On-demand procedures for the ComfyUI sidebar panel agent that are too long to sit in the system prompt. Read it when a task lands in one of these areas. subgraph boundary rails and blueprint reuse, merging or composing workflows across tabs, pinning your edits to one workflow, opening staged or downloaded workflow files, untangling Get/Set-bus and rgthree toggle-heavy graphs, authoring rgthree Fast Groups nodes, the LoRA Manager autocomplete-node limitation, the CivitAI browser flow, downloading model weights, reading hardware and runtime stats, Prompt Director audits, custom-node crash recovery, run-to-node render debugging, and multi-stage pipeline chaining. Each section is a lookup, not background reading. Reach for the one you need instead of guessing, and follow the tool's own description for parameter detail.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
artokun/comfyui-mcp☆ 8402026년 10월 19일 업데이트
Extend / continue a video temporally with Pusa 2.2 in ComfyUI. Temporal flowmatching (the flowmatch_pusa scheduler + WanVideoAddPusaNoise) on the WanVideoWrapper stack with WAN 2.2 T2V A14B (HIGH/LOW) models and the Pusa V1 LoRAs, conditioning on the loaded clip via WanVideoEncode so the existing motion carries into the continuation. Covers the kijai wanvideo_2_2_14B_Pusa_extension graph, model/LoRA slots + downloads, noise/length/scheduler settings, chaining multiple extensions, VRAM tiers, gotchas, and the extend→upscale handoff.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
artokun/comfyui-mcp☆ 8402026년 10월 19일 업데이트
Use when the user mentions Higgsfield Canvas, a node-based or node graph workspace, an infinite board/canvas, chaining generations into a pipeline, or wants to wire prompts → images → videos across models on one surface. Covers what Canvas is, the node categories, the seven models that run inside Canvas, the named canvas patterns (Simple Seedance, Extend Video, Image Edit, StoryBoard With Elements, Long Video fan-out), the build-free / generate-paid cost model, reusable templates, assets-as-nodes, and Shared Canvas live collaboration. Also trigger on 'Higgsfield ComfyUI alternative', 'node workflow', or 'connect nodes to build a scene/campaign'.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
OSideMedia/higgsfield-ai-prompt-skill☆ 7642026년 9월 27일 업데이트
Modern JavaScript (ES2022+) patterns for clean, maintainable code. Use when working with modern JavaScript features like optional chaining, nullish coalescing, or ESM.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
HoangNguyen0403/agent-skills-standard☆ 5782026년 10월 18일 업데이트
Use this skill when the user wants to build tool/scripts or achieve a task where using data from the Hugging Face API would help. This is especially useful when chaining or combining API calls or the task will be repeated/automated. This Skill creates a reusable script to fetch, enrich or process data.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
waybarrios/opencode-power-pack☆ 5412026년 10월 19일 업데이트
IDOR / BOLA hunting - two-account methodology, identifier discovery and UUID leak chaining, the trusted-identifier test, GraphQL node and nested-object IDOR, cross-tenant escalation, write and delete operations. Bounded ID sampling, never range sweeps. Wiki-first, FIND schema output. Trigger on IDOR, BOLA, broken access control, object level authorization, cross-tenant, "read another user's data", "swap the id", or any API path or parameter carrying a numeric ID, UUID, or account identifier.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
Encod3d-Sec/TORCH☆ 3332026년 9월 1일 업데이트
Designs event-driven architectures, webhook systems, API chaining flows, ETL pipelines, and integration patterns between services.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
lingxling/awesome-skills-cn☆ 3122026년 10월 7일 업데이트
Fix false-positive Cloud Run deploys where `gcloud builds submit --tag` silently fails but the follow-up `gcloud run services update --image :latest` succeeds against a stale image, producing a confident "Deploying... Done" message with pre-fix code still live. Use when: (1) gcloud builds submit prints "ERROR: (gcloud.builds.submit) Invalid value for [source]: Dockerfile required when specifying --tag" but the shell scrolls past it, (2) code changes verified locally aren't visible in production after a deploy that printed "revision ... has been deployed and is serving 100 percent of traffic", (3) Chaining `gcloud builds submit` and `gcloud run services update` in a single copy-paste block, (4) Using the mutable `:latest` tag for Cloud Run deploys.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
divinevideo/divine-mobile☆ 2662026년 10월 19일 업데이트
Claude Code Bash tool patterns with hooks, automation, git workflows. Use for PreToolUse hooks, command chaining, CLI orchestration, custom commands, or encountering bash permissions, command failures, security guards, hook configurations.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
secondsky/claude-skills☆ 2312026년 10월 19일 업데이트
cat Skill: Derivational Pipe Chaining
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
plurigrid/asi☆ 702026년 7월 10일 업데이트
Design, review, and improve agent workflows & agent using SSOT, SRP, Fail Fast principles. Supports Prompt Chaining, Parallelization, Orchestrator-Workers patterns.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
diegosouzapw/awesome-omni-skill☆ 642026년 3월 2일 업데이트
Hunt full Account Takeover (ATO) by chaining lower-severity findings — IDOR-to-email-disclosure, password-reset-token-theft, OAuth-redirect-uri abuse, response-manipulation, cookie scope, CRLF in Set-Cookie, race-condition on signup. Use when the user wants to escalate small findings to ATO or thinks an ATO path exists.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
0xGhostCAT/claude-ai-cyber-security-skills☆ 442026년 6월 3일 업데이트
Focuses on pandas-specific rules for data manipulation, including method chaining, data selection using loc/iloc, and groupby operations.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
oimiragieo/agent-studio☆ 422026년 7월 14일 업데이트
Discover, parse, and call external HTTP APIs at runtime using OpenAPI specs, tool templates, and iterative chaining. Adapted from UTCP (Universal Tool Calling Protocol) patterns for Node.js and Claude Code agents.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
oimiragieo/agent-studio☆ 422026년 7월 14일 업데이트
Use when writing Cortex-M NVIC ISRs, configuring priorities, handling HardFault, tail-chaining, or measuring interrupt latency. Not for the vector table itself: use baremetal-startup.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
OutlineDriven/odin-claude-plugin☆ 372026년 9월 29일 업데이트
Use when the user wants to run SQL - especially analytical SQL - on local files (parquet/csv/json), URLs, S3 paths, or remote databases (Postgres, MySQL, MongoDB, ClickHouse Cloud, Iceberg, Delta Lake) without setting up a server. Provides chDB - embedded ClickHouse SQL in Python with 1000+ functions, Session for stateful multi-step pipelines, parametrized queries, and cross-source joins via `s3()`, `mysql()`, `postgresql()`, `iceberg()`, `deltaLake()`, `remoteSecure()` table functions. TRIGGER when: user wants SQL on parquet/csv/files or across remote analytical sources; uses ClickHouse SQL features (window functions, windowFunnel, geoToH3, JSON path ops, Session, parametrized queries); imports `chdb` or calls `chdb.query()`. SKIP this skill for pandas-style DataFrame method-chaining (use chdb-datastore instead) or ClickHouse server administration.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
cline/plugins☆ 362026년 10월 16일 업데이트
Deep OAuth 2.0 / OpenID Connect security assessment. Covers the full attack surface: redirect_uri validation bypass (path traversal, open redirect chains, subdomain confusion, URL parsing tricks, parameter pollution, response mode switching), missing/broken state parameter CSRF, PKCE downgrade and absent-challenge attacks, implicit grant token leakage (Referer, browser history, XSS fragment theft), authorization code injection, scope escalation, client confusion attacks, mutable-claims account takeover (iss+sub confusion, email-keyed identity merging), pre-account takeover via unverified registration, OpenID Connect dynamic client registration SSRF (logo_uri, jwks_uri, sector_identifier_uri, request_uri), nonce replay, ID token validation failures, Device Code phishing flow, mobile custom URI scheme hijacking, refresh token persistence, token introspection enumeration, consent screen clickjacking, host header injection, and cross-IdP mix-up attacks. Uses KOAuth, jwt_tool, nuclei oauth templates, and manual http(action="request", ...) payloads. Every technique includes actual request payloads and verification logic. Chains from /pentester or /api-security when OAuth endpoints are discovered. Chains into /web-exploit for open redirect, XSS, and SSRF chaining. Chains into /post-exploit when full account takeover is achieved. Chains into /credential-audit when access tokens or refresh tokens are recovered.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
ShulkwiSEC/bb-huge☆ 232026년 7월 11일 업데이트
Use when hunting Client-Side Path Traversal (CSPT) vulnerabilities where attacker- controlled input is unsafely concatenated into the path component of a JavaScript fetch() or XHR request. Trigger on: "CSPT", "client-side path traversal", "fetch path traversal", "XHR path injection", "fetch concatenation", "../ in fetch", "user input in fetch URL", "path component injection", fetch redirect chaining, CSPT to XSS, open redirect fetch, "JavaScript fetch user input", DOM fetch injection.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
ShulkwiSEC/bb-huge☆ 232026년 7월 11일 업데이트
Identify and exploit Cross-Site Request Forgery (CSRF) vulnerabilities by bypassing weak or flawed anti-CSRF token implementations, SameSite cookie attributes, and Origin/Referer headers. Use this skill when testing state-changing web application endpoints for session riding attacks. Covers token removal, token fixation, multipart manipulation, and chaining with XSS for complete bypass.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
ShulkwiSEC/bb-huge☆ 232026년 7월 11일 업데이트
Exploit Server-Side Request Forgery (SSRF) vulnerabilities to extract AWS IAM credentials from the Instance Metadata Service version 2 (IMDSv2). This skill details how to bypass the token requirement of IMDSv2 by chaining HTTP verbs (PUT then GET) if the SSRF vulnerability allows full control over the request headers and methods.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
ShulkwiSEC/bb-huge☆ 232026년 7월 11일 업데이트
Test AI agent systems for tool abuse, unauthorized actions, privilege escalation through tool chaining, and safety bypass via agentic workflows. Use this skill when assessing autonomous AI agents that use tool-calling (function calling, plugins, actions) to interact with external systems. Covers multi-step attack chains, implicit trust exploitation, and capability boundary testing for AI agents.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
ShulkwiSEC/bb-huge☆ 232026년 7월 11일 업데이트
Audit deployment readiness across CI/CD, containers, monitoring, IaC, secrets, CDN, and DNS — score each area 0-100, identify critical gaps, and optionally auto-fix by chaining deploy sub-skills
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
tinh2/skills-hub-registry☆ 202026년 9월 5일 업데이트
Analyze a single FASTA file (nucleotide or protein), compute sequence-level metrics (GC, ORFs, MW, pI, GRAVY, secondary-structure fractions) with Biopython, and write a Markdown report plus structured JSON for downstream chaining.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
lilinji/GeneTind-Life-Skills☆ 152026년 8월 21일 업데이트
Designs event-driven architectures, webhook systems, API chaining flows, ETL pipelines, and integration patterns between services.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
ranbot-ai/awesome-skills☆ 72026년 10월 18일 업데이트