Review page source, browser JavaScript, and Git history for exposed API keys, passwords, and tokens. Identify potential leaks and guide fixes, including moving secrets to the server, replacing compromised credentials, and adding checks before commits.
한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.
- Checking browser code for exposed API keys
- Finding credentials committed to Git
- Moving secret-dependent API calls to the server
thedaviddias/Front-End-Checklist☆ 7.5만2026년 10월 6일 업데이트
Investigate signs of Mimikatz credential theft using command lines, access to Windows authentication memory, file indicators, and known modules in memory. Correlate endpoint and security logs to assess suspicious alerts, document evidence, and recommend response actions.
한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.
- Investigating alerts about Windows authentication memory access
- Hunting for signs of credential theft
- Assessing compromise scope during incident response
mukul975/Anthropic-Cybersecurity-Skills☆ 3.5만2026년 8월 31일 업데이트
Investigate reported phishing emails by checking sender details, links, and attachments. Identify affected recipients and exposed login credentials, guide removal of malicious messages across the organization, and secure compromised accounts with password resets and session revocation.
한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.
- Investigating a suspicious email reported by an employee
- Assessing exposure after a link click or credential entry
- Removing phishing messages across organizational mailboxes
mukul975/Anthropic-Cybersecurity-Skills☆ 3.5만2026년 8월 31일 업데이트
Prepare for salary negotiations by researching market pay, comparing salary, bonuses, equity, and benefits, and defining a justified counteroffer. Create tailored emails and call scripts, with alternative requests and responses when an employer pushes back.
한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.
- Researching market pay before negotiating an offer
- Comparing offers including bonuses, equity, and benefits
- Drafting a counteroffer email or call script
davila7/claude-code-templates☆ 3.3만2026년 10월 21일 업데이트
Start NanoClaw’s initial setup by directing the user to its terminal script. The script handles dependencies, the container image, credentials, the service, the first agent, and optional channel connections, with Claude-assisted recovery if an error interrupts setup.
한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.
- Install NanoClaw for the first time
- Set up credentials, the service, and the first agent
- Connect an optional channel during initial setup
nanocoai/nanoclaw☆ 3.1만2026년 10월 21일 업데이트
Review contracts against your organization’s negotiation guidelines, flag departures from preferred terms, and explain business implications. Produce proposed clause revisions, fallback positions, and negotiation priorities, with findings intended for review by qualified legal professionals.
한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.
- Reviewing vendor or customer agreements
- Checking clauses against internal negotiation guidelines
- Preparing proposed revisions and fallback terms
anthropics/knowledge-work-plugins☆ 3.1만2026년 10월 20일 업데이트
Plan Table v9 state ownership across the table, framework state, and external atoms that hold values. Covers initial values, update callbacks, and reset behavior, helping coordinate individual state sections without conflicting owners.
한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.
- Choosing where to manage pagination state
- Connecting external state to update callbacks
- Reviewing external atom ownership
TanStack/table☆ 2.9만2026년 10월 13일 업데이트
Guides authentication and access permissions for Google Cloud users and applications. It helps choose credentials for local development, production services, or external clouds, with guidance on short-lived credentials and avoiding downloaded service account keys.
한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.
- Set up credentials for local Python development
- Configure Cloud Run access to Cloud SQL
- Connect workloads on AWS or Azure to Google Cloud
google/skills☆ 2.1만2026년 10월 21일 업데이트
Diagnose failed model requests from OpenShell sandboxes to hosted APIs or local servers such as Ollama and vLLM. Check provider attachment, access rules, credentials, network layout, and client settings to identify the narrowest configuration change needed.
한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.
- Diagnose failed requests to hosted model APIs
- Troubleshoot connections to Ollama or LM Studio
- Investigate credential and endpoint mismatch errors
NVIDIA/OpenShell☆ 1.7만2026년 10월 21일 업데이트
Prepare a Python environment for Mixpanel analysis by installing required libraries and checking credentials and connectivity. Use it for first-time setup, missing dependencies, or guidance on service account and OAuth sign-in options.
한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.
- Set up a new environment for Mixpanel analysis
- Install missing Python analysis libraries
- Configure service account or OAuth credentials
openai/plugins☆ 7.5천2026년 10월 8일 업데이트
Work across multiple n8n instances through one MCP connection, the link used by an agent to call tools. Specify each operation’s target, verify where credentials will be stored, and recover when requests reach the wrong environment.
한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.
- Operate on production and staging with explicit targets
- Verify the destination before saving credentials
- Investigate unexpected NOT_FOUND errors
czlonkowski/n8n-skills☆ 6.5천2026년 10월 16일 업데이트
Assess what discovered cloud credentials allow across AWS, Azure, GCP, and Kubernetes. The skill guides identity checks, permission review, and paths to higher privileges, then helps document impact, activity, and cleanup within the engagement's agreed scope.
한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.
- Assess permissions granted by discovered cloud credentials
- Review role trust and access across cloud accounts
- Check permissions assigned to anonymous Cognito identities
elementalsouls/Claude-BugHunter☆ 5.2천2026년 10월 20일 업데이트
Python library for working with geospatial vector data including shapefiles, GeoJSON, and GeoPackage files. Use when working with geographic data for spatial analysis, geometric operations, coordinate transformations, spatial joins, overlay operations, choropleth mapping, or any task involving reading/writing/analyzing vector geographic data. Supports PostGIS databases, interactive maps, and integration with matplotlib/folium/cartopy. Use for tasks like buffer analysis, spatial joins between datasets, dissolving boundaries, clipping data, calculating areas/distances, reprojecting coordinate systems, creating maps, or converting between spatial file formats.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
foryourhealth111-pixel/Vibe-Skills☆ 3.7천2026년 10월 20일 업데이트
Gets AWS credentials for CLI/SDK access via `aws login`. Activates when a developer needs to authenticate to AWS for local development, when an AWS operation fails due to missing or expired credentials, or when someone asks about setting up AWS access. Triggers: "set up AWS", "configure AWS", "aws login", "get credentials", "authenticate", "session expired", "token expired", "no credentials", "AccessDeniedException" with no configured credentials.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
aws/agent-toolkit-for-aws☆ 2.9천2026년 10월 20일 업데이트
Organization-grade identity-fabric mapping: tenant/federation fingerprinting and the pre-auth user-ENUMERATION oracle methodology — enumeration and fingerprint only, never credential submission. Covers domain-to-tenant resolution (Microsoft getuserrealm.srf Managed/Federated namespace check, Entra OIDC metadata tenant-GUID extraction, Autodiscover v2), keyless Microsoft tenant-federation mapping (GetFederationInformation SOAP -> sibling-domain discovery, discover-only ROE, FEDERATED_WITH provenance edge held out of attack-path pivoting), Okta org-slug derivation + OIDC fingerprint + governed custom-domain enumeration, ADFS passive/active fingerprint + version inference, Google Workspace MX-correlated detection, generic OIDC (Auth0/Keycloak/Ping Identity/OneLogin/Duo) discovery, SAML metadata (5 paths), Azure AD Seamless-SSO Negotiate-challenge detection, Microsoft Defender for Identity (MDI) sensor-API presence check, the user-enumeration oracle methodology for Microsoft GetCredentialType (IfExistsResult semantics: exists / doesn't-exist / exists-in-federated-tenant / throttled) and Okta /api/v1/authn (errorCode differential), Medium-detectability discipline with a hard 20-candidate-per-tenant cap and admin/role interest-based ranking, and name x confirmed-email-pattern login-candidate synthesis that FAILS CLOSED with zero output when no org pattern is confirmed. Grounded directly in a production ASM implementation's sso_idp.py, tenant_recon.py, and core/email_patterns.py modules. Deepens — does not duplicate — offensive-osint skill's Identity Fabric endpoint reference with the tenant-federation MAP, the oracle WORKFLOW, and the candidate-SYNTHESIS methodology that reference lacks. Use when fingerprinting an organization's identity provider, mapping its tenant/federation boundary, running an authorized pre-auth user-enumeration pass, or synthesizing login candidates from harvested names to feed that oracle — never for password spray, credential submission, or auth bypass.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
elementalsouls/Claude-OSINT☆ 2.8천2026년 10월 10일 업데이트
Institutional-quality equity research initiation reports for A-share companies. Covers company analysis, financial modeling, valuation, chart preparation, and final report assembly. Adapted from the original initiating-coverage skill for Chinese market conventions, CAS accounting, and AkShare data sources. Triggers on "A股首次覆盖", "首次评级", "initiate coverage China", "initiate on [company]", "A股研究报告", or "start research on [company]".
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
jwangkun/claude-for-financial-services-cn☆ 8402026년 9월 14일 업데이트
SpatialDE is a method to find spatially variable genes (SVG) from spatial transcriptomics data. This package provides wrappers to use the Python SpatialDE library in R, using reticulate and basilisk.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
bioMate-AI/biomate-bioconductor-kb☆ 7972026년 6월 21일 업데이트
Expert knowledge for Azure Confidential Ledger development including troubleshooting, decision making, security, integrations & coding patterns, and deployment. Use when configuring ACL auth/attestation, integrating with Blob/Cosmos, using MST payloads, or deploying via ARM/Terraform, and other Azure Confidential Ledger related development tasks. Not for Azure Confidential Computing (use azure-confidential-computing), Azure Key Vault (use azure-key-vault), Azure Dedicated HSM (use azure-dedicated-hsm), Azure Payment Hsm (use azure-payment-hsm).
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
MicrosoftDocs/Agent-Skills☆ 7872026년 10월 19일 업데이트
薪资谈判教练。模拟前 FAANG 招聘官 + 薪酬策略师,把「拿到 offer → 签字」这一步拆成 6 个动作:Offer 诊断(Base / RSU / Sign-on / Bonus 每项标 LOW/MED/HIGH leverage)→ 谈判杠杆图(我的力量 / 招聘官的力量 / 弱点)→ 策略排序(Base → RSU → Sign-on → Bonus,按 context 调整)→ 脚本生成(电话 / 邮件 / 招聘官回话模拟)→ Counter 模拟("这是最好的了" / "预算固定" / "会考虑其他候选人" 三种硬回答)→ 最终建议(要什么 / 别推什么 / 何时停)。三步:贴 offer → 说 context(有没有竞争 offer / deadline / 级别 / 风险偏好 / 最看重什么)→ 自动生成并打开一份 HTML Negotiation Playbook。关键词:salary negotiation, offer negotiation, comp negotiation, RSU, sign-on, base salary, counter offer, competing offer, TC, total comp, 薪资谈判, offer 谈判, 谈薪, 反 offer, 加薪, 谈 package, levels.fyi, 招聘官话术, recruiter script。
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
yanliudesign/offer-toolkit-skill☆ 5392026년 9월 29일 업데이트
Geospatial vector analysis extending pandas. Read/write spatial formats (Shapefile, GeoJSON, GeoPackage, Parquet, PostGIS), CRS handling, geometric ops (buffer, simplify, centroid, affine), spatial analysis (joins, overlays, dissolve, clipping, distance), visualization (choropleth, interactive maps, basemaps). Use for spatial joins, overlays, CRS transforms, area/distance, maps.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
jaechang-hits/SciAgent-Skills☆ 3812026년 10월 16일 업데이트
Expert sales negotiation strategist for B2B deal-making. Use when planning negotiation strategy, handling discount requests, closing deals, navigating procurement, or structuring win-win agreements. Covers anchoring, framing, BATNA development, multi-party negotiations, and contract terms. Use for enterprise deals, pricing discussions, and high-stakes negotiations.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
ncklrs/startup-os-skills☆ 522026년 2월 27일 업데이트
Authentication and credential security assessment. Tests password brute-force, credential stuffing, password spraying, default credential testing, credential harvesting, lockout analysis, MFA bypass, OAuth/OIDC abuse, session token entropy, Kerberos attacks, and intelligent wordlist generation. Uses hydra, john, ncrack, medusa, cewl, crunch, netexec, impacket, kerbrute, and nuclei default-login templates. Covers OWASP A07:2021 Identification and Authentication Failures.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
ShulkwiSEC/bb-huge☆ 232026년 7월 11일 업데이트
Process, analyze, and visualize geospatial data at scale. Handles drone imagery, GPS tracks, GeoJSON optimization, coordinate transformations, and tile generation. Use for mapping apps, drone data processing, location-based services. Activate on "geospatial", "GIS", "PostGIS", "GeoJSON", "map tiles", "coordinate systems". NOT for simple address validation, basic distance calculations, or static map embeds.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
curiositech/windags-skills☆ 162026년 10월 19일 업데이트
Implement iOS authentication patterns including Sign in with Apple (ASAuthorizationAppleIDProvider, ASAuthorizationController, ASAuthorizationAppleIDCredential), credential state checking, identity token validation, ASWebAuthenticationSession for OAuth and third-party auth flows, ASAuthorizationPasswordProvider for AutoFill credential suggestions, and biometric authentication with LAContext. Use when implementing Sign in with Apple, handling Apple ID credentials, building OAuth login flows, integrating Password AutoFill, checking credential revocation state, or validating identity tokens server-side.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
JordanCoin/ios-skills-collection☆ 62026년 9월 10일 업데이트