Agent Skills catalog · page 143
Standard HTML pagination keeps the complete catalog discoverable. Use the main directory for search, filtering, and comparison.
- Current page
- 143/209
- Entries on page
- 24
- URL status
- Self-canonical
brucesongs/kali-claw
vulnerability-assessment
Vulnerability assessment is the process of systematically identifying and quantifying security weaknesses in information systems through automated scanning, CVE analysis, and risk scoring.
brucesongs/kali-claw
web-access-control
Broken Access Control (OWASP Top 10 2025 - A01) attacks and defense — covering core attack surfaces including IDOR (Insecure Direct Object Reference), vertical/horizontal privilege escalation, path traversal, and permission bypass.
brucesongs/kali-claw
web-xxe
XML External Entity (XXE) injection exploits vulnerable XML parsers to read local files, initiate SSRF attacks, exfiltrate data through out-of-band channels, and cause denial of service.
brucesongs/kali-claw
wifi-pentest
WiFi security assessment skills: covering wireless network reconnaissance, WPA/WPA2 handshake capture and offline cracking, WPS PIN brute forcing, Evil Twin attacks, wireless sniffing, and deauthentication attacks.
brucesongs/kali-claw
5g-telecom-attack
5G core (AMF/SMF/UPF), RAN, signaling (PFCP/GTP/Diameter/SS7), IMSI catchers, O-RAN security, roaming abuse, SMS interception, and telecom infrastructure red team operations.
brucesongs/kali-claw
ai-agent-supply-chain-attack
AI/ML supply chain attacks — model poisoning, Pickle RCE, Hugging Face / Ollama registry compromise, LangChain plugin backdoors, OpenClaw / ClawHub ecosystem threats. Distinguishes from ci-cd-supply-chain-attack by focusing on model weights, training data, and serialization formats. Anchored by the 2026-07 Hugging Face incident (the 'Chernobyl moment' of software supply chain security).
SerendipityOneInc/ZooData-Skills
amazon-competitor-intelligence-monitor
Amazon competitor intelligence engine. Produces analytical output focused on a defined set of competitors: either a one-shot deep teardown (Full Scan: 28-35 credits, 11 endpoints, battle card, side-by-side comparison, pricing/review/inventory breakdown) OR sustained per-competitor monitoring with alerts (Quick Check: 5-10 credits, realtime polling, baseline diff). Input: keyword, ASIN(s), or brand — whatever identifies the competitor set to analyze. Output is per-competitor analytical insight ti
brucesongs/kali-claw
continuous-learning
After completing a penetration test engagement - When encountering a novel attack technique or defense - After a tool produces unexpected results - When identifying recurring patterns across targets - User says "learn", "remember this", "pattern.
brucesongs/kali-claw
digital-forensics
Digital forensics covers the complete workflow of disk forensics, memory forensics, network forensics, file recovery/carving, and chain of custody.
brucesongs/kali-claw
email-protocol-attack
Email protocol attacks targeting mail infrastructure at the protocol level.
brucesongs/kali-claw
reverse-engineering-advanced
Advanced reverse engineering covering symbolic execution (angr, KLEE, manticore), decompiler confusion (Hex-Rays, Ghidra deobfuscation), binary diffing (BinDiff, Diaphora, Kam1n0), firmware RE workflow (binwalk, FACT, EMBA), and obfuscated code analysis (LLVM obfuscation, OLLVM, Tigress). Distinct from foundational `binary-reverse` — focuses on advanced program analysis, automated RE techniques, and firmware / obfuscation workflows. Use when analyzing obfuscated or packed binaries, automating RE
brucesongs/kali-claw
security-bounty-hunter
Hunt for exploitable, bounty-worthy security issues in target systems. Focuses on remotely reachable vulnerabilities that qualify for real reports and responsible disclosure, not broad best-practices reviews or theoretical findings.
brucesongs/kali-claw
uav-drone-security
UAV/drone security testing — PX4/ArduPilot autopilot attacks, MAVLink protocol fuzzing, RF link hijacking (2.4GHz control / 5.8GHz video), GPS spoofing/jamming, DroneSploit framework, DJI hardware reversing, and counter-UAS methodologies.
GulajavaMinistudio/awesome-copilot-id
ponytail-lazy-senior-dev
Applies the "lazy senior developer" mindset. Use this skill whenever generating, modifying, reviewing code, or fixing bugs to prioritize code reuse, minimalism, YAGNI principles, and root-cause fixes. Also use whenever the user says "ponytail", "be lazy", "lazy mode", "simplest solution", "minimal solution", "yagni", "do less", or "shortest path". Supports intensity levels: lite, full (default), ultra. Also includes sub-modes for over-engineering review (ponytail-review), repo-wide audit (ponyta
GulajavaMinistudio/awesome-copilot-id
sdlc-bug-report
Workflow for analyzing bug reports, tracing root causes, and generating structured bug-fix implementation plans with rollback strategies.
GulajavaMinistudio/awesome-copilot-id
sdlc-clarify-reqs
Helps interrogate Product Requirements (PRD), Technical Specifications, and Implementation Plans to find ambiguities, missing edge cases, and hidden assumptions.
GulajavaMinistudio/awesome-copilot-id
sdlc-plan-tasks
Generates formal, structured, and executable implementation plan documents based on specifications.
GulajavaMinistudio/awesome-copilot-id
sdlc-code-review
Language-agnostic workflow for code reviews and security audits using a Two-Axis (Standards vs Spec) approach against Clean Code/SOLID principles, generating formal refactoring plans.
levi-qiao/longgraph-skill
loop-graph
Compile one durable loop-graph run into executor, ledger, directives, ops, and supervisor artifacts under a dated `.longgraph` directory, then present copy-ready host prompts. Use directly for a custom multi-round shape with gated milestones, independent audit, cross-host execution, or durable state; focused sibling packs handle code convergence, requirement delivery, and evidence-led research. Existing runtime nodes are self-contained.
Dianel555/DSkills
agent-wiki
Incremental LLM-friendly wiki generator for Obsidian note vaults. Use when: (1) Building wiki from notes, (2) Ingesting notes to wiki, (3) Obsidian LLM wiki, (4) Incremental knowledge base management. Triggers: 'build wiki from notes', 'ingest notes to wiki', 'Obsidian LLM wiki', 'incremental knowledge base'.
Jamie-BitFlight/claude_skills
ensemble-rule-review
Design pattern for converting rule-following, checklist, or rubric skills into a fan-out map-reduce ensemble of parallel rigid sub-agents with corroboration-weighted merge; worker model tier and diversity are knobs matched to inference load and stakes, not fixed values. Apply when creating or refactoring a skill or agent that applies 10+ independent criteria in a single pass. Triggers on: 'review against a checklist', 'fan out', 'map reduce review', 'ensemble', 'split the rules', 'apply rubric',
Jamie-BitFlight/claude_skills
agent-creator
Create high-quality Claude Code agents from scratch or by adapting existing agents as templates. Use when the user wants to create a new agent, modify agent configurations, build specialized subagents, or design agent architectures. Guides through requirements gathering, template selection, and agent file generation following Anthropic best practices (v2.1.63+).
Jamie-BitFlight/claude_skills
evaluate-and-tighten-skills
Generate a focused behavioral contract for an existing skill, then remove instructions that do not contribute to that behavior. Use before eval testing of a skill, use when optimizing skill token usage.
Jamie-BitFlight/claude_skills
hooks-patterns
Hook recipes and working examples — plugin hooks, frontmatter hooks in skills/agents/commands, prompt-based LLM hooks, and complete code examples in Python and Node.js. Use when building hook scripts, integrating hooks into plugins, implementing prompt-based hooks, or looking for hook configuration patterns.