В каталоге 182 820 навыков в 14 категориях.
JIRA hunting — unauthenticated dashboards, filters, and misconfigurations leading to sensitive data exposure
JWT token attacks — alg:none bypass, key confusion, claim tampering, signature stripping
Run a bounded implement-attack-repair loop for a user-specified task. Use when work needs repeated independent criticism...
Looks up OWASP Top 10 attack methods, CWE references, and form-specific vulnerability patterns with a bounty hunter mind...
MFA bypass — response manipulation, OTP reuse, and 2FA flow skipping for authentication bypass
Test case mutation and variation generator for adversarial testing
OAuth 2.0 hunting — implicit flow auth bypass, forced profile linking, and redirect_uri hijacking for account takeover
Open redirect exploitation — URL parameter manipulation, OAuth token theft, phishing chains
HTTP Parameter Pollution — client/server-side HPP via duplicate parameters and social sharing button pollution
Password reset flaws — token leakage via referer, array injection, OTP brute force, host poisoning, and token invalidati...
Use when Codex is already in the attack-path-analysis phase of a security scan or the user explicitly asks to trace a se...
Generates strategic attack trees and kill chains from reconnaissance data or domain input. Maps MITRE ATT&CK TTPs, ident...
Review a repository, architecture, or local folder and simulate plausible attacker paths by orchestrating multiple secur...
JavaScript prototype pollution — __proto__ injection, constructor.prototype, gadget chain exploitation
Race condition / TOCTOU testing — concurrent requests to exploit time-of-check-to-time-of-use flaws
Rate limit bypass testing — XFF rotation, case variation, method switching, header manipulation
security-scan結果をMarkdownレポートに変換。脆弱性をCVSSスコア降順でソートし、Executive Summary・推奨事項を含むレポートを生成。「レポート生成」「attack report」「脆弱性レポート」「スキャ...
HTTP request smuggling — CL.TE, TE.CL, TE.TE desync attacks for cache poisoning and auth bypass
SAML SSO attacks — XML Signature Wrapping (8 XSW variants), signature exclusion, and assertion injection for authenticat...
Signup functionality flaws — duplicate accounts, email verification bypass, and weak validation
CL.TE desync — front-end trusts Content-Length, back-end trusts Transfer-Encoding; detection, confirmation, capture and...
HTTP/2 desync — H2.CL and H2.TE downgrade smuggling, 0-length CL injection, client-side desync, browser-triggered attack...
TE.CL desync — front-end trusts Transfer-Encoding, back-end trusts Content-Length; body-wrapping detection, capture, pre...
TE.TE desync — obfuscated Transfer-Encoding forms where front and back disagree on malformed TE headers; detection matri...
SQL injection — error-based, blind, and WAF-evading payloads for MySQL/MSSQL/Oracle
Server-Side Request Forgery — internal network access, cloud metadata theft, filter bypass techniques
Blind SSRF → metadata & config harvesting — prove via OOB first, then extract cloud metadata, config endpoints, and inte...
Blind SSRF — OOB confirmation via Collaborator/interactsh, DNS exfiltration, timing oracles, response-latency port scann...
Classic SSRF — internal network access, loopback services, internal port scanning, file:// reads, gopher protocol smuggl...
SSRF to cloud metadata — AWS IMDSv1/v2 credential theft, GCP metadata server, Azure instance metadata, token escalation...
SSRF filter bypass — IP encoding tricks, DNS rebinding, redirect chains, protocol alternates, header-based SSRF, IPv6/ma...
SSRF → internal port scan → k8s/service-mesh exploitation — kubelet (10250, 10255), API server (6443), apiserver-kubelet...
Subdomain takeover — CNAME detection, cloud service fingerprinting, dangling DNS exploitation
Attack Surface Analyzer - Auto-activating skill for Security Advanced.Triggers on: attack surface analyzer, attack surfa...
Modern attack surface management + pen testing methodology for AI-era environments — NIST 800-115, OWASP WSTG, PTES, ATT...
Build comprehensive attack trees to visualize threat paths. Use when mapping attack scenarios, identifying defense gaps,...
Review a repository, architecture, or local folder and construct an attack tree for a chosen attacker goal. Use when Cod...
Upload document parser attacks — SVG XSS/XXE, OOXML (docx/xlsx) XXE, PDF JS, CSV injection, image library CVEs
Upload path traversal — filename-based directory escape, storage relocation, content-type mismatch on serve, self-XSS-vi...
WAF bypass via header manipulation, IP spoofing, and password reset poisoning — attacker-controlled headers to evade Web...
Weak password policy testing — brute force, policy bypass, and weak credential exploitation
Web source code review — manual JS, HTML, and API source analysis for hidden endpoints and secrets
WebSocket security — handshake abuse, CSRF, origin validation, message-layer injection
WebSocket security testing — CSWSH, message injection, auth bypass, origin validation
Cross-site scripting — Dalfox automation, Wayback GF, CSP bypass, and postMessage XSS
Blind XSS — callback collectors (XSS Hunter style), payload placement in admin panels/support queues, delivery and dwell...
DOM XSS — sink/source mapping (innerHTML, eval, postMessage, location.*), client-side taint tracing, DOMPurify/mXSS note...
Reflected XSS — response reflection hunting, context determination (HTML body / attribute / JS string / URL), context-sp...
Stored XSS — injection point mining (profile fields, filenames, headers, uploads), render-path verification, second-orde...
XML External Entity injection — file read, SSRF, data exfiltration via out-of-band XML parsing
Forward collected data to an explicitly attacker-controlled destination
Find absence-assertions that carry no attempt-record — code that returns the same empty value whether the work RAN and f...
Knowledge about attempt tracking and gating patterns for task execution
Exam Attendance Reports implementation reference for Student Sheets, Summary Reports, and Bundle Covers. Uses MyJKKN API...
Generate printable attendance / 签到表 spreadsheets from name lists. Use when the user asks for 签到表, attendance sheet, meet...
Shape output for a reader with ADHD, then write each sentence in controlled English: action first, one word one meaning,...
Distill a large, fast-moving research information stream into source-backed recommendations with separate impact, buzz,...
Use when controlling where the audience looks—composing shots, choreographing action, revealing information, or any situ...
Use when drawing user focus - notification badges, new feature highlights, error callouts, promotional banners, or any a...
Answer in the ADHD-friendly Attention-kind style for the rest of this chat.
Use when wrong elements get attention, important content is missed, or visual hierarchy is broken by animation
Get your attention back with a 30-day protocol that assumes you'll break it — a screen-time ledger without moralizing, f...
Decide which bounded personal observations warrant attention, then return a source-bound private briefing intent and nex...
The runbook a triage agent follows on each run over the super-admin attention dock, through the attention MCP tool. Use...
当规划内容创作策略或评估不同内容形式的长期价值时
Specification compliance verification agent. Extracts acceptance criteria from specifications and adversarially verifies...
Verifying spec compliance: extracts ACs from specs, adversarially checks conformance, generates BDD scenarios and tracea...
Records human verification - code review, exploratory sessions, UAT, accessibility passes, UX and observability reviews...
Read and write Attio: list objects, query records, upsert records, add notes and tasks. Trigger phrases: attio, crm.
Attio integration via Apideck's CRM unified API — same methods work across every connector in CRM, switch by changing `s...
Attio integration for AI agents via ClawLink — browser login, no API key setup. Connect Attio through ClawLink's hosted...
Attio CRM integration for managing companies, people, deals, notes, tasks, and custom objects. Use when working with Att...
Automate Attio CRM operations -- search records, query contacts and companies with advanced filters, manage notes, list...
Attio CRM operations for companies, contacts, and notes management. Use this skill when interacting with Attio CRM, sear...
Prove the smallest safe Attio REST connection by listing objects and validating the response envelope without changing C...
A comprehensive AI agent skill for navigating legal situations that require or may require an attorney. Helps you unders...
AttoSet brand + design system. Use whenever building, editing, or reviewing any AttoSet website UI, component, page, cop...
Invariant set attracting nearby trajectories
Establish cause-effect relationships between events or states. Use when analyzing root causes, mapping dependencies, tra...
When the user wants to figure out which marketing actually drives conversions and revenue, choose or interpret an attrib...
Use to define measurement, data sharing, and ROI reporting for joint campaigns.
Build practical B2B attribution models across first touch, lead creation, opportunity creation, multi-touch, account-bas...
Perform multi-touch attribution analysis using Markov chains, Shapley values, and custom attribution models. Use when yo...
Multi-touch attribution analysis across marketing channels with multiple models
Use after an Anabasis run, comparison, or system change and before claiming improvement. Attributes movement to one owne...
Gradient-based approximation to activation patching for scalable circuit analysis. Use when activation patching is too s...
Standard operating guide for campaign tagging, attribution models, and QA.
Use when platform-reported conversions disagree with GA4/ecommerce, when you suspect Meta and Google are double-counting...
Run multi-touch attribution analysis. Use when: first/last-touch, linear, time-decay, position-based revenue allocation.
AI relational calibration — reading and adapting to the specific person you are working with. Goes beyond user-intent al...
Use when the user asks to "set up atuin", "stow atuin config", "disable atuin sync", "remove atuin server", or needs to...
阿囤囤风格小红书封面提示词生成。用于AI工具、效率方法、产品测评、教程部署、个人经验、播客推荐、职场认知类内容的爆款竖版封面设计。特点是真人出镜、超大柔和浅黄（#FDFFA7）/白色中文标题、粗黑描边、人物抠图描边、绿色勾选清单、emoji...
Agent wallet, identity, and paid tools in one package. Register an agent, fund it via Stripe or USDC, then use the balan...
Access ATXP paid API tools for web search, AI image generation, music creation, video generation, X/Twitter search, emai...
Access ATXP paid API tools for web search, AI image generation, music creation, video generation, and X/Twitter search....
Use when reconciling an Australian accounting practice's client list with its AML/CTF customer due diligence records to...
Use when estimating or reviewing ATO general interest charge, shortfall interest charge or failure to lodge penalties, o...
Use when preparing Australian transaction coding and reconciliations before month-end close or BAS work.
Use when assembling registration and commencement evidence for an Australian business after a human selects the structur...
Use when preparing an Australian CGT event register, cost-base evidence or capital-loss reconciliation.