Assess whether a container can escape its isolation and reach the host during an authorized security test. Review privileges, shared mounts, Docker socket exposure, and runC vulnerabilities, then document demonstrated impact and remediation.
한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.
- Testing container escape within an approved scope
- Assessing the impact of privileged or hostPath workloads
- Validating controls that block container escape
mukul975/Anthropic-Cybersecurity-Skills☆ 3.5만2026년 8월 31일 업데이트
Retrieve concise summaries from Reactome about biological pathways, events, participating molecules, and diagram-related data. Look up specific identifiers, search for relevant entries, or find pathways associated with an entity, and save the full response when needed.
한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.
- Looking up a pathway or event by ID
- Finding pathways associated with a molecule
- Checking participants in a biological event
openai/plugins☆ 7.5천2026년 10월 8일 업데이트
Create a Markdown threat model grounded in a codebase. Identify valuable assets, boundaries between trusted and untrusted components, realistic attack paths, and mitigations, then prioritize risks using explicit assumptions about likelihood and impact.
한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.
- Map attack paths across a codebase
- Assess threats within a specific project directory
- Prioritize risks to data and credentials
tech-leads-club/agent-skills☆ 7.1천2026년 10월 17일 업데이트
Computational pathology toolkit for analyzing whole-slide images (WSI) and multiparametric imaging data. Use this skill when working with histopathology slides, H&E stained images, multiplex immunofluorescence (CODEX, Vectra), spatial proteomics, nucleus detection/segmentation, tissue graph construction, or training ML models on pathology data. Supports 160+ slide formats including Aperio SVS, NDPI, DICOM, OME-TIFF for digital pathology workflows.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
foryourhealth111-pixel/Vibe-Skills☆ 3.7천2026년 10월 18일 업데이트
WikiPathways enrichment using clusterProfiler and rWikiPathways. Use when analyzing gene lists against community-curated open-source pathways. Performs over-representation analysis and GSEA for 30+ species.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
FreedomIntelligence/OpenClaw-Medical-Skills☆ 3.1천2026년 7월 21일 업데이트
Detect path traversal vulnerabilities in a codebase using a three-phase approach: recon (find file-loading sinks with dynamic paths), batched verify (trace user input and mitigations in parallel subagents, 3 sinks each), and merge (consolidate batch results). Requires sast/architecture.md (run sast-analysis first). Outputs findings to sast/pathtraversal-results.md. Use when asked to find path traversal, directory traversal, or file disclosure bugs.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
utkusen/sast-skills☆ 1.3천2026년 4월 8일 업데이트
PavedPath Code is the code-focused edition of PavedPath. It helps agents solve software engineering problems by finding proven implementation paths from GitHub repositories, issues, pull requests, discussions, code examples, release notes, and open-source evidence.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
Jia-Ethan/pavedpath-code☆ 4392026년 6월 30일 업데이트
GitHub 解封 — 账号封禁/限制/恢复的领域操作系统。覆盖:(a) GitHub 官方政策体系 (TOS / 可接受使用政策 / Trust & Safety 执行模式 / 公开申诉路径 / 受制裁地区解读);(b) 封号原因诊断学 (spam / abuse / 制裁误标 / 2FA 丢失 / ToS 违规 / 账号劫持误判 / ban evasion 等子类型 + 症状→原因映射 + 自我分诊压测);(c) 申诉实操 craft (写一封能让 T&S 快速判误伤的英文申诉信 + 升级阶梯 + 法务介入边界 + Don'ts);(d) 制裁与合规硬边界 (OFAC SDN 名单 / 哪些国家或地区真不可达 / VPN 误判路径 / 中国大陆不是美国制裁地区的反复重申);(e) 中国大陆开发者特别处境 (sanctioned region 误标 + SMS 验证不支持 +86/+852 + Gitee/GitLab/Codeberg/JihuLab 备用迁移 + 私有自托管 Gitea/Forgejo);(f) 真实案例库 (~30+ 公开案例分类拆解:误伤 / 真违规 / 制裁误标三类各自赔率与申诉成功路径)。伦理锚绝不软化:不教 ban evasion / 不教撒谎式申诉 / 真违规承认改进 / 丢 2FA 无恢复因子则诚实告知 / 中国制裁误标靠申诉不靠换 VPN / 申诉 6 个月窗口必算清 / 约 3% (业内估) 真违规恢复 vs 约 79% (业内估) 误伤申诉成功率分层标。 (GitHub Account Reinstatement — the domain operating system for GitHub (and analogous platform) account suspension, restriction, appeal, and recovery. Covers: (a) GitHub official policy architecture (TOS / Acceptable Use Policies / Trust & Safety enforcement patterns / public appeals pathways / sanctioned-region interpretation); (b) suspension-cause diagnostics (spam / abuse / sanctions mis-flag / 2FA loss / ToS violation / account hijack false-positive / ban evasion taxonomy + symptom→cause mapping + self-triage pressure test); (c) appeal craft (writing an English appeal letter that gets T&S to fast-track a false-positive ruling + escalation ladder + legal-engagement boundary + Don'ts); (d) sanctions and compliance hard boundaries (OFAC SDN list / which countries/regions are truly unreachable / VPN false-positive paths / China is NOT a US-sanctioned region — repeated emphasis); (e) mainland China developer special circumstances (sanctioned-region mis-flag + SMS verification does not support +86/+852 + Gitee/GitLab/Codeberg/JihuLab fallback migration + self-hosted Gitea/Forgejo); (f) real-case library (~30+ public cases with categorized analysis: false-positive / genuine violation / sanctions mis-flag, each with win-rate and appeal success path). Ethical anchors absolutely not softened: do NOT teach ban evasion (creating new accounts turns a temp ban into a permanent one — the single biggest mistake); do NOT teach social engineering or lying in appeals (misuse + actually confirms violation); genuine violations: admit + improve beats denial; lost 2FA + no recovery factor → do not pretend recovery is possible; China sanctioned-region mis-flag → fix via appeal, not repeated VPN switching; appeal form 6-month window must be counted carefully; historical 约 3% (业内估) genuine-violation recovery vs 约 79% (业内估) false-positive appeal success rate stratification must be honestly labeled. Anti-samples (explicitly describe harm, never endorse): developer permabanned for ban evasion / open-source team org-banned for personal attacks in public issues / cases where repeated VPN switching escalated risk-control severity.) Master OS — automated mastery of GitHub Account Reinstatement — the domain operating system for GitHub (and analogous platform) account suspension, restriction, appeal, and recovery. Covers: (a) GitHub official policy architecture (TOS / Acceptable Use Policies / Trust & Safety enforcement patterns / public appeals pathways / sanctioned-region interpretation); (b) suspension-cause diagnostics (spam / abuse / sanctions mis-flag / 2FA loss / ToS violation / account hijack false-positive / ban evasion taxonomy + symptom→cause mapping + self-triage pressure test); (c) appeal craft (writing an English appeal letter that gets T&S to fast-track a false-positive ruling + escalation ladder + legal-engagement boundary + Don'ts); (d) sanctions and compliance hard boundaries (OFAC SDN list / which countries/regions are truly unreachable / VPN false-positive paths / China is NOT a US-sanctioned region — repeated emphasis); (e) mainland China developer special circumstances (sanctioned-region mis-flag + SMS verification does not support +86/+852 + Gitee/GitLab/Codeberg/JihuLab fallback migration + self-hosted Gitea/Forgejo); (f) real-case library (~30+ public cases with categorized analysis: fa
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
swaylq/master-skill☆ 1622026년 9월 6일 업데이트
ANDREJ KARPATHY — SKILL COMPLETA v2.0 workflow skill. Use this skill when the user needs Agente que simula Andrej Karpathy — ex-Director of AI da Tesla, co-fundador da OpenAI, fundador da Eureka Labs, e o maior educador de deep learning do mundo and the operator should preserve the upstream workflow, copied support files, and provenance before merging or handing off.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
diegosouzapw/awesome-omni-skills☆ 1622026년 7월 8일 업데이트
Use this when reading from or writing to local files — including constructing file paths with pathlib, creating directories, choosing output locations, and using path utilities from src/analysis_project/paths.py.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
atsushi-green/ds-ai-coding-skills☆ 912026년 10월 4일 업데이트
Use on any core for first-run planning intake — Phase 0 runs the vendored BMAD-METHOD planning shelf, shared by every core, and Phase 1 (mining `04-prd.md` into intent records plus the Add-ons/sync-and-remote-entities decision) is full-stack-app's and pwa-app's shared procedure — identical mechanics, a different decision at step 5/8. Phase 0 also defines compressed intake, the path a user's explicit "just build it" choice takes on full-stack-app, pwa-app, authored, and copywriting cores: one batched round of questions in place of the shelf, writing a thinned archive at the same paths so Phase 1 (or, on copywriting, that core's own mining step), `ux-planner`, and the Re-entry pass all keep their documented source. Also use for the Re-entry pass, which mines new scope into additional intents without re-running the shelf, on any core with a module axis to add an intent to (full-stack-app, pwa-app, authored) — landing-page has none, so its own new-scope path runs through `hedgehog-landing-loop`'s Correction Protocol instead. Invoked by the `planner` agent, which decides the path; don't run standalone. landing-page runs this skill's Phase 0 on first run, then mines the same archive through `hedgehog-landing-loop`'s own planning-intake section, that core's counterpart to this skill's Phase 1. copywriting runs this skill's Phase 0 the same way (full or compressed), then mines the same archive through `hedgehog-copywriting-loop`'s own planning-intake section into a what/audience/register brief — no module axis, so its own new-scope path runs through that loop's Correction Protocol rather than the Re-entry pass below. An authored core runs this skill's Phase 0, then `hedgehog-core-design`, then this skill's Phase 1 mining against the designed layer sequence. A brownfield adoption (`hedgehog-adopt`) never runs this skill's shelf at all — the drivers BMAD elicits are already settled facts of a repo that already exists.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
skyf0xx/hedgehog☆ 462026년 10월 19일 업데이트
Recover from stale RFDB nodes that survive `commit_batch` cleanup despite having their `file` field listed in `changed_files`. Use when: (1) re-running an enricher/orchestrator step but old data with the same file field stays in the graph, (2) `commit_batch(changed_files=[X], ...)` reports success but a query later still returns nodes with `file = X`, (3) you re-pointed structural nodes (e.g., DIRECTORY/FILE) from a synthetic file path to real file paths and the old synthetic-path nodes won't go away, (4) graph-stream / find_by_type returns a mix of "stale" and "new" nodes for the same logical entity. Root cause: `handle_commit_batch` calls `engine.find_by_attr({file: X})` to enumerate nodes-to-delete, but that query path returns only a PARTIAL set after compaction (L1 segments and the file→nodes index can desync). Workaround: enumerate stale nodes via the TS rfdb client `queryNodes({file: X})` (different code path that finds all of them) and call `deleteNode(id)` per node, then re-commit the intended state. Related: rfdb-manifest-l1-carryforward (same L1 family).
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
Disentinel/grafema☆ 352026년 8월 24일 업데이트
Metabolomics pathway analysis — metabolite identification (HMDB, KEGG, ChEBI), pathway mapping (Reactome, KEGG, MetaCyc), disease associations, enzyme/gene linkage. Use for metabolite-to-pathway-to-disease connections, BridgeDb-based ID conversion, and integrating metabolomics with gene-level pathway analyses.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
huang-sh/DeepScience☆ 42026년 7월 15일 업데이트
KEGG-based disease-drug-variant network research. Connects diseases to causal genes, drugs to molecular targets, and variants to pathways using KEGG's editorially curated databases (KEGG Disease, Drug, Network, Variant, Pathway). Use for drug repurposing via shared pathways, mechanistic disease-gene-drug networks, and pathway-based target discovery. Distinguishes direct (binding) vs indirect (pathway co-membership) drug-target relationships.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
huang-sh/DeepScience☆ 42026년 7월 15일 업데이트
Agent fallback for CCSBot_UpdatePathMovement (auto-generated, category: func). Locate CCSBot::UpdatePathMovement in the CS2 server module via IDA Pro MCP and emit a fresh, minimal-unique artifact. The deterministic preprocessor could not resolve this symbol on the current gamever - your job is the re-sign. Trigger: CCSBot_UpdatePathMovement, CCSBot::UpdatePathMovement
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
mrc4tt/CS2_VibeSignatures☆ 32026년 10월 15일 업데이트
Agent fallback for CBaseEntity_GetChangeAccessorPathInfo_2 (auto-generated, category: vfunc). Locate CBaseEntity::GetChangeAccessorPathInfo_2 in the CS2 server module via IDA Pro MCP and emit a fresh, minimal-unique artifact. The deterministic preprocessor could not resolve this symbol on the current gamever - your job is the re-sign. Trigger: CBaseEntity_GetChangeAccessorPathInfo_2, CBaseEntity::GetChangeAccessorPathInfo_2
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
mrc4tt/CS2_VibeSignatures☆ 32026년 10월 15일 업데이트
Agent fallback for CBaseEntity_AddChangeAccessorPath (auto-generated, category: vfunc). Locate CBaseEntity::AddChangeAccessorPath in the CS2 server module via IDA Pro MCP and emit a fresh, minimal-unique artifact. The deterministic preprocessor could not resolve this symbol on the current gamever - your job is the re-sign. Trigger: CBaseEntity_AddChangeAccessorPath, CBaseEntity::AddChangeAccessorPath
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
mrc4tt/CS2_VibeSignatures☆ 32026년 10월 15일 업데이트
Guide a startup to set a single quantified traction goal and define the critical path of milestones to reach it. Use whenever a founder needs to prioritize activities, set growth goals, define milestones, decide what NOT to work on, plan quarterly/yearly execution, cascade goals to teams, escape the 'too many things to do' trap, or apply a binary on-path/off-path filter to proposed work. Activates on phrases like 'traction goal', 'critical path', 'what should we focus on', 'too many priorities', 'prioritization', 'milestones', 'quarterly planning', 'yearly goals', 'OKRs', 'where should I spend my time', 'what NOT to do', 'company planning', 'goal setting', 'DuckDuckGo', 'roadmap'.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
aAAaqwq/openclaw-team☆ 22026년 6월 18일 업데이트
Look up biomedical relationships in ARAX using explicit entity types and tightly bounded paths. Inspect direct links or paths through one intermediate entity, along with returned publications and source records, to identify candidates for further research.
한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.
- Checking recorded drug–gene relationships
- Exploring paths between a drug and a disease
- Inspecting publications and original data sources
K-Dense-AI/scientific-agent-skills☆ 5.3만2026년 10월 16일 업데이트
Compare how proxies and backend servers interpret HTTP requests in a CTF sandbox. Use paired requests and logs to pinpoint differences in paths, headers, or message boundaries, then document a minimal reproduction of unintended routing.
한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.
- Compare HTTP interpretation across proxies and backend servers
- Investigate path normalization and decoding differences
- Trace routing changes caused by ambiguous headers
zhaoxuya520/reverse-skill☆ 4.3만2026년 9월 22일 업데이트
Organize CTF investigations by mapping the supplied targets, tracing one minimal path, and selecting the relevant specialist workflow. Findings are grounded in observed behavior and reproducible evidence, with a clean baseline used for verification.
한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.
- Choosing an analysis path for a CTF challenge
- Tracing a minimal path through challenge infrastructure
- Packaging reproducible evidence for a solution
zhaoxuya520/reverse-skill☆ 4.3만2026년 9월 22일 업데이트
Add social-emotional learning—practicing emotional awareness, self-management, empathy, and collaboration—to subject lessons in OpenMAIC. It connects these goals to academic concepts through discussion, choices, feedback, retries, and reflection.
한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.
- Adding emotional check-ins to the start of a subject lesson
- Practicing empathy through discussion of different viewpoints
- Building feedback and retry paths into learning activities
THU-MAIC/OpenMAIC☆ 4.1만2026년 10월 19일 업데이트
Assess an authorized Active Directory environment by simulating attacks against credentials, permissions, and trust relationships. Use BloodHound and related testing tools to identify paths to administrator access, evaluate detection capabilities, and document findings with remediation recommendations.
한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.
- Assessing Active Directory security with written authorization
- Finding paths from ordinary users to administrator access
- Reviewing Kerberos and delegation settings
mukul975/Anthropic-Cybersecurity-Skills☆ 3.5만2026년 8월 31일 업데이트
Assess an internal network from the position of an intruder or malicious insider. Covers discovering systems, testing paths to other machines and higher privileges, demonstrating sensitive data access, and documenting findings with remediation recommendations.
한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.
- Assessing damage possible after a workstation compromise
- Reviewing Active Directory paths to higher privileges
- Testing internal network security controls
mukul975/Anthropic-Cybersecurity-Skills☆ 3.5만2026년 8월 31일 업데이트