Review source code for MCP, a protocol connecting AI applications to tools. Check authentication, input validation, unsafe execution, and other security risks, then report findings with file and line references and separate manual follow-ups.
한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.
- Reviewing an MCP server before release
- Checking authentication and validation on a network-exposed server
- Auditing tool code for unsafe execution paths
github/awesome-copilot☆ 4만2026년 10월 20일 업데이트
Add a message type to CARLA's native ROS 2 interface. Create its C++ data structure, serialization code for transmission, type identity hash, registration, and tests, with Docker-based hash calculation and build checks.
한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.
- Adding a standard ROS 2 message type missing from CARLA
- Defining a custom carla_msgs message
- Investigating type-hash warnings
carla-simulator/carla☆ 1.5만2026년 10월 20일 업데이트
Review code changes and files for bugs, security risks, performance problems, design issues, and test coverage. Receive a structured report with prioritized findings, concrete improvement examples, positive feedback, and an overall review verdict.
한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.
- Reviewing a pull request
- Auditing code quality and security
- Finding refactoring opportunities
Jeffallan/claude-skills☆ 1.2만2026년 10월 17일 업데이트
Review code or changes for exposed secrets, injection risks, weak encryption, and missing permission checks. Produce a structured report with severity, location, recommendations, and confidence, with a separate reviewer checking findings for false positives.
한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.
- Reviewing a module for security issues
- Checking changes for exposed secrets
- Preparing a vulnerability report with evidence
omnigent-ai/omnigent☆ 1.1만2026년 10월 19일 업데이트
Run a quick first review of code changes with six specialist agents working in parallel. They check logic, input and output, shared state, resources, missing behavior, and API completeness, then combine duplicate findings into a report ranked by confidence.
한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.
- Running a quick first review of a patch
- Screening diffs to prioritize further investigation
- Checking for missing cleanup and handlers
apache/cassandra☆ 1만2026년 10월 17일 업데이트
Write Apache Cassandra distributed tests that simulate multiple nodes within one JVM, the Java runtime. The guide covers cluster setup, queries, node restarts, message dropping for failure scenarios, and troubleshooting problems caused by isolated class loading.
한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.
- Writing read and write tests across multiple nodes
- Testing timeouts by dropping messages between nodes
- Verifying node replacement and restarts
apache/cassandra☆ 1만2026년 10월 17일 업데이트
Review selected files for bugs by reading full source code, callers, and related implementations. Apply detailed checklists and investigate suspected issues, then report evidence, confidence levels, and suggested fixes.
한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.
- Review selected files in a critical code change
- Investigate concerns raised by an initial review
- Check complex state transitions and object lifecycles
apache/cassandra☆ 1만2026년 10월 17일 업데이트
Guides adding metadata, extra information attached to data elements, to Apache Beam's WindowedValue. Maps the changes needed across serialization, storage, processing, and runner interfaces so new fields remain available during pipeline execution.
한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.
- Adding trace context or drain flags to WindowedValue
- Checking metadata preservation through Windmill storage
- Reviewing propagation through grouping and timers
apache/beam☆ 8.7천2026년 10월 20일 업데이트
Assess security weaknesses in CI/CD systems that automate software builds and delivery. Covering GitHub Actions, Jenkins, GitLab CI, and Azure DevOps, the skill examines unsafe inputs, excessive permissions, exposed credentials, and tampered build outputs, alongside detection and defensive controls.
한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.
- Reviewing workflow inputs and execution triggers
- Assessing pipeline permissions and credential exposure
- Checking build artifact handoffs for tampering risks
SnailSploit/Claude-Red☆ 7.6천2026년 10월 13일 업데이트
Adapt a C/C++ vulnerability pipeline to another language, target, or detection method. The workflow gathers requirements, proposes file changes for approval, updates the implementation, and validates it against a test target containing known bugs.
한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.
- Adapt the pipeline for web application vulnerabilities
- Plan a port for smart contract auditing
- Change detection signals and report criteria
anthropics/defending-code-reference-harness☆ 7.6천2026년 8월 7일 업데이트
Move existing .NET 9 projects to .NET 10 by updating project settings and dependencies, fixing build errors, and reviewing behavior changes. Includes CI and Docker updates, followed by builds, tests, and security checks.
한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.
- Upgrading an existing .NET 9 project to .NET 10
- Fixing build errors and warnings after an SDK upgrade
- Reviewing ASP.NET Core and EF Core behavior changes
dotnet/skills☆ 5.7천2026년 10월 20일 업데이트
Create, modify, debug, and review Windows Forms applications while preserving their editable layouts in Visual Studio Designer. Covers resizing, data binding, asynchronous UI behavior, and checks that distinguish successful builds from actual screen and designer verification.
한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.
- Fixing forms that fail to open in Visual Studio Designer
- Resolving clipped controls after resizing or DPI changes
- Repairing bound lists that do not refresh
dotnet/skills☆ 5.7천2026년 10월 20일 업데이트
Refactor C#/.NET code through renaming, extraction, consolidation, and other structural changes while preserving behavior. Check compatibility beyond code references, including public APIs and serialized names, then validate with builds and relevant tests.
한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.
- Rename C# members and update their references
- Extract shared logic from duplicate code
- Reorganize code while preserving public API compatibility
dotnet/skills☆ 5.7천2026년 10월 20일 업데이트
Review C#/.NET code for about 50 inefficient API usage patterns across asynchronous work, memory, strings, collections, and I/O. Get exact occurrence counts, prioritized findings, and concrete fixes, with attention to frequently executed code.
한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.
- Reviewing frequently executed C#/.NET code
- Finding unnecessary memory allocations
- Checking known performance pitfalls before release
dotnet/skills☆ 5.7천2026년 10월 20일 업데이트
Explore web application vulnerabilities by class, including access control failures, XSS, and SQL injection. Use root causes, testing checklists, and examples to plan investigations and distinguish observable security impact from an initial warning sign.
한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.
- Study root causes of common web vulnerabilities
- Plan checks for cross-user access control failures
- Investigate upload and authentication weaknesses
awarexone/Agentic-Bug-Hunter☆ 5.4천2026년 10월 10일 업데이트
Hunt Laravel specific vulnerabilities — Debug mode leakage (APP_DEBUG=true exposes full stack trace + env vars), Laravel Telescope/Horizon dashboard unauthorized access, Ignition RCE (CVE-2021-3129), Signed URL manipulation, Queue Worker abuse, mass assignment via Eloquent, deserialization via cookies, .env file exposure. Use when target runs Laravel (PHP) — detected via X-Powered-By, Laravel session cookies, or /storage/ paths.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
elementalsouls/Claude-BugHunter☆ 5.2천2026년 10월 19일 업데이트
Hunt ASP.NET-specific surface — ViewState deserialization (signed-only vs encrypted), machineKey recovery, dual-parser MAC-bypass anti-pattern, request-validator bypass, trace.axd/elmah.axd disclosure, load-balanced ViewState cross-node failures, SafeControl enumeration via reflection, customErrors mode=Off stack-trace leaks, classic Webforms .aspx/.asmx/.svc surface. Built for ASP.NET Webforms + WCF + SharePoint farms.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
elementalsouls/Claude-BugHunter☆ 5.2천2026년 10월 19일 업데이트
Golang struct and interface design patterns — composition, embedding, type assertions, type switches, interface segregation, dependency injection via interfaces, struct field tags, and pointer vs value receivers. Use this skill when designing Go types, defining or implementing interfaces, embedding structs or interfaces, writing type assertions or type switches, adding struct field tags for JSON/YAML/DB serialization, or choosing between pointer and value receivers. Also use when the user asks about "accept interfaces, return structs", compile-time interface checks, or composing small interfaces into larger ones.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
samber/cc-skills-golang☆ 3.5천2026년 10월 1일 업데이트
KQL language expertise for writing correct, efficient Kusto Query Language queries. Covers syntax gotchas, join patterns, dynamic types, datetime pitfalls, regex patterns, serialization, memory management, result-size discipline, and advanced functions (geo, vector, graph). USE THIS SKILL whenever writing, debugging, or reviewing KQL queries — even simple ones — because the gotchas section prevents the most common errors that waste tool calls and cause expensive retry cascades. Trigger on: KQL, Kusto, ADX, Azure Data Explorer, Fabric Real-Time Intelligence, EventHouse, Log Analytics, log analysis, data exploration, time series, anomaly detection, summarize, where clause, join, extend, project, let statement, parse operator, extract function, any mention of pipe-forward query syntax.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
microsoft/skills☆ 3.1천2026년 10월 18일 업데이트
AWS SDK for JavaScript v3 development patterns. Use when writing JavaScript or TypeScript code that uses AWS services via @aws-sdk/* packages (aws-sdk-js-v3), or when asked about schemas, runtime validation, serialization, or code generation in the context of the JS/TS AWS SDK.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
aws/agent-toolkit-for-aws☆ 2.9천2026년 10월 19일 업데이트
Java "Ghost Bits" / Cast Attack playbook (Black Hat Asia 2026). Use when attacking Java services where 16-bit char is silently narrowed to 8-bit byte to bypass WAF/IDS for SQL injection, deserialization RCE, file upload (Webshell), path traversal, CRLF injection, request smuggling, and SMTP injection. Affects Tomcat, Spring, Jetty, Undertow, Vert.x, Jackson, Fastjson, Apache Commons BCEL, Apache HttpClient, Angus Mail, JDK HttpServer, Lettuce, Jodd, XMLWriter and re-enables many "patched" CVEs through WAF bypass.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
yaklang/hack-skills☆ 2.5천2026년 9월 13일 업데이트
Use when developing WordPress (Gutenberg) blocks: block.json metadata, register_block_type(_from_metadata), attributes/serialization, supports, dynamic rendering (render.php/render_callback), deprecations/migrations, viewScript vs viewScriptModule, and @wordpress/scripts/@wordpress/create-block build and test workflows.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
WordPress/agent-skills☆ 2.3천2026년 10월 19일 업데이트
Land a change everywhere the same fact is stated — enumerating the full surface inventory (landing copy, docs, machine-readable summaries, changelog badges repeated across every page, sitemap, README, descriptions embedded in code, and untyped frontend consumers of typed responses), generating a surface instead of restating it, drift tests where you cannot generate, never hand-maintaining a copy of a surface another codebase owns, shipping a paired PR when you change a format a different codebase decodes, and keeping overloaded product words apart. Use when adding or renaming a user-facing feature, editing product/marketing copy or docs, renaming a serialized response field, changing a serialization or share-link format, wiring one repo's output into another's checks, or reviewing a PR that touched only one place a fact appears.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
kajisho5/ffmpeg-skill☆ 2천2026년 10월 18일 업데이트
Resolve conflicts and merges when several branches are open against one repo at the same time — the hotspot files every change must touch (registry manifests, a single version field, shared tool config, one aggregated test module, tracked build output), union-vs-recompute-vs-rebuild as three different correct resolutions, generated artifacts that must never be merged, non-deterministic serialization that makes every branch conflict, renumbered identifiers that git cannot show you, and why a clean auto-merge is not a passing test. Use when rebasing or merging a long-lived branch, resolving conflict markers, reviewing a merge commit, deciding what a repo should commit vs generate, or setting up a repo that will take parallel contributions.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
kajisho5/ffmpeg-skill☆ 2천2026년 10월 18일 업데이트