mcpField

Skills

100,928 packaged capabilities and playbooks for agents. Install any of them with one command.

All

S
social-writer
social-writer
itechmeat / llm-code

Create engaging content for social media platforms: X posts and threads, LinkedIn, Threads, Instagram, Facebook. Includes writing styles, AI-avoidance patterns, a hooks catalog, and macOS Notes integration. Use when drafting social media posts, writing thread series, applying engagement hooks, or adapting content for specific platforms. Keywords: social media, X, LinkedIn, threads, posts, hooks, content strategy, AI writing avoidance.

Marketing & growth270
S
socialcrawl
socialcrawl
socialcrawl / skills

Fetch social media, commerce, and research data through the SocialCrawl API: profiles, followers, posts, comments, reviews, search results, transcripts, ads, product catalogs, app-store listings, places, jobs, finance, news, trends, prediction markets (Polymarket), plus cross-platform Prism composites, scheduled Monitors, and audience Cohorts. Covers TikTok, Instagram, YouTube, Twitter/X, Facebook, LinkedIn, Reddit, Threads, Amazon, Walmart, Google, Trustpilot, Yelp, GitHub, Naver and many more behind one API key. Use when the user mentions SocialCrawl, or wants to collect social media data, creators or influencers, brand mentions, comments, reviews, or competitor data; scrape or crawl a web page via SocialCrawl; generate code that calls the API; check endpoints, pricing, or their credit balance; or run one search across many platforms.

Data & databases270
S
syncfusion-angular-smith-chart
syncfusion-angular-smith-chart
syncfusion / angular-ui-components-skills

Implement the Syncfusion Angular Smith Chart component for high-frequency circuit visualization and transmission line analysis. Use this skill to create Smith charts, visualize impedance or admittance parameters, add multiple series, customize axes and gridlines, configure markers and data labels, implement legends with visibility toggling, add tooltips and export functionality, or handle styling and accessibility. Covers installation, basic rendering, series management, axis configuration, marker and label customization, legend setup, and advanced features.

Data & databases270
S
syncfusion-angular-sparkline
syncfusion-angular-sparkline
syncfusion / angular-ui-components-skills

Implement the Syncfusion Angular Sparkline component for compact data visualization. Use this skill to create sparkline charts, visualize small datasets inline, add markers or data labels, implement different sparkline types (Line, Column, Area, Pie, Win-Loss), or customize sparklines with tooltips, axis settings, and theme styling. Covers installation, basic rendering, type selection, marker configuration, data label formatting, advanced features, accessibility, and migration from EJ1.

Data & databases270
S
syncfusion-angular-stock-chart
syncfusion-angular-stock-chart
syncfusion / angular-ui-components-skills

Implement Syncfusion Angular Stock Chart component for displaying financial data and OHLC charts. Use this skill whenever users need to create stock charts, display candlestick or OHLC data, add technical indicators, implement date range selection, or work with time-series financial visualization. Includes series types, axis customization, interactive features, and export capabilities.

Data & databases270
T
tabletop-rpg-design
tabletop-rpg-design
omer-metin / skills-for-antigravity

Expert system designer for tabletop roleplaying games covering dice mechanics, character creation, combat systems, narrative frameworks, GM tools, and playtesting methodology. Use when "tabletop rpg, ttrpg design, dice mechanics, character creation system, combat system design, gm tools, pbta, powered by the apocalypse, forged in the dark, blades in the dark, osr design, old school renaissance, narrative rpg, rules-light rpg, crunchy system, session zero, safety tools, x-card, fail forward, fiction first, player-facing rolls, advantage disadvantage, target number, dice pool, tabletop, rpg, game-design, dice-mechanics, pbta, osr, narrative-games, ttrpg, gm-tools, character-creation, blades-in-the-dark, forged-in-the-dark" are mentioned

Creative & media270
T
threat-model-generator
threat-model-generator
patricio0312rev / skills

Creates comprehensive threat models using STRIDE methodology with asset identification, threat enumeration, mitigation strategies, and residual risk assessment. Use for "threat modeling", "security analysis", "STRIDE", or "risk assessment".

Security270
U
use-sealos
use-sealos
norberia / sealos-skills-next

Deploy and operate apps on Sealos Cloud: sign in to a Sealos account, deploy any project or self-hosted app (from the template store, an official Docker image, or project source code), provision managed databases (PostgreSQL, MySQL, MongoDB, Redis, Kafka), create S3-compatible object storage, expose public HTTPS domains, check status and logs, and troubleshoot failures. Use this skill whenever the user mentions Sealos (in any language, e.g. "部署到 Sealos"), or asks to deploy, host, or self-host an application, website, or database without naming another platform. Typical trigger: "deploy X to Sealos" / "帮我把 X 部署到 Sealos".

Cloud & DevOps270
V
vmake-video-remove-watermark
vmake-video-remove-watermark
meitu / vmake-skills

Remove video watermarks and repair the obscured picture. Use when

Creative & media270
W
web-design-guidelines
web-design-guidelines
tech-leads-club / agent-skills

Review UI code for Web Interface Guidelines compliance. Use when asked to "review my UI", "check accessibility", "audit design", "review UX", or "check my site against best practices". Focuses on visual design and interaction patterns. Do NOT use for performance audits (use core-web-vitals), SEO (use seo), or comprehensive site audits (use web-quality-audit).

Design & UI270
W
webperf-loading
webperf-loading
nucliweb / webperf-snippets

Intelligent loading performance analysis with automated workflows for TTFB investigation (DNS/connection/server breakdown), render-blocking detection, script performance deep dive (first vs third-party attribution), font optimization, and resource hints validation. Includes decision trees that automatically analyze TTFB sub-parts when slow, detect script loading anti-patterns (async/defer/preload conflicts), identify render-blocking resources, and validate resource hints usage. Features workflows for complete loading audit (6 phases), backend performance investigation, and priority optimization. Cross-skill integration with Core Web Vitals (LCP resource loading), Interaction (script execution blocking), and Media (lazy loading strategy). Use when the user asks about TTFB, FCP, render-blocking, slow loading, font performance, script optimization, or resource hints. Compatible with Chrome DevTools MCP.

Testing & quality270
W
webperf-media
webperf-media
nucliweb / webperf-snippets

Intelligent media optimization with automated workflows for images, videos, and SVGs. Includes decision trees that detect LCP images (triggers format/lazy-loading/priority analysis), identify layout shift risks (missing dimensions), and flag lazy loading issues (above-fold lazy or below-fold eager). Features workflows for complete media audit, LCP image investigation, video performance (poster optimization), and SVG embedded bitmap detection. Cross-skill integration with Core Web Vitals (LCP/CLS impact) and Loading (priority hints, resource preloading). Provides performance budgets and format recommendations based on content type. Use when the user asks about image optimization, LCP is an image/video, layout shifts from media, or media loading strategy. Compatible with Chrome DevTools MCP

Testing & quality270
W
websocket
websocket
martinholovsky / claude-skills-generator

Real-time bidirectional communication with security focus on CSWSH prevention, authentication, and message validation

Security270
W
wisdom-accountability-coach
wisdom-accountability-coach
curiositech / some_claude_skills

Longitudinal memory tracking, philosophy teaching, and personal accountability with compassion. Expert in pattern recognition, Stoicism/Buddhism, and growth guidance. Activate on 'accountability',

Productivity270
A
angular-material
angular-material
angular-sanctuary / angular-agent-skills

Angular Material UI component library based on Material Design 3

Design & UI269
A
arkenv
arkenv
onmax / nuxt-skills

Answer questions about ArkEnv and help implement environment variable validation. Use when developers: (1) Ask about environment variable validation or typesafety, (2) Want to setup ArkEnv in a project, (3) Need to define or update schemas using ArkType or Standard Schema, (4) Are integrating with Next.js, Nuxt, Vite, Bun, or Node.js runtimes. Triggers on: 'ArkEnv', 'env validation', 'typesafe env', 'createEnv', 'env.ts', 'arkenv'.

Development269
A
auditing-kubernetes-cluster-rbac
auditing-kubernetes-cluster-rbac
mukul975 / anthropic-cybersecurity-skills

'Auditing Kubernetes cluster RBAC configurations to identify overly permissive

Security269
A
axiom-xcode-debugging
axiom-xcode-debugging
charleswiltgen / axiom

Use when encountering BUILD FAILED, test crashes, simulator hangs, stale builds, zombie xcodebuild processes, "Unable to boot simulator", "No such module" after SPM changes, or mysterious test failures despite no code changes — systematic environment-first diagnostics for iOS/macOS projects

Development269
B
brooks-sweep
brooks-sweep
hyhmrright / brooks-lint

Full-sweep mode: runs a unified analysis across all quality dimensions — code decay, architecture, tech debt, and test quality — then applies fixes directly to the codebase. Safe changes are auto-applied; risky changes are confirmed before execution. Drawing on twelve classic engineering books. Triggers when: user wants to "fix everything", "sweep the codebase", "auto-fix all issues", "clean up the whole project", or asks for a single command that both diagnoses and remediates quality problems. Do NOT trigger for: read-only audits or health reports where the user only wants findings without code changes; single-dimension reviews (use the focused skill instead: brooks-review / brooks-audit / brooks-debt / brooks-test); server health checks, HTTP /health endpoints, Kubernetes probes, database health, or application uptime.

Development269
B
bubbletea
bubbletea
pedronauck / skills

Build interactive Go TUIs with Bubbletea, Elm architecture, Lipgloss, layouts, and keyboard/mouse handling. Excludes plain-text CLIs, web/desktop GUIs, and other TUI frameworks.

Development269
C
context-fundamentals
context-fundamentals
muratcankoylan / agent-skills-for-context-engineering

Use this skill to explain or reason about the foundational concepts of context engineering: what context is, the anatomy of a context window, how attention mechanics work, the U-shaped attention curve, why context quality matters more than quantity, and the mental models needed to interpret every other context-engineering decision. Use it for conceptual explanation, onboarding, and background reading. Route operational work to the specialized skills: debugging attention failures goes to context-degradation, token-efficiency work to context-optimization, conversation summarization to context-compression, and project-shape decisions to project-development.

Agent workflows269
C
create-adr
create-adr
tech-leads-club / agent-skills

Creates Architecture Decision Records (ADRs) to document significant architectural choices and their rationale for future team members. Use when the user says "write an ADR", "document this decision", "record why we chose X", "add an architecture decision record", "create an ADR for", or wants to capture the reasoning behind a technical choice so the team understands it later. Do NOT use when the decision hasn't been made yet (use create-rfc instead), for implementation planning (use technical-design-doc-creator), or for general documentation.

Documents269
C
create-pr
create-pr
sickn33 / agentic-awesome-skills

Alias for pr-writer. Use when users explicitly ask for "create-pr" or reference the legacy skill name. Redirects to the canonical PR writing workflow.

Development269
C
crisis-response-protocol
crisis-response-protocol
curiositech / some_claude_skills

Handle mental health crisis situations in AI coaching safely. Use when implementing crisis detection, safety protocols, emergency escalation, or suicide prevention features. Activates for crisis

Development269
D
dart-matcher-best-practices
dart-matcher-best-practices
kevmoo / dash_skills

Best practices for using `expect` and `package:matcher`. Focuses on readable assertions, proper matcher selection, and avoiding common pitfalls

Testing & quality269
D
data-science-python-stack
data-science-python-stack
probabl-ai / skore-skills

Deprecated compatibility skill. Trigger only when an installed workflow still references this old id.

Data & databases269
D
deploy
deploy
microsoft / power-platform-skills

Builds and deploys a Power Apps code app to Power Platform. Use when deploying changes, redeploying an existing app, or pushing updates

Cloud & DevOps269
D
docs-site-macos
docs-site-macos
rheinmir / setup

Build a beautiful macOS-inspired documentation site (single HTML file) with a liquid-glass surface system (tiered glassmorphism: opacity ladder, blur scale, edge highlights), animated SVG diagrams, traffic-light window chrome, and a light-blue + white liquid-glass palette (white glass surfaces over a soft blue gradient field, per-section blue-tone theming). Also trigger on "liquid glass", "frosted glass", or "translucent UI" requests for docs/showcase pages. Trigger when the user wants to create a docs site, landing page, showcase, portfolio, guide, tutorial site, feature overview, or product documentation — especially when they mention wanting it to look "clean", "modern", "Apple-like", "macOS style", "glass", "frosted", "animated diagrams", or "single HTML file". Also use when the user has multiple markdown files and wants them rendered into a cohesive visual HTML page with sections. If the user says "6 file" or wants separate pages per topic, generate one HTML file per wiki file (index.html as overview + N topic files), NOT a single combined page.

Design & UI269
D
docx
docx
rysweet / amplihack

Create, edit, and analyze Word documents with tracked changes support

Documents269
D
drizzle-orm
drizzle-orm
pedronauck / skills

Expert guide for Drizzle ORM best practices, including schema definitions, queries, mutations, transactions, migrations, and performance optimization. Use when working with Drizzle ORM, database schemas, queries, or migrations.

Data & databases269
E
ear
ear
sushegaad / claude-skills-governance-risk-and-compliance

Export Administration Regulations (EAR, 15 CFR Parts 730-774) compliance advisor — ECCN classification across all 10 CCL categories and 5 product groups (A-E), EAR99 determination, jurisdiction analysis (EAR vs ITAR order of review), license requirement analysis via Country Chart, all license exceptions (LVS, GBS, CIV, TMP, RPL, GOV, TSU, ENC, TSR, APP, BAG, AVS, ACE), end-user/end-use controls (Entity List, Denied Persons List, Unverified List, MEU List), deemed export rules, Foreign Direct Product Rule (FDPR), de minimis thresholds, 10 General Prohibitions, SNAP-R license applications, voluntary self-disclosure, civil/criminal penalties, Export Compliance Program (ECP) design, and EAR vs ITAR jurisdiction determination. Use for any dual-use export control, CCL classification, or BIS compliance question.

Other269
E
error-diagnostics-error-trace
error-diagnostics-error-trace
sickn33 / agentic-awesome-skills

You are an error tracking and observability expert specializing in comprehensive error monitoring solutions. Set up error tracking systems, configure alerts, implement structured logging, and evaluate monitoring quality.

Cloud & DevOps269
E
error-handling-standardizer
error-handling-standardizer
patricio0312rev / skills

Creates consistent error handling with custom error classes, HTTP status mapping, structured logging, safe client messages, and error taxonomy. Use when standardizing "error handling", "logging", "error responses", or "exception management".

Development269
E
exa-web-search-free
exa-web-search-free
pedronauck / skills

Free AI search via Exa MCP. Web search for news and information, code search for docs and examples from GitHub/StackOverflow, and company research for business intelligence. No API key needed

Productivity269
F
feature-launch-playbook
feature-launch-playbook
rampstackco / claude-skills

The operational playbook for launching a feature well. Covers positioning, internal alignment, customer communications, sales enablement, support readiness, rollout strategy, monitoring with predefined rollback triggers, post-launch measurement against spec hypotheses, and the discipline that distinguishes shipping from releasing from actually launching. Triggers on launch plan, feature launch, launch checklist, ship vs release, rollout strategy, gradual rollout, sales enablement, support readiness, launch announcement, post-launch measurement, launch failure, or declaring victory too early. Also triggers when planning a launch of any size or for any segment, auditing an existing launch process, fixing the “we shipped it but the metric did not move” problem, or building a launch checklist for the team.

Marketing & growth269
F
file-uploads
file-uploads
davila7 / claude-code-templates

Expert at handling file uploads and cloud storage. Covers S3, Cloudflare R2, presigned URLs, multipart uploads, and image optimization. Knows how to handle large files without blocking. Use when: file upload, S3, R2, presigned URL, multipart.

Development269
F
financial-health-scores
financial-health-scores
octagonai / skills

Retrieve financial health scores including Altman Z-Score and Piotroski Score for public companies. Use when assessing bankruptcy risk, financial strength, value investing screening, or credit quality analysis.

Data & databases269
G
godot-adapt-single-to-multiplayer
godot-adapt-single-to-multiplayer
thedivergentai / game-design-agentic-skills

Expert patterns for adding multiplayer to single-player games including client-server architecture, authoritative server design, MultiplayerSynchronizer, lag compensation (client prediction, server reconciliation), input buffering, and anti-cheat measures. Use when retrofitting multiplayer, porting to online play, or designing networked gameplay. Trigger keywords: MultiplayerPeer, ENetMultiplayerPeer, SceneMultiplayer, MultiplayerSynchronizer, rpc, rpc_id, multiplayer_authority, client_prediction, server_reconciliation, lag_compensation, rollback.

Development269
G
godot-game-loop-waves
godot-game-loop-waves
thedivergentai / game-design-agentic-skills

Expert patterns for managing combat waves, difficulty scaling, and automated enemy spawning in Godot 4. Use when building wave-based shooters, tower defense, or arena games.

Development269
I
intraday_abnormal_move_alert_skill
intraday_abnormal_move_alert_skill
wind-alice / alicemarket

Identifies abnormal intraday moves such as sharp rises, sharp drops, volume surges, and sudden changes in turnover, then quickly explains possible drivers, persistence, and key response points. Useful for judging whether unusual moves are genuine, breaking down their drivers, and deciding whether to keep monitoring them while watching the market.

Other269
I
investment-team
investment-team
xbtlin / ai-berkshire

AI Berkshire skill: 投研团队:四角色并行分析框架. Source: skills/investment-team.md.

Productivity269
J
johari-window
johari-window
learnprompt / laoyeye

Original prompt for collaboration using the Johari Window. Use when the user wants to define how AI should collaborate, says responses don't meet their needs, complains about too many questions or guesses made without asking, or wants the AI to assess the state of information before responding. Trigger phrases include Johari Window, window, open area, blind spot, hidden area, unknown area, collaboration mode, don't guess what I need, and clarify before answering. Attach the full prompt at the beginning of a session or task to guide all subsequent collaboration.

Agent workflows269
J
jupiter-vrfd
jupiter-vrfd
jup-ag / agent-skills

Use when a user mentions Jupiter token verification, VRFD eligibility, paying 1000 JUP to verify a token, submitting a verification request, or updating metadata via the Jupiter express verification flow

Other269
K
k8s-kaniko-job
k8s-kaniko-job
norberia / sealos-skills-next

Sandbox build executor for Sealos deploys: build a container image from source with an in-cluster Kaniko Job and push it to GHCR, for environments without a Docker daemon (Brain managed Devbox sandboxes). Use only when a managed deploy (SEALAI_DEPLOY_MODE=managed) needs an image built from project source; local interactive deploys build with docker buildx instead (see the use-sealos skill).

Cloud & DevOps269
K
kaz-neat-freak
kaz-neat-freak
learnprompt / laoyeye

Knowledge and governance closeout: reconcile project docs, rule files (CLAUDE.md/AGENTS.md), authorized agent memory, and workspace residue with what the code and runtime actually do, so the next session or the next person starts from one current answer. Trigger when the user names "neat-freak", "洁癖", or "/neat" — and also on clear knowledge-closeout intent without the name: syncing or tidying project docs/rules/memory after development ("把文档和记忆整理一下", "收尾时把文档同步掉", "docs 和代码对不上了"), stale or conflicting CLAUDE.md/memory, a clean handoff to a teammate or a fresh session, or auditing whether workspace rules are actually followed. Do not trigger for pure coding/refactoring/debugging tasks, tidying data or prose (JSON, 周报, changelog announcements), or a bare "整理" with no project-knowledge context.

Development269
L
landing-page-vercel
landing-page-vercel
shipshitdev / skills

Scaffolds a production-ready static landing page with working email capture form, analytics, and responsive design. Activates on "create landing page", "build a landing page", "launch page for product", or similar requests. Optionally deploys to Vercel on explicit request.

Design & UI269
M
matt-grill-me
matt-grill-me
learnprompt / laoyeye

A relentless interview to sharpen a plan or design.

Productivity269
M
matt-grilling
matt-grilling
learnprompt / laoyeye

Grill the user relentlessly about a plan, decision, or idea. Use when the user wants to stress-test their thinking, or uses any 'grill' trigger phrases.

Productivity269
M
matt-teach
matt-teach
learnprompt / laoyeye

Teach the user a new skill or concept, within this workspace.

Productivity269
M
maven-conflict-resolver

No description yet

Development269
M
mcp-server-builder
mcp-server-builder
patricio0312rev / skills

Builds Model Context Protocol (MCP) servers for Claude with tools, resources, and prompts. Use when users request "create MCP server", "build Claude tool", "MCP integration", or "custom Claude tools".

Agent workflows269
M
memory-lancedb-pro
memory-lancedb-pro
cortexreach / memory-lancedb-pro-skill

This skill should be used when working with memory-lancedb-pro, a production-grade long-term memory MCP plugin for OpenClaw AI agents. Use when installing, configuring, or using any feature of memory-lancedb-pro including Smart Extraction, hybrid retrieval, memory lifecycle management, multi-scope isolation, self-improvement governance, or any MCP memory tools (memory_recall, memory_store, memory_forget, memory_update, memory_stats, memory_list, self_improvement_log, self_improvement_extract_skill, self_improvement_review)

Agent workflows269
M
memory-parable
memory-parable
learnprompt / laoyeye

Original prompt for a memory parable. The focus is remembering; understanding is left to something else. After the parable, it also maps each metaphor one by one. Suitable for passing the time when bored, too. Use when the user wants to remember an abstract or unfamiliar concept through a story, or is simply bored and wants AI to tell an interesting story. Trigger phrases include “memory parable,” “help me remember with a story,” “don’t make me memorize concepts,” “a graduate-level concept,” “tell me a story when I’m bored,” and “that Amanda Askell prompt.” It produces a parable that does not reveal the concept, then explains the concept and how each metaphor in the parable corresponds to it.

Productivity269
M
metrics-tracking
metrics-tracking
anthropics / knowledge-work-plugins

Define, track, and analyze product metrics with frameworks for goal setting and dashboard design. Use when setting up OKRs, building metrics dashboards, running weekly metrics reviews, identifying trends, or choosing the right metrics for a product area

Data & databases269
M
migrating-hive-tables-to-s3-tables
migrating-hive-tables-to-s3-tables
aws / agent-toolkit-for-aws

Migrates a Glue Data Catalog Hive table (Parquet) into Amazon S3 Tables as managed Iceberg using the native S3 Tables migration API (StartTableMigration, SyncTableMigration, CompleteTableMigration), a managed service call, not a self-run CTAS, Glue, or EMR job. The source is a Hive table; an Iceberg source is never in scope, even when the destination is S3 Tables. Covers plan review, migrate, sync, complete, and validate. Same-account, same-region, Glue Hive Parquet source only. Use when the request asks to migrate or import a Hive table into S3 Tables, or names the native migration API. Not applicable to converting a self-managed or standard Iceberg table into S3 Tables (ingesting-into-data-lake covers that), self-run CTAS/Glue-ETL/Spark migrations (ingesting-into-data-lake), or creating empty tables (creating-data-lake-table).

Data & databases269
M
mobile-app
mobile-app
nexu-io / open-design

A mobile-app screen rendered inside a pixel-accurate iPhone 15 Pro frame on the page. Built by copying the seed `assets/template.html` and pasting one screen archetype from `references/layouts.md`. Use when the brief asks for "mobile app", "iOS app", "Android app", "phone screen", or "app UI"

Design & UI269
M
monitoring-observability
monitoring-observability
yonatangross / orchestkit

Monitoring and observability patterns for Prometheus metrics, Grafana dashboards, Langfuse v4 LLM tracing (as_type, score_current_span, should_export_span, LangfuseMedia), and drift detection. Use when adding logging, metrics, distributed tracing, LLM cost tracking, or quality drift monitoring.

Cloud & DevOps269
M
moonbit-c-binding
moonbit-c-binding
moonbitlang / skills

Guide for writing MoonBit bindings to C libraries using native FFI. Use when adding extern "c" declarations, writing C stubs with moonbit.h, configuring native-stub and link.native in moon.pkg, choosing #borrow/#owned ownership annotations, designing callback trampolines, wrapping C pointers with external objects and finalizers, converting strings across FFI, or validating bindings with AddressSanitizer.

Development269
N
nse-trading-toolkit
nse-trading-toolkit
bhala-srinivash / nse-trading-skills

Master orchestrator for Indian NSE/BSE equity trading analysis via Groww broker. Routes to specialized framework skills: technical analysis, position sizing, stop-loss, trailing stops, risk-reward, multi-timeframe, RSI divergence, and Fibonacci trading. Use this skill whenever the user asks to: analyze a stock, check a position, decide buy/sell/hold, plan entries/exits, or do any comprehensive trading analysis for Indian equities. Triggers on: "analyze [stock]", "should I buy/sell [stock]", "check [stock]", "what's the setup on [stock]", or any broad market analysis request involving NSE/BSE stocks. This is the go-to skill for full stock analysis — it pulls together all the individual framework skills into one workflow.

Other269
O
offensive-jwt
offensive-jwt
snailsploit / claude-red

JWT attack methodology for penetration testers. Covers algorithm confusion (alg:none, RS256→HS256), weak HMAC secret brute force, kid parameter injection (SQLi, path traversal), jku/x5u/jwk header injection, JWKS cache poisoning, JWS/JWE confusion, timing attacks, and mobile JWT storage extraction. Use when testing JWT-based authentication, hunting auth bypass via token manipulation, or evaluating JWT implementation security in web or mobile apps.

Security269
30361–30420 of 100,928

New to MCP?

From what the protocol is to installing your first server, these answers cover most first questions.

An open protocol that defines how AI applications connect to external tools and data in a uniform way. Clients talk to the model; MCP servers provide tools, resources and prompt templates. They exchange standard messages, so one server can be reused by many clients.