Explorar el registro

Todas las entradas, por orden alfabético — 57.265 en total. Página 98 de 230.

• html-styleApply opinionated styling to barebones HTML. Use when user has plain/unstyled HTML and wants to apply consiste
• html-summaryConvert a stakeholder summary markdown file into a single self-contained HTML executive report — bottom line a
• html-to-bricksUse when the user says 'convert this html to bricks' or 'paste html into bricks', or has a Webflow, Framer, Co
• html-to-imageGenerate crisp, high-quality images with perfect typography and precise geometric layouts using HTML/CSS. Use
• html-to-pptx将 html-ppt 演示文稿一键转换为 PPTX。触发词：导出 PPTX、转成 PPT、HTML 变 PPTX、convert to pptx、导出给同事、PPTX 导出。当用户有一份 html-ppt 生成的 HTM
• html-tool-generatorGenerate single-file HTML tools following Simon Willison's patterns. Creates client-side utilities with localS
• html-videoHTML→Video meta-layer for coding agents. Turn prompts, article links, or GitHub repos into multi-frame animate
• html-visualGenerate an interactive single-file HTML visualization — mockup, wireframe, ERD, flowchart, chart, slides, arc
• html-wireframeDirect-invocation specialist for low-fidelity, self-contained HTML wireframes that test information hierarchy,
• html2elementorConvert HTML+CSS into Elementor JSON that imports into WordPress. Always use this skill whenever the user has
• htmlhero-skillHTML/React 第一页 Hero 生成工作流。用户提供 Hero Prompt、品牌主题、首页视觉需求、背景视频/图片、或要求"先对齐再生成第一页"、"需要你更改的部分: {}"、"做一个能跑的交互 Hero 页面
• htmlppt-skillHTML/PPT 风格网页演示文稿生成工作流。用户提供第一页 Hero Prompt、现有 Hero 工程、演示文稿扩展指令、或要求"先对齐再执行"、"需要你更改的部分: {}"、"把 hero 扩成多页汇报/slide
• htmx-skillUse when you need accurate htmx syntax or behavior — attributes, triggers, swap modifiers, events, request/res
• http-api-cloudbaseCloudBase official HTTP API client guide. This skill should be used when backends, scripts, or non-SDK clients
• http-cacheGenerates an HTTP caching layer with Cache-Control parsing, ETag/conditional requests, and offline fallback. U
• http-interface-clientsUse when calling external HTTP APIs from Spring Boot 4 / Spring Framework 7 with declarative HttpExchange inte
• http-request发起 HTTP 网络请求，支持 GET、POST、PUT、DELETE、PATCH 方法。当用户需要调用 API、获取网页内容、发送数据到服务器时使用。
• http-sec-auditAudit a website's HTTP security headers and cookie flags — CSP, HSTS, X-Frame-Options, X-Content-Type-Options,
• http-smugglingHTTP Request Smuggling detection and exploitation. Covers CL.TE, TE.CL, TE.TE variants, front-end/back-end par
• httpieUse this skill whenever the user wants to make HTTP requests, test APIs, call REST endpoints, debug web servic
• httprunner/httprunnerHttpRunner 是一款开源的 API/UI 测试框架，简单易用，功能强大，具有丰富的插件化机制和高度的可扩展能力。
• hu.xfish/webshopXFish.hu Hungarian fishing tackle webshop. Search 90000+ products by category, brand, price.
• huangjia2019/a2a-in-action我从A2A官方克隆下来，并加以修改的A2A实战代码示例，用于初学者入门教学，大家一起来A2A吧。
• huangwb8-brainstorming当用户明确要求"使用 brainstorming"或"使用 awesome-code"时使用。⚠️ 不适用：用户只是想优化/改进某个功能（应直接修改）、只是询问技能问题（应直接回答）、没有明确使用 brainstormi
• huangwb8-code-reviewerUse when completing tasks, implementing major features, or before merging to verify work meets requirements -
• huangwb8-git-commit当用户明确要求"提交 Git 改动"、"生成 commit 信息"或"创建 git commit"时使用。仅用 Git 分析改动并自动生成 conventional commit 信息（可选 emoji）；必要时建议拆分
• huangwb8-git-workflowGit 工作流专家。规范化版本控制，确保提交历史清晰可追溯。支持 Conventional Commits 规范、Pull Request 最佳实践、分支管理策略和自动化工作流。
• huangwb8-init-project当用户明确要求"初始化项目"、"创建项目指令文件"或"生成 AGENTS.md"时使用。完全自动化：自动检测操作系统默认语言，分析项目目录结构（支持 Python/Web/Rust/Go/Java/数据科学/文档项目等）
• huangwb8-tdd-workflowUse when implementing any feature or bugfix, before writing implementation code - write the test first, watch
• huangyun111-planUse when you have a goal or spec for a multi-step task and want to break it into an ordered PLAN.md task list
• huashu-agent-swarm多Agent蜂群并行协作——纯git自组织，无master agent，每个agent独立认领任务、 写代码、推送。适合大型项目开发。Trigger keywords: 蜂群模式, 多agent, 并行开发, agent
• huashu-article-edit标准化文章编辑流程——先读完全文列出所有修改项，确认后才动手，每改3-5项汇报进度。 防止会话截断导致编辑丢失（增量保存）。Trigger keywords: 编辑文章, 修改文章, 调整内容, 改一下这篇, artic
• huashu-article-to-x长文精简为社交媒体内容（200-500字）——保留核心观点和个人风格，3种开头风格可选。 适用微博/小红书等平台。Trigger keywords: 转微博, 发小红书, 社交媒体, 缩短文章, 文章转X, articl
• huashu-data-pro数据分析与办公提效全能助手——覆盖数据处理、分析洞察、报告撰写、PPT制作、 数据可视化的端到端工作流。支持Excel数据分析、投放复盘、ROI测算、图表生成。 Trigger keywords: 分析数据, 做报告,
• huashu-design设计哲学顾问——从20种设计哲学中推荐3个方向，并行生成3个视觉Demo和AI提示词DNA。 5大流派：信息建筑/运动诗学/极简主义/实验先锋/东方哲学。设计完成后自动专家评审。 Trigger keywords: 设计
• huashu-douyin-scriptShort video viral script creation workflow. End-to-end process from competitor video breakdown to script gener
• huashu-image-uploadOne-click generation and upload of article illustrations to an image host, with automatic Markdown link insert
• huashu-info-searchMulti-channel search for new products and technologies, cross-validated and saved to a knowledge base. Use whe
• huashu-material-searchSearch a personal material library of 1,800+ real experiences and opinions to add a human touch to content. Us
• huashu-md-to-pdfConvert Markdown documents into professional Apple-style PDF white papers. Supports full Markdown syntax (code
• huashu-prompt-saveAutomatically identifies the prompt type and saves it to the appropriate category (Technical / Content / Teach
• huashu-proofreadingThree-pass proofreading to reduce AI detection rates and make articles feel more human. Use when the user ment
• huashu-researchStructured web research workflow that ensures research findings are saved incrementally to files and not lost
• huashu-script-polishColloquialise video scripts — remove formal, written-language tone so scripts feel natural when spoken aloud.
• huashu-slidesEnd-to-end presentation creation from content to finished PPTX, with AI illustration generation and 18 design
• huashu-speech-coachPresentation and speaking coach. Based on Patrick Winston's (MIT AI Professor) How to Speak methodology — help
• huashu-topic-genQuickly generate 3–4 topic directions, each with a title, outline, and pros/cons analysis. Use when the user m
• huashu-video-checkCheck video titles, thumbnails, and opening hooks based on MrBeast's strategies. Use when the user mentions "v
• huashu-video-outlineQuickly generate 2–3 video outline options, including title, thumbnail recommendations, and structural design.
• huashu-wechat-imageGenerate high-quality images for WeChat Official Account articles. Supports cover images (2.35:1), body illust
• huashu-xhs-imageGenerate high-quality images for Xiaohongshu (Little Red Book) posts. Default path is AI-generated (Gemini); H
• huawei-cloud-account-onboardingGuides Huawei Cloud real-name verification (实名认证) via terminal QR code — check account status, generate a scan
• huawei-cloud-billing-scoutHuawei Cloud BSS billing read-only only (not AWS/Azure/other clouds; refuses pricing quotes, real-name review,
• huawei-cloud-cost-estimationGenerate Huawei Cloud pre-order price estimates, safely provision allowlisted resources via hcloud, and guide
• hubertgajewski-ai-deep-reviewRun configurable multi-agent code reviews over local changes, Git refs or ranges, repository files or director
• hubspotEvery Sales Hub feature, plus offline cross-object queries and retained property-change history. Trigger phras
• hubspot-ai-contextFill HubSpot's AI Context page (Business tab + Customers tab — ICPs and Personas) by crawling a client website
• hubspot-automationAutomate HubSpot CRM operations (contacts, companies, deals, tickets, properties) via Rube MCP using Composio
• hubspot-setupSet up HubSpot for B2B SaaS GTM — CRM configuration, deal pipelines, lifecycle stages, marketing automation, s
• hubspot-webhooksReceive and verify HubSpot webhooks. Use when setting up HubSpot webhook handlers, debugging X-HubSpot-Signatu
• huddleStructured multi-perspective analysis using Six Thinking Hats with professional lens team members. TRIGGER whe
• huduEvery Hudu cmdlet, plus an offline SQLite mirror, cross-entity audits, and agent-native output no PowerShell m
• hueMeta-skill that generates new design language skills for Claude Code. Use when the user says 'create a design
• hugeGenerates exhaustive boilerplate for new modules. Use when the user scaffolds a new module or mentions boilerp
• hugging-face-cliExecute Hugging Face Hub operations using the `hf` CLI. Use when the user needs to download models/datasets/sp
• hugging-face-dataset-creatorCreate and manage datasets on Hugging Face Hub. Supports initializing repos, defining configs/system prompts,
• hugging-face-evaluationAdd and manage evaluation results in Hugging Face model cards. Supports extracting eval tables from README con
• hugging-face-evaluation-managerAdd and manage evaluation results in Hugging Face model cards. Supports extracting eval tables from README con
• hugging-face-model-trainerThis skill should be used when users want to train or fine-tune language models using TRL (Transformer Reinfor
• hugging-face-paper-publisherPublish and manage research papers on Hugging Face Hub. Supports creating paper pages, linking papers to model
• hugging-face-tool-builderUse this skill when the user wants to build tool/scripts or achieve a task where using data from the Hugging F
• hugging-face-ui-skillsHugging Face's UI design system. Use when building interfaces inspired by Hugging Face's aesthetic - dark mode
• hugging-scienceUse when the user is doing AI/ML work in a scientific domain such as biology, chemistry, physics, astronomy, c
• huggingfaceHugging Face transformers library and hub. Use for NLP models.
• huggingface-accelerateSimplest distributed training API. 4 lines to add distributed support to any PyTorch script. Unified API for D
• huggingface-bestFind and compare recommended Hugging Face models for a task using benchmarks, model size, and device constrain
• huggingface-community-evalsRun evaluations for Hugging Face Hub models using inspect-ai and lighteval on local hardware. Use for backend
• huggingface-dataset-publishing当需要创建、上传、验证和维护 Hugging Face Dataset 时使用，尤其是包含图片、多图字段、文本步骤、答案、JSON/metadata 字段的数据集；包括 datasets Features/Image/S
• huggingface-datasetsUse this skill for Hugging Face Dataset Viewer API workflows that fetch subset/split metadata, paginate rows,
• huggingface-gradioBuild Gradio web UIs and demos in Python. Use when creating or editing Gradio apps, components, event listener
• huggingface-llm-trainerTrain or fine-tune language models with TRL or Unsloth on Hugging Face Jobs, including SFT, DPO, GRPO, reward
• huggingface-local-modelsUse to select models to run locally with llama.cpp and GGUF on CPU, Mac Metal, CUDA, or ROCm. Covers finding G
• huggingface-lora-space-builderBuild and publish a Gradio Hugging Face Space for a user-provided image or video LoRA, including pipeline sele
• huggingface-paper-publisherPublish and manage research papers on Hugging Face Hub. Supports creating paper pages, linking papers to model
• huggingface-papersLook up and read Hugging Face paper pages in markdown, and use the papers API for structured metadata such as
• huggingface-spacesBuild, deploy, debug, or maintain a Hugging Face Space using Gradio, Docker, or Static SDKs. Use for general S
• huggingface-tokenizersFast tokenizers optimized for research and production. Rust-based implementation tokenizes 1GB in <20 seconds.
• huggingface-tool-builderUse this skill when the user wants to build tool/scripts or achieve a task where using data from the Hugging F
• huggingface-trackioTrack and visualize ML training experiments with Trackio. Use when logging metrics during training (Python API
• huggingface-vision-trainerTrain object-detection, image-classification, or SAM segmentation models on Hugging Face Jobs. Use for vision
• huggingface-webhooksReceive and verify Hugging Face webhooks. Use when setting up Hugging Face webhook handlers, debugging X-Webho
• huggingface-zerogpuImplement or debug Hugging Face Spaces ZeroGPU code using `@spaces.GPU`, including isolation, state, duration,
• hugoGuide to building static websites with the Hugo static site generator: blogs, documentation sites, landing pag
• hugo-themeBuild, customize, and debug advanced Hugo CMS themes — template architecture, asset pipeline (CSS/JS/image pro
• huhEmergency plain-language reset. Use when the user sends /huh, or says 'huh?', 'I don't understand', 'what?', '
• human-approval-gatePrepare decision package for qualified human signoff. Use for PR launch, merge/no-merge, roadmap approval, ML
• human-architect-mindsetSystematic architectural thinking for irreplaceable human capabilities - domain modeling, systems thinking, co
• human-checkpointReview and record one pending human checkpoint in a research Workspace; use when a HUMAN Unit is blocked on an
• human-commit-messagesWrite commit messages and PR descriptions the way an engineer does: a plain summary of what changed and why. U
• human-copywriteWrite, finalize, or clean up reader-facing marketing and long-form copy (landing pages, sales pages, e-books,
• human-geographyStudy of human activities, spatial patterns, and social processes on Earth's surface. Covers population and mi
• human-impact-assessmentAssessing anthropogenic environmental impacts — pollution pathways, habitat destruction and fragmentation, lan
• human-in-the-loopUse when classifying a slice closeout (auto-continue / human gate / park), routing a real decision to a human,
• human-interact-expertDesign and evaluate human-computer interaction methods. Use for interaction design, usability evaluation, user
• human-reviewProduce a plain-English review of the files you just edited and gate the changes behind an explicit Approve/Un
• human-risk-scoringExplainable per-user and per-org human risk scoring from training-completion status, phishing-simulation failu
• human-toneRewrites AI-generated marketing copy to sound naturally human. It removes common AI cliches, adjusts the pacin
• human-viewProject an LLM-optimized planning artefact (a plan, blueprint, spec, or vision) into a human-readable approval
• human-writingUse when drafting, rewriting, proofreading, diagnosing, or adapting source-grounded prose, especially technica
• humaniseur-frRemove AI-writing patterns from French text and inject voice, personality, and soul. Use when editing, reviewi
• humanities-writing-companionThinking partner for humanities scholars — history, philosophy, literature, art history, religious studies, cl
• humanizadorRemove sinais de escrita gerada por IA do texto. Use ao editar ou revisar texto pra que soe mais natural e hum
• humanizeReviews and edits copy to remove AI-generated patterns and make text sound natural. Use when editing drafts, r
• humanize-beagleRewrite AI-generated developer text to sound human — fix inflated language, filler, tautological docs, and rob
• humanize-chineseDetect and humanize AI-generated Chinese text. 20+ rule detection categories plus statistical features (senten
• humanize-enStrip AI writing tells from English prose — em-dash overuse, rule of three, negative parallelisms, AI vocabula
• humanize-englishMake AI-generated English text sound natural and human. Use when: writing blog posts, articles, marketing copy
• humanize-it对指定文档进行去 AI 味的改写。自动选择最合适的人性化策略（humanizer-zh / humanize-chinese / technical-writing）， 迭代改写直到效果达标或迭代 42 次为止。适用于中
• humanize-koreanAI(ChatGPT·Claude·Gemini 등)가 쓴 한글 텍스트를 "사람이 쓴 글처럼" 윤문해주는 오케스트레이터 스킬. 번역투·영어 인용 과다·기계적 병렬·관용구·피동태 남용·접속사 남발·리듬
• humanize-mba-text去除中文文本中的 AI 生成痕迹，使其更符合中国 MBA 毕业论文的自然写作风格。当用户提到"去 AI 痕迹"、"去除 AI 写作痕迹"、"MBA 论文改写"、"让这段文字更像人写的"、"去除机器感"等关键词时触发。适用
• humanize-russianНатурализация русскоязычного текста - убрать маркеры ИИ-генерации. Использовать когда: Хабр-статьи, блоги, мар
• humanize-textRewrite AI-sounding prose so it reads as considered human writing — cut the tells (em-dash pile-ups, "it's not
• humanize-writingRewrite or generate prose so it reads as natural human writing instead of obviously AI-generated text. Use whe
• humanizerRemove signs of AI-generated writing from text. Use when editing or reviewing text to make it sound more natur
• humanizer-deEdit-Pass für bestehenden deutschen Text: Register/Rhythmus messen, belegtreu redigieren, Naturalness prüfen,
• humanizer-ruСкилл для очеловечивания русскоязычного текста. Убирает признаки AI-генерации, делает текст живым. Используй В
• humanizer-viBiên tập văn bản tiếng Việt máy móc, sáo rỗng hoặc đều giọng để câu chữ tự nhiên, rõ và đúng ngữ cảnh. Dùng kh
• humanizer-zh去除文本中的 AI 生成痕迹。适用于编辑或审阅文本，使其听起来更自然、更像人类书写。 基于维基百科的"AI 写作特征"综合指南。检测并修复以下模式：夸大的象征意义、 宣传性语言、以 -ing 结尾的肤浅分析、模糊的归因、
• humanizer-zh-tw去除繁體中文文字裡的 AI 生成痕跡，讓文字讀起來像真人書寫而非機器產出。當使用者要求「去 AI 味」「潤稿」「讓這段更像人寫的」「改寫成自然的中文」，或要把 AI 生成的草稿、翻譯、貼文、報告、commit 訊息、PR
• humanizerczechPiš přirozenou českou dokumentaci a opravuj strojový styl. USE WHEN user asks for Czech text, Czech documentat
• humanpagesHire real humans for tasks that agents can't do alone — QA testing, directory submissions, Play Store beta tes
• hundred-million-offersCreate irresistible offers using the Value Equation, bonus stacking, risk-reversing guarantees, and ethical sc
• hung-yi-leeExplain machine learning, deep learning, generative AI, LLMs, AI agents, and speech modeling in a Hung-Yi Lee-
• hungarian-humanizerDetect and remove AI-generated markers from Hungarian text, making it sound like a native Hungarian speaker wr
• huntFinds root cause of errors, crashes, unexpected behavior, and failing tests before applying any fix. Not for c
• hunt-a-handleEnumerate a username across hundreds of platforms with sherlock, maigret and WhatsMyName, then correlate and c
• hunt-api-misconfigHunt API security misconfiguration — mass assignment, prototype pollution, HTTP verb tampering. Mass assignmen
• hunt-aspnetHunt ASP.NET-specific surface — ViewState deserialization (signed-only vs encrypted), machineKey recovery, dua
• hunt-atoHunt account takeover taxonomy — 9 distinct paths to ATO, plus chains. Paths: (1) password reset flaws (host-h
• hunt-auth-bypassHunting skill for auth bypass vulnerabilities. Built from 12 public bug bounty reports across SAML XSW / parse
• hunt-brute-forceHunt Missing/Weak Rate Limiting — login brute force, OTP/2FA brute force (10^6 keyspace), password-reset-token
• hunt-business-logicHunting skill for business logic vulnerabilities. Built from 12 public bug bounty reports. Covers coupon-race-
• hunt-cache-poisonHunting skill for cache poison vulnerabilities. Built from 10 public bug bounty reports including X-Forwarded-
• hunt-captcha-bypassHunt CAPTCHA Bypass — 6 distinct patterns: (1) CAPTCHA field simply omitted from the request (server-side vali
• hunt-cicdHunt CI/CD pipeline vulnerabilities — GitHub Actions workflow injection (pull_request_target Pwnrequest + ${{
• hunt-clickjackingHunt Clickjacking — missing X-Frame-Options / CSP frame-ancestors lets an attacker embed the target page in an
• hunt-cloud-misconfigHunt cloud / infrastructure misconfigurations. AWS: public S3 buckets (s3:GetObject anonymous), permissive buc
• hunt-corsHunt CORS Misconfiguration — origin-reflection with credentials, null-origin trust, subdomain-regex bypass (un
• hunt-csrfHunting skill for csrf vulnerabilities. Built from 15 public bug bounty reports including modern variants — Sa
• hunt-deserializationHunt Insecure Deserialization — Java gadget chains (ysoserial), PHP object injection (phpggc), Python pickle R
• hunt-dispatchSkill-set loader for /hunt orchestrator. Fingerprints the target, picks the right platform attack skills, and
• hunt-domHunt client-side DOM vulnerabilities — DOM Clobbering (overwrite JS globals via HTML injection), PostMessage h
• hunt-exceptional-conditionsHunt mishandling of exceptional conditions — feed an endpoint malformed/unexpected input (wrong type, broken J
• hunt-file-uploadHunt file upload bugs — RCE via webshell, XSS via SVG/HTML, SSRF via XXE in DOCX, path traversal via filename.
• hunt-fintech-graphqlHunt fintech-specific GraphQL vulnerabilities: money-movement mutations (transfers, redemptions, withdrawals,
• hunt-forgot-passwordHunt Forgot Password / Account Recovery Authentication Flaws — 5 distinct patterns: (1) username enumeration v
• hunt-graphqlHunting skill for graphql vulnerabilities. Built from 12 public bug bounty reports across IDOR via node() / GI
• hunt-grpcHunt gRPC vulnerabilities — server reflection enabled (enumerate all services/methods), missing authentication
• hunt-helpShow available THRUNT threat hunting commands and artifact layout
• hunt-host-headerHunt Host Header Injection — password reset poisoning → ATO, web cache poisoning via unkeyed Host/X-Forwarded-
• hunt-html-injectionHunt HTML Injection — user-supplied input is rendered as raw HTML in the response without sanitisation, allowi
• hunt-http-smugglingHunt HTTP request smuggling (CL.TE, TE.CL, H2.CL, H2.TE). Cause: front-end proxy and back-end server disagree
• hunt-idorHunting skill for idor vulnerabilities. Built from 26 public bug bounty reports. Use when hunting idor on any
• hunt-jwt-cryptoHunt JWT cryptographic failures — alg:none signature-stripping and RS256→HS256 key-confusion that let an attac
• hunt-k8sHunt Kubernetes & Docker — API anonymous access, kubelet 10250 exec (SPDY/WebSocket, NOT plain POST) and the s
• hunt-laravelHunt Laravel specific vulnerabilities — Debug mode leakage (APP_DEBUG=true exposes full stack trace + env vars
• hunt-ldapHunt LDAP Injection and XPath Injection — authentication bypass, blind char-by-char attribute exfiltration, AD
• hunt-lfiHunt Local File Inclusion (LFI), Remote File Inclusion (RFI), and Path Traversal — /etc/passwd read, log poiso
• hunt-llm-aiHunt LLM/AI feature bugs — prompt injection, indirect injection, exfiltration via tool-use/markdown, ASCII smu
• hunt-map-environmentMap available telemetry, query surfaces, tenants, retention windows, and investigation blind spots
• hunt-mfa-bypassHunt MFA / 2FA bypass — 7 distinct patterns. (1) MFA not enforced on sensitive endpoints (password change, ema
• hunt-miscHunting skill for misc vulnerabilities. Built from 225 public bug bounty reports. Use when hunting misc on any
• hunt-new-caseInitialize a threat hunting case from a signal, detection, intel lead, or analyst suspicion
• hunt-new-programInitialize a threat hunting program with an environment map, tool inventory, huntmap, and empty execution dire
• hunt-nextjsHunt Next.js specific vulnerabilities — Server Actions arbitrary function execution, Middleware auth bypass vi
• hunt-nodejsHunt Node.js specific vulnerabilities — Prototype Pollution → RCE chains (lodash/merge/assign), Express trust
• hunt-nosqliHunt NoSQL Injection — MongoDB operator injection ($where, $regex, $gt, $ne), CouchDB, Redis command injection
• hunt-ntlm-infoHunt NTLM/Negotiate information disclosure on internet-reachable IIS/SharePoint/Exchange. Anonymous NTLM Type-
• hunt-oauthHunting skill for oauth vulnerabilities. Built from 19 public bug bounty reports. Use when hunting oauth on an
• hunt-open-redirectHunt Open Redirect — all types including low-impact, chained to OAuth token theft → ATO, phishing chains. URL
• hunt-planCreate phase plans for a threat hunt with exact telemetry tasks, receipts, and query outputs
• hunt-publishPublish a hunt as a case report, escalation, detection promotion, or leadership summary
• hunt-race-conditionHunting skill for race condition vulnerabilities. Built from 12 public bug bounty reports including modern HTT
• hunt-rag-vectorHunt vector-store / embedding-layer weaknesses in RAG pipelines (OWASP LLM08 Vector and Embedding Weaknesses)
• hunt-rceHunting skill for rce vulnerabilities. Built from 67 public bug bounty reports. Use when hunting rce on any ta
• hunt-runExecute a hunt phase with parallel telemetry work, query logging, receipt generation, and optional wave target
• hunt-samlHunt SAML / SSO attacks. Patterns: XML Signature Wrapping (XSW) — modify Assertion while keeping Signature val
• hunt-sessionHunt Session Management vulnerabilities — session fixation (no regeneration on login), insufficient invalidati
• hunt-shadow-apiHunt shadow / zombie / undocumented API surface (OWASP API9 Improper Inventory Management) — enumerate the ful
• hunt-shape-hypothesisTurn a signal into testable hunt hypotheses, scope, datasets, and success criteria
• hunt-sharepointHunt Microsoft SharePoint Server (2013/2016/2019/Subscription Edition) on-prem farms — anonymous endpoint enum
• hunt-source-leakHunt source code and build artifact leakage — JavaScript source maps (.js.map) reconstructing TypeScript/ES6 s
• hunt-spa-apiDiscover a single-page-app's hidden backend API from its public JS bundle, then test that API for broken acces
• hunt-springbootHunt Spring Boot specific vulnerabilities — Actuator endpoints (heapdump, env, loggers, mappings, shutdown), S
• hunt-sqliHunting skill for sqli vulnerabilities. Built from 12 public bug bounty reports including modern NoSQL injecti
• hunt-ssrfHunting skill for ssrf vulnerabilities. Built from 15 public bug bounty reports including AWS metadata SSRF (H
• hunt-sstiHunt server-side template injection (SSTI) across Jinja2 (Flask/Django), Twig (Symfony), Freemarker (Java), ER
• hunt-subdomainHunting skill for subdomain takeover vulnerabilities. Includes modern provider fingerprints — Microsoft Azure
• hunt-tls-networkHunt TLS/SSL and DNS misconfigurations — missing HSTS (downgrade attack), weak cipher suites, expired/invalid
• hunt-validate-findingsValidate hunt conclusions against receipts, contradictory evidence, and success criteria
• hunt-websocketHunt WebSocket vulnerabilities — Cross-Site WebSocket Hijacking (CSWSH), missing/weak Origin validation on the
• hunt-xssHunting skill for xss vulnerabilities. Built from 174 public bug bounty reports. Use when hunting xss on any t
• hunt-xxeHunting skill for xxe vulnerabilities. Built from 10 public bug bounty reports including SVG-upload XXE, Offic
• hunting-bootkits-in-efi-system-partitionBaseline the EFI System Partition and hunt malicious EFI binaries (ESPecter, BlackLotus, Bootkitty, Glupteba)
• hunting-credential-stuffing-attacksDetects credential stuffing attacks by analyzing authentication logs
• hunting-evtx-with-chainsawPerform rapid Sigma and keyword hunting across Windows event logs with
• hunting-for-anomalous-powershell-executionHunt for malicious PowerShell activity by analyzing Script Block Logging
• hunting-for-beaconing-with-frequency-analysisIdentify command-and-control beaconing patterns in network traffic by
• hunting-saas-sso-token-abuseDetect SSO and OAuth token replay and SaaS lateral movement.
• huntressEvery Huntress endpoint, plus fleet-wide incident, coverage, and billing rollups the API can't. Trigger phrase
• husbandryKeep a software system cheaply changeable over its whole life — the phase that is 60–80% of total cost and mos
• huytieu-retroCP-7 retrospective: audit checkpoints, evidence quality, action items, and harvest candidates. Closes the V-mo
• hv-analysis横纵分析法（Horizontal-Vertical Analysis）深度研究Skill。由数字生命卡兹克提出，融合了索绪尔的历时-共时分析、社会科学的纵向-横截面研究设计、商学院案例研究法与竞争战略分析的核心思想。 当
• hw-codec-adapt跨平台 GPU 硬件编解码适配，支持 NVIDIA NVENC/摩尔线程 mtenc/Intel VA-API 自动切换
• hwpUse this skill whenever the user wants to read, create, or edit Korean Hangul Word Processor documents (.hwp o
• hxBuild, test, run, lint, format, and manage dependencies for Haskell projects using the hx toolchain CLI. Use w
• hxaudio-playerHX Audio Player for music and sound playback. Use when implementing music playback, sound effects, HXMusic, HX
• hybrid-cloud-architectDesigns hybrid cloud architectures connecting on-premises infrastructure with public cloud services. Use when
• hybrid-cloud-networkingConfigure secure, high-performance connectivity between on-premises infrastructure and cloud platforms using V
• hybrid-connectivity-dns-deskdesign hybrid connectivity and dns, covering dedicated circuits and encrypted tunnels with genuinely diverse r
• hybrid-event-planPlans hybrid events with in-person and virtual audience coordination, tech setup, and unified experience desig
• hybrid-search-architectDesigns a hybrid retrieval pipeline combining dense vector search and BM25 sparse search with reciprocal rank
• hybrid-search-implementationCombine vector and keyword search for improved retrieval. Use when implementing RAG systems, building search e
• hybridcloudworks-building-cloud-siem-with-sentinelThis skill covers deploying Microsoft Sentinel as a cloud-native SIEM
• hybridcloudworks-implementing-siem-correlation-rules-for-aptWrite multi-event correlation rules that detect APT lateral movement
• hybridcloudworks-testing-for-broken-access-controlSystematically testing web applications for broken access control vulnerabilities
• hybroai/a2a-adapterOpen Source A2A Protocol Adapter SDK for Different Agent Frameworks
• hybroai/hybro-hubHYBRO Hub: local & remote AI agents — private, powerful, unified.
• hydraMulti-perspective code review council: advisors analyze, reviewers cross-examine, chairman synthesizes verdict
• hydrogen-analytics-trackingEnd-to-end analytics & conversion tracking on Shopify Hydrogen — GTM, GA4 (browser + Measurement Protocol), Me
• hydrogen-cookbooksStep-by-step implementation guides for building features in a Shopify Hydrogen storefront — bundles, combined
• hydrogen-ecommerce-uxResearch-backed UX best practices for Shopify Hydrogen storefronts, based on Baymard Institute (200,000+ hours
• hydrogen-upgradesStep-by-step guides for upgrading Shopify Hydrogen between versions — breaking changes, code diffs, and migrat
• hyhmrright-new-skillScaffold a new brooks-lint analysis skill so it passes `npm run validate` and `npm run evals` on the first try
• hyhmrright-releaseCut a brooks-lint release: set the version in package.json, propagate it across all four plugin manifests and
• hyper-cliUse the Hyper CLI to run Hyper marketing skills from a terminal. Use when the user wants to use `hyperai`, ins
• hyper-mcp-shellA shell for the ModelContextProtocol
• hyper-pr-reviewUse this skill when conducting a code review as the reviewer, from a quick pre-merge pass on a diff to a full
• hyper-waterfallHyper-Waterfall workflow entrypoint for Codex. Use when starting or continuing issue-based Hyper-Waterfall tas
• HYPER12755/agent-browser-mcpMCP-native browser automation server — 62 composite tools, 153 CLI subcommands, zero config. Give AI agents fu
• hyperb1iss-cliCollective intelligence runtime for AI agents. Knowledge graph + persistent memory.
• hyperb1iss-implementUse this skill when writing code, building features, fixing bugs, refactoring, or any multi-step implementatio
• hyperb1iss-planUse this skill when decomposing complex work into structured tasks before implementation. Activates on mention
• hyperb1iss-researchUse this skill when gathering knowledge at scale before making decisions - technology evaluation, SOTA analysi
• hyperb1iss-uvUse this skill when working with Python projects, packages, scripts, environments, or dependencies using uv. A
• hyperfHyperf 3.1 framework development assistant. Use when the user needs to: (1) Create Hyperf controllers, (2) Cre
• hyperflowUse when applying Hyperflow's orchestration doctrine in Codex, Antigravity, Grok, or another single-agent surf
• hyperflow-auditHyperflow code review. Use when the user wants the current diff, a commit, branch, or PR reviewed — verbs like
• hyperflow-cacheHyperflow memory manager. Use to view, search, add, edit, prune, or clear hyperflow project memory — "show mem
• hyperflow-deployHyperflow ship phase. Use when the user is ready to release — verbs like ship, push, release, deploy, "cut a r