Kubernetes cluster attack techniques covering the full attack lifecycle from initial foothold in a pod to cluster-wide compromise. Covers service account token theft and impersonation, RBAC misconfiguration exploitation including wildcard permissions and privilege escalation via role binding, direct etcd access for secret extraction, kubelet API abuse on port 10250 and read-only port 10255, pod escape via hostPID hostNetwork and hostPath volume mounts, Kubernetes secrets enumeration and decoding, admission controller bypass techniques, network policy bypass and lateral movement, cloud metadata service access from pods for credential theft on AWS EKS GCP GKE and Azure AKS, CRD and operator abuse for persistence, and node compromise via DaemonSet deployment. Tools include kubectl, kube-hunter, peirates, kubeaudit, kdigger, kubeletctl. Maps to MITRE ATT&CK T1609 Container Administration Command, T1610 Deploy Container, T1613 Container and Resource Discovery. Use this skill when assessing Kubernetes clusters,...
The English summary is being prepared. Showing the original description.
ajtazer/heckit☆ 2Updated Oct 7, 2026
Mine GitHub Security Advisories and CVE databases for incomplete fixes, finding variant vulnerabilities in patched code or similar patterns in related packages.
The English summary is being prepared. Showing the original description.
ajtazer/heckit☆ 2Updated Oct 7, 2026
Query Google Search Console for SEO data - search queries, top pages, CTR opportunities, URL inspection, and sitemaps. Use when analyzing search performance, finding optimization opportunities, or checking indexing status.
The English summary is being prepared. Showing the original description.
danstrem2/clawdbot-skill-master-pack☆ 2Updated Feb 1, 2026
Expert in Langfuse - the open-source LLM observability platform. Covers tracing, prompt management, evaluation, datasets, and integration with LangChain, LlamaIndex, and OpenAI. Essential for debugging, monitoring, and improving LLM applications in production. Use when: langfuse, llm observability, llm tracing, prompt management, llm evaluation.
The English summary is being prepared. Showing the original description.
danstrem2/clawdbot-skill-master-pack☆ 2Updated Feb 1, 2026
This skill should be used when the user asks to "test for insecure direct object references," "find IDOR vulnerabilities," "exploit broken access control," "enumerate user IDs or object references," or "bypass authorization to access other users' data." It provides comprehensive guidance for detecting, exploiting, and remediating IDOR vulnerabilities in web applications.
The English summary is being prepared. Showing the original description.
danstrem2/clawdbot-skill-master-pack☆ 2Updated Feb 1, 2026
Web search and scraping via Firecrawl API. Use when you need to search the web, scrape websites (including JS-heavy pages), crawl entire sites, or extract structured data from web pages. Requires FIRECRAWL_API_KEY environment variable.
The English summary is being prepared. Showing the original description.
danstrem2/clawdbot-skill-master-pack☆ 2Updated Feb 1, 2026
Frontend development guidelines for React/TypeScript applications. Modern patterns including Suspense, lazy loading, useSuspenseQuery, file organization with features directory, MUI v7 styling, TanStack Router, performance optimization, and TypeScript best practices. Use when creating components, pages, features, fetching data, styling, routing, or working with frontend code.
The English summary is being prepared. Showing the original description.
danstrem2/clawdbot-skill-master-pack☆ 2Updated Feb 1, 2026
Track flight status, delays, and search routes. Uses FlightAware data.
The English summary is being prepared. Showing the original description.
danstrem2/clawdbot-skill-master-pack☆ 2Updated Feb 1, 2026
Use the Fly.io flyctl CLI for deploying and operating apps on Fly.io: deploys (local or remote builder), viewing status/logs, SSH/console, secrets/config, scaling, machines, volumes, and Fly Postgres (create/attach/manage databases). Use when asked to deploy to Fly.io, debug fly deploy/build/runtime failures, set up GitHub Actions deploys/previews, or safely manage Fly apps and Postgres.
The English summary is being prepared. Showing the original description.
danstrem2/clawdbot-skill-master-pack☆ 2Updated Feb 1, 2026
Read, write, edit, and format Excel files (.xlsx). Create spreadsheets, manipulate data, apply formatting, manage sheets, merge cells, find/replace, and export to CSV/JSON/Markdown. Use for any Excel file manipulation task.
The English summary is being prepared. Showing the original description.
danstrem2/clawdbot-skill-master-pack☆ 2Updated Feb 1, 2026
Precision Financial Insights - Analyze stocks, companies, and market sentiment using authoritative data. Powered by Yahoo Finance and enhanced with intelligent news synthesis by we-crafted.com/agents/financial-market-analysis - Buy CRAFTED_API_KEY in our website to start using
The English summary is being prepared. Showing the original description.
danstrem2/clawdbot-skill-master-pack☆ 2Updated Feb 1, 2026
Autonomous financial research agent for stock analysis, financial statements, metrics, prices, SEC filings, and crypto data.
The English summary is being prepared. Showing the original description.
danstrem2/clawdbot-skill-master-pack☆ 2Updated Feb 1, 2026
Get cryptocurrency token price and generate candlestick charts via CoinGecko API or Hyperliquid API. Use when user asks for token price, crypto price, price chart, or cryptocurrency market data.
The English summary is being prepared. Showing the original description.
danstrem2/clawdbot-skill-master-pack☆ 2Updated Feb 1, 2026
Manage Canva designs, assets, and folders via the Connect API. WHAT IT CAN DO: - List/search/organize designs and folders - Export finished designs (PNG/PDF/JPG) - Upload images to asset library - Autofill brand templates with data - Create blank designs (doc/presentation/whiteboard/custom) WHAT IT CANNOT DO: - Add content to designs (text, shapes, elements) - Edit existing design content - Upload documents (images only) - AI design generation Best for: asset pipelines, export automation, organization, template autofill. Triggers: /canva, "upload to canva", "export design", "list my designs", "canva folder".
The English summary is being prepared. Showing the original description.
danstrem2/clawdbot-skill-master-pack☆ 2Updated Feb 1, 2026
Backend architecture patterns, API design, database optimization, and server-side best practices for Node.js, Express, and Next.js API routes.
The English summary is being prepared. Showing the original description.
danstrem2/clawdbot-skill-master-pack☆ 2Updated Feb 1, 2026
Full CRUD for Notion pages, databases, and blocks. Create, read, update, delete, search, and query.
The English summary is being prepared. Showing the original description.
danstrem2/clawdbot-skill-master-pack☆ 2Updated Feb 1, 2026
Comprehensive backend development guide for Node.js/Express/TypeScript microservices. Use when creating routes, controllers, services, repositories, middleware, or working with Express APIs, Prisma database access, Sentry error tracking, Zod validation, unifiedConfig, dependency injection, or async patterns. Covers layered architecture (routes → controllers → services → repositories), BaseController pattern, error handling, performance monitoring, testing strategies, and migration from legacy patterns.
The English summary is being prepared. Showing the original description.
danstrem2/clawdbot-skill-master-pack☆ 2Updated Feb 1, 2026
Use when user needs capabilities Claude lacks (image generation, real-time X/Twitter data) or explicitly requests external models ("blockrun", "use grok", "use gpt", "dall-e", "deepseek")
The English summary is being prepared. Showing the original description.
danstrem2/clawdbot-skill-master-pack☆ 2Updated Feb 1, 2026
This skill should be used when the user asks to "pentest AWS", "test AWS security", "enumerate IAM", "exploit cloud infrastructure", "AWS privilege escalation", "S3 bucket testing", "metadata SSRF", "Lambda exploitation", or needs guidance on Amazon Web Services security assessment.
The English summary is being prepared. Showing the original description.
danstrem2/clawdbot-skill-master-pack☆ 2Updated Feb 1, 2026
Automates browser interactions for web testing, form filling, screenshots, and data extraction. Use when the user needs to navigate websites, interact with web pages, fill forms, take screenshots, test web applications, or extract information from web pages.
The English summary is being prepared. Showing the original description.
danstrem2/clawdbot-skill-master-pack☆ 2Updated Feb 1, 2026
Enterprise-grade B2B lead generation, enrichment, scoring, and outreach sequencing for AI agents. Find ideal prospects, enrich with verified data, score against your ICP, and generate personalized outreach — all autonomously.
The English summary is being prepared. Showing the original description.
johnalbertini14-glitch/openclaw-skills☆ 2Updated Feb 26, 2026
Extract calendar events, deadlines, action items, and follow-ups from emails. Works with any calendar provider (Google, Outlook, Apple, Notion, etc.). No external dependencies — pure agent intelligence. Use when the user forwards an email, asks to check inbox for events, or wants to extract structured scheduling data from any text.
The English summary is being prepared. Showing the original description.
johnalbertini14-glitch/openclaw-skills☆ 2Updated Feb 26, 2026
Manage and monitor local Pi-hole instance. Query FTL database for statistics (blocked ads, top clients) and control service via CLI. Use when user asks "how many ads blocked", "pihole status", or "update gravity".
The English summary is being prepared. Showing the original description.
johnalbertini14-glitch/openclaw-skills☆ 2Updated Feb 26, 2026
Send personalized LinkedIn direct messages to a list of existing 1st-degree connections via browser automation. Use when the user wants to message LinkedIn connections with AI-personalized outreach — e.g. nurturing leads, following up after events, reconnecting with contacts, or announcing something. Takes a data file (CSV/TSV) or plain list with connection names and companies, asks for outreach context/goal, generates a tailored message per person, and sends each one via browser automation. Handles message compose flow, character limits, and incremental status tracking.
The English summary is being prepared. Showing the original description.
johnalbertini14-glitch/openclaw-skills☆ 2Updated Feb 26, 2026