713 skills · sorted by relevance
在授权渗透测试中挖掘 Web 缓存投毒与缓存欺骗（web cache poisoning / cache deception）。当目标前有缓存层（CDN/反代/Varnish）且缓存键未覆盖某些影响响应的输入（unkeyed header/参数/解析差异）时使用——典型场景：X-Forwarded-Host 反射进响应被缓存、unkeyed 参数、缓存键规范化差异、静态扩展名欺骗缓存私有页。适用目标类型 Web / CDN。触发场景包括用户说"测下缓存投毒""X-Forwarded-Host 能不能毒缓存""缓存欺骗看一下""unkeyed 输入有没有"。输出：投毒/欺骗可行性 + 被缓存证据的 finding（含 killed 记录）。
The English summary is being prepared. Showing the original description.
Use when working with Cloudflare Cdn — cloudflare CDN management including zone configuration, cache purging, page rules, firewall rules, SSL/TLS settings, and performance optimization. Covers cache analytics, bandwidth usage, threat detection, and edge certificate management. Use when managing Cloudflare CDN zones, analyzing cache performance, configuring page rules, or troubleshooting delivery issues.
The English summary is being prepared. Showing the original description.
Parse and analyze Windows Amcache.hve registry hive to extract program execution evidence, file metadata, SHA-1 hashes, and device connection history for digital forensics and incident response investigations.
The English summary is being prepared. Showing the original description.
Locate CCSPlayerInventory::GetItemInLoadout in CS2 server.dll / libserver.so via IDA Pro MCP and emit a fresh, minimal-unique signature or offset for the WeaponPaints gamedata entry "CCSPlayerInventory::GetItemInLoadout" (symbol CCSPlayerInventory_GetItemInLoadout). Non-virtual inventory method resolving a player's loadout item. Shortlist via callers inside CCSPlayerInventory code that walk the loadout item cache (m_pSOCache / CGCClientSharedObjectCache), and via the CSO/econ loadout message paths. The function takes an item definition index + loadout slot and returns the matching CEconItemView — the body iterates a small item list comparing definition indices and loadout slots. Trigger: CCSPlayerInventory_GetItemInLoadout, CCSPlayerInventory::GetItemInLoadout
The English summary is being prepared. Showing the original description.
Answers plain-word questions from a repo's CSV, JSON, Parquet and YAML files, or a .duckdb file, with DuckDB, and shows the SQL it ran. Read-only. Trigger to query, count, join, filter or summarise data files, including analytics CSVs exported from a video platform; to build a Parquet or DuckDB cache; to check no .duckdb, .wal or .parquet cache is committed or stale; when a query hits a locked database file; or say duckrunner (ask, cache, check, refresh). Needs the user-installed duckdb Python package; never a database server. DuckDB docs, S3 and MotherDuck are the duckdb-skills plugin's; outside research researchscribe's.
The English summary is being prepared. Showing the original description.
Generates PSR-16 Simple Cache implementation for PHP 8.5. Creates CacheInterface with get/set/delete operations and TTL handling. Includes unit tests.
The English summary is being prepared. Showing the original description.
Hunt Host Header Injection — password reset poisoning → ATO, web cache poisoning via unkeyed Host/X-Forwarded-Host, routing-based SSRF (Host picks upstream → cloud metadata/internal services), path-override SSRF/ACL-bypass (X-Original-URL/X-Rewrite-URL), OAuth redirect_uri/issuer poisoning, and absolute-URL link poisoning in emails. High to Critical when it reaches ATO or mass cache poisoning. Built on public Host-header research (PortSwigger 'Practical web cache poisoning' + James Kettle, and the classic password-reset-poisoning class). Use on any forgot-password flow, CDN/reverse-proxy-fronted app, OAuth/OIDC endpoint, or absolute-URL-in-email feature.
The English summary is being prepared. Showing the original description.
Investigate performance bottlenecks in REA analysis workflows and improve caching, queries, or shared processing. Compare completed tasks before and after changes while preserving correct results, examined coverage, and access to supporting evidence.
Design local data storage in Swift using actors, which control concurrent access to shared data. Combine an in-memory cache with JSON file storage, implement save and lookup operations, and connect the repository to an observable ViewModel.
Build or review Ruby on Rails applications by separating business operations, forms, and database queries into focused objects. Covers efficient data loading, background jobs, reusable view components, Hotwire interactions, and Rails 8 database-backed services.
Use the hf command-line tool to find, download, and upload models and datasets on Hugging Face Hub. The guide also covers repository management, hosted computing resources, local cache maintenance, and automation options.
View recorded output tokens, cache-read tokens, response counts, and available mode attribution for a Claude Code session. In other agent environments, find the native usage report where supported, without treating observed usage as proof of savings.
Improve the MCP server that connects claude-flow v3 to tools. It guides connection reuse, faster tool lookup, request distribution, and communication changes, with monitoring to evaluate response times, errors, memory use, and cache performance.
Review AI call logs by provider, model, time range, status, and cost. Aggregate token usage, export logs, configure budgets, and inspect response times and prompt cache statistics to understand usage and performance.
Read and update application settings through APIs, including system prompts, reasoning limits, IP filters, and login requirements. Also manage proxy and cache settings, with guidance on how reasoning settings affect requests sent to AI providers.
Review estimated spending, token usage, and cache hit ratios across Claude Code, Codex, and Grok using local logs. Filter by time, project, or provider, while keeping currencies separate and identifying models without pricing.
Retrieve compacted ReasoningBank context for cost-analysis queries and summarize retrieved memories, reported token savings, cache hit rate, and package availability. The savings figure is an estimate from the integration, not a measured comparison against a baseline.
Improve the MCP server that connects claude-flow v3 to tools. It guides connection reuse, faster tool lookup, request distribution, and communication changes, with monitoring to evaluate response times, errors, memory use, and cache performance.
Search contacts and calendar events already stored in Muse when a paired device is unavailable. Retrieve relevant records, check whether results are complete, or delete Muse's local contact or calendar copies without changing data on the devices.
Create a Codex plugin scaffold with a valid manifest, optional folders for skills and supporting files, and personal marketplace entries. Also guides validation and the cache refresh and reinstall steps used during local plugin development.
Design a running status summary that keeps an agent aware of tasks, tool call counts, time, errors, and its environment. The skill covers updating that summary and balancing cache reuse against the buildup of outdated information.
Build, run, and troubleshoot data processing pipelines with Nextflow and nf-core. The skill guides modular workflow development, input preparation, testing, cached restarts, and configuration for local computers, computing clusters, or cloud environments.
Verify changes to Office add-in administration scripts using a temporary home directory. It covers syntax checks, cache-clearing behavior, identifier handling, and storage comparisons to check that removing add-in manifests preserves chat history.
Monitor Power Automate across an organization's tenant using FlowStudio MCP's cached data. Review failure rates, run-health trends, flow and app inventories, and inactive owners to prepare health and compliance reports. Requires FlowStudio for Teams or MCP Pro+.