Skills

H

html-prototype-build

lisuiwen / ai-html-annotation

Build, annotate, review, screenshot, and deliver native HTML UI prototypes with AI agents using reusable UI packs, DOM-bound product annotations, in-browser Direct Edit, browser review pins, a local authoring server, an element-to-source Inspector, and multi-state screenshots. Use when the user mentions /html-prototype-build or asks to reconstruct UI in HTML, create product annotations, edit prototype styles, review or mark DOM elements, capture prototype states, package prototype deliverables, or add components to the module sketch board. Works with Claude Code, Codex, Cursor, and other Agent Skills clients; do not use for generic source-code navigation, ordinary documentation, or production frontend development.

H

https-certificate-checker

jeremylongshore / tons-of-skills-marketplace

Validate https certificate checker operations. Auto-activating skill

H

huawei-cloud-agentarts-otel-ingestion

huaweicloud / huaweicloud-skills

OpenTelemetry ingestion skill for Huawei Cloud AgentArts observability platform. Provides OTel telemetry data (trace/metrics/logs) ingestion into AgentArts agent-ops, AI Agent observation with gen_ai semantic conventions, auto-configuration for Java/Python/Node.js/Go applications, and ingestion diagnostics and verification. Covers APM deliverConfig forwarding (Path A) and OTLP direct connection (Path B). Triggers include: "AgentArts OTel", "AgentArts observability", "AI agent tracing", "gen_ai telemetry", "AgentArts OTLP", "otel接入AgentArts", "Agent观测配置"

H

huawei-pentesting

wgpsec / aboutsecurity

Huawei Cloud penetration testing methodology. Use when the target uses Huawei Cloud services, assets under obs.*.myhuaweicloud.com are found, Huawei Cloud AK/SK credentials are obtained, OpenStack-style metadata at 169.254.169.254 is accessible from an ECS instance, or security assessment of Huawei Cloud services such as IAM/ECS/OBS/RDS/CCE/FunctionGraph is needed. Covers IAM privilege escalation (OpenStack Keystone), ECS takeover, OBS object storage exploitation, RDS database attacks, CCE container clusters, FunctionGraph, ELB load balancing, LTS logging, and KMS key management. Huawei Cloud uses three interfaces: OpenStack CLI, obsutil, and REST API.

H

hugging-face-paper-pages

huggingface / skills

Look up and read Hugging Face paper pages in markdown, and use the papers API for structured metadata such as authors, linked models/datasets/spaces, Github repo and project page. Use when the user shares a Hugging Face paper page URL, an arXiv URL or ID, or asks to summarize, explain, or analyze an AI research paper.

H

hugging-face-tool-builder

sickn33 / agentic-awesome-skills

Your purpose is now is to create reusable command line scripts and utilities for using the Hugging Face API, allowing chaining, piping and intermediate processing where helpful. You can access the API directly, as well as use the hf command line tool.

H

humanize-automation

uphiago / recon-skills

Human-like mouse, keyboard and scroll behavior for behavioral bot bypass

H

humanizer

acedergren / agentic-tools

Use when making text sound human, removing AI tells, or fixing writing that sounds like ChatGPT. Detects and rewrites AI patterns: overused phrases (testament to, pivotal, landscape, delve), structural tells (rule of three, em dash overuse, negative parallelisms, copula avoidance), promotional language, and vague attributions. Keywords: AI-generated, humanize, writing style, natural writing, human voice, remove AI patterns, conversational tone.

H

hunt-api-misconfig

uphiago / recon-skills

Hunt API security misconfiguration — mass assignment, JWT attacks, prototype pollution, HTTP verb tampering. Mass assignment: send {is_admin:true, role:admin, verified:true} on profile/account/reset endpoints — server blindly applies. JWT: alg=none, weak HMAC bruteforce, kid path traversal, JWK injection, token confusion. Prototype pollution: __proto__ injection in JSON merge / Object.assign / lodash _.merge → polluted prototype reaches sink (RCE in Node, XSS in browser). HTTP verb: GET-bypass-CSRF, X-HTTP-Method-Override, TRACE enabled. Detection: API responses with extra fields, JWTs in headers (decode at jwt.io). CORS misconfiguration (reflect-any-origin, null origin, subdomain-regex bypass, postMessage) is owned by hunt-cors. Use when hunting API misconfigs, JWT flaws, mass-assignment, prototype pollution

H

hunt-auth-bypass

uphiago / recon-skills

Hunting skill for auth bypass vulnerabilities. Built from 12 public bug bounty reports across SAML XSW / parser-differential (GitHub Enterprise CVE-2025-25291/25292), SAML signature stripping (Uber, Rocket.Chat, samlify CVE-2025-47949), SAML domain enforcement bypass via control characters (HackerOne 2024), partner-portal cross-IdP assertion reuse (Slack), WordPress XMLRPC bypassing SSO (Uber), JWT alg-confusion HS256/RS256 (Jitsi), JWT signature-validation skip (Linktree, Newspack), and token-audience confusion (Argo CD CVE-2023-22482). Use when hunting auth bypass — see the Legacy-Protocol Matrix for branded-UI vs legacy-endpoint patterns

H

hunt-broken-function-level-auth

uphiago / recon-skills

Hunt broken function-level authorization via verb drift, route shadowing, and transport gaps

H

hunt-business-logic

uphiago / recon-skills

Hunting skill for business logic vulnerabilities. Built from 12 public bug bounty reports. Covers coupon-race-stacking (Instacart, Stripe, Reverb), negative-quantity-in-cart price tampering (Upserve, Eternal/Zomato), decimal/fraction price-field overflow (Shipt), client-side checkout amount trust on PayPal redirect (WordPress.org), price-per-unit mass-assignment (Krisp), and archived-price swap / cart-TOCTOU (Stripe). Use when hunting business logic — heavy emphasis on financial-impact-demonstrated cases

H

hunt-cache-poison

uphiago / recon-skills

Hunting skill for cache poison vulnerabilities. Built from 10 public bug bounty reports including X-Forwarded-Host poisoning, X-HTTP-Method-Override / GCS cache, reflected→stored XSS via cache, classic Omer-Gil Web Cache Deception, Cloudflare Cache Deception Armor bypass, session-token cache deception, Akamai hop-by-hop smuggling → server-side edge poisoning, and Kettle's 2024 path-normalization WCD against Cloudflare/Fastly/GCP. Use when hunting cache poisoning, Web Cache Deception, CDN-fronted apps

H

hunt-cors

uphiago / recon-skills

Hunt CORS misconfigurations — origin reflection with credentials, null-origin trust, subdomain-regex bypass (unanchored vs. unescaped dot vs. prefix-only), pre-flight (OPTIONS) gating bypass, and postMessage origin checks. High severity only when an attacker-controlled origin can perform a credentialed cross-origin read of sensitive data and you have proven it in a browser. Use when testing API endpoints, SPAs, or any app emitting Access-Control-* headers.

H

hunt-csrf

uphiago / recon-skills

A skill for hunting CSRF vulnerabilities, built from 15 public bug bounty reports covering modern variants: SameSite=Lax sibling-subdomain bypass (Argo CD CVE-2024-22424), GraphQL mutations via GET (GitLab $3,370), framework-wide CSRF middleware disabled (Stripe Dashboard $5,000), path-traversal CSRF-token bypass (GitHub Enterprise CVE-2022-23732 $10k), Origin-omission bypass (TikTok $2,500), OAuth-state null byte (Streamlabs), WebSocket CSRF / CSWSH (Coda), default-SameSite email change leading to ATO (YoYo Games $400), social-account-link CSRF (HackerOne), and JSON-CSRF via text/plain on email change (TikTok $500). Use when hunting modern CSRF, with a strong focus on chain-to-ATO patterns.

H

hunt-dom

uphiago / recon-skills

Hunt client-side DOM vulnerabilities — DOM Clobbering (overwrite JS globals via HTML injection), PostMessage hijacking (missing origin check), Service Worker abuse (intercept requests from same-origin script), CSS Injection/Exfiltration (attribute selectors → token char-by-char via OOB), client-side template injection, dangerouslySetInnerHTML. Grounded in named public research: Gareth Heyes / PortSwigger DOM-clobbering + DOM-Invader, Michał Bentkowski DOMPurify clobbering bypasses, jQuery htmlPrefilter XSS (CVE-2020-11022 / CVE-2020-11023), d0nut CSS-exfil research. Use when hunting DOM-XSS, client-side auth bypass, or token exfiltration without server-side interaction

H

hunt-file-upload

uphiago / recon-skills

Hunt file upload bugs — RCE via webshell, XSS via SVG/HTML, SSRF via XXE in DOCX, path traversal via filename. Bypass tables (10 techniques): double extension (shell.php.jpg if server checks last ext only), magic bytes spoofing (PNG header on PHP), null byte (shell.php\0.jpg), case (PHP, .Php, .pHP), .htaccess upload to enable execution, SVG with <script>, HTML/SVG XSS, DOCX with embedded XXE, ZIP slip (../../../etc/passwd in archive), polyglot files. Detection: any /upload, /avatar, /profile-picture, /attachment, /import endpoint. Test: upload PHP/JSP/ASPX shells, request via direct URL, check response. Validate: actual code execution (whoami output) for RCE; reflected XSS in profile-photo URL. Use when testing file upload features, avatar/attachment endpoints, import/export functions, XML/DOCX/ZIP processors. Real paid examples.

H

hunt-grpc

uphiago / recon-skills

Hunt gRPC vulnerabilities — server reflection enabled (enumerate all services/methods), missing authentication / metadata-stripping on internal endpoints, plaintext gRPC over HTTP/2, internal endpoint disclosure, proto file leakage, gRPC-Web/grpc-gateway transcoding injection, and HTTP/2 Rapid Reset DoS (CVE-2023-44487). Use when target exposes port 50051 / 443 / 8443 / 9090 with HTTP/2, when grpcurl/grpcui detects reflection, when an Envoy or grpc-gateway proxy is fronting a microservice, or when recon reveals a microservice architecture.

H

hunt-http-smuggling

uphiago / recon-skills

Hunt HTTP request smuggling (CL.TE, TE.CL, H2.CL, H2.TE). Cause: front-end proxy and back-end server disagree on where one request ends and the next begins (Content-Length vs Transfer-Encoding header parsing inconsistency). CL.TE: front-end uses CL, back uses TE → smuggle by sending TE: chunked but with body that fits CL count. TE.CL: opposite. H2.CL: HTTP/2 downgrade, smuggle CL into HTTP/1.1 back-end. Detection tools: Burp HTTP Request Smuggler extension, smuggler.py, h2csmuggler. Confirm: time-delay technique (smuggled GET with 30s timeout) — if front-end returns slow on next victim request, smuggling works. Validate: cache poisoning chain (smuggle request that gets cached for victim), credential theft (smuggle X-Forwarded-For override that captures next user's cookies), bypass auth (smuggled internal-path request). Real paid examples from major CDN deployments. Use when hunting H1 paid programs running CDN+origin stacks, when targeting load balancer / WAF bypass

H

hunt-idor

uphiago / recon-skills

Hunting skill for idor vulnerabilities. Built from 26 public bug bounty reports. Use when hunting idor on any target.

H

hunt-information-disclosure

uphiago / recon-skills

Hunt error leakage, DVCS exposure, source maps, config files, and differential oracles

H

hunt-ldap

uphiago / recon-skills

Hunt LDAP injection and XPath injection—authentication bypass, blind character-by-character attribute exfiltration, AD user/group enumeration, and XML-store XPath bypass. Covers the LDAP special-character set (* ( ) \\ NUL /), search-filter context vs. DN injection, parenthesis balancing, AND/OR filter logic, and {SSHA}/{CRYPT} userPassword exfiltration on non-AD directories. Use when the target uses LDAP/AD authentication, corporate SSO with a directory backend, an address-book/people-search API, or XML-based data stores queried with XPath.

H

hunt-lfi

uphiago / recon-skills

Hunt Local File Inclusion (LFI), Remote File Inclusion (RFI), and Path Traversal — /etc/passwd read, log poisoning → RCE, PHP filter-chain RCE (no upload needed), php:// / data:// / zip:// / phar:// wrappers, RFI via allow_url_include, directory traversal read/write/delete. Covers OOB/blind LFI confirmation and false-positive discipline. Use when hunting file-include or path-traversal bugs on any target

H

hunt-nosqli

uphiago / recon-skills

Hunt NoSQL injection — MongoDB operator injection ($where, $regex, $gt, $ne), CouchDB, Redis command injection, auth bypass via NoSQLi, data dump. Use when the target uses MongoDB/Mongoose, CouchDB, Redis, or shows NoSQL error messages.

H

hunt-race-condition

uphiago / recon-skills

Hunting skill for race condition vulnerabilities. Built from 12 public bug bounty reports including modern HTTP/2 single-packet attack cases (James Kettle DEF CON 2023 “Smashing the State Machine”; RyotaK / Flatt Security 10,000-request first-sequence-sync expansion 2024). Covers coupon double-redemption, gift-card double-spend, MFA-OTP-validate race, account-create race, faucet/crypto token double-mint, email-activation race, vote/upvote inflation, password-reset token race, rate-limit bypass via concurrent requests. Use when hunting race conditions, TOCTOU bugs, MFA-bypass-via-timing.

H

hunt-sharepoint

uphiago / recon-skills

Hunt Microsoft SharePoint Server (2013/2016/2019/Subscription Edition) on-prem farms — anonymous endpoint enumeration, version disclosure, legacy SOAP login bypass (Authentication.asmx), ToolShell precondition chain (CVE-2025-53770), SafeControl reflection enumeration via Picker.aspx, NTLM Type-2 AD topology disclosure, custom-branding module discovery, EoL farm permanent-CVE-window exploitation, FormDigest anonymous issuance, file-extension blocklist NOT-an-oracle pattern, custom-zone Forms auth bridging on-prem AD. Use when target has SharePoint headers (SPRequestGuid, X-MS-InvokeApp, X-SharePointHealthScore, MicrosoftSharePointTeamServices) or paths (/_layouts/15/, /_vti_bin/, /_api/, /_catalogs/).

H

hunt-sqli

uphiago / recon-skills

Hunting skill for sqli vulnerabilities. Built from 12 public bug bounty reports including modern NoSQL injection (Rocket.Chat CVE-2021-22911 MongoDB $regex, Mongoose ORM CVE-2024-53900 $where bypass), modern ORM raw-fragment SQLi (Django CVE-2024-42005, Sequelize GHSA-wrh9-cjv3-2hpw), second-order SOQL injection (HackerOne Salesforce), time-based blind SQLi in GraphQL resolvers, and SQLi on OIDC-proxy backends. Use when hunting SQLi / NoSQLi on any target

H

hunt-subdomain

uphiago / recon-skills

Hunting skill for subdomain takeover vulnerabilities. Includes modern provider fingerprints — Microsoft Azure DevOps `cloudapp.azure.com` regional-pool re-issue (1-click OAuth ATO via wildcard `reply_to`, Binary Security), Zendesk help-desk takeover → email interception → password reset chain (0xprial writeup), Vercel `cname.vercel-dns.com` deleted-project takeover, plus general Fastly CDN service re-attach and S3 dangling-bucket cookie-scope techniques. Use when hunting subdomain takeover — emphasis on ATO-chain primitives (OAuth `redirect_uri`, cookie-domain, email DNS).

H

hunt-wordpress

uphiago / recon-skills

Use when an authorized target exposes WordPress core, plugin, theme, REST, or XML-RPC behavior

H

hunting-for-beaconing-with-frequency-analysis

mukul975 / anthropic-cybersecurity-skills

Identify command-and-control beaconing patterns in network traffic by frequency analysis

I

iac-security

vinayaklatthe / microsoft-security-skills

Guidance for securing Infrastructure-as-Code (Bicep, ARM, Terraform, and ACI/Container) pipelines on Azure — shift-left scanning, policy-as-code, secret hygiene, identity for pipelines, drift detection, and supply chain. Covers Microsoft Defender for Cloud DevOps Security (GitHub / Azure DevOps connectors), Microsoft Security DevOps (MSDO) extension, Bicep linter and template specs, Terraform best practices on Azure (state management, backend hardening, provider versions), Azure Policy as deploy-time and CI-time gate, GitOps with Flux/ArgoCD on AKS, secret scanning and dependency review, signed commits / artifact signing, OIDC federation for pipeline identity (no client secrets), and integration with Defender for Cloud posture. WHEN: IaC security, Bicep security, Terraform Azure security, Defender for Cloud DevOps Security, MSDO, Microsoft Security DevOps, shift-left Azure, policy as code, OIDC GitHub Actions Azure, secrets in IaC, drift detection, signed Bicep, supply chain Azure. DO NOT USE for Kubernetes admission control alone (use defender-for-containers), generic CI/CD design, or app-layer security.

I

iconfont-downloader

js-mark / super-client-r

This skill should be used when the user asks to "下载图标", "搜索图标", "iconfont", "download icon", "search icon", "找个图标", or when the user needs to search and download SVG icons from iconfont.cn.

I

ielts-practice

jobo16 / ielts-buddy

Explain how to discover and call the IELTS Buddy test-center records, predicted candidate questions, question bank catalog, practice records and results interfaces; it does not define question selection, review or teaching strategies.

Guide for building with the Ika TypeScript SDK (@ika.xyz/sdk) on Mysten Sui v2. Use when creating dWallets, signing cross-chain transactions, managing encryption keys, or integrating with the Ika network from TypeScript/JavaScript. Triggers on tasks involving @ika.xyz/sdk, dWallet operations, IkaClient, IkaTransaction, or Ika cross-chain signing.

I

image-enhancer

prat011 / awesome-llm-skills

Improves the quality of images, especially screenshots, by enhancing resolution, sharpness, and clarity. Perfect for preparing images for presentations, documentation, or social media posts.

I

imagga

membranedev / application-skills

Imagga integration. Manage data, records, and automate workflows. Use when the user wants to interact with Imagga data.

I

impact-analysis

happy-technologies-llc / happy-platform-skills

Change impact analysis using CMDB relationships, business service mapping, and risk assessment

I

implementation-contract

ykdz / skills

Works with implement-spec to add conventions for ongoing progress, requirement boundaries, and acceptance to the implementation and its subagents.

I

implementing-envelope-encryption-with-aws-kms

mukul975 / anthropic-cybersecurity-skills

Implements envelope encryption with AWS KMS, encrypting data locally with a data encryption key (DEK) and protecting that DEK with a KMS-managed key (KEK), covering the encrypt/decrypt flow, KMS key types, and security validation criteria. Use when designing key management for encrypting large or numerous data objects on AWS, or when reducing direct KMS API call volume.

I

implementing-fuzz-testing-in-cicd-with-aflplusplus

mukul975 / anthropic-cybersecurity-skills

Integrates AFL++ coverage-guided fuzzing into CI/CD pipelines, covering harness construction, AFL++/AddressSanitizer/CmpLog instrumentation builds, and persistent-mode fuzzing to discover memory-corruption and input-handling vulnerabilities in C/C++ code. Use when adding automated fuzz testing to a build pipeline or hunting for memory-safety bugs in native/compiled applications.

I

implementing-vulnerability-sla-breach-alerting

mukul975 / anthropic-cybersecurity-skills

Build an automated SLA breach alerting system for vulnerability remediation,

I

improve-codebase-architecture

polya20 / grill-me

Find deepening opportunities in a codebase, informed by the domain language in CONTEXT.md and the decisions in docs/adr/. Use when the user wants to improve architecture, find refactoring opportunities, consolidate tightly-coupled modules, or make a codebase more testable and AI-navigable.

I

improving-skills

taisukeoe / agentic-ai-skills-creator

Improve existing agent skills based on user feedback and best practices. Use when the user wants to fix, enhance, or refactor an existing skill. Gathers user feedback first, then applies technical analysis and implements improvements.

I

incident-activity-summarization

happy-technologies-llc / happy-platform-skills

Summarize incident activity streams including work notes, comments, state changes, assignment history, and communications into concise narratives for handoffs, escalations, and management reviews

I

incident-response

happy-technologies-llc / happy-platform-skills

Security incident detection, containment, and response procedures for ServiceNow environments

I

incident-sentiment

happy-technologies-llc / happy-platform-skills

Analyze incident sentiment from work notes, customer communications, and activity entries to track escalation risk and customer satisfaction

I

influence-audit

lvtd-llc / skills

Use when auditing landing pages, emails, sales scripts, pricing flows, fundraising asks, product UX, or negotiations for persuasion mechanisms, pressure tactics, manipulation risk, fake urgency, fake social proof, authority misuse, or ethical rewrites.

I

infographic-generator

drshailesh88 / integrated_content_os

Generate world-class medical infographics using carousel-level visual language. Templates include hero stats, multi-section layouts, comparisons, myth-busters, process flows, and patient checklists. Default 1080x1350 for Instagram.

I

inkblot-commit-message

inkblot-therapy / ai-skills

Inkblot git commit message convention. Use when writing a commit message, creating a git commit, amending a commit message, or when the user asks how to format a commit subject.

I

inmemoria

zenobi-us / dotfiles

Use when building persistent codebase intelligence for AI agents or integrating knowledge systems via MCP

I

insights-clustering

happy-technologies-llc / happy-platform-skills

Cluster and analyze insights from incidents, conversations, and cases grouping by topic, sentiment, and resolution pattern to generate actionable POV summaries

I

interactiveai

interactive-ai-labs / skills

Interact with InteractiveAI and access its documentation. Use when needing to (1) manage platform resources such as services, secrets, traces, vector stores, and prompts via the `iai` CLI, (2) look up InteractiveAI documentation, concepts, integration guides, or SDK usage, or (3) understand how any InteractiveAI feature works. This skill covers CLI-based platform operations, SDK instrumentation, and documentation retrieval.

I

interrogation-debugging

kucherenko / gangsta

Use when encountering any bug, test failure, or unexpected behavior — finds the rat in the code through systematic root-cause interrogation before any fix attempts

I

interview-relevance

happy-technologies-llc / happy-platform-skills

Assess interview notes and job descriptions for skill relevance matching. Score candidate-role fit, highlight skill gaps, evaluate competency alignment, and generate structured hiring recommendations

I

intlayer

dobroslavradosavljevic / skills

Build, review, debug, configure, migrate, or plan Intlayer 9.6 internationalization in TanStack Start React apps with current docs. Use for [email protected] (9.5+ APIs), react-intlayer, vite-intlayer, intlayer.config.ts, .content.ts dictionaries, t/plural/enu/cond/gender/select/insert/nest/md/html/file, collections, variants, getIntlayerAsync, useIntlayer, useLocale, useExperiment, useRewriteURL, IntlayerProvider, getLocale, validatePrefix, getPrefix, locale routing with {-$locale}, native TanStack Link/useNavigate (no LocalizedLink wrappers), locale switchers, Vite locale proxy, vite-intlayer/nitro-handler, SSR cookies/headers, SEO head/sitemap, CLI init/upgrade/build/fill --ci/push/pull/test/scan/extract, compiler, analytics, CMS/editor, chunkGrouping, dictionariesPreload, compat adapters, syncJSON, and Next.js next-intlayer avoidance on Start.

I

intlayer-react

aymericzip / intlayer

Integrates Intlayer internationalization with React components. Use when the user asks to "setup React i18n", create a new translated component, use the "useIntlayer" hook, or configure providers.

I

invoice-management

happy-technologies-llc / happy-platform-skills

Manage accounts payable invoices including data extraction, PO matching, three-way matching (PO, receipt, invoice), discrepancy identification, and resolution routing

I

ios-swift

full-stack-skills / mobile-native-skills

Provides comprehensive guidance for iOS development with Swift including view controllers, views, navigation, lifecycle, and iOS app development. Use when the user asks about iOS Swift, needs to create iOS applications, implement iOS components, or work with Swift in iOS.

I

ios-swiftui

alphaonedev / openclaw-graph

SwiftUI: View, modifiers, @State/@Binding/@ObservedObject, @EnvironmentObject, animations, NavigationStack

I

ios-watchos

alphaonedev / openclaw-graph

watchOS: WidgetKit complications, WatchConnectivity, SwiftUI on Watch, HealthKit, OpenClaw Watch extension