623 skills · sorted by relevance
Turn repeated local Hermes workflows into reusable ECC skills and release materials. Remove private data, credentials, account names, and local paths, then document public inputs, expected outputs, and remaining risks before sharing.
Set up services such as databases and SMS for a project through Stripe Projects. Sync generated credentials into `.env`, connect supported provider accounts, and manage credential rotation, plan changes, and service removal.
Generate an interactive bash script that guides people through manual service setup. It opens relevant pages, explains what to click, collects credentials, and saves values to .env files or GitHub secrets with stage confirmations.
Create Paperclip tasks, add progress comments, update statuses, and list assignments from Hermes. A helper uses API credentials with restricted permissions to keep task creation and updates within approved work boundaries.
Manage AI service connections in OmniRoute through its API. Add, update, remove, and test connections, maintain API keys and sign-in credentials, and inspect usage metrics and connection health.
Synchronize OmniRoute configuration, provider connections, and settings with cloud storage. Manage authentication for the cloud worker, a remote service, along with its credentials and remote backup destinations.
Manage AI provider connections from the terminal. List configured services, test connections individually or together, rotate credentials, and inspect usage metrics. Validate local configuration without contacting providers when checking its structure.
Audit whether author profiles clearly present relevant experience, qualifications, and professional links. Review rendered pages, metadata, structured data, and HTTP responses to identify specific places where author expertise needs clearer presentation and explain how to verify improvements.
Store database credentials and API keys in AWS Secrets Manager, configure automatic credential changes, and connect applications to stored secrets. Follow examples for access policies, Lambda rotation functions, and integration with ECS and EKS.
Deploy and operate AI agents with AWS Bedrock AgentCore. Choose services for hosting agents, connecting external APIs, managing credentials and conversation state, monitoring activity, and assessing agent quality through automated evaluations.
Use ccxt-cli to query cryptocurrency exchanges from the terminal without writing application code. Check prices, balances, and orders, stream live market data, display candlestick charts, and return JSON results for shell scripts.
Trace movement between Windows hosts in a CTF sandbox using credentials and Kerberos tickets, which carry authentication information. Connect recovered artifacts to the service that accepted them and document the resulting access or privileges.
Investigate Windows secrets protected by DPAPI, a system for encrypting sensitive data, in a CTF sandbox. Trace the required keys and account context through decryption, then verify which service accepts the recovered secret.
Test desktop application security across local storage, communication between processes, network traffic, and update channels. Map where trust and permissions change, then investigate weaknesses in credentials, access checks, and update verification.
Helps connect Feishu or Lark bots, documents, spreadsheets, and approval workflows. Guides API authentication and MCP setup, a way to expose tools to agents, using environment variables for credentials and verification before externally visible changes.
Set up and publish a DingTalk application and bot through a visible browser, then receive guidance for connecting it to QwenPaw. Automation pauses for manual login, and users enter the resulting credentials into QwenPaw themselves.
Guide malware cleanup on infected Windows and Linux systems after containment and investigation. Covers removing malicious files and mechanisms that preserve attacker access, rotating credentials, patching entry points, and documenting validation results before recovery.
Assess an authorized Active Directory environment by simulating attacks against credentials, permissions, and trust relationships. Use BloodHound and related testing tools to identify paths to administrator access, evaluate detection capabilities, and document findings with remediation recommendations.
Investigate misuse of application identities in Microsoft Entra ID using audit and sign-in logs. Provides detection queries and investigation steps for suspicious credential additions, privileged role assignments, consent grants, and service principal enumeration.
Scan code, configuration files, and Git history for exposed AWS credentials with TruffleHog. Checks whether detected keys remain active and guides key replacement, incident investigation, and automated checks before commits and during CI/CD.
Configure OAuth 2.0 authorization for web and mobile apps or service communication. Choose suitable flows, implement PKCE to protect authorization codes, limit permissions, and manage token storage, renewal, and revocation with security checks.
Respond to security incidents across AWS, Azure, and GCP by investigating audit logs, containing compromised identities, isolating resources, and preserving evidence. Organize recovery and follow-up security measures for credential leaks, unauthorized permission changes, and attacks spanning cloud services.
Start NanoClaw’s initial setup by directing the user to its terminal script. The script handles dependencies, the container image, credentials, the service, the first agent, and optional channel connections, with Claude-assisted recovery if an error interrupts setup.
Add Discord bot support to NanoClaw for conversations in server channels or direct messages. The skill installs and tests the integration, guides bot setup, checks credentials, and finds the owner's DM channel for subsequent agent connection.