Skip to content
cccskills

Results for “ref”

10.2K skills · sorted by relevance

Shellcode development reference for offensive security engagements. Use when writing custom x86/x64 shellcode, implementing position-independent code (PIC), building shellcode loaders, evading AV/EDR detection, or converting PE files to shellcode. Covers null byte avoidance, API hashing, encoder/decoder patterns, staged vs stageless payloads, Windows PEB traversal, and cross-platform shellcode techniques.

The English summary is being prepared. Showing the original description.

ajtazer/heckit2Updated Oct 7, 2026

Security mitigation reference and bypass catalog: ASLR, DEP/NX, RELRO, stack canaries, CFI, sandboxing, seccomp. Covers both detection of enabled mitigations and known bypass techniques. Use when assessing target hardening or planning exploit mitigation bypasses.

The English summary is being prepared. Showing the original description.

ajtazer/heckit2Updated Oct 7, 2026

Microsoft 365 / Entra ID red-team attack chain — current 2026 reality. AADSTS code reference, user enumeration vectors (with hardening status), Smart Lockout math, Conditional Access bypass options, ROPC + SAML SSO browser flow, Burp/Playwright templates. Built from authorized red-team work where ROPC spray surfaced pre-existing lockouts and CA-blocked credentials, plus real-time external attacker activity correlation. Use for any M365/Entra credential attack, password spray, user enumeration, CA-bypass exploration, or active-attacker-detection scenario.

The English summary is being prepared. Showing the original description.

ajtazer/heckit2Updated Oct 7, 2026

Cross-cutting methodology for the CVE-hunting pipeline (ported from find-cve-agent): when a bug is design-vs-real, false-positive avoidance, version checking before reporting, responsible disclosure norms, acceptance-rate expectations per vuln class, vulnerability chaining playbook, known false-positive patterns, maintainer-response patterns, secure-pattern reference (what NOT to flag), and a self-criticism checklist to run before claiming a finding. Use this alongside the cve-hunter/cve-exploiter/cve-validator agents and the /cve-hunt pipeline — load it whenever judging if a finding is real, worth reporting, or already fixed.

The English summary is being prepared. Showing the original description.

ajtazer/heckit2Updated Oct 7, 2026

kaizen

Free

Guide for continuous improvement, error proofing, and standardization. Use this skill when the user wants to improve code quality, refactor, or discuss process improvements.

The English summary is being prepared. Showing the original description.

danstrem2/clawdbot-skill-master-pack2Updated Feb 1, 2026

Comprehensive JavaScript reference covering 33+ essential concepts every developer should know. From fundamentals like primitives and closures to advanced patterns like async/await and functional programming. Use when explaining JS concepts, debugging JavaScript issues, or teaching JavaScript fundamentals.

The English summary is being prepared. Showing the original description.

danstrem2/clawdbot-skill-master-pack2Updated Feb 1, 2026

GraphQL gives clients exactly the data they need - no more, no less. One endpoint, typed schema, introspection. But the flexibility that makes it powerful also makes it dangerous. Without proper controls, clients can craft queries that bring down your server. This skill covers schema design, resolvers, DataLoader for N+1 prevention, federation for microservices, and client integration with Apollo/urql. Key insight: GraphQL is a contract. The schema is the API documentation. Design it carefully.

The English summary is being prepared. Showing the original description.

danstrem2/clawdbot-skill-master-pack2Updated Feb 1, 2026

Build gratitude practice with daily entries, streaks, and reflection prompts

The English summary is being prepared. Showing the original description.

danstrem2/clawdbot-skill-master-pack2Updated Feb 1, 2026

Perform web searches using DuckDuckGo. Use when web search is needed and no API key is available or Brave Search is not preferred.

The English summary is being prepared. Showing the original description.

danstrem2/clawdbot-skill-master-pack2Updated Feb 1, 2026

Guide users through a structured workflow for co-authoring documentation. Use when user wants to write documentation, proposals, technical specs, decision docs, or similar structured content. This workflow helps users efficiently transfer context, refine content through iteration, and verify the doc works for readers. Trigger when user mentions writing docs, creating proposals, drafting specs, or similar documentation tasks.

The English summary is being prepared. Showing the original description.

danstrem2/clawdbot-skill-master-pack2Updated Feb 1, 2026

Check Claude Code OAuth usage limits (session & weekly quotas). Use when user asks about Claude Code usage, remaining limits, rate limits, or how much Claude usage they have left. Includes automated session refresh reminders and reset detection monitoring.

The English summary is being prepared. Showing the original description.

danstrem2/clawdbot-skill-master-pack2Updated Feb 1, 2026

Connect Claude to Clawdbot instantly and keep it connected 24/7. Run after setup to link your subscription, then auto-refreshes tokens forever.

The English summary is being prepared. Showing the original description.

danstrem2/clawdbot-skill-master-pack2Updated Feb 1, 2026

Microsoft Entra ID (Azure AD) authentication for React SPAs with MSAL.js and Cloudflare Workers JWT validation using jose library. Full-stack pattern with Authorization Code Flow + PKCE. Prevents 8 documented errors. Use when: implementing Microsoft SSO, troubleshooting AADSTS50058 loops, AADSTS700084 refresh token errors, React Router redirects, setActiveAccount re-render issues, or validating Entra ID tokens in Workers.

The English summary is being prepared. Showing the original description.

danstrem2/clawdbot-skill-master-pack2Updated Feb 1, 2026

Zero-config animations for React, Vue, Solid, Svelte, Preact with @formkit/auto-animate (3.28kb). Prevents 15 documented errors including React 19 StrictMode bugs, SSR imports, conditional parents, viewport issues, drag & drop conflicts, and CSS transform bugs. Use when: animating lists/accordions/toasts, troubleshooting SSR animation errors, React 19 StrictMode issues, or need accessible drop-in transitions with auto prefers-reduced-motion.

The English summary is being prepared. Showing the original description.

danstrem2/clawdbot-skill-master-pack2Updated Feb 1, 2026

browsh

Free

A modern text-based browser. Renders web pages in the terminal using headless Firefox.

The English summary is being prepared. Showing the original description.

danstrem2/clawdbot-skill-master-pack2Updated Feb 1, 2026

Autonomous agents are AI systems that can independently decompose goals, plan actions, execute tools, and self-correct without constant human guidance. The challenge isn't making them capable - it's making them reliable. Every extra decision multiplies failure probability. This skill covers agent loops (ReAct, Plan-Execute), goal decomposition, reflection patterns, and production reliability. Key insight: compounding error rates kill autonomous agents. A 95% success rate per step drops to 60% b

The English summary is being prepared. Showing the original description.

danstrem2/clawdbot-skill-master-pack2Updated Feb 1, 2026

Create user-facing App Store release notes by collecting and summarizing all user-impacting changes since the last git tag (or a specified ref). Use when asked to generate a comprehensive release changelog, App Store "What's New" text, or release notes based on git history or tags.

The English summary is being prepared. Showing the original description.

danstrem2/clawdbot-skill-master-pack2Updated Feb 1, 2026

Headless browser automation CLI optimized for AI agents with accessibility tree snapshots and ref-based element selection

The English summary is being prepared. Showing the original description.

danstrem2/clawdbot-skill-master-pack2Updated Feb 1, 2026

Complete Claude Code productivity system — project setup, prompting patterns, sub-agent orchestration, context management, debugging, refactoring, TDD, and shipping 10X faster. Zero scripts needed.

The English summary is being prepared. Showing the original description.

johnalbertini14-glitch/openclaw-skills2Updated Feb 26, 2026

Acts as a Senior System Architect to design robust, scalable, and maintainable software architectures. Enforces industry standards (PEP 8 for Python, ESLint for JS/TS), modular design, and security best practices. Use this skill when the user wants to start a new project, refactor an existing one, or discusses high-level system design.

The English summary is being prepared. Showing the original description.

johnalbertini14-glitch/openclaw-skills2Updated Feb 26, 2026

TypeScript SDK for interacting with the SushiSwap Aggregator and related primitives. This SDK is a typed wrapper over the SushiSwap API, providing ergonomic helpers for token amounts, prices, quotes, and swap transaction generation. USE THIS SKILL WHEN: - Building TypeScript or JavaScript applications - You want strongly typed token, amount, and fraction primitives - You need to request swap quotes or executable swap transactions via code - You want safer arithmetic, formatting, and comparisons without floating point errors - You prefer SDK-based integration over raw HTTP requests

The English summary is being prepared. Showing the original description.

johnalbertini14-glitch/openclaw-skills2Updated Feb 26, 2026

React composition patterns that scale. Use when refactoring components with boolean prop proliferation, building flexible component libraries, or designing reusable APIs. Triggers on tasks involving compound components, render props, context providers, or component architecture. Includes React 19 API changes.

The English summary is being prepared. Showing the original description.

Scoheart/agentskills2Updated Aug 4, 2026

React and Next.js performance optimization guidelines from Vercel Engineering. This skill should be used when writing, reviewing, or refactoring React/Next.js code to ensure optimal performance patterns. Triggers on tasks involving React components, Next.js pages, data fetching, bundle optimization, or performance improvements.

The English summary is being prepared. Showing the original description.

Scoheart/agentskills2Updated Aug 4, 2026

xlsx

Free

Use this skill any time a spreadsheet file is the primary input or output. This means any task where the user wants to: open, read, edit, or fix an existing .xlsx, .xlsm, .csv, or .tsv file (e.g., adding columns, computing formulas, formatting, charting, cleaning messy data); create a new spreadsheet from scratch or from other data sources; or convert between tabular file formats. Trigger especially when the user references a spreadsheet file by name or path — even casually (like "the xlsx in my downloads") — and wants something done to it or produced from it. Also trigger for cleaning or restructuring messy tabular data files (malformed rows, misplaced headers, junk data) into proper spreadsheets. The deliverable must be a spreadsheet file. Do NOT trigger when the primary deliverable is a Word document, HTML report, standalone Python script, database pipeline, or Google Sheets API integration, even if tabular data is involved.

The English summary is being prepared. Showing the original description.

Scoheart/agentskills2Updated Aug 4, 2026