Operational arsenal for authorized external red-team and bug-bounty recon. Concrete probes, wordlists, regexes, dorks, curl one-liners for: subdomain enum, GraphQL/Swagger/REST discovery, identity fabric (Entra/Okta/ADFS/Google/SAML/M365 deep — Teams/SharePoint/OneDrive), cloud bucket enum (S3/GCS/Azure), CDN/WAF bypass, origin discovery, vendor fingerprinting (Citrix/F5/Pulse/Fortinet/PaloAlto/Cisco/VMware), CI/CD exposure, 48-pattern secret-scan catalog (AWS/GCP/GitHub/Stripe/Slack/Anthropic/OpenAI/Atlassian/DataDog/npm/PyPI), Postman workspaces, breach correlation (HudsonRock/HIBP/DeHashed/IntelX), TLS/JA3 audit, certificate transparency, JS endpoint extraction, package registry leaks, mobile/APK recon, sat imagery, sector-specific recon (healthcare DICOM, finance SWIFT, ICS/SCADA Modbus/BACnet). Detail content in 15 modular reference files, loaded on demand. Use for any authorized recon: scoping, asset discovery, attack-path mapping, secret triage, severity scoring.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
elementalsouls/Claude-BugHunter☆ 5.2천2026년 10월 18일 업데이트
Multi-AI requirements scoping using available external providers (Double Diamond Define phase). Priority triggers: octo define, octo scope, co-define, co-scope. DO NOT use for implementation, research, review/validation, or built-in commands.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
nyldn/claude-octopus☆ 4.3천2026년 10월 19일 업데이트
Write an AI-optimized PRD using multi-AI orchestration — use when scoping a new feature or product
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
nyldn/claude-octopus☆ 4.3천2026년 10월 19일 업데이트
Use this skill when the user wants to invoke the read-only doca_caps CLI to ask what DOCA sees on this host — listing DOCA devices and PCIe addresses, listing representor devices, asking which DOCA libraries are available on the current OS, checking per-device per-library capabilities, scoping output to a specific PCIe address, or capturing a side-effect-free capability snapshot for debug or install smoke-test. Trigger even when the user does not explicitly mention "doca_caps" or "capabilities print tool" — typical implicit phrasings include "what does DOCA actually see on this box", "is my BlueField PF visible to DOCA", "is Flow available on my RHEL host", "enumerate VF representors for pf0", "doca_caps: command not found", or "empty output for RDMA, is the tool broken". Refuse and route elsewhere for DOCA installation (doca-setup owns it; never walk the steps), library-internal capability matrices (Flow pipe creation, RDMA verbs features), streaming telemetry / DTS, or modifying the shipped binary.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
NVIDIA/skills☆ 3.6천2026년 10월 18일 업데이트
[omh] Folder cleanup, renames, or deletions: policy overlay for local file tasks - add path scoping and destructive-action gates after preferring native file tools for ordinary list, search, organize, copy, move, and rename actions. Use when the user says: workspace-file-operator, workspace file operator, file operator, file operation, file operations, filesystem task, filesystem operation, file system task.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
rlaope/oh-my-hermes☆ 3.4천2026년 10월 19일 업데이트
Use acpx as a headless ACP CLI for agent-to-agent communication, including installed-agent inspection, prompt/exec/sessions workflows, session scoping, queueing, permissions, output formats, system-prompt overrides, and multi-agent flows authored with defineFlow/decision/decisionEdge.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
openclaw/acpx☆ 3.4천2026년 10월 19일 업데이트
The rules the reference agents enforce in code for third-party content, writes, grounding, identity, and memory, each with its module, plus two adversarial-eval rules. Load when handling untrusted tool results, guarding a write tool, or scoping what an agent remembers.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
anthropics/commerce-agents☆ 3.3천2026년 10월 2일 업데이트
Guide for implementing continual learning in AI coding agents — hooks, memory scoping, reflection patterns. Use when setting up learning infrastructure for agents.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
microsoft/skills☆ 3.1천2026년 10월 18일 업데이트
Use when preparing your agent for production — IAM scoping, inbound auth (JWT, SigV4), secrets management, cold start optimization, session lifecycle, rate limiting, input validation, and quota guidance. Triggers on: "production checklist", "harden agent", "production ready", "secure agent", "inbound auth", "going live", "cold start optimization", "session lifecycle", "StopRuntimeSession", "quota", "throttling", "maxVms", "rate limit", "security audit of outbound API calls", "gateway target audit for production", "restrict who can call", "lock down endpoint", "only our app can call". Not for Cedar tool-restriction policies — use agents-connect. Not for quality measurement — use agents-optimize. Not for outbound credential storage or API key wiring — use agents-connect. Not for A2A agent-to-agent auth — use agents-build. Cold start observation and diagnosis (not optimization) routes to agents-debug.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
aws/agent-toolkit-for-aws☆ 2.9천2026년 10월 19일 업데이트
Org-grade attack-surface mapping: given a company's legal identity, discover its ENTIRE owned internet footprint — corporate family -> owned domains -> owned netblocks/ASN -> live assets — with attribution discipline, not just DNS breadth. The org-first attribution pyramid (legal entity -> LEI/registration -> corporate family -> owned domains -> owned netblocks/ASN -> live assets). Corporate-identity resolution via the GLEIF LEI API (legal name -> LEI, exact-LEI direct-children expansion, downward-only depth-capped BFS, NEVER a name re-resolution), SEC-EDGAR full-text search + Exhibit-21 subsidiary entity names, OpenCorporates entity corroboration, Wikidata SPARQL corporate graph (P856/P355/P749/P1830). Domain attribution via reverse-WHOIS (WhoisXML preview-then-purchase quota guard, SecurityTrails associated-domains — both paid), crt.sh O= certificate-transparency organization pivot (keyless), infrastructure correlation (shared NS/MX/SaaS-TXT, netblock membership, reverse-DNS PTR), and the independent-evidence combiner (1-prod(1-w_i), rule of three, OwnerTier NONE/WEAK/MODERATE/STRONG/CONFIRMED) — discover-only `related:` candidates are NEVER auto-scanned. Netblock/ASN attribution via org-first RIR queries (ARIN Whois-RWS org-handle search, RIPE DB organisation + inverse-org search) that recover 'dark netblocks' with no DNS link to the seed, ASN discovery (RIPEstat + BGPView union), the HYPERSCALER-SCOPE GUARD (never attribute a whole AWS/GCP/Azure/Cloudflare announced range to a tenant — keep only the seed-containing block, tag shared_hosting_cdn), and org-identity-seeded internet-scan-index queries (Shodan/Censys/ZoomEye/FOFA/BinaryEdge org: filters + an always-on keyless crt.sh fallback). Promote-to-scan triage ranks forgotten discover-only netblocks by remote-access exposure (gateway-vendor/KEV/control-plane/datastore port scoring) into an operator queue. Attribution confidence rubric + anti-patterns (namesake grafting via GLEIF name re-resolution, single-signal ownership, hyperscaler over-attribution, privacy-WHOIS pivot poisoning, RIR org-name collisions). Passive/keyless-first OSINT only — every paid-key dependency is enrichment on top of a keyless core, never a hard requirement. Use when mapping an organization's full corporate-family internet footprint, resolving a legal entity to its LEI/subsidiaries, discovering domains/netblocks/ASNs an org owns beyond its one seed domain, auditing M&A/shadow-IT sprawl, or scoping an engagement that starts from a company NAME rather than a domain.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
elementalsouls/Claude-OSINT☆ 2.8천2026년 10월 10일 업데이트
Handles a dispute from the first sign of it — recognizing when preservation obligations attach, issuing and scoping a legal hold, suspending automatic deletion across every system that holds relevant material, preserving privilege, managing outside counsel and cost, and evaluating settlement against the real cost of continuing. Use this to respond to a claim or demand letter, issue a hold, work out which systems the hold has to reach, or decide whether to fight.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
cbrock84/headcount☆ 2.1천2026년 10월 19일 업데이트
Orchestrates a systematic review and meta-analysis workflow following PRISMA 2020 guidelines, from protocol development through multi-database search, screening, data extraction, and evidence synthesis. Use when conducting evidence-based reviews, meta-analyses, or scoping revi...
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
aipoch/medical-research-skills☆ 2천2026년 9월 17일 업데이트
Plan and ship a game under a jam deadline: lock scope to the clock, schedule the hours, cut features, and submit on time. Use for a game jam (Ludum Dare, GMTK Jam, Global Game Jam), a 48-hour or weekend build, or scoping and submitting a jam entry.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
gamedev-skills/awesome-gamedev-agent-skills☆ 1.6천2026년 10월 9일 업데이트
Experiment design reference for problem-class framing, Minimum Viable Experiment coaching, hypothesis formation, vetting and red flags, and experiment readiness. Use when translating a stated business outcome into candidate data-science problem classes, or when framing, vetting, scoping, or evaluating an experiment of any kind, including data feasibility, architecture, LLM, performance, use-case, UX, prototyping, and hardware experiments.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
microsoft/hve-core☆ 1.5천2026년 10월 19일 업데이트
Design evaluation datasets and supporting documentation for AI systems and agents, covering the scoping interview, difficulty distribution, dataset contract, sample review, and metric and tooling selection. Use when building or reviewing an evaluation set for a conversational agent, assistant, or retrieval-grounded AI system.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
microsoft/hve-core☆ 1.5천2026년 10월 19일 업데이트
Kotlin Multiplatform structure and language traps: module splits, expect/actual, Koin and ViewModel scoping, layers, version catalogs, erased overloads, Char and string-resource formatting limits. Use when shaping modules or DI, when a format specifier renders verbatim, or code misbehaves on one platform.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
maxrave-dev/kotlin-footguns☆ 1.5천2026년 10월 18일 업데이트
Help users accelerate their product development cycles by implementing high-intensity rituals, ruthless scoping, and technical guardrails that allow teams to ship faster without sacrificing quality.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
RefoundAI/lenny-skills☆ 1.4천2026년 7월 17일 업데이트
Shape a request into one end-to-end slice with observable behavior; review write scope and reversible decisions. Use when: planning, breaking down or scoping a change.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
hashgraph-online/awesome-codex-plugins☆ 1.3천2026년 10월 19일 업데이트
INVOKE THIS SKILL when your LangGraph needs to persist state, remember conversations, travel through history, or configure subgraph checkpointer scoping. Covers checkpointers, thread_id, time travel, Store, and subgraph persistence modes.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
langchain-ai/langchain-skills☆ 1.3천2026년 10월 9일 업데이트
Use when planning the end-to-end ACM MM (ACM Multimedia) campaign calendar — from thematic-area scoping and track choice, through the April OpenReview abstract/paper/supplement chain, the June anonymous rebuttal, the July decision, the August camera-ready, and the November presentation in Rio, with the right skill invoked at each stage.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
brycewang-stanford/Awesome-Journal-Skills☆ 1.3천2026년 9월 27일 업데이트
Use when revising an ACL paper for computational-linguistics house style, covering task-first framing, linguistic examples tied to quantitative error analysis, scoping language claims to tested languages, LLM-era claim discipline, anonymous self-reference, Limitations prose, and compressing into the 8-page or 4-page ACL format.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
brycewang-stanford/Awesome-Journal-Skills☆ 1.3천2026년 9월 27일 업데이트
Use when scoping or sanity-checking a research question for an Academy of Management Journal (AMJ) manuscript — fit, theory-drivenness, and feasibility. Decides whether the idea can earn a theoretical contribution; it does not build the theory itself (use amj-theory-development) or position the literature (amj-literature-positioning).
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
brycewang-stanford/Awesome-Journal-Skills☆ 1.3천2026년 9월 27일 업데이트
Set up or update a project in the vault: the four-stage folder pipeline, a project-scoped CLAUDE.md with one goal, and links to the concept pages it depends on. Use this skill when the user starts something new they will work on over time, says "create a project", "set up a folder for X", or asks to define the goal and structure of ongoing work. Do NOT use for one-off tasks, for wiki pages about a topic, or for scoping an existing project down to work in it.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
undefined-ui/second-brain-os☆ 1.1천2026년 10월 14일 업데이트
Configure and validate CCAM webhook targets across supported chat, incident, automation, and generic providers. Use when listing provider requirements, creating or updating a target, scoping it to alert rules, sending a test notification, reviewing delivery history, or deleting a target.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
hoangsonww/Claude-Code-Agent-Monitor☆ 1.1천2026년 10월 19일 업데이트