Навыки: Разработка

Hunt CI/CD pipeline vulnerabilities — GitHub Actions workflow injection (pull_request_target Pwnrequest + ${{ }}-into-sh...

Cloud attack hunting for AWS / Azure / GCP - credential discovery, metadata SSRF, IAM privesc, service enumeration, pers...

Hunt client-side DOM vulnerabilities — DOM Clobbering (overwrite JS globals via HTML injection), PostMessage hijacking (...

Hunt gRPC vulnerabilities — server reflection enabled (enumerate all services/methods), missing authentication on intern...

Hunt Host Header Injection — password reset poisoning → ATO, web cache poisoning via unkeyed Host/X-Forwarded-Host, rout...

Hunt Laravel specific vulnerabilities — Debug mode leakage (APP_DEBUG=true exposes full stack trace + env vars), Laravel...

Microsoft 365 / Entra ID attack - tenant discovery, user enumeration via OneDrive differential (2026 verified), AADSTS c...

Hunt Next.js specific vulnerabilities — Server Actions arbitrary function execution, Middleware auth bypass via static a...

Hunt Node.js specific vulnerabilities — Prototype Pollution → RCE chains (lodash/merge/assign), Express trust proxy misc...

Hunt Open Redirect — all types including low-impact, chained to OAuth token theft → ATO, phishing chains. URL parameter...

Exposed-secrets hunting - .git/ dir + history mining, exposed .env/config files, hardcoded keys in JS bundles + source m...

Enterprise SSL VPN attack - vendor fingerprinting, CVE matrix (Cisco, Fortinet, Citrix, Palo Alto, Pulse/Ivanti), defaul...

Local Windows privilege escalation on a STANDALONE / workgroup host, or a local shell on a domain member - foothold to S...

Hunter integration for AI agents via ClawLink — browser login, no API key setup. Connect Hunter through ClawLink's hoste...

Hunts for domain fronting and CDN abuse by detecting TLS SNI versus HTTP Host header mismatches and high-reputation CDN...

Systematically hunt for adversary persistence mechanisms across Windows endpoints including registry, services, startup...

Detect process injection techniques (T1055) including CreateRemoteThread, process hollowing, and DLL injection via Sysmo...

Hunt for supply chain compromise indicators including trojanized software updates, compromised dependencies, unauthorize...

Operationalizes a threat intelligence report into hunts: extracting IOCs and TTPs, mapping behaviors to ATT&CK and avail...

Hunts for process injection using Sysmon telemetry: correlating CreateRemoteThread (EID 8), suspicious cross-process acc...

This skill should be used when the user asks to "hush", "be quiet", "stop speaking", "silence narrator", "narrator hush"...

Husky git hooks configuration with smart auto-detection for sensitive files, fail-fast execution, auto-fix workflows, an...

Use kordoc for agent-native HWP/HWPX document parsing, JSON extraction, diffing, form-field extraction, and Markdown→HWP...

Build, test, run, lint, format, and manage dependencies for Haskell projects using the hx toolchain CLI. Use whenever wo...

HYDRA v2.0 — Squeeze Detector. Finds crowded trades about to unwind. Funding extreme + SM positioned against the crowd +...

Debug and resolve complex hydration mismatches that cause UI thrashing and content layout shifts.

Step-by-step implementation guides for building features in a Shopify Hydrogen storefront — bundles, combined listings,...

Implement or review Shopify Hydrogen market localization — use when adding markets, locale routes, translations, hreflan...

Step-by-step guides for upgrading Shopify Hydrogen between versions — breaking changes, code diffs, and migration steps...

Use when making code changes to ensure they pass VS Code's hygiene checks. Covers the pre-commit hook, unicode restricti...

Builds and refreshes domain-based index files for the Hylo knowledge base. Use this skill whenever the user wants to bui...

Extract high-value verbatim quotes from a Hylo note and save each as a short note with a backlink wikilink. Use this ski...

> MANDATORY EXECUTION POLICY — READ BEFORE PROCEEDING

Use the Hyper CLI to run Hyper marketing skills from a terminal. Use when the user wants to use `hyperai`, inspect live...

When the user wants to build a hyper-heuristic — a search method that selects or generates low-level heuristics instead...

ГИПЕР-РЕСЁРЧ: один вопрос уходит в максимум НЕЗАВИСИМЫХ LLM разом (рельса = вендор#аккаунт: Claude x3 бака, ChatGPT x2,...

Operates HyperExecute end-to-end for TestMu AI/LambdaTest cloud test execution: analyze projects, create YAML, validate...

Hyperf 3.1 framework development assistant. Use when the user needs to: (1) Create Hyperf controllers, (2) Create Hyperf...

Park a deep work session before an interruption — capture what is only in your head, write a park file, drop a breadcrum...

HyperFrames CLI tool — hyperframes init, lint, preview, render, transcribe, tts, doctor, browser, info, upgrade, composi...

Only load when the user explicitly mentions HyperFrames. Get or make any media for a HyperFrames video - music, sound ef...

Search, install, and wire registry blocks and components into HyperFrames compositions. Use BEFORE hand-building any nam...

Install, discover, and wire registry blocks and components into HyperFrames compositions. Use when running hyperframes a...

Install and wire registry blocks and components into HyperFrames compositions. Use when running hyperframes add, install...

Install and wire registry blocks and components into HyperFrames compositions. Use when running hyperframes add, install...

Only load when the user explicitly mentions HyperFrames. Build a HyperFrames slideshow to present live - slides, fragmen...

Only load when the user explicitly mentions HyperFrames. Make a new episode in a proven video style - Collage Explainer,...

Encode and decode raw Hyperlane messages to/from packed hex bytes using the CLI. Use when you need to construct a messag...