reddit-post-engine
Writes and optionally posts a Reddit post for any subreddit, following that subreddit's specific culture and rules. Drafts a title, body, and first comment…
Skills
Find an Agent Skill for your task. Read the guide and copy the install command.
Updated 11-05 00:16
General & other
53,583 results
sdk-adoption-tracker
Given your SDK or library name, searches GitHub code search for public repos that import or require it, classifies each repo as company org, affiliated…
gtm-audit
Standalone GTM audit of a B2B service company on 23 weighted criteria in 4 blocks (Team 20% · Processes 30% · Data 25% · Interfaces 25%), maturity scale 0-4,…
icp-builder
Use when asked to build an ICP from scratch, define the ideal customer profile, or structure ICP documentation for use across skills
icp-validation
Use when asked to validate a company against ICP criteria, score fit, or check if a company is worth targeting
defender-for-business
Guidance for Microsoft Defender for Business (MDB) — the SMB-segment endpoint security product (≤300 employees), bundled with Microsoft 365 Business Premium…
defender-for-cloud-ai
Guidance for Microsoft Defender for Cloud — AI workload protection (AI-SPM and runtime threat detection for generative AI). Covers AI Security Posture…
entra-external-id
Guidance for Microsoft Entra External ID — the unified customer identity and access management (CIAM) and external collaboration platform that replaces Azure…
sync-skills
(hal-9000) Use when a skill in skills/ has its name or description changed, or is added or removed — syncs README.md, settings.json, and hal_dotfiles.json
creating-backstage-catalog-provider
Use when building a catalog backend module that ingests entities from an external source (e.g. Azure DevOps, internal API, JSON file). Covers both the normal…
fiftyone-model-evaluation
Evaluate model predictions against ground truth using COCO, Open Images, or custom protocols. Use when computing mAP, precision, recall, confusion matrices, or…
seven-powers
Use when asked to "7 Powers", "build a competitive moat", "analyze defensibility", "find sustainable advantage", "economic moats", or "Hamilton Helmer…
ad-persistence
AD domain environment persistence techniques. Use when domain admin/local administrator privileges have been obtained and persistent access needs to be established to ensure a return to the target environment after reboot or password changes. Covers host-level persistence (scheduled tasks/registry Run/COM hijacking/WMI event subscription/Windows services/Startup folder), domain-level persistence (Golden Ticket/Silver Ticket/Skeleton...
azure-ad-attack
Azure AD / Entra ID attack methodology. Use when the target uses a Microsoft 365/Azure cloud environment, when Azure AD authentication flows are discovered, or when Azure credentials are obtained. Covers initial access (Password Spray/Phishing), token theft, Service Principal abuse, conditional access bypass, cross-tenant attacks
c2-beacon-analysis
C2 Beacon configuration extraction and analysis. Use when Beacon samples, memory dumps, or network traffic from C2 frameworks such as Cobalt Strike/Sliver/Havoc are captured. Extract key intelligence such as C2 addresses, communication protocols, Malleable Profiles, Watermarks, etc. Red team perspective: understand how the blue team extracts from Beacons...
dirsearch-fuzz
Use dirsearch for Web directory and file brute-force enumeration. Use when there is a need to discover hidden directories, files, backend paths, and backup files. dirsearch has built-in high-quality wordlists and supports multiple extensions, recursive scanning, and status code filtering. This skill should be used in any scenario involving directory enumeration, path discovery, backend finding, or sensitive file discovery.
k8s-webhook-abuse
Kubernetes Admission Webhook abuse and policy engine exploitation. When the cluster has Kyverno/OPA Gatekeeper/custom Webhooks, DNS scanning discovers kyverno-svc or gatekeeper services, or it is necessary to extract injected Secrets from a Mutating Webhook…
kerberoast-attack
Complete attack methodology for Kerberoasting and AS-REP Roasting. Use when you have any domain user credentials (Kerberoasting) or discover accounts that do not require pre-authentication (AS-REP Roasting). Covers SPN discovery, ticket requests, offline cracking, AES vs RC4 strategy selection
naabu-portscan
Use naabu for high-speed port scanning. Use when port discovery or liveness detection is needed for target hosts/network segments. naabu is a fast port scanner from ProjectDiscovery, supports SYN/CONNECT/UDP scanning, performs far better than nmap, supports batch targets, CDN exclusion, nmap...
sliver-c2
Sliver C2 framework operation guide. Use when command and control channels need to be established, implants managed, and post-exploitation operations performed. Supports mTLS/HTTPS/DNS/WireGuard multi-protocol, Session/Beacon dual mode, SOCKS5 proxy, TCP/Named Pipe multi-layer pivoting. Suitable for red team operations and penetration testing scenarios.
tool-delivery
Methodology for delivering tools and files to already-controlled target hosts. Use when you already have a shell/webshell/RCE and need to transfer tools such as fscan, frp, chisel, linpeas, mimikatz to the target for execution. Covers Linux and Windows…
extraction-form
Use when `evidence-review` has screened includes and needs a schema-aligned extraction table.
desktop-commander-overview
Use for Desktop Commander MCP capabilities — persistent shells and REPLs, long-running processes, filesystem beyond the workspace, structured files (.xlsx,…
money-find
Use the "demand-signal reverse inference method" to find part-time/side-hustle opportunities in the AI era—don't search for "teach you how to make money" posts (those are polluted sources from course-selling and follower-baiting), but instead look at benefit-neutral demand signals such as industry reports/recruitment data/procurement data, infer opportunities that an individual can supply, and cross-validate with multiple independent signals; every opportunity must then pass the anti-scam + timeliness rubric. Trigger words: "find opportunities for me"/"find AI part-time work"/"what can make money"/"money…