8.3K skills · sorted by relevance
Review a Canva design against a brand kit, checking colors, fonts, logos, wording, and consistency across pages. Get a report of matches, deviations, and uncertain findings without changing the design.
Run an AWS Security Agent scan on the workspace — uploads the source to AWS, scans it with the managed Security Agent service, and returns ranked, verified findings with code locations and remediations. Use when the user asks to scan code, find vulnerabilities, run a security scan or review, check security issues, check scan status, show findings, list recent scans, or stop a scan.
The English summary is being prepared. Showing the original description.
Turns one-shot external recon into a continuous monitoring program. Covers the scheduled re-scan-and-diff loop (baseline snapshot -> interval sleep -> re-scan -> asset/finding delta -> threshold-gated webhook alert), the scan-to-scan diff engine (new/removed/changed assets by a tracked-attribute table, new/resolved findings by a stable cross-scan fingerprint), adversary CTI / chatter monitoring across six public feeds (ransomwatch, ransomware.live, HackerNews Algolia search, Reddit security-subreddit RSS, GitHub Gist code-search, public Telegram channel scraping) with a source-kind-aware severity engine (leak-site/forum/telegram/paste tiers, CRITICAL through INFO), literal/glob/regex watchlist pattern matching, full-corpus capture with retroactive rescan on new watchlist entries, infrastructure-tracking-over-time discipline (certificate-transparency, passive-DNS, port/service, and typosquat re-enumeration cadence, and what a genuine 'perimeter drift' event looks like in the diff output), a five-state finding-lifecycle state machine (open/triaged/risk_accepted/resolved/false_positive) with per-severity SLA and fingerprint-based cross-scan dedup and auto-resolve/reopen rules, the alert-fatigue trap where a lifecycle-unaware rule re-fires on an already-accepted finding, a durable retry/backoff alert-outbox pattern ('queued is not delivered'), and copy-paste bash-cron plus PowerShell-Scheduled-Task recipes for a re-scan+diff loop with the Slack-compatible webhook payload shape. Passive OSINT and analysis only -- no new active-intrusion technique. Use when setting up ongoing monitoring for a retainer or MSSP engagement, tuning alert thresholds to avoid fatigue, triaging a finding's lifecycle status, investigating adversary chatter about a brand, building a 'what changed on the perimeter since last week' report, or deciding whether a persisting finding should re-alert.
The English summary is being prepared. Showing the original description.
Runs a security scan on a deployed Power Pages site, fetches the latest scan report, and produces a plain-language summary. Scans the live site's public surface for vulnerabilities and surfaces issues by severity. Use when the user wants to scan, check, test, audit, or assess a published site, find vulnerabilities on production, view the latest scan report, see previous scan results, run a security audit, or asks "how safe is my live site?", "is my site vulnerable?", "audit my production site" — even if they say "find issues" or "check for problems" without mentioning "scan" or "security".
The English summary is being prepared. Showing the original description.
Dung khi designer se lam TREN CANVA hoac Figma va can direction thao tac cu the — chon template base, thu tu thao tac, map tung element vao vi tri, luoi va khoang cach, mau va font lay tu brand kit, checklist export, viec nen va khong nen lam. Kich hoat khi user nhac 'brief Canva', 'huong dan lam tren Canva', 'direction Canva', 'template Canva', 'layout Canva', 'lam trong Figma', 'ban design chua ranh nen phai chi tay'. Khong dung cho — brief concept anh tinh khong gan cong cu thi dung skill 42-brief-hinh-anh; chuoi slide carousel thi dung skill 43-brief-carousel; quy dinh mau, font va logo cua thuong hieu thi dung skill 46-brand-guideline.
The English summary is being prepared. Showing the original description.
Automate Canva from an agent — via the AI Connector MCP server (generate, find, edit, export designs in natural language) or the Connect REST API (OAuth 2.0 + PKCE, brand template autofill, asset uploads, exports, folders, comments). Use when: connecting an agent to Canva, batch-producing social posts or decks from a brand template and a spreadsheet, exporting designs to PDF/PNG/PPTX/MP4, uploading assets into a Canva account, building a Canva integration, or when the user mentions "Canva", "brand template", "autofill", "Connect API", or "mcp.canva.com".
The English summary is being prepared. Showing the original description.
Perform advanced network scanning and service enumeration using Nmap for penetration testing and security assessments. Use this skill when conducting network reconnaissance, port scanning, service version detection, OS fingerprinting, and vulnerability scanning. Covers stealth scanning, firewall evasion, NSE script usage, and network mapping for infrastructure penetration tests.
The English summary is being prepared. Showing the original description.
Create, inspect, and update Obsidian JSON Canvas boards with text, file, link, group, and edge nodes. Use for canvas status, canvas lists, visual maps, zones, spatial layouts, adding vault notes or media to a .canvas file, and requests such as create canvas, add to canvas, or put this on the canvas.
The English summary is being prepared. Showing the original description.
Expert-level volcanology covering volcanic processes, eruption styles, volcano monitoring, volcanic hazards, igneous petrology, and volcanic contributions to climate.
The English summary is being prepared. Showing the original description.
Find a trial Storybook package for a specific branch, or trigger its publication when needed. Check release progress and obtain the package reference or commands for creating or upgrading a project with that build.
Audit conflicting search indexing settings across robots.txt, noindex directives, and canonical tags that identify preferred URLs. Identify why pages may be included or excluded unexpectedly, and review changes that align the settings with the intended outcome.
Import a recorded Remotion Canvas Capture as an editable composition with cursor keyframes, without using Studio controls. The workflow generates and registers a component, copies the video asset, and installs missing dependencies through an internal experimental command.
Rebuild and install the Remotion Canvas Capture Chrome extension in a durable location, restore it after a working directory is deleted, and reload it in a compatible browser. It also prepares a webpage and still preview before manual recording.
Stop active OMC workflows and clean up their runtime state while preserving progress where the mode supports resuming. It distinguishes the current session from all sessions and offers graceful shutdown or forced cancellation without bypassing ownership checks.
Deploy decoy credentials, documents, and URLs with Canarytokens to detect suspicious access. Guides token generation, placement, alert testing, and inventory tracking, with email or webhook notifications when someone interacts with a planted token.
Build a recurring vulnerability scanning process with Nessus, Qualys, or OpenVAS. Prioritize findings using asset importance and known exploitation, then organize remediation deadlines, monitoring dashboards, and automatic tickets for urgent issues.
Build a central vulnerability dashboard with DefectDojo to combine scanner findings, remove duplicates, and track remediation. Includes Docker deployment, automated scan imports from CI/CD pipelines, Jira ticket integration, and API queries for reporting metrics.
Stop an active OMX workflow after identifying its session and related modes. Perform the required cleanup, preserve resumable state where specified, and report the outcome, including any cleanup failures or reasons for refusing to proceed.
Design SaaS cancellation flows, match retention offers to exit reasons, and prepare payment retry schedules and recovery emails. Get flow copy, survey options, email templates, and metrics for reviewing cancellations and failed payments.
Run repeated, independent security reviews of an entire repository or a selected directory. The skill combines validated findings and coverage records into a final report, helping reduce variation between individual reviews.
Assess candidate security findings using focused reproduction, tests, or code tracing. Record the evidence, confidence, and remaining proof gaps for each candidate, helping determine which findings warrant reporting and which remain uncertain.
Assess candidate security findings using focused reproduction, tests, or code tracing. Record the evidence, confidence, and remaining proof gaps for each candidate, helping determine which findings warrant reporting and which remain uncertain.
Run repeated, independent security audits of a repository or selected directory with Codex Security. It combines validated findings into a report that records the reviewed scope, exclusions, and any incomplete coverage.
Build 2D physics scenes for web pages with Matter.js. This skill guides engine setup, canvas rendering, adding objects, optional mouse dragging and connections between objects, plus cleanup when a scene is removed.