Investigate how credentials can be exposed in CI/CD, the systems that build and deploy software. Covers environment variables, logs, credential stores, cloud trust settings, and runner tokens, with methods to assess access scope and defensive controls.
- Review secret exposure in build environments
- Search build logs and caches for leaked credentials
- Assess trust settings between pipelines and cloud services
SnailSploit/Claude-Red☆ 7.6KUpdated Oct 13, 2026
Search English posts, discussions, and videos on Reddit, Twitter/X, and YouTube. Find material by keyword, narrow Reddit searches by community or time period, and receive results in a consistent JSON format.
- Find English discussions about a topic on Reddit
- Search Twitter/X for posts about AI agents
- Find YouTube tutorials by view count
OpenSenseNova/SenseNova-Skills☆ 5.8KUpdated Oct 9, 2026
Audit and analyze connected Reddit Ads accounts through NotFair MCP, a connection for agent access. Review performance, spending, conversions, audiences, tracking pixels, creative, budgets, and bids, and handle campaign setup or approved account changes.
- Analyzing campaign and ad-group spending and conversions
- Reviewing targeting and audiences
- Checking tracking pixels and ad creative
nowork-studio/notfair-plugin☆ 4KUpdated Oct 20, 2026
Use shared organization credentials to call search services, paid APIs, or Git remotes through a broker, an intermediary that adds authentication without revealing the secret. Requests stay within the configured hosts, paths, and permitted operations.
- Search with an organization’s shared API credential
- Retrieve data from a paid API or data feed
- Fetch or push Git changes through a shared account
yc-software/qm☆ 15.5KUpdated Oct 20, 2026
Turn a supplied story, question, or joke into a Reddit-style post card for video overlays or social sharing. The single HTML file includes voting arrows, comment counts, post details, and a choice of light or dark styling.
- Adding a story card over a video
- Sharing a question as a Reddit-style card
- Presenting a joke in a social post format
nexu-io/html-anything☆ 9.2KUpdated Oct 13, 2026
Pure API reference for reddapi.dev - authentication, all endpoints (vector search, semantic search, trends, subreddit lookup), request parameters, response schemas, and error codes, with no research-workflow framing. Use when the user wants raw endpoint documentation, is debugging a reddapi.dev integration, needs exact request/response field names, or asks for 'reddapi API reference', 'reddapi.dev endpoints', or 'reddapi error codes'. For guided research workflows and query playbooks, see reddit-research. For B2B lead scoring, see reddit-leads.
The English summary is being prepared. Showing the original description.
lignertys/reddit-research-skills☆ 15Updated Sep 15, 2026
Design Redis caching, leaderboards, notifications, and message processing. Helps choose data structures, write Lua scripts for operations that run together without interference, and plan expiration, memory use, and persistence settings.
- Designing caches with expiration times
- Building leaderboards and request rate limits
- Processing messages with Redis Streams
RightNow-AI/openfang☆ 18.2KUpdated Jul 2, 2026
Prepare one Markdown article for both WeChat drafts and RedNote posts. The skill formats long articles, uploads images, converts content into shorter social posts with tags, and provides previews and batch processing.
- Reuse one Markdown article across WeChat and RedNote
- Preview article layouts with different themes
- Convert long articles into short posts with images and tags
TencentCloud/Octop☆ 10.5KUpdated Oct 20, 2026
Azure Resource Manager SDK for Redis in .NET. Use for MANAGEMENT PLANE operations: creating/managing Azure Cache for Redis instances, firewall rules, access keys, patch schedules, linked servers (geo-replication), and private endpoints via Azure Resource Manager. NOT for data plane operations (get/set keys, pub/sub) - use StackExchange.Redis for that. Triggers: "Redis cache", "create Redis", "manage Redis", "ARM Redis", "RedisResource", "provision Redis", "Azure Cache for Redis".
The English summary is being prepared. Showing the original description.
microsoft/skills☆ 3.1KUpdated Oct 18, 2026
Implement Terraform provider configuration and authentication with the Plugin Framework: provider schema for credentials (Optional + Sensitive attributes), environment variable fallbacks, credential provider chains (static config, then environment variables, shared credentials file, and platform identity), unknown-value guards in Configure(), secret redaction, configure-time credential validation, and diagnostics that name every source tried. Use when implementing or reviewing a provider's Configure method or provider schema, adding authentication options (API keys, tokens, profiles, credentials files, assume-role), deciding how a provider should resolve credentials, debugging "no valid credential sources" or missing-credentials errors, or unit testing credential resolution.
The English summary is being prepared. Showing the original description.
hashicorp/agent-skills☆ 902Updated Oct 5, 2026
Post to Reddit using AppleScript Chrome control. Use when user wants to post to Reddit, share on subreddits, or promote open source projects on Reddit. Triggers on "post to reddit", "share on reddit", "reddit post", "submit to subreddit", or any Reddit posting request.
The English summary is being prepared. Showing the original description.
PHY041/claude-skill-reddit☆ 46Updated Jul 4, 2026
Automate Accredible Certificates operations through Rube MCP, a connection for agent tools. Find tools for a specific task, verify an active connection, and execute operations according to current input requirements, with support for bulk workflows.
- Find tools for an Accredible Certificates task
- Check the service connection before execution
- Run a batch of related operations
ComposioHQ/awesome-claude-skills☆ 77.5KUpdated Sep 18, 2026
Manage a Binance Web3 wallet through the baw command-line tool. Check balances, transfer or swap tokens, manage limit orders and token permissions, and access prediction markets and DeFi, blockchain-based financial services.
- Check wallet balances and transaction history
- Send tokens, swap assets, and manage limit orders
- Review and revoke token spending permissions
ccxt/ccxt☆ 44.5KUpdated Oct 20, 2026
Investigate Windows credential theft by correlating endpoint monitoring data, Sysmon events, and security logs. The skill provides detection queries and a reporting format to identify suspicious access and assess which credentials may be compromised.
- Investigating alerts about suspicious LSASS access
- Hunting for credential theft across Windows systems
- Assessing the scope of potentially compromised credentials
mukul975/Anthropic-Cybersecurity-Skills☆ 34.8KUpdated Aug 31, 2026
Automate Accredible Certificates operations through Rube MCP, a connection for agent tools. Find tools for a specific task, verify an active connection, and execute operations according to current input requirements, with support for bulk workflows.
- Find tools for an Accredible Certificates task
- Check the service connection before execution
- Run a batch of related operations
composio-community/awesome-codex-skills☆ 17KUpdated Jul 26, 2026
Configure OAuth, the authorization flow used for provider sign-in, with portless development URLs. It guides callback registration and authentication library settings, helping diagnose rejected domains, redirect URL mismatches, and callbacks that point to the wrong address.
- Setting up provider sign-in with portless development URLs
- Diagnosing redirect URL mismatch errors
- Using an owned domain when .localhost is rejected
vercel-labs/portless☆ 12.7KUpdated Oct 20, 2026
Find open redirects, where a website sends visitors to an externally controlled address. Check URL parameters and browser scripts, confirm actual navigation, and investigate whether the redirect can expose OAuth authorization codes or enable server-side access to internal services.
- Find redirect candidates in collected URLs
- Review JavaScript that controls browser navigation
- Assess OAuth authorization code exposure through redirects
elementalsouls/Claude-BugHunter☆ 5.2KUpdated Oct 19, 2026
Enables Redshift system-table (SYS_*) log publishing to S3 Tables in Apache Iceberg format for both Provisioned clusters and Serverless namespaces, verifies publishing status, and queries the published logs via any Iceberg-compatible engine including Redshift and Athena. Covers system tables such as sys_query_history, sys_query_text, sys_connection_log, sys_query_detail, and sys_session_history. Applies when turning on S3 Tables log publishing for a cluster or namespace, confirming publishing status and locating the S3 Tables namespace, querying non-realtime data from Redshift system tables off-cluster at scale, or building dashboards for Redshift monitoring and auditing, especially for historical or high-volume system-table data beyond the in-cluster SYS_ view retention window. Trigger phrases: publish redshift system table log to s3 tables, enable-logging s3 tables, describe redshift logging status, query redshift system tables in athena or redshift, redshift log exports to iceberg.
The English summary is being prepared. Showing the original description.
aws/agent-toolkit-for-aws☆ 2.9KUpdated Oct 20, 2026
Guides an end-to-end data-warehouse migration to Amazon Redshift — discovery, schema/SQL/stored-procedure/macro/script conversion, data migration, validation, performance comparison, and reporting. Source-routed via `references/<source>/`; Teradata (Vantage) is the supported source; additional sources are added as their own `references/<source>/` sets. Text-only knowledge (no executable code) — the AI generates all execution at runtime. Applies when a user wants to migrate Teradata to Amazon Redshift, convert Teradata DDL/SQL/stored procedures/macros/BTEQ to Redshift/RSQL, or assess Teradata-to-Redshift migration complexity. Applies only to migrations targeting Amazon Redshift; migrations to other platforms (Snowflake, BigQuery, Databricks, etc.) are out of scope regardless of source. Does not cover general Redshift administration, performance tuning, or troubleshooting of existing Redshift clusters (no migration involved), or sources not listed under references/.
The English summary is being prepared. Showing the original description.
aws/agent-toolkit-for-aws☆ 2.9KUpdated Oct 20, 2026
Market and engage on Reddit authentically. Use when the user says "Reddit marketing", "Reddit strategy", "promote on Reddit", "Reddit post", "subreddit strategy", "Reddit outreach", "Reddit ads", or asks about marketing or building presence on Reddit.
The English summary is being prepared. Showing the original description.
OpenClaudia/openclaudia-skills☆ 718Updated Oct 20, 2026
Plan, scope, and execute an authorized red-team engagement — distinct from a penetration test. Covers engagement methodology, assumed-breach scenarios, ATT&CK emulation plans, rules of engagement, deconfliction with the blue team, post-engagement debriefs, and the program-level work that makes red teams actually improve defenses. Use when the user mentions 'red team,' 'red team engagement,' 'red teaming,' 'adversary emulation,' 'ATT&CK emulation,' 'assumed breach,' 'purple team exercise,' 'tabletop with technical execution,' 'red team scope,' 'rules of engagement,' 'red team RoE,' 'deconfliction,' 'red team debrief,' or wants to design or run a red-team engagement against systems with authorization.
The English summary is being prepared. Showing the original description.
briiirussell/cybersecurity-skills☆ 426Updated May 27, 2026
Review website animations against users’ reduced motion preferences, a setting that requests less movement. Check flashing content, scrolling effects, alternative transitions, pause controls, and advance warnings, and identify changes needed in rendered pages and interactive states.
- Checking support for reduced motion settings
- Reviewing flashing content frequency
- Finding alternatives to scrolling effects
thedaviddias/Front-End-Checklist☆ 74.5KUpdated Oct 6, 2026
Review cross-origin isolation, a browser security mode required by features such as SharedArrayBuffer. Check response headers and external resources, identify integrations that could break, and verify that isolation actually works in the browser.
- Checking isolation requirements for SharedArrayBuffer
- Auditing external resources before enabling COEP
- Reviewing effects on popups and third-party embeds
thedaviddias/Front-End-Checklist☆ 74.5KUpdated Oct 6, 2026
Check article pages for structured data, machine-readable details that help search engines understand content. Review required properties, add Article metadata in JSON-LD format, and verify the rendered page and HTTP response for specific implementation gaps.
- Checking structured data on blog articles
- Adding Article metadata in JSON-LD format
- Finding missing headlines, images, dates, or authors
thedaviddias/Front-End-Checklist☆ 74.5KUpdated Oct 6, 2026