Investigate cloud configuration weaknesses across AWS, GCP, and Azure, including public storage, exposed services, and leaked credentials. Find candidates in public information and JavaScript, then verify data access and permissions to establish practical impact.
- Checking public access to S3, GCS, and Azure Blob storage
- Reviewing exposed serverless and managed services
- Assessing CloudWatch RUM guest role permissions
elementalsouls/Claude-BugHunter☆ 5.2KUpdated Oct 19, 2026
推特中文圈 AI 自媒体博主 (推特(X) 中文圈 AI 自媒体博主 (从业者视角) — 在 X/推特 用中文做 AI 内容的自媒体博主,重点是**怎么写推文/thread、怎么制作内容**。覆盖: (a) 选题 — AI 模型发布解读 / prompt 技巧 / AI 工具实测 / AI 出海与独立开发(build in public) / 英文一手编译翻译 / 信息差 / AI 资讯快讯 / 深度长推; (b) 文案与内容结构(核心) — 单条推(开头钩子/信息密度/短句断行/配图截图/数据图)、长推与 thread(首条钩子/编号/逻辑链/结尾关注 CTA)、引用锐评(quote tweet)、排版可读性、配图(ray.so/carbon 代码图/产品截图/对比图); (c) 内容制作工作流 — 找信息源(英文一手/arXiv/官方/Reddit/HN)→选题→编译总结加洞察→写推/thread→配图→发布→互动维护; (d) AI 工具用于内容生产 — 英文一手编译总结(GPT/Claude/Kimi)、配图(ray.so/carbon/截图美化)、thread 工具(Typefully/Hypefury)、翻译、排程分析; (e) 平台机制与涨粉 — X 算法时间线(转评赞/互动权重/外链降权)、蹭热点借势、互动与回复、build in public 涨粉、英文区搬运到中文区的信息差红利; (f) 变现(次要) — 广告 / 知识星球 / 社群 / 付费课程 / 咨询 / 导流。学派分歧: 编译搬运(英文一手翻译) vs 原创洞察、快讯资讯 vs 深度长推、锐评玩梗 vs 严肃干货、build in public vs 纯内容、全 AI 自动发 vs 人工精选。代表生态(宝玉/歸藏/向阳乔木/AI 进化论/小互/Gorden Sun 等)。不含: 英文 AI Twitter 圈(聚焦中文圈)、通用 X 增长营销、其他平台、AI 工具技术原理。) Master OS — automated mastery of 推特(X) 中文圈 AI 自媒体博主 (从业者视角) — 在 X/推特 用中文做 AI 内容的自媒体博主,重点是**怎么写推文/thread、怎么制作内容**。覆盖: (a) 选题 — AI 模型发布解读 / prompt 技巧 / AI 工具实测 / AI 出海与独立开发(build in public) / 英文一手编译翻译 / 信息差 / AI 资讯快讯 / 深度长推; (b) 文案与内容结构(核心) — 单条推(开头钩子/信息密度/短句断行/配图截图/数据图)、长推与 thread(首条钩子/编号/逻辑链/结尾关注 CTA)、引用锐评(quote tweet)、排版可读性、配图(ray.so/carbon 代码图/产品截图/对比图); (c) 内容制作工作流 — 找信息源(英文一手/arXiv/官方/Reddit/HN)→选题→编译总结加洞察→写推/thread→配图→发布→互动维护; (d) AI 工具用于内容生产 — 英文一手编译总结(GPT/Claude/Kimi)、配图(ray.so/carbon/截图美化)、thread 工具(Typefully/Hypefury)、翻译、排程分析; (e) 平台机制与涨粉 — X 算法时间线(转评赞/互动权重/外链降权)、蹭热点借势、互动与回复、build in public 涨粉、英文区搬运到中文区的信息差红利; (f) 变现(次要) — 广告 / 知识星球 / 社群 / 付费课程 / 咨询 / 导流。学派分歧: 编译搬运(英文一手翻译) vs 原创洞察、快讯资讯 vs 深度长推、锐评玩梗 vs 严肃干货、build in public vs 纯内容、全 AI 自动发 vs 人工精选。代表生态(宝玉/歸藏/向阳乔木/AI 进化论/小互/Gorden Sun 等)。不含: 英文 AI Twitter 圈(聚焦中文圈)、通用 X 增长营销、其他平台、AI 工具技术原理。: top builders' mental models, tool stack, current workflows, jargon, and where to keep up. Trigger this skill when the user works on 推特(X) 中文圈 AI 自媒体博主 (从业者视角) — 在 X/推特 用中文做 AI 内容的自媒体博主,重点是**怎么写推文/thread、怎么制作内容**。覆盖: (a) 选题 — AI 模型发布解读 / prompt 技巧 / AI 工具实测 / AI 出海与独立开发(build in public) / 英文一手编译翻译 / 信息差 / AI 资讯快讯 / 深度长推; (b) 文案与内容结构(核心) — 单条推(开头钩子/信息密度/短句断行/配图截图/数据图)、长推与 thread(首条钩子/编号/逻辑链/结尾关注 CTA)、引用锐评(quote tweet)、排版可读性、配图(ray.so/carbon 代码图/产品截图/对比图); (c) 内容制作工作流 — 找信息源(英文一手/arXiv/官方/Reddit/HN)→选题→编译总结加洞察→写推/thread→配图→发布→互动维护; (d) AI 工具用于内容生产 — 英文一手编译总结(GPT/Claude/Kimi)、配图(ray.so/carbon/截图美化)、thread 工具(Typefully/Hypefury)、翻译、排程分析; (e) 平台机制与涨粉 — X 算法时间线(转评赞/互动权重/外链降权)、蹭热点借势、互动与回复、build in public 涨粉、英文区搬运到中文区的信息差红利; (f) 变现(次要) — 广告 / 知识星球 / 社群 / 付费课程 / 咨询 / 导流。学派分歧: 编译搬运(英文一手翻译) vs 原创洞察、快讯资讯 vs 深度长推、锐评玩梗 vs 严肃干货、build in public vs 纯内容、全 AI 自动发 vs 人工精选。代表生态(宝玉/歸藏/向阳乔木/AI 进化论/小互/Gorden Sun 等)。不含: 英文 AI Twitter 圈(聚焦中文圈)、通用 X 增长营销、其他平台、AI 工具技术原理。 problems and wants industry-grade thinking, tool selection, or workflow guidance. 触发词:「推特 ai 博主」「推特中文 ai」「x ai 自媒体」「推特 thread」「推特爆款推文」
The English summary is being prepared. Showing the original description.
swaylq/master-skill☆ 162Updated Sep 6, 2026
Retrieve public evidence and linked publications for a supported genetic variant, or look up gene–disease relationships. Preserve sources, conflicting assertions, and explicit search outcomes so qualified professionals can review the findings.
- Review public evidence for a single genetic variant
- Find publications linked to a resolved variant
- Look up gene–disease relationships
K-Dense-AI/scientific-agent-skills☆ 53.1KUpdated Oct 19, 2026
Interact with your Public.com brokerage account using the Public.com API. Able to view portfolio, get stock quotes, place trades, and get account updates. To create a Public.com account head to public.com/signup.
The English summary is being prepared. Showing the original description.
PublicDotCom/claw-skill-public-dot-com☆ 43Updated May 23, 2026
Organize Remotion skills into the correct internal or public directories. For public skills, follow the required symbolic link setup, synchronization, and validation steps so agents can access skills stored in the public location.
- Choosing a location for a new internal or public skill
- Adding agent links for public skills
- Synchronizing and validating public skill links
remotion-dev/remotion☆ 65.5KUpdated Oct 20, 2026
Collect public posts across a blog, newsletter, or feed archive and save clean Markdown pages for each article. The workflow avoids duplicates, supports resumed runs, repairs empty results, and hands articles to a separate enrichment skill.
- Importing a blog's public article archive
- Organizing public newsletter posts as knowledge pages
- Rerunning a feed import without duplicates
garrytan/gbrain☆ 31KUpdated Oct 20, 2026
Investigate photos, videos, public accounts, and records using OSINT, research based on public information. Connect sparse clues, test competing explanations, and report evidence, confidence, and unresolved questions about locations, events, identities, or infrastructure relationships.
- Verify the location shown in a public-scene photo
- Reconstruct an event's timeline from public records
- Check links between companies and domains
affaan-m/ECC☆ 284.5KUpdated Oct 20, 2026
Prepare a private project for public release by creating a separate copy, removing sensitive information, checking for remaining risks, and generating documentation, setup scripts, and license files for review before publishing.
- Preparing a private project for public release
- Checking a release copy for secrets and personal information
- Creating documentation and setup files for contributors
affaan-m/ECC☆ 284.5KUpdated Oct 20, 2026
Build an HTML presentation for a public-transit funding proposal, covering ridership needs, the plan, risk controls, and the requested decision. The template uses bold poster-style colors and typography for city councils and public boards.
- Preparing a public-transit funding proposal
- Explaining ridership needs to a city council
- Presenting a plan with risk controls
nexu-io/open-design☆ 102.7KUpdated Oct 20, 2026
Prepare an existing Twenty app for npm or marketplace publication by reviewing its README, listing details, package metadata, logos, and screenshots. The workflow includes checking publication settings, validating the build, and running the publishing command.
- Prepare a Twenty app marketplace listing
- Write or review README and About text
- Check logos, screenshots, and public assets
twentyhq/twenty☆ 58.7KUpdated Oct 20, 2026
Develop an eight-part article series examining one company's competitive strengths, earnings, assets, management, and valuation. Review figures, sources, accounting definitions, and claims across the series to prepare consistent articles for public publication.
- Planning an eight-part company analysis series
- Checking figures and definitions across articles
- Revising unsupported claims before publication
HKUDS/Vibe-Trading☆ 36KUpdated Oct 19, 2026
Audit Azure Blob and ADLS storage accounts for public exposure, risky access tokens, encryption settings, and insecure transport configurations. Use the azure-mgmt-storage Python SDK to produce a JSON report with account findings, severity ratings, and remediation recommendations.
- Auditing storage accounts across an Azure subscription
- Investigating suspected exposure through public blob access
- Reviewing SAS token permissions and expiration
mukul975/Anthropic-Cybersecurity-Skills☆ 34.8KUpdated Aug 31, 2026
Create or update skills using OpenSEO's repository conventions. Keep one canonical source, distinguish internal and public workflows, maintain Claude Code links, and register public skills in documentation, the in-app agent, and plugin bundles.
- Add a new skill to the OpenSEO repository
- Turn a development workflow into an internal skill
- Repair drift between skill directories
every-app/open-seo☆ 24.2KUpdated Oct 20, 2026
Guide changes to the published @kortix/sdk package with rules for preserving public APIs, writing failing tests before behavior changes, keeping the core independent of frameworks, and checking package installation. It also covers exports, streaming transport, and release version handling.
- Adding a public SDK feature or export
- Renaming public types while preserving compatibility
- Changing streaming or transport behavior
kortix-ai/suna☆ 20.3KUpdated Oct 20, 2026
Find people and assess identity matches using public information from social media, official records, and reverse lookups. The skill cross-checks independent sources, reports confidence levels, and requires at least three matching identifiers for a high-confidence result.
- Looking for an old friend or former coworker
- Checking public information about an unknown caller
- Finding public accounts linked to a username
danielmiessler/LifeOS☆ 19.5KUpdated Sep 4, 2026
Routes listed-company investment research to specialist skills for earnings analysis, valuation, financial model updates, and portfolio risk reviews. Helps organize evidence, assumptions, and investment theses into reports, models, memos, and monitoring trackers.
- Prepare earnings previews and post-results analysis
- Assess company valuation and update financial models
- Track investment theses and upcoming catalysts
openai/plugins☆ 7.5KUpdated Oct 8, 2026
Manage article drafts and publication for a WeChat Official Account. The skill checks the target account, reads drafts before editing, requests explicit confirmation before publishing, and reports the publication status and links returned by the API.
- Create an article draft for a WeChat Official Account
- Read and update an existing draft
- Review the target account and article before publishing
Devin-AXIS/iPolloWork☆ 7.1KUpdated Oct 19, 2026
Search WeChat articles by keyword and retrieve full text alongside titles, authors, publication dates, article links and cover image URLs. Set collection limits and publication date filters to gather material for topic, brand or competitor research.
- Collecting WeChat articles about industry trends
- Researching brand and topic mentions
- Gathering articles for an internal knowledge base
browser-act/skills☆ 6.2KUpdated Aug 24, 2026
Turn research ideas into a coordinated program with clear questions, data needs, methods, team roles, and publication plans. Connect academic papers with policy and public-facing outputs while considering feasibility, data availability, and long-term institutional activities.
- Design a multi-year research program
- Turn research ideas into defined projects
- Plan roles for student research teams
brycewang-stanford/Auto-Empirical-Research-Skills☆ 4.7KUpdated Oct 19, 2026
GitHub 解封 — 账号封禁/限制/恢复的领域操作系统。覆盖:(a) GitHub 官方政策体系 (TOS / 可接受使用政策 / Trust & Safety 执行模式 / 公开申诉路径 / 受制裁地区解读);(b) 封号原因诊断学 (spam / abuse / 制裁误标 / 2FA 丢失 / ToS 违规 / 账号劫持误判 / ban evasion 等子类型 + 症状→原因映射 + 自我分诊压测);(c) 申诉实操 craft (写一封能让 T&S 快速判误伤的英文申诉信 + 升级阶梯 + 法务介入边界 + Don'ts);(d) 制裁与合规硬边界 (OFAC SDN 名单 / 哪些国家或地区真不可达 / VPN 误判路径 / 中国大陆不是美国制裁地区的反复重申);(e) 中国大陆开发者特别处境 (sanctioned region 误标 + SMS 验证不支持 +86/+852 + Gitee/GitLab/Codeberg/JihuLab 备用迁移 + 私有自托管 Gitea/Forgejo);(f) 真实案例库 (~30+ 公开案例分类拆解:误伤 / 真违规 / 制裁误标三类各自赔率与申诉成功路径)。伦理锚绝不软化:不教 ban evasion / 不教撒谎式申诉 / 真违规承认改进 / 丢 2FA 无恢复因子则诚实告知 / 中国制裁误标靠申诉不靠换 VPN / 申诉 6 个月窗口必算清 / 约 3% (业内估) 真违规恢复 vs 约 79% (业内估) 误伤申诉成功率分层标。 (GitHub Account Reinstatement — the domain operating system for GitHub (and analogous platform) account suspension, restriction, appeal, and recovery. Covers: (a) GitHub official policy architecture (TOS / Acceptable Use Policies / Trust & Safety enforcement patterns / public appeals pathways / sanctioned-region interpretation); (b) suspension-cause diagnostics (spam / abuse / sanctions mis-flag / 2FA loss / ToS violation / account hijack false-positive / ban evasion taxonomy + symptom→cause mapping + self-triage pressure test); (c) appeal craft (writing an English appeal letter that gets T&S to fast-track a false-positive ruling + escalation ladder + legal-engagement boundary + Don'ts); (d) sanctions and compliance hard boundaries (OFAC SDN list / which countries/regions are truly unreachable / VPN false-positive paths / China is NOT a US-sanctioned region — repeated emphasis); (e) mainland China developer special circumstances (sanctioned-region mis-flag + SMS verification does not support +86/+852 + Gitee/GitLab/Codeberg/JihuLab fallback migration + self-hosted Gitea/Forgejo); (f) real-case library (~30+ public cases with categorized analysis: false-positive / genuine violation / sanctions mis-flag, each with win-rate and appeal success path). Ethical anchors absolutely not softened: do NOT teach ban evasion (creating new accounts turns a temp ban into a permanent one — the single biggest mistake); do NOT teach social engineering or lying in appeals (misuse + actually confirms violation); genuine violations: admit + improve beats denial; lost 2FA + no recovery factor → do not pretend recovery is possible; China sanctioned-region mis-flag → fix via appeal, not repeated VPN switching; appeal form 6-month window must be counted carefully; historical 约 3% (业内估) genuine-violation recovery vs 约 79% (业内估) false-positive appeal success rate stratification must be honestly labeled. Anti-samples (explicitly describe harm, never endorse): developer permabanned for ban evasion / open-source team org-banned for personal attacks in public issues / cases where repeated VPN switching escalated risk-control severity.) Master OS — automated mastery of GitHub Account Reinstatement — the domain operating system for GitHub (and analogous platform) account suspension, restriction, appeal, and recovery. Covers: (a) GitHub official policy architecture (TOS / Acceptable Use Policies / Trust & Safety enforcement patterns / public appeals pathways / sanctioned-region interpretation); (b) suspension-cause diagnostics (spam / abuse / sanctions mis-flag / 2FA loss / ToS violation / account hijack false-positive / ban evasion taxonomy + symptom→cause mapping + self-triage pressure test); (c) appeal craft (writing an English appeal letter that gets T&S to fast-track a false-positive ruling + escalation ladder + legal-engagement boundary + Don'ts); (d) sanctions and compliance hard boundaries (OFAC SDN list / which countries/regions are truly unreachable / VPN false-positive paths / China is NOT a US-sanctioned region — repeated emphasis); (e) mainland China developer special circumstances (sanctioned-region mis-flag + SMS verification does not support +86/+852 + Gitee/GitLab/Codeberg/JihuLab fallback migration + self-hosted Gitea/Forgejo); (f) real-case library (~30+ public cases with categorized analysis: fa
The English summary is being prepared. Showing the original description.
swaylq/master-skill☆ 162Updated Sep 6, 2026
Expose the user's local AionUi WebUI to the public internet with a near-zero-effort flow. Detects whether the WebUI is running, guides the user to switch it on if needed (the only manual step), self-installs cloudflared cross-platform, opens a Cloudflare quick tunnel, verifies the public URL actually works, then explains the limitations honestly (temporary/random URL, must stay running, password is the only protection, traffic transits Cloudflare). Use whenever the user wants to reach their AionUi from outside the LAN, over the internet, or share a public link. Distinct from aionui-webui-setup (which covers manual LAN / Tailscale / server config through the settings UI): this skill produces a one-click public link via an automatic tunnel.
The English summary is being prepared. Showing the original description.
iOfficeAI/AionCore☆ 121Updated Oct 15, 2026
Use when designing or configuring public pages on an Experience Cloud site — guest user profile setup, page-level access settings in Experience Builder, object/field visibility for unauthenticated visitors, and explicit sharing rules that expose data on public pages. Triggers: 'configure public pages Experience Cloud', 'guest user profile setup', 'unauthenticated site access', 'public community page visibility', 'make page visible without login'. NOT for authenticated user features (use admin/experience-cloud-member-management). NOT for security hardening or remediation of guest user exposure (use security/guest-user-security). Also covers the deployable shape: pageAccess on the route file, the guest Profile's objectPermissions and fieldPermissions, sharingGuestRules, siteGuestRecordDefaultOwner on CustomSite, and the Network guest flags.
The English summary is being prepared. Showing the original description.
PranavNagrecha/AwesomeSalesforceSkills☆ 19Updated Oct 20, 2026
Review and update OpenClaw security advisories on GitHub, check linked private forks and publication requirements, and verify the published result. The workflow includes approval before publication and checks for common update errors.
- Reviewing an advisory and its linked private fork
- Updating vulnerability details and severity
- Checking publication requirements before approval
openclaw/openclaw☆ 392.9KUpdated Oct 20, 2026
Upload large Remotion media assets to Cloudflare R2 storage and replace local file references with public remotion.media URLs. Verify access, remove the local binary, and run checks before committing and pushing the changes.
- Hosting media files that are too large for Git
- Keeping media binaries out of a pull request
- Replacing local asset references with public URLs
remotion-dev/remotion☆ 65.5KUpdated Oct 20, 2026