Assess how applications use encryption, signed tokens, and random values. Identify implementation weaknesses, select relevant testing tools, and document causes and fixes for issues involving encryption modes, RSA parameters, predictable randomness, and key derivation.
- Assessing encrypted cookies and tokens
- Checking RSA keys and cryptographic settings
- Testing session token predictability
SnailSploit/Claude-Red☆ 7.6KUpdated Oct 13, 2026
口腔种植 (含 单牙/多牙缺失种植 / 全口 All-on-X / 即刻种植 即刻负重 / 上颌窦提升 / 牙槽嵴骨增量 GBR / 软组织移植 / 数字化种植 (CBCT 设计 + 口扫 + 导板 + CAD-CAM 上部) / 种植体周炎防治 / 种植修复 (基台 + 冠 + 杆卡 + 覆盖义齿) — 不含 普通牙体牙髓 / 正畸 / 儿牙 / 口腔颌面外科肿瘤 / 隐形矫治商业) (implant dentistry — surgical placement and prosthetic restoration of osseointegrated dental implants; covers diagnosis & treatment planning, site preparation (bone augmentation, sinus elevation, soft-tissue grafting), implant placement (delayed / immediate / immediate-loading), provisionalization and final restoration (cement / screw retained, custom abutments, full-arch), digital workflow (CBCT planning, intra-oral scanning, guided surgery, CAD-CAM milled prosthetics), and long-term maintenance including peri-implantitis prevention and treatment; NOT general restorative dentistry, NOT orthodontics, NOT pediatric dentistry, NOT maxillofacial oncology / trauma reconstruction, NOT clear-aligner business.) Master OS — automated mastery of implant dentistry — surgical placement and prosthetic restoration of osseointegrated dental implants; covers diagnosis & treatment planning, site preparation (bone augmentation, sinus elevation, soft-tissue grafting), implant placement (delayed / immediate / immediate-loading), provisionalization and final restoration (cement / screw retained, custom abutments, full-arch), digital workflow (CBCT planning, intra-oral scanning, guided surgery, CAD-CAM milled prosthetics), and long-term maintenance including peri-implantitis prevention and treatment; NOT general restorative dentistry, NOT orthodontics, NOT pediatric dentistry, NOT maxillofacial oncology / trauma reconstruction, NOT clear-aligner business.: top builders' mental models, tool stack, current workflows, jargon, and where to keep up. Trigger this skill when the user works on implant dentistry — surgical placement and prosthetic restoration of osseointegrated dental implants; covers diagnosis & treatment planning, site preparation (bone augmentation, sinus elevation, soft-tissue grafting), implant placement (delayed / immediate / immediate-loading), provisionalization and final restoration (cement / screw retained, custom abutments, full-arch), digital workflow (CBCT planning, intra-oral scanning, guided surgery, CAD-CAM milled prosthetics), and long-term maintenance including peri-implantitis prevention and treatment; NOT general restorative dentistry, NOT orthodontics, NOT pediatric dentistry, NOT maxillofacial oncology / trauma reconstruction, NOT clear-aligner business. problems and wants industry-grade thinking, tool selection, or workflow guidance. 触发词:「种植牙」「种植」「口腔种植」「牙种植」「implant」
The English summary is being prepared. Showing the original description.
swaylq/master-skill☆ 161Updated Sep 6, 2026
Systematic methodology for identifying and exploiting cryptographic implementation weaknesses in real-world applications. Covers padding oracle attacks against CBC-mode ciphers with PKCS7 padding (Vaudenay's original attack through modern padbuster automation), ECB mode exploitation including block cut-and-paste and byte-at-a-time decryption, hash length extension attacks against SHA1/SHA256/MD5-based MACs using HashPump, RSA vulnerabilities including small public exponent, common modulus, Bleichenbacher PKCS1v1.5 padding oracle, and Coppersmith's method for partial key recovery. Addresses weak PRNG exploitation targeting time-seeded generators and Mersenne Twister MT19937 state recovery from observed outputs, timing side-channel attacks against comparison operations, nonce reuse in AES-GCM leading to authentication key recovery, and key derivation weaknesses including insufficient iteration counts and missing salts. Primary tooling includes padbuster, RsaCtfTool, hashpump, and PyCryptodome for building c...
The English summary is being prepared. Showing the original description.
ajtazer/heckit☆ 2Updated Oct 7, 2026
Build Java applications with tinystruct, including actions usable from both a terminal and the web. Get guidance on launcher generation, routing, JSON responses, database storage, tests, and MCP tools that agents can call.
- Build actions for both terminal and web use
- Generate missing project launcher scripts
- Implement JSON APIs and database storage
affaan-m/ECC☆ 283.4KUpdated Oct 16, 2026
Test websites and web apps in a real cloud browser, including local development servers. Check a specific user journey or several flows, then receive a quality score from 1 to 5 with evidence and identified issues.
- Checking whether checkout works
- Testing a local development app
- Evaluating a landing page
browser-use/browser-use☆ 118.5KUpdated Oct 18, 2026
Create, edit, and clean spreadsheet files, including Excel workbooks and CSV data. Build formulas and formatting with openpyxl, a Python library, then recalculate and validate workbooks to check for formula errors and file problems.
- Create a workbook with formulas and formatting
- Edit an existing spreadsheet
- Restructure messy CSV or TSV data
asgeirtj/system_prompts_leaks☆ 69.9KUpdated Oct 16, 2026
Create ad copy and campaigns for Facebook and Instagram, review advertising spend and delivery results, and manage catalogs and product feeds. The skill also checks advertising policy questions through a dedicated policy tool.
- Draft ad copy and plan a campaign
- Review campaign spending and delivery results
- Manage product catalogs and feed refresh schedules
asgeirtj/system_prompts_leaks☆ 69.9KUpdated Oct 16, 2026
Create or edit custom HyperFrames videos, including multi-scene brand films, montages, title cards, and footage remixes. The workflow covers planning, design, media assembly, animation, checks, and a final preview for approval before rendering.
- Create a multi-scene brand video
- Reorder and trim existing footage
- Build a static title card or loop
heygen-com/hyperframes☆ 66.9KUpdated Oct 18, 2026
Add synchronized subtitles and text effects to an existing single-speaker video. Choose from 35 visual styles, including readable lower captions and words placed behind the person, with local transcription, subject cutout, previews, and final video compositing.
- Add readable subtitles to an explainer video
- Place an emphasized word behind the speaker
- Create themed caption effects for social videos
heygen-com/hyperframes☆ 66.9KUpdated Oct 18, 2026
Add a new effect to @remotion/effects, including its implementation, package entry points, documentation, interactive demo, and preview images. Follow the package conventions and verify the changes with tests, formatting checks, and builds.
- Implementing a new effect for @remotion/effects
- Registering effect imports and parameter types
- Creating documentation and an interactive effect demo
remotion-dev/remotion☆ 65.1KUpdated Oct 18, 2026
Create editable PowerPoint decks, reconstruct slides from images, improve existing presentations, and fill templates. The workflow also covers reusable design workspaces and adding narration or animation, including narrated videos authored from presentations.
- Create an editable presentation
- Reconstruct slides from images
- Improve an existing deck's appearance
hugohe3/ppt-master☆ 63.6KUpdated Oct 17, 2026
Build and evaluate time-to-event models with scikit-survival, including records whose events remain unobserved when follow-up ends. Keep preprocessing separate from evaluation data, compare models, predict survival probabilities, and summarize censoring-aware metrics.
- Validate event indicators and follow-up times in local CSV data
- Train survival models without leaking evaluation data
- Evaluate survival probabilities with censoring-aware metrics
K-Dense-AI/scientific-agent-skills☆ 52.7KUpdated Oct 16, 2026
Build Python workloads on Modal for cloud execution, including GPU model training and inference, web APIs, scheduled jobs, and parallel batch processing. Configure container environments, persistent storage, and automatic scaling through the Modal SDK.
- Serving an AI model through a web API
- Running model training or fine-tuning on cloud GPUs
- Processing independent batch inputs in parallel
K-Dense-AI/scientific-agent-skills☆ 52.7KUpdated Oct 16, 2026
Record task handoffs between Bots in shared Hindsight memory, including progress, remaining work, sources, and caveats. Other Bots can retrieve the record later, continue unfinished work, and report the outcome back through shared memory.
- Handing unfinished work to another Bot
- Resuming a task started by another Bot
- Sharing findings with Bots outside the current conversation
vectorize-io/hindsight☆ 51.3KUpdated Oct 17, 2026
Implement .NET workflows for Azure AI Foundry projects, including agent creation, resource connections, dataset uploads, model deployment inspection, search index management, and evaluations. Examples also cover authentication, asynchronous operations, and resource cleanup.
- Creating and running agents from a .NET application
- Inspecting resource connections and model deployments
- Uploading datasets and managing search indexes
sickn33/agentic-awesome-skills☆ 47.9KUpdated Oct 19, 2026
Guides preparation and authorized publication of Apache Airflow changes, including existing pull request checks, remote verification, reviews, tests, rebasing, and a prefilled submission page. Also explains how to track work deferred by temporary fixes.
- Planning the steps for submitting Airflow changes
- Checking existing pull requests and Git remote destinations
- Reviewing and testing changes before pushing
apache/airflow☆ 47.2KUpdated Oct 18, 2026
Assess authorized single sign-on systems using SAML, OIDC, and OAuth2. Map the login flow, check signatures, redirects, and token validation, then document reproducible findings and their impact, including identity or tenant confusion.
- Review redirect and token checks in a single sign-on flow
- Assess SAML signatures and assertion handling
- Investigate tenant confusion and logout failures
zhaoxuya520/reverse-skill☆ 42.6KUpdated Sep 22, 2026
Investigate how compiled or obfuscated programs work, including binaries, APKs, WASM, and firmware. Combine file inspection, decompilation, and observed execution to understand control flow, validation logic, and mechanisms that hinder analysis.
- Understanding unfamiliar compiled programs
- Investigating obfuscation and anti-debugging logic
- Solving CTF validation challenges
zhaoxuya520/reverse-skill☆ 42.6KUpdated Sep 22, 2026
Create, edit, and analyze spreadsheet data in XLSX, CSV, or TSV formats, including workbook formulas and charts. The workflow emphasizes clear table headers, formulas that can be reviewed, and verification of key cells and totals after reopening.
- Create a table with clear headers
- Edit and analyze XLSX, CSV, or TSV data
- Review workbook formulas and charts
codewhale-hq/Codewhale☆ 41.1KUpdated Oct 19, 2026
Capture and analyze network traffic to understand custom protocols, including message boundaries and field meanings. Use the findings to document formats, investigate communication problems, and validate behavior through replay and tests with unusual inputs.
- Investigating network communication failures
- Understanding proprietary message formats
- Documenting protocol specifications
wshobson/agents☆ 41KUpdated Oct 19, 2026
Investigate security incidents using memory dumps, saved copies of RAM. The skill guides memory acquisition, process and network analysis, suspicious code detection, and evidence extraction with Volatility and related tools, including checks for capture integrity.
- Capturing RAM before shutting down a system under investigation
- Finding suspicious processes and network connections in memory
- Extracting executables and strings for malware analysis
wshobson/agents☆ 41KUpdated Oct 19, 2026
Calculate portfolio risk and performance measures, including potential losses, declines from past peaks, and returns relative to risk. Use multiple indicators to support risk limits, position sizing, and ongoing monitoring.
- Measuring portfolio loss risk
- Comparing returns relative to risk
- Setting risk limits and position sizes
wshobson/agents☆ 41KUpdated Oct 19, 2026
Write focused Java unit tests with JUnit 5, including tests that repeat checks across different inputs. Covers clear test structure, exception checks, mock objects that replace dependencies, and ways to organize test suites.
- Writing a unit test for a Java method
- Checking the same behavior with multiple input values
- Testing exceptions and related assertions
github/awesome-copilot☆ 40.2KUpdated Oct 17, 2026
Write focused C# unit tests with XUnit, including tests that run against multiple input datasets. Apply consistent naming, setup, assertions, shared fixtures, and mock dependencies to keep tests readable, independent, and organized.
- Set up an XUnit test project for C#
- Test multiple input cases with Theory and data attributes
- Check exceptions and isolate dependencies with mocks
github/awesome-copilot☆ 40.2KUpdated Oct 17, 2026