced, or unverifiable, ran...
Testing for Weak Password Change or Reset Functionalities
Testing for Weaker Authentication in Alternative Channel
Test Business Logic Data Validation
Test for Process Timing
Testing Browser Storage
Testing for Cross-Site Script Inclusion (XSSI)
Test Network Infrastructure Configuration
Test HTTP Strict Transport Security
Test RIA Cross Domain Policy
Test Username Policy
Review Webserver Metafiles for Information Leakage
Identify Application Entry Points
Testing for HTTP Verb Tampering
Testing for LDAP Injection
Testing for XPath Injection
Testing for Host Header Injection
Testing for Server-Side Request Forgery (SSRF)
Testing for Session Management Schema
Testing for Session Fixation
Testing for Session Puzzling
Validates cryptographic implementations against Project Wycheproof's test vectors, which encode known attacks and edge c...
Wycheproof provides test vectors for validating cryptographic implementations. Use when testing crypto code for known at...
CISA Known Exploited Vulnerabilities (KEV) catalog. List actively exploited vulnerabilities prioritized by CISA. **Depe...
You inspect JWKS files and certificate chains for X9.150 implementations. You wrap the project's opencert.py and validat...
JWS security implementation guide — signing, verification, headers, certificate discovery, freshness, non-repudiation
You parse EMVCo QR content strings into their TLV structure, validate the CRC-16 checksum, and extract the X9.150 paymen...
X9.150 Secure Payment QR Code specification reference — OpenAPI schemas, field constraints, EMVCo TLV tags, JWS security...
You generate payment request template JSON files for testing the X9.150 specification. Templates are partial PaymentRequ...
You diagnose common issues with X9.150 implementations. You check the environment, validate key/cert setup, test server...
You validate JSON payloads against the X9.150 OpenAPI schema (spec/openapi.yaml). You auto-detect the schema type and re...
Assist with XRP transactions, destination tags, reserves, and XRPL features.
Professional XSS Prevention Expert skill. Implement enterprise-grade web application security controls and encryption st...
Encode output appropriately for the context (HTML, JavaScript, CSS, URL) Use when implementing security best practices....
Scan xss vulnerability scanner operations. Auto-activating skill for Security Fundamentals. Triggers on: xss vulnerabili...
XML External Entity (XXE) injection exploits XML parsers that process DTD external entity declarations, enabling local f...
Use for writing, reviewing, debugging, or testing fast non-cryptographic hashing in Python with python-xxhash, including...
This skill should be used when the user asks to "buy token", "sell token", "swap token", "trade crypto", "check trade st...
Always-on YAGNI and anti-ceremonial gate for proposed guards, fallbacks, recovery rails, symmetry changes, policy findin...
Create YARA rules for file/memory pattern matching
Writing and testing YARA rules for malware detection, threat hunting, and file classification with rule validation and f...
Run the end-to-end Git workflow through PR merge in the current checkout. Use only when explicitly invoked.