attacking-eks-gke-aks
Assess managed Kubernetes clusters on EKS, GKE, and AKS by exploiting the seams between cloud IAM and Kubernetes RBAC -- IRSA/OIDC trust abuse, Workload…
Skills
Find an Agent Skill for your task. Read the guide and copy the install command.
Updated 11-05 00:16
General & other
53,582 results
attacking-kerberos-delegation
Identify and abuse Active Directory Kerberos delegation — unconstrained delegation with printer-bug coercion, constrained delegation with protocol transition…
whisper
Transcribe audio files to text using OpenAI Whisper
midi-generation
Generate MIDI files with GM instruments and music theory. Use when creating music, composing melodies, or generating MIDI files.
lead-scoring
Score a lead AFTER contact — start from the pre-contact profile score and add what only a conversation reveals: engagement, confirmed deal size, the real…
publish-md-to-wechat
A Markdown publisher for WeChat Official Accounts (公众号, the Chinese service name), with visual style presets. Use whenever the user wants to publish an article to…
codeql
Run CodeQL database creation and security queries, add data-extension models, or process CodeQL SARIF. Use when CodeQL is explicitly requested; use…
vuln-report
Turn one confirmed security finding into a disclosure-ready GitHub advisory with root cause, proof of concept, impact, and source evidence. Use for reporting…
fscan-scan
Use fscan for comprehensive intranet scanning and exploitation. When you have gained an intranet foothold and need to do liveness detection, port scanning, weak password brute-forcing, and vulnerability detection, fscan is the first choice—a single binary with zero dependencies, completing the entire liveness + port + service + weak password + POC workflow with one command. It also supports Redis public key/cron job writing, SSH command execution, MS17-010 exploitation, Pass-the-Hash, WMI…
local-resources
Local resource repository navigation—the structure and usage of the dictionary repository (Dic), Payload repository, and POC repository. Essential reading when you need to use ffuf/spray for directory brute-forcing, password brute-forcing, or constructing Fuzz payloads. Covers dictionary selection strategies, payload template invocation, and POC repository search methods. The dictionary repository is uniformly installed under the /pentest directory.
shellcode-loader-generate
Shellcode Loader combination generation: select storage/allocator/copier/executor four types of components from the knowledge base to combine and generate a C/C++/Rust Loader. Use when shellcode has been obtained and a Loader binary that can run in the target environment needs to be generated. First read…
wechat-theme-extractor-cn
Use when the user needs to extract visual styles from a WeChat Official Account article and generate a markdown-wechat-converter theme.
yh-chatcut-edit
Use ChatCut to complete the editing of talking-head, Talking Head, knowledge explainer, or product introduction videos in stages, including A-Roll removal of pauses/repetitions/stumbles, talking-head pacing adjustment, semantic Punch-in for key points, arranging B-Roll according to user assets, Simplified Chinese subtitles, sound effects, and background music. Used when the user requests "edit this talking-head segment," "add according to assets..."
yixiaoer
Operate Ant Xiaoer multi-platform content distribution via the yxer CLI: account queries, resource uploads, pre-publish preparation, payload validation, cloud publishing/local publishing, draft saving, material registration, publish record troubleshooting, and skill synchronization.
stock-rt-subscribe
Subscribe to real-time stock market data via WebSocket long connection from receiver nodes (A-shares, HK stocks, ETFs). Use this skill when the user wants to…
glmv-web-replication
Frontend visual replication skill. Explores a target website’s publicly visible pages via Playwright MCP or agent-browser, captures screenshots and layout…
content-goldmine-gemini
Break collected articles, Clippings, and long foreign-language articles into reusable Chinese material fragments, and stably store them into the library according to the existing material library template. Once the user mentions "digging gold mines", "breaking down materials", "depositing into the material library", "break this article into titles/quotes/structures", "batch process Clippings", or "turn English articles into Chinese material assets", prioritize using this skill rather than just doing an ordinary summary.
qiangmian-shigong-bikeng-zhinan
A dedicated Skill for a wall construction pitfall-avoidance guide. It covers the full process including latex paint and putty, wallpaper, wallcloth and wainscoting, microcement and art paint, substrate treatment and leveling, cracking, hollowing and mold, wall storage and utilization, and comprehensive wall topics. It integrates the essence of the Xi'an Renovation Classroom member edition knowledge base in reverse chronological order to help users achieve more worry-free wall construction without pitfalls.
xiaohuxing-zhuangxiu-bikeng-zhinan
Dedicated Skill for a small-apartment renovation pitfall-avoidance guide. It covers the full process including space-enhancing techniques, storage and space utilization, layout and partition renovations, mini apartments and studio units, and small-apartment comprehensive topics, integrating in reverse order the essence of the Xi'an Renovation Classroom member edition knowledge base to help users achieve a more worry-free small-apartment renovation with fewer pitfalls.
zhuangxiu-yanshou-zhinan
A dedicated Skill for the renovation acceptance guide. It covers the full process including concealed water and electrical works, tilers' and carpenters' acceptance, final acceptance and home handover, acceptance tools and checklists, and integrates the essence of the Xi'an Renovation Classroom member edition knowledge base in reverse order, helping users achieve a more worry-free renovation acceptance without pitfalls.
alibabacloud-elasticsearch-log-config-generator
Use when the user needs to generate a log collection configuration file (OpenTelemetry Collector or Elastic Beats / Filebeat) that writes logs to Alibaba Cloud…
analysis
Triage and audit IDA binaries. Use when asked to analyze a binary, find suspicious behavior, detect crypto/network activity, review decompiled code against…
spec-writer
Draft Project Manual specification sections from accepted project requirements using CSI MasterFormat identities, three-part sections and review flags. Use for…
cs-crypto
Cryptography: AES, RSA/ECC, SHA-256/Blake3, PKI/X.509, TLS, digital signatures, ZKP, quantum resistance