Audit GraphQL APIs for exposed schemas, missing access checks, injection risks, and weak query limits. Combine automated tools with targeted checks to investigate data exposure, unauthorized operations, and resource exhaustion, then document findings with reproducible evidence.
한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.
- Discover GraphQL schemas and hidden fields
- Check object and field access permissions
- Test batching, query depth, and complexity limits
awarexone/Agentic-Bug-Hunter☆ 5.4천2026년 10월 10일 업데이트
Prepare Bugcrowd submissions with accurate vulnerability categories, evidence-based severity requests, and explanations of program scope. Structure references between related reports, document QA testing conditions, and draft responses when a finding is downgraded or considered out of scope.
한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.
- Choose a suitable Bugcrowd vulnerability category
- Explain a severity request using demonstrated impact
- Respond to out-of-scope decisions
elementalsouls/Claude-BugHunter☆ 5.2천2026년 10월 19일 업데이트
Extract characters from a novel or short story and build profiles with appearance and voice prompts. Deliver JSON, Markdown, and an interactive HTML report, including layout instructions for character reference sheets without generating images.
한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.
- Organizing a novel’s characters and aliases
- Preparing appearance and voice prompts for adaptation
- Writing layout instructions for character reference sheets
eternityspring/shuohao-skills☆ 4.9천2026년 10월 15일 업데이트
Cross-model second opinion from Google Gemini — a different AI reviewing the same changes, with deep Google ecosystem knowledge. Three modes: review (pass/fail gate for Google Ads campaigns, SEO metadata, or code), challenge (adversarial stress-test that tries to break your changes), and consult (open Q&A with Gemini on Google Ads strategy, SEO best practices, or implementation questions). Use when the user says "gemini review", "ask gemini", "gemini challenge", "second opinion from gemini", "consult gemini", "stress test with gemini", "what would gemini say", "cross-model review", or "get another opinion". Voice aliases: "gem", "gemini check". Especially useful for Google Ads changes, SEO metadata updates, campaign structure decisions, keyword strategies, and bid/budget changes — Gemini has native Google ecosystem knowledge that complements Claude's analysis.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
nowork-studio/notfair-plugin☆ 4천2026년 10월 20일 업데이트
Compatibility alias for OpenAI platform documentation guidance. Delegate to the canonical local `openai-docs` payload while preserving route compatibility.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
foryourhealth111-pixel/Vibe-Skills☆ 3.7천2026년 10월 20일 업데이트
Compatibility alias for the descriptive PyMC skill name. Delegate to the canonical local `pymc` payload while preserving route and README compatibility.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
foryourhealth111-pixel/Vibe-Skills☆ 3.7천2026년 10월 20일 업데이트
Automate Segment tasks via Rube MCP (Composio): track events, identify users, manage groups, page views, aliases, batch operations. Always search tools first for current schemas.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
davepoon/buildwithclaude☆ 3.7천2026년 10월 19일 업데이트
Golang concurrency design — goroutine lifecycle and leak prevention, channels and `select`, channel ownership and direction, `sync.Mutex`/`RWMutex`/`sync.Map`/`sync.Once`/atomics, `errgroup`, `singleflight`, worker pools, and fan-out/fan-in pipelines. Use when writing or reviewing concurrent Go code, when choosing between channels and mutexes, when protecting a shared map or counter, or when a goroutine has no clear exit. Not for defensive coding unrelated to concurrency such as nil panics, slice aliasing, or numeric overflow (→ See `samber/cc-skills-golang@golang-safety` skill), and not for debugging a specific hung, crashing, or racing program after the fact (→ See `samber/cc-skills-golang@golang-troubleshooting` skill).
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
samber/cc-skills-golang☆ 3.5천2026년 10월 1일 업데이트
Security best practices and vulnerability prevention for Golang — injection (SQL, command, XSS), cryptography, path traversal, SSRF and HTTP security headers, cookies, secrets management, memory safety, PII in logs, STRIDE/DREAD threat modeling, plus `gosec` SAST, race detection, and fuzz testing. Apply when writing, reviewing, or auditing Go code for security, or when touching crypto, file or network I/O, secrets, user input, or authentication. Not for non-exploitable defensive bugs such as nil panics or slice aliasing (→ See `samber/cc-skills-golang@golang-safety` skill), dependency vulnerability scanning with govulncheck (→ See `samber/cc-skills-golang@golang-dependency-management` skill), or wiring security scanners into CI pipelines (→ See `samber/cc-skills-golang@golang-continuous-integration` skill).
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
samber/cc-skills-golang☆ 3.5천2026년 10월 1일 업데이트
Defensive Golang coding against accidental bugs — nil panics, typed-nil interfaces, `append` backing-array aliasing, silent int64-to-int32 truncation, float `==` comparison, `defer` inside loops, defensive copies of slices and maps, and usable zero values. Use when a Go program panics on a nil map write or nil pointer dereference, when reviewing code for nil-safety, numeric conversion overflow, or resource lifecycle, or when designing a type whose zero value must be safe. Not for designing concurrent access with goroutines, channels, or sync primitives (→ See `samber/cc-skills-golang@golang-concurrency` skill), not for exploitable vulnerabilities such as injection, weak crypto, or leaked secrets (→ See `samber/cc-skills-golang@golang-security` skill), and not for debugging an already-failing program (→ See `samber/cc-skills-golang@golang-troubleshooting` skill).
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
samber/cc-skills-golang☆ 3.5천2026년 10월 1일 업데이트
[omh] CRM pipeline or sales forecast to review: turn a supplied CRM export or pipeline snapshot into an evidence-bound pipeline health, forecast, and follow-up review. Aliases: pipeline-review, forecast-review, deal-review. Use when the user says: sales-pipeline-review, sales pipeline review, pipeline review, pipeline health, pipeline coverage, deal review, deal health, sales forecast review.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
rlaope/oh-my-hermes☆ 3.5천2026년 10월 20일 업데이트
[omh] Accepted plan awaiting implementation: split it into disjoint parallel lanes with per-lane acceptance criteria, verification commands, and owners; prevents two lanes editing the same file. Aliases: ulw. Use when the user says: ultrawork, parallel work, parallel implementation, parallel then integrate, high throughput, coding team, coordinated workers, finish until done.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
rlaope/oh-my-hermes☆ 3.5천2026년 10월 20일 업데이트
[omh] Buzz community agent setup or relay trouble: connect and operate Hermes as a native Buzz community agent, deliver local media with verified relay receipts, or diagnose a self-hosted Buzz relay without inventing transport evidence. Aliases: omh-buzz. Use when the user says: connect Hermes to Buzz, Buzz community agent, Buzz gateway setup, Buzz media attachment, Buzz relay self-hosting, Buzz connection diagnostics, 버즈 커뮤니티 연결, Buzz 메시지 첨부.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
rlaope/oh-my-hermes☆ 3.5천2026년 10월 20일 업데이트
Compatibility alias for Loopy. Use only when an existing installation or older instruction explicitly invokes loop-library; use Loopy for new installations and requests. Provides the same discovery, recommendation, audit, repair, adaptation, guided crafting, bounded execution, run debrief, project loop saving, and publication-preparation workflows.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
Forward-Future/loopy☆ 3.2천2026년 9월 11일 업데이트
Configures Amazon Route 53 to route traffic to a CloudFront distribution using a custom domain. Use when setting up DNS alias records, alternate domain names (CNAMEs), ACM certificates for HTTPS, and IPv6 support for CloudFront.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
aws/agent-toolkit-for-aws☆ 2.9천2026년 10월 20일 업데이트
Policy-safe relationship rankings, commitments, aliases, person profiles, and topic research. Always use Minutes' bounded native CLI surfaces; never build or read a durable graph cache.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
silverstein/minutes☆ 1.6천2026년 10월 20일 업데이트
Sets up and maintains isolated Claude Code CLI profiles to run Kimi, MiniMax, DeepSeek, GLM, StepFun or Anthropic in separate terminal windows. Use for multi-provider setup, switching models, csk/csd/csg aliases, CLAUDE_CONFIG_DIR, or ~/.claude-profiles. Owns profile-drift troubleshooting (missing skills/hooks, symlink drift, settings drift) and context-window setup ([1m] marker vs CLAUDE_CODE_MAX_CONTEXT_TOKENS).
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
daymade/claude-code-skills☆ 1.5천2026년 10월 20일 업데이트
Use Claude Code as an independent `claude -p` subagent when the user explicitly asks for Claude, wants a second-agent opinion from Claude, or asks to delegate a well-scoped task to Claude. Supports selecting `--model` and thinking/effort level with defaults of the current `opus` alias and `high`.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
dzhng/skills☆ 1.4천2026년 10월 20일 업데이트
Compatibility alias for the original ScrapeCreators social scraping skill. Use scrapecreators-api for current endpoint guidance and the task-specific Brand Growth research skills for finished analysis.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
gooseworks-ai/goose-skills☆ 1.3천2026년 10월 20일 업데이트
Generates, normalizes, and converts bedGraph signal tracks (4-column chrom/start/end/value, 0-based half-open) with bedtools genomecov, deepTools bamCoverage/bamCompare/bigwigCompare, bedtools unionbedg, and UCSC bedGraphToBigWig. Covers why a raw coverage bedGraph is not comparable across samples until normalized, the CPM/RPKM/BPM/RPGC normalization menu and the conserved-total assumption that makes them wrong under a global perturbation, the strict sorted-non-overlapping-chrom.sizes bedGraphToBigWig contract that silently corrupts a bigWig, effective-genome-size selection, and bin-size aliasing. Use when building or normalizing a coverage/signal track from a BAM, comparing tracks across samples or conditions, converting bedGraph to a browser-ready bigWig, or diagnosing a track that looks plausible but reports wrong heights.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
GPTomics/bioSkills☆ 1.2천2026년 8월 15일 업데이트
Assigns pathogen lineages (SARS-CoV-2 Pangolin UShER mode; Nextclade clade + QC; pango-designation alias resolution) and tracks variant frequencies over time using Nextstrain (Augur + Auspice), wastewater deconvolution (Freyja, COJAC, alcov, lineagespot), lineage-fitness modelling (multinomial logistic), and recombinant detection (3SEQ, RDP4, Bolotie). Covers Pangolin pangolin-data and Nextclade dataset version pinning (mandatory; lineage-defining mutations change with dataset), Freyja barcode forward-only date constraint, ARTIC primer scheme churn (V3/V4/V4.1/V5.3.2/Midnight) with dropout regions, and recombinant X-prefix designation lag. Use when assigning Pango lineages and Nextclade clades to viral consensus sequences, building Nextstrain Augur surveillance pipelines, deconvolving wastewater into lineage frequencies with Freyja, tracking lineage frequencies over time, handling ARTIC primer dropouts, or running surveillance for SARS-CoV-2/influenza/Mpox/RSV/H5N1/measles.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
GPTomics/bioSkills☆ 1.2천2026년 8월 15일 업데이트
Maps between gene identifier systems (Ensembl, Entrez, HGNC symbol, UniProt, RefSeq, MANE) using AnnotationDbi, biomaRt, mygene, pyensembl, and Ensembl REST. Encodes Ensembl version stripping with GENCODE _PAR_Y preservation, the Ziemann 2016 Excel autocorrect debacle and Bruford 2020 HGNC renames (SEPT*->SEPTIN*, MARCH*->MARCHF*, MARC*->MTARC*, DEC1->DELEC1), OCT4/POU5F1 alias resolution, biomaRt archive endpoints for release pinning, the `filters` (plural) gotcha, MANE Select for clinical reporting, cross-species orthology via Ensembl Compara / OMA / OrthoDB, and tx2gene construction for tximport. Use when converting gene IDs across systems, handling renamed symbols, building tx2gene, pinning to a specific Ensembl release for reproducibility, or mapping cross-species orthologs.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
GPTomics/bioSkills☆ 1.2천2026년 8월 15일 업데이트
Analyze AMS waveform data using Mixed-Signal Blockset utilities: phase noise measurement, clock jitter, anti-aliased resampling, timing measurements, lock time, INL/DNL, ADC/DAC calibration, HSpice import. Use when analyzing time-domain voltage from PLL/VCO/clock simulations, measuring phase noise from variable-step solver output, computing jitter, or resampling non-uniform data.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
matlab/matlab-agentic-toolkit☆ 1.2천2026년 10월 14일 업데이트
Rename a page safely: update the file, fix every inbound wikilink, add the old name as an alias, and log it. Use this skill whenever a page needs a different canonical title, the user says "rename X to Y", asks to fix an inconsistent title, or after a lint run flags naming problems. Do NOT use for merging two pages, for moving a page between folders without a name change, or for renaming files outside the wiki.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
undefined-ui/second-brain-os☆ 1.1천2026년 10월 14일 업데이트