Browse the registry

Every entry, alphabetically — 67,843 in total. Page 121 of 272.

• html-ppt-zhangzara-monochrome|
• html-ppt-zhangzara-neo-grid-bold|
• html-ppt-zhangzara-peoples-platform|
• html-ppt-zhangzara-pin-and-paper|
• html-ppt-zhangzara-pink-script|
• html-ppt-zhangzara-playful|
• html-ppt-zhangzara-raw-grid|
• html-ppt-zhangzara-retro-windows|
• html-ppt-zhangzara-retro-zine|
• html-ppt-zhangzara-sakura-chroma|
• html-ppt-zhangzara-scatterbrain|
• html-ppt-zhangzara-signal|
• html-ppt-zhangzara-soft-editorial|
• html-ppt-zhangzara-stencil-tablet|
• html-ppt-zhangzara-studio|
• html-ppt-zhangzara-vellum|
• html-presentationConverts documents, outlines, or notes into self-contained HTML slide decks with horizontal (Reveal.js) or ver
• html-prototypeDirect-invocation specialist for polished, responsive, self-contained HTML mockups and interactive prototypes
• html-report-designDesign system that makes HTML output look like a professional consulting deliverable instead of default AI sty
• html-review-artifactProduce safe, self-contained HTML review artifacts from canonical project sources.
• html-seo-reviewAudit static HTML files for on-page SEO, content quality, easy-win performance signals, and crawlability. This
• html-slidesUsed when the user asks to "create HTML slides", "generate an HTML presentation", "make animated slides", "bui
• html-styleApply opinionated styling to barebones HTML. Use when user has plain/unstyled HTML and wants to apply consiste
• html-summary>
• html-to-bricksUse when the user says 'convert this html to bricks' or 'paste html into bricks', or has a Webflow, Framer, Co
• html-to-imageGenerate crisp, high-quality images with perfect typography and precise geometric layouts using HTML/CSS. Use
• html-to-pptx将 html-ppt 演示文稿一键转换为 PPTX。触发词：导出 PPTX、转成 PPT、HTML 变 PPTX、convert to pptx、导出给同事、PPTX 导出。当用户有一份 html-ppt 生成的 HTM
• html-tool-generatorGenerate single-file HTML tools following Simon Willison's patterns. Creates client-side utilities with localS
• html-video>
• html-visualGenerate an interactive single-file HTML visualization — mockup, wireframe, ERD, flowchart, chart, slides, arc
• html-wireframeDirect-invocation specialist for low-fidelity, self-contained HTML wireframes that test information hierarchy,
• html2elementorConvert HTML+CSS into Elementor JSON that imports into WordPress. Always use this skill whenever the user has
• htmlhero-skillHTML/React 第一页 Hero 生成工作流。用户提供 Hero Prompt、品牌主题、首页视觉需求、背景视频/图片、或要求"先对齐再生成第一页"、"需要你更改的部分: {}"、"做一个能跑的交互 Hero 页面
• htmlppt-skillHTML/PPT 风格网页演示文稿生成工作流。用户提供第一页 Hero Prompt、现有 Hero 工程、演示文稿扩展指令、或要求"先对齐再执行"、"需要你更改的部分: {}"、"把 hero 扩成多页汇报/slide
• htmx-skillUse when you need accurate htmx syntax or behavior — attributes, triggers, swap modifiers, events, request/res
• http-api-cloudbaseCloudBase official HTTP API client guide. This skill should be used when backends, scripts, or non-SDK clients
• http-cacheGenerates an HTTP caching layer with Cache-Control parsing, ETag/conditional requests, and offline fallback. U
• http-interface-clients>
• http-request发起 HTTP 网络请求，支持 GET、POST、PUT、DELETE、PATCH 方法。当用户需要调用 API、获取网页内容、发送数据到服务器时使用。
• http-sec-audit>-
• http-smuggling>
• httpie>
• httprunner/httprunnerHttpRunner 是一款开源的 API/UI 测试框架，简单易用，功能强大，具有丰富的插件化机制和高度的可扩展能力。
• hu-eli-mcpMCP server for Hungarian legislation (Nemzeti Jogszabalytar): native ELI and verifiable citations.
• hu.ablakarajanlat/nyilaszaro-mcpEgyedi méretű műanyag ablak árbecslés (kalkulált ár), raktárkészlet és ajánlatkérés.
• hu.xfish/webshopXFish.hu Hungarian fishing tackle webshop. Search 90000+ products by category, brand, price.
• huangjia2019/a2a-in-action我从A2A官方克隆下来，并加以修改的A2A实战代码示例，用于初学者入门教学，大家一起来A2A吧。
• huangwb8-brainstorming当用户明确要求"使用 brainstorming"或"使用 awesome-code"时使用。⚠️ 不适用：用户只是想优化/改进某个功能（应直接修改）、只是询问技能问题（应直接回答）、没有明确使用 brainstormi
• huangwb8-code-reviewerUse when completing tasks, implementing major features, or before merging to verify work meets requirements -
• huangwb8-git-commit当用户明确要求"提交 Git 改动"、"生成 commit 信息"或"创建 git commit"时使用。仅用 Git 分析改动并自动生成 conventional commit 信息（可选 emoji）；必要时建议拆分
• huangwb8-git-workflowGit 工作流专家。规范化版本控制，确保提交历史清晰可追溯。支持 Conventional Commits 规范、Pull Request 最佳实践、分支管理策略和自动化工作流。
• huangwb8-init-project当用户明确要求"初始化项目"、"创建项目指令文件"或"生成 AGENTS.md"时使用。完全自动化：自动检测操作系统默认语言，分析项目目录结构（支持 Python/Web/Rust/Go/Java/数据科学/文档项目等）
• huangwb8-tdd-workflowUse when implementing any feature or bugfix, before writing implementation code - write the test first, watch
• huangyun111-planUse when you have a goal or spec for a multi-step task and want to break it into an ordered PLAN.md task list
• huashu-agent-swarm>
• huashu-article-edit>
• huashu-article-to-x>
• huashu-data-pro>
• huashu-design>
• huashu-douyin-script|
• huashu-image-uploadOne-click generation and upload of article illustrations to an image host, with automatic Markdown link insert
• huashu-info-searchMulti-channel search for new products and technologies, cross-validated and saved to a knowledge base. Use whe
• huashu-material-searchSearch a personal material library of 1,800+ real experiences and opinions to add a human touch to content. Us
• huashu-md-to-pdf|
• huashu-prompt-saveAutomatically identifies the prompt type and saves it to the appropriate category (Technical / Content / Teach
• huashu-proofreadingThree-pass proofreading to reduce AI detection rates and make articles feel more human. Use when the user ment
• huashu-researchStructured web research workflow that ensures research findings are saved incrementally to files and not lost
• huashu-script-polishColloquialise video scripts — remove formal, written-language tone so scripts feel natural when spoken aloud.
• huashu-slidesEnd-to-end presentation creation from content to finished PPTX, with AI illustration generation and 18 design
• huashu-speech-coach|
• huashu-topic-genQuickly generate 3–4 topic directions, each with a title, outline, and pros/cons analysis. Use when the user m
• huashu-video-checkCheck video titles, thumbnails, and opening hooks based on MrBeast's strategies. Use when the user mentions "v
• huashu-video-outlineQuickly generate 2–3 video outline options, including title, thumbnail recommendations, and structural design.
• huashu-wechat-image|
• huashu-xhs-image|
• huawei-cloud-account-onboardingGuides Huawei Cloud real-name verification (实名认证) via terminal QR code — check account status, generate a scan
• huawei-cloud-billing-scoutHuawei Cloud BSS billing read-only only (not AWS/Azure/other clouds; refuses pricing quotes, real-name review,
• huawei-cloud-cost-estimationGenerate Huawei Cloud pre-order price estimates, safely provision allowlisted resources via hcloud, and guide
• hub-equity-mcpStandardized, restatement-aware SEC + European (ESEF) XBRL fundamentals, served to your agent.
• hubertgajewski-ai-deep-reviewRun configurable multi-agent code reviews over local changes, Git refs or ranges, repository files or director
• hubmeshDeterministic multi-hop graph retrieval for RAG. Zero LLM calls in the query path.
• hubspotEvery Sales Hub feature, plus offline cross-object queries and retained property-change history. Trigger phras
• hubspot-ai-contextFill HubSpot's AI Context page (Business tab + Customers tab — ICPs and Personas) by crawling a client website
• hubspot-automationAutomate HubSpot CRM operations (contacts, companies, deals, tickets, properties) via Rube MCP using Composio
• hubspot-setup>-
• hubspot-webhooks>
• huddleStructured multi-perspective analysis using Six Thinking Hats with professional lens team members. TRIGGER whe
• huduEvery Hudu cmdlet, plus an offline SQLite mirror, cross-entity audits, and agent-native output no PowerShell m
• hueMeta-skill that generates new design language skills for Claude Code. Use when the user says 'create a design
• hugeGenerates exhaustive boilerplate for new modules. Use when the user scaffolds a new module or mentions boilerp
• hugging-bay-mcpVerified open AI artifact search, trust evidence, downloads, and agent workflows from Hugging Bay.
• hugging-face-cliExecute Hugging Face Hub operations using the `hf` CLI. Use when the user needs to download models/datasets/sp
• hugging-face-dataset-creatorCreate and manage datasets on Hugging Face Hub. Supports initializing repos, defining configs/system prompts,
• hugging-face-evaluationAdd and manage evaluation results in Hugging Face model cards. Supports extracting eval tables from README con
• hugging-face-evaluation-managerAdd and manage evaluation results in Hugging Face model cards. Supports extracting eval tables from README con
• hugging-face-model-trainerThis skill should be used when users want to train or fine-tune language models using TRL (Transformer Reinfor
• hugging-face-paper-publisherPublish and manage research papers on Hugging Face Hub. Supports creating paper pages, linking papers to model
• hugging-face-tool-builderUse this skill when the user wants to build tool/scripts or achieve a task where using data from the Hugging F
• hugging-face-ui-skillsHugging Face's UI design system. Use when building interfaces inspired by Hugging Face's aesthetic - dark mode
• hugging-scienceUse when the user is doing AI/ML work in a scientific domain such as biology, chemistry, physics, astronomy, c
• huggingfaceHugging Face transformers library and hub. Use for NLP models.
• huggingface-accelerateSimplest distributed training API. 4 lines to add distributed support to any PyTorch script. Unified API for D
• huggingface-bestFind and compare recommended Hugging Face models for a task using benchmarks, model size, and device constrain
• huggingface-community-evalsRun evaluations for Hugging Face Hub models using inspect-ai and lighteval on local hardware. Use for backend
• huggingface-dataset-publishing当需要创建、上传、验证和维护 Hugging Face Dataset 时使用，尤其是包含图片、多图字段、文本步骤、答案、JSON/metadata 字段的数据集；包括 datasets Features/Image/S
• huggingface-datasetsUse this skill for Hugging Face Dataset Viewer API workflows that fetch subset/split metadata, paginate rows,
• huggingface-gradioBuild Gradio web UIs and demos in Python. Use when creating or editing Gradio apps, components, event listener
• huggingface-llm-trainerTrain or fine-tune language models with TRL or Unsloth on Hugging Face Jobs, including SFT, DPO, GRPO, reward
• huggingface-local-modelsUse to select models to run locally with llama.cpp and GGUF on CPU, Mac Metal, CUDA, or ROCm. Covers finding G
• huggingface-lora-space-builderBuild and publish a Gradio Hugging Face Space for a user-provided image or video LoRA, including pipeline sele
• huggingface-paper-publisherPublish and manage research papers on Hugging Face Hub. Supports creating paper pages, linking papers to model
• huggingface-papersLook up and read Hugging Face paper pages in markdown, and use the papers API for structured metadata such as
• huggingface-spacesBuild, deploy, debug, or maintain a Hugging Face Space using Gradio, Docker, or Static SDKs. Use for general S
• huggingface-tokenizersFast tokenizers optimized for research and production. Rust-based implementation tokenizes 1GB in <20 seconds.
• huggingface-tool-builderUse this skill when the user wants to build tool/scripts or achieve a task where using data from the Hugging F
• huggingface-trackioTrack and visualize ML training experiments with Trackio. Use when logging metrics during training (Python API
• huggingface-vision-trainerTrain object-detection, image-classification, or SAM segmentation models on Hugging Face Jobs. Use for vision
• huggingface-webhooks>
• huggingface-zerogpuImplement or debug Hugging Face Spaces ZeroGPU code using `@spaces.GPU`, including isolation, state, duration,
• hugo>-
• hugo-theme>-
• huhEmergency plain-language reset. Use when the user sends /huh, or says 'huh?', 'I don't understand', 'what?', '
• human-approval-gatePrepare decision package for qualified human signoff. Use for PR launch, merge/no-merge, roadmap approval, ML
• human-architect-mindsetSystematic architectural thinking for irreplaceable human capabilities - domain modeling, systems thinking, co
• human-checkpointReview and record one pending human checkpoint in a research Workspace; use when a HUMAN Unit is blocked on an
• human-commit-messages>-
• human-copywriteWrite, finalize, or clean up reader-facing marketing and long-form copy (landing pages, sales pages, e-books,
• human-geographyStudy of human activities, spatial patterns, and social processes on Earth's surface. Covers population and mi
• human-impact-assessmentAssessing anthropogenic environmental impacts — pollution pathways, habitat destruction and fragmentation, lan
• human-in-the-loopUse when classifying a slice closeout (auto-continue / human gate / park), routing a real decision to a human,
• human-interact-expertDesign and evaluate human-computer interaction methods. Use for interaction design, usability evaluation, user
• human-reviewProduce a plain-English review of the files you just edited and gate the changes behind an explicit Approve/Un
• human-risk-scoring>
• human-toneRewrites AI-generated marketing copy to sound naturally human. It removes common AI cliches, adjusts the pacin
• human-viewProject an LLM-optimized planning artefact (a plan, blueprint, spec, or vision) into a human-readable approval
• human-writingUse when drafting, rewriting, proofreading, diagnosing, or adapting source-grounded prose, especially technica
• humane-proxyAI safety middleware — detects self-harm and criminal intent in LLM prompts.
• humanforaiMCP server for Human For AI — hire a real human operator for tasks that need physical presence, human percepti
• humaniseur-frRemove AI-writing patterns from French text and inject voice, personality, and soul. Use when editing, reviewi
• humanities-writing-companion>
• humanizador|
• humanizeReviews and edits copy to remove AI-generated patterns and make text sound natural. Use when editing drafts, r
• humanize-beagleRewrite AI-generated developer text to sound human — fix inflated language, filler, tautological docs, and rob
• humanize-chinese>
• humanize-enStrip AI writing tells from English prose — em-dash overuse, rule of three, negative parallelisms, AI vocabula
• humanize-english|
• humanize-it>
• humanize-koreanAI(ChatGPT·Claude·Gemini 등)가 쓴 한글 텍스트를 "사람이 쓴 글처럼" 윤문해주는 오케스트레이터 스킬. 번역투·영어 인용 과다·기계적 병렬·관용구·피동태 남용·접속사 남발·리듬
• humanize-mba-text去除中文文本中的 AI 生成痕迹，使其更符合中国 MBA 毕业论文的自然写作风格。当用户提到"去 AI 痕迹"、"去除 AI 写作痕迹"、"MBA 论文改写"、"让这段文字更像人写的"、"去除机器感"等关键词时触发。适用
• humanize-russian|
• humanize-textRewrite AI-sounding prose so it reads as considered human writing — cut the tells (em-dash pile-ups, "it's not
• humanize-writingRewrite or generate prose so it reads as natural human writing instead of obviously AI-generated text. Use whe
• humanizerRemove signs of AI-generated writing from text. Use when editing or reviewing text to make it sound more natur
• humanizer-deEdit-Pass für bestehenden deutschen Text: Register/Rhythmus messen, belegtreu redigieren, Naturalness prüfen,
• humanizer-ruСкилл для очеловечивания русскоязычного текста. Убирает признаки AI-генерации, делает текст живым. Используй В
• humanizer-viBiên tập văn bản tiếng Việt máy móc, sáo rỗng hoặc đều giọng để câu chữ tự nhiên, rõ và đúng ngữ cảnh. Dùng kh
• humanizer-zh|
• humanizer-zh-tw去除繁體中文文字裡的 AI 生成痕跡，讓文字讀起來像真人書寫而非機器產出。當使用者要求「去 AI 味」「潤稿」「讓這段更像人寫的」「改寫成自然的中文」，或要把 AI 生成的草稿、翻譯、貼文、報告、commit 訊息、PR
• humanizerczechPiš přirozenou českou dokumentaci a opravuj strojový styl. USE WHEN user asks for Czech text, Czech documentat
• humanpagesHire real humans for tasks that agents can't do alone — QA testing, directory submissions, Play Store beta tes
• humanpen-mcpDocument-level AI humanizer for .docx/.pptx: whole file, selected passages, or flagged text.
• humansurvey-mcpSelf-reported attribution: which channel and which creator your users first heard you from.
• hunch-sdkFocus-free macOS control for AI agents: drive your real Mac apps in the background, no stolen focus.
• hundred-million-offersCreate irresistible offers using the Value Equation, bonus stacking, risk-reversing guarantees, and ethical sc
• hung-yi-leeExplain machine learning, deep learning, generative AI, LLMs, AI agents, and speech modeling in a Hung-Yi Lee-
• hungarian-humanizerDetect and remove AI-generated markers from Hungarian text, making it sound like a native Hungarian speaker wr
• huntFinds root cause of errors, crashes, unexpected behavior, and failing tests before applying any fix. Not for c
• hunt-a-handle>-
• hunt-api-misconfigHunt API security misconfiguration — mass assignment, prototype pollution, HTTP verb tampering. Mass assignmen
• hunt-aspnetHunt ASP.NET-specific surface — ViewState deserialization (signed-only vs encrypted), machineKey recovery, dua
• hunt-atoHunt account takeover taxonomy — 9 distinct paths to ATO, plus chains. Paths: (1) password reset flaws (host-h
• hunt-auth-bypassHunting skill for auth bypass vulnerabilities. Built from 12 public bug bounty reports across SAML XSW / parse
• hunt-brute-forceHunt Missing/Weak Rate Limiting — login brute force, OTP/2FA brute force (10^6 keyspace), password-reset-token
• hunt-business-logicHunting skill for business logic vulnerabilities. Built from 12 public bug bounty reports. Covers coupon-race-
• hunt-cache-poisonHunting skill for cache poison vulnerabilities. Built from 10 public bug bounty reports including X-Forwarded-
• hunt-captcha-bypassHunt CAPTCHA Bypass — 6 distinct patterns: (1) CAPTCHA field simply omitted from the request (server-side vali
• hunt-cicdHunt CI/CD pipeline vulnerabilities — GitHub Actions workflow injection (pull_request_target Pwnrequest + ${{
• hunt-clickjackingHunt Clickjacking — missing X-Frame-Options / CSP frame-ancestors lets an attacker embed the target page in an
• hunt-cloud-misconfigHunt cloud / infrastructure misconfigurations. AWS: public S3 buckets (s3:GetObject anonymous), permissive buc
• hunt-corsHunt CORS Misconfiguration — origin-reflection with credentials, null-origin trust, subdomain-regex bypass (un
• hunt-csrfHunting skill for csrf vulnerabilities. Built from 15 public bug bounty reports including modern variants — Sa
• hunt-deserializationHunt Insecure Deserialization — Java gadget chains (ysoserial), PHP object injection (phpggc), Python pickle R
• hunt-dispatchSkill-set loader for /hunt orchestrator. Fingerprints the target, picks the right platform attack skills, and
• hunt-domHunt client-side DOM vulnerabilities — DOM Clobbering (overwrite JS globals via HTML injection), PostMessage h
• hunt-exceptional-conditionsHunt mishandling of exceptional conditions — feed an endpoint malformed/unexpected input (wrong type, broken J
• hunt-file-uploadHunt file upload bugs — RCE via webshell, XSS via SVG/HTML, SSRF via XXE in DOCX, path traversal via filename.
• hunt-fintech-graphqlHunt fintech-specific GraphQL vulnerabilities: money-movement mutations (transfers, redemptions, withdrawals,
• hunt-forgot-passwordHunt Forgot Password / Account Recovery Authentication Flaws — 5 distinct patterns: (1) username enumeration v
• hunt-graphqlHunting skill for graphql vulnerabilities. Built from 12 public bug bounty reports across IDOR via node() / GI
• hunt-grpcHunt gRPC vulnerabilities — server reflection enabled (enumerate all services/methods), missing authentication
• hunt-helpShow available THRUNT threat hunting commands and artifact layout
• hunt-host-headerHunt Host Header Injection — password reset poisoning → ATO, web cache poisoning via unkeyed Host/X-Forwarded-
• hunt-html-injectionHunt HTML Injection — user-supplied input is rendered as raw HTML in the response without sanitisation, allowi
• hunt-http-smugglingHunt HTTP request smuggling (CL.TE, TE.CL, H2.CL, H2.TE). Cause: front-end proxy and back-end server disagree
• hunt-idorHunting skill for idor vulnerabilities. Built from 26 public bug bounty reports. Use when hunting idor on any
• hunt-jwt-cryptoHunt JWT cryptographic failures — alg:none signature-stripping and RS256→HS256 key-confusion that let an attac
• hunt-k8sHunt Kubernetes & Docker — API anonymous access, kubelet 10250 exec (SPDY/WebSocket, NOT plain POST) and the s
• hunt-laravelHunt Laravel specific vulnerabilities — Debug mode leakage (APP_DEBUG=true exposes full stack trace + env vars
• hunt-ldapHunt LDAP Injection and XPath Injection — authentication bypass, blind char-by-char attribute exfiltration, AD
• hunt-lfiHunt Local File Inclusion (LFI), Remote File Inclusion (RFI), and Path Traversal — /etc/passwd read, log poiso
• hunt-llm-aiHunt LLM/AI feature bugs — prompt injection, indirect injection, exfiltration via tool-use/markdown, ASCII smu
• hunt-map-environmentMap available telemetry, query surfaces, tenants, retention windows, and investigation blind spots
• hunt-mfa-bypassHunt MFA / 2FA bypass — 7 distinct patterns. (1) MFA not enforced on sensitive endpoints (password change, ema
• hunt-miscHunting skill for misc vulnerabilities. Built from 225 public bug bounty reports. Use when hunting misc on any
• hunt-new-caseInitialize a threat hunting case from a signal, detection, intel lead, or analyst suspicion
• hunt-new-programInitialize a threat hunting program with an environment map, tool inventory, huntmap, and empty execution dire
• hunt-nextjsHunt Next.js specific vulnerabilities — Server Actions arbitrary function execution, Middleware auth bypass vi
• hunt-nodejsHunt Node.js specific vulnerabilities — Prototype Pollution → RCE chains (lodash/merge/assign), Express trust
• hunt-nosqliHunt NoSQL Injection — MongoDB operator injection ($where, $regex, $gt, $ne), CouchDB, Redis command injection
• hunt-ntlm-infoHunt NTLM/Negotiate information disclosure on internet-reachable IIS/SharePoint/Exchange. Anonymous NTLM Type-
• hunt-oauthHunting skill for oauth vulnerabilities. Built from 19 public bug bounty reports. Use when hunting oauth on an
• hunt-open-redirectHunt Open Redirect — all types including low-impact, chained to OAuth token theft → ATO, phishing chains. URL
• hunt-planCreate phase plans for a threat hunt with exact telemetry tasks, receipts, and query outputs
• hunt-publishPublish a hunt as a case report, escalation, detection promotion, or leadership summary
• hunt-race-conditionHunting skill for race condition vulnerabilities. Built from 12 public bug bounty reports including modern HTT
• hunt-rag-vectorHunt vector-store / embedding-layer weaknesses in RAG pipelines (OWASP LLM08 Vector and Embedding Weaknesses)
• hunt-rceHunting skill for rce vulnerabilities. Built from 67 public bug bounty reports. Use when hunting rce on any ta
• hunt-runExecute a hunt phase with parallel telemetry work, query logging, receipt generation, and optional wave target
• hunt-samlHunt SAML / SSO attacks. Patterns: XML Signature Wrapping (XSW) — modify Assertion while keeping Signature val
• hunt-sessionHunt Session Management vulnerabilities — session fixation (no regeneration on login), insufficient invalidati
• hunt-shadow-apiHunt shadow / zombie / undocumented API surface (OWASP API9 Improper Inventory Management) — enumerate the ful
• hunt-shape-hypothesisTurn a signal into testable hunt hypotheses, scope, datasets, and success criteria
• hunt-sharepointHunt Microsoft SharePoint Server (2013/2016/2019/Subscription Edition) on-prem farms — anonymous endpoint enum
• hunt-source-leakHunt source code and build artifact leakage — JavaScript source maps (.js.map) reconstructing TypeScript/ES6 s
• hunt-spa-apiDiscover a single-page-app's hidden backend API from its public JS bundle, then test that API for broken acces
• hunt-springbootHunt Spring Boot specific vulnerabilities — Actuator endpoints (heapdump, env, loggers, mappings, shutdown), S
• hunt-sqliHunting skill for sqli vulnerabilities. Built from 12 public bug bounty reports including modern NoSQL injecti
• hunt-ssrfHunting skill for ssrf vulnerabilities. Built from 15 public bug bounty reports including AWS metadata SSRF (H
• hunt-sstiHunt server-side template injection (SSTI) across Jinja2 (Flask/Django), Twig (Symfony), Freemarker (Java), ER
• hunt-subdomainHunting skill for subdomain takeover vulnerabilities. Includes modern provider fingerprints — Microsoft Azure
• hunt-tls-networkHunt TLS/SSL and DNS misconfigurations — missing HSTS (downgrade attack), weak cipher suites, expired/invalid
• hunt-validate-findingsValidate hunt conclusions against receipts, contradictory evidence, and success criteria
• hunt-websocketHunt WebSocket vulnerabilities — Cross-Site WebSocket Hijacking (CSWSH), missing/weak Origin validation on the
• hunt-xssHunting skill for xss vulnerabilities. Built from 174 public bug bounty reports. Use when hunting xss on any t
• hunt-xxeHunting skill for xxe vulnerabilities. Built from 10 public bug bounty reports including SVG-upload XXE, Offic
• hunting-bootkits-in-efi-system-partitionBaseline the EFI System Partition and hunt malicious EFI binaries (ESPecter, BlackLotus, Bootkitty, Glupteba)
• hunting-credential-stuffing-attacksDetects credential stuffing attacks by analyzing authentication logs
• hunting-evtx-with-chainsawPerform rapid Sigma and keyword hunting across Windows event logs with
• hunting-for-anomalous-powershell-executionHunt for malicious PowerShell activity by analyzing Script Block Logging
• hunting-for-beaconing-with-frequency-analysisIdentify command-and-control beaconing patterns in network traffic by
• hunting-saas-sso-token-abuseDetect SSO and OAuth token replay and SaaS lateral movement.
• huntressEvery Huntress endpoint, plus fleet-wide incident, coverage, and billing rollups the API can't. Trigger phrase
• husbandry>
• hushdrop-mcpOpen-source artifact sharing — publish HTML/Markdown/files as branded, password-protected, zero-knowledge link
• huytieu-retro>
• hv-analysis|
• hvtracker-mcpPre-connect trust checks for AI agents and MCP servers using HVTracker's public trust registry.
• hw-codec-adapt跨平台 GPU 硬件编解码适配，支持 NVIDIA NVENC/摩尔线程 mtenc/Intel VA-API 自动切换
• hwcontractJudge hardware timing/serial against a contract: pass/marginal/fail (WS2812, DShot, logs)
• hwpUse this skill whenever the user wants to read, create, or edit Korean Hangul Word Processor documents (.hwp o