1.2K skills · sorted by relevance
Set up services such as databases and SMS for a project through Stripe Projects. Sync generated credentials into `.env`, connect supported provider accounts, and manage credential rotation, plan changes, and service removal.
Connect the claude-mem-cowork plugin to cmem.ai using personal credentials. The skill writes connection settings, checks status without revealing the token, and packages the configured plugin for reinstallation so pairing can persist beyond the current Cowork session.
Manage n8n automation workflows from the command line. Create, update, and activate workflows, inspect or retry executions, and manage credentials, variables, and tags through n8n's public API with structured JSON output.
Implement shared authentication for Azure Communication Services in Java, including automatic renewal of access tokens, the credentials used to access services. It also guides handling identifiers for ACS users, phone numbers, and Microsoft Teams users.
Inspect firmware in a CTF sandbox, map its partitions, and trace startup and update steps. Connect extracted files, credentials, and configuration to device behavior, preserving evidence for a minimal reproducible path.
Trace server-side request forgery, where a server fetches a supplied URL, through internal services and metadata endpoints in a CTF sandbox. Document credential scope and distinguish successful token extraction from access actually accepted by another service.
Analyze authorized browser extensions for Chrome, Edge, and Firefox. Inspect permissions, background scripts, storage, and network activity to reconstruct key data flows and explain credential handling, signing, encryption, or proxy behavior.
Manage API keys, passwords, and certificates used in CI/CD, the automated process for testing and deploying software. Connect secret stores, plan credential rotation, restrict access, and prevent sensitive values from appearing in logs.
Prepare and publish Windows apps to the Microsoft Store using msstore. Covers account credentials, application packaging, submission tracking, beta testing groups, gradual releases, and automated publishing through CI/CD pipelines.
Review MCP configurations for exposed credentials, risky command patterns, and package versions that can change unexpectedly. Produce a report with severity levels and suggested fixes without running the commands defined in the configuration.
Investigate Pass-the-Hash attacks, where stolen password hashes are reused for authentication. Examine unusual NTLM logins alongside credential theft indicators, validate suspicious findings across security logs, and document evidence, affected hosts, confidence, and recommended responses.
Assess an authorized Active Directory environment by simulating attacks against credentials, permissions, and trust relationships. Use BloodHound and related testing tools to identify paths to administrator access, evaluate detection capabilities, and document findings with remediation recommendations.
Investigate suspicious mobile apps by examining permissions, network traffic, and runtime behavior. Use observed evidence to identify signs of data theft, SMS interception, credential stealing, or communication with attacker control servers, then classify the suspected malware.
Investigate forged Kerberos authentication tickets in Active Directory by checking Windows logs for unusual encryption, excessive ticket lifetimes, and missing authentication requests. Produce a JSON report of suspicious indicators with risk ratings.
Analyze RAM dumps with Volatility 3 to investigate suspicious processes, network connections, injected code, and credential theft. Guides memory capture and evidence extraction, then organizes findings into a forensic report for incident response.
Respond to security incidents across AWS, Azure, and GCP by investigating audit logs, containing compromised identities, isolating resources, and preserving evidence. Organize recovery and follow-up security measures for credential leaks, unauthorized permission changes, and attacks spanning cloud services.
Set up Curviate CLI, authenticate your machine, connect a LinkedIn account, and verify access by reading your profile live and from stored data. The guide also explains diagnostic results and common credential or account setup failures.
Use external APIs and GitHub's gh command through Iron Proxy while keeping real credentials out of the client. The skill guides account setup through the operator console and helps investigate blocked requests using observed errors.
Access external APIs for email, calendars, GitHub, and payments through OneCLI Gateway. The proxy adds stored credentials to outgoing HTTPS requests, letting agents use connected services without handling secret values directly.
Move an existing OpenClaw setup to NanoClaw v2 through a guided conversation. Review identity, memory, credentials, groups, and scheduled tasks, then decide what to transfer and preview changes before applying them.
Install or update Iron Proxy and its official Iron Control console for NanoClaw. Configure stored credentials, access grants, allowed destinations, and human approval checks for outbound requests through a local Docker installation.
Enable NanoClaw agents to deploy web applications to Vercel. The skill installs the Vercel CLI, a command-line tool, and configures automatic credential injection through OneCLI, supporting production deployment and deployment status checks.
Use n8n-mcp tools to find workflow steps, check settings, and create or update automations. Provides guidance on tool arguments, templates, folders, credentials, and security audits so agents can choose appropriate operations.
Request an owner’s permission to use a listed keychain credential needed by a command. An approval card appears in the conversation, and owner approval automatically reruns the blocked command with access shared across that conversation.