개발 스킬

Companion to the generic report-writing skill. Use when working specifically on Bugcrowd submissions where VRT mapping, OOS-clause rebuttals, or per-program target selection matter.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

User.update(req.body) // body has {'role': 'admin'} → privilege escalation

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Shellcode development reference for offensive security engagements. Use when writing custom x86/x64 shellcode, implementing position-independent code (PIC), building shellcode loaders, evading AV/EDR detection, or converting PE files to shellcode. Covers null byte avoidance, API hashing, encoder/decoder patterns, staged vs stageless payloads, Windows PEB traversal, and cross-platform shellcode techniques.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

End-to-end Android APK red-team pipeline — automated APK acquisition (Play Store + apkpure + apkmirror fallback), jadx decompilation, secret/URL/JWT/Firebase grep, pinned-cert extraction, exported-component enumeration, Frida runtime instrumentation templates, intent-injection probes. Built from an authorized external red-team engagement where 7 APKs were pulled manually, 4 download attempts truncated, and a hardcoded JWT + 30 internal API endpoints were recovered from one of the apps. Use when target has a mobile app catalogue (Play Store developer page), when you find an APK URL hosted on a web server, or when post-recon mentions 'mobile app' in scope.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

You are helping a penetration tester enumerate database services and check for

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Hunt Insecure Deserialization — Java gadget chains (ysoserial), PHP object injection (phpggc), Python pickle RCE, .NET BinaryFormatter, Ruby Marshal.load, JNDI/Log4Shell. RCE via deserialization is almost always Critical. Use when target runs Java, PHP serialization, Python pickle, .NET, or Ruby on Rails.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Detect code injection vulnerabilities in packages that dynamically generate or evaluate code via new Function(), eval(), vm.run*, or template literal interpolation.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Query Google Places API (New) via the goplaces CLI for text search, place details, resolve, and reviews. Use for human-friendly place lookup or JSON output for scripts.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Expert in LangGraph - the production-grade framework for building stateful, multi-actor AI applications. Covers graph construction, state management, cycles and branches, persistence with checkpointers, human-in-the-loop patterns, and the ReAct agent pattern. Used in production at LinkedIn, Uber, and 400+ companies. This is LangChain's recommended approach for building agents. Use when: langgraph, langchain agent, stateful agent, agent graph, react agent.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Comprehensive JavaScript reference covering 33+ essential concepts every developer should know. From fundamentals like primitives and closures to advanced patterns like async/await and functional programming. Use when explaining JS concepts, debugging JavaScript issues, or teaching JavaScript fundamentals.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Gmail, Calendar, Drive, Docs, Sheets — NO Google Cloud Console required. Just OAuth sign-in. Zero setup complexity vs traditional Google API integrations.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Internationalization and localization patterns. Detecting hardcoded strings, managing translations, locale files, RTL support.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Guide for continuous improvement, error proofing, and standardization. Use this skill when the user wants to improve code quality, refactor, or discuss process improvements.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Manage Jira issues, boards, sprints, and projects via the jira-cli. Search, create, update, and transition issues directly from the command line.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Convert raw notes, error logs, voice dictation, or screenshots into crisp GitHub-flavored markdown issue reports. Use when the user pastes bug info, error messages, or informal descriptions and wants a structured GitHub issue. Supports images/GIFs for visual evidence.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Fetch, preview, merge, and test GitHub PRs locally. Great for trying upstream PRs before they're merged.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

ดึงราคาทองคำปัจจุบันจาก api กลางของประเทศไทย

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Control Google Nest devices (thermostats, cameras, doorbells) via the Google Smart Device Management API using curl and jq.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Frontend development guidelines for React/TypeScript applications. Modern patterns including Suspense, lazy loading, useSuspenseQuery, file organization with features directory, MUI v7 styling, TanStack Router, performance optimization, and TypeScript best practices. Use when creating components, pages, features, fetching data, styling, routing, or working with frontend code.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Gemini CLI for one-shot Q&A, summaries, and generation.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Search GIF providers with CLI/TUI, download results, and extract stills/sheets.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Stage, commit, and push git changes with conventional commit messages. Use when user wants to commit and push changes, mentions pushing to remote, or asks to save and push their work. Also activates when user says "push changes", "commit and push", "push this", "push to github", or similar git workflow requests.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Git-Notes-Based knowledge graph memory system. Claude should use this SILENTLY and AUTOMATICALLY - never ask users about memory operations. Branch-aware persistent memory using git notes. Handles context, decisions, tasks, and learnings across sessions.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Interact with GitHub using the `gh` CLI. Use `gh issue`, `gh pr`, `gh run`, and `gh api` for issues, PRs, CI runs, and advanced queries.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.