This skill should be used when the user asks to "plan a feature", "create PRD", "interview me about requirements", "define stories", "write a spec", "break down feature into tasks", "create implementation plan", "help me scope this feature", "what questions should I answer", or discusses feature planning. Covers the PRD interview process, spec structure, story atomization, and 4-phase workflow from idea to Dex tasks.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
SomtoUgeh/somto-dev-toolkit☆ 22026년 8월 26일 업데이트
Creates and manages Biome GritQL custom lint rules to enforce coding patterns. Use when creating linter rules, enforcing code conventions, preventing anti-patterns, or when the user mentions Biome, GritQL, custom lint rules, or AST-based linting.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
SomtoUgeh/somto-dev-toolkit☆ 22026년 8월 26일 업데이트
This skill should be used when the user asks to "improve test coverage", "add unit tests", "TDD", "test this module", "write tests for", "increase coverage", "/ut command", or discusses unit testing strategies. Covers the unit test loop workflow, React Testing Library best practices, query priorities, and coverage improvement strategies.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
SomtoUgeh/somto-dev-toolkit☆ 22026년 8월 26일 업데이트
Zigbee, Thread, and Matter mesh-protocol attack methodology — IEEE 802.15.4 sniffing with TI CC2531 / CC2540 / Sonoff Zigbee Dongle E, KillerBee toolkit, Touchlink commissioning abuse with the well-known transport key, replay/injection attacks, Zigbee Cluster Library command abuse for door locks and bulbs, Thread network credential theft, Matter commissioning chain analysis, and 6LoWPAN/IPv6 routing exploitation. Use when targeting smart-home or commercial mesh deployments, Zigbee-based door locks, lighting, or sensor networks.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
ajtazer/heckit☆ 22026년 10월 7일 업데이트
Phishing campaign execution methodology for authorized red team engagements. Covers end-to-end campaign lifecycle: infrastructure provisioning (GoPhish, SMTP relay configuration, domain acquisition and aging, SPF/DKIM/DMARC alignment), payload delivery vectors (Office macro weaponization, HTA droppers, ISO/IMG container abuse, LNK shortcut hijacking, OneNote embedded payloads, HTML smuggling), email authentication bypass techniques (SPF softfail exploitation, DKIM replay attacks, display name spoofing, homoglyph and cousin domain registration), credential harvesting with MFA bypass (EvilGinx2 transparent proxy, Modlishka session relay, pixel-perfect HTML cloning), spear phishing pretext development informed by OSINT, email security gateway evasion, QR code phishing (quishing), and callback phishing for initial access. Integrates with GoPhish for campaign management, EvilGinx2 for adversary-in-the-middle credential interception, King Phisher for template design, and the Social Engineering Toolkit for paylo...
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
ajtazer/heckit☆ 22026년 10월 7일 업데이트
Command and Control framework deployment, configuration, and operational tradecraft for red team engagements. Covers Cobalt Strike (malleable C2 profiles, Beacon types HTTP/HTTPS/DNS/SMB, Beacon Object Files for in-memory execution, sleep and jitter tuning, named pipe pivoting), Sliver (implant generation across mTLS/WireGuard/DNS transport, operator multiplayer mode, armory extensions), Mythic (agent ecosystem with Apollo/Poseidon/Medusa, C2 profile configuration, translation containers), Havoc (Demon agent with sleep obfuscation via Ekko/Zilean, indirect syscalls, dotnet inline execution), Metasploit (msfvenom payload generation, multi/handler staging, Meterpreter post-exploitation modules), redirector architecture using Apache mod_rewrite and Nginx, domain fronting through CDN providers, DNS-based C2 for restrictive network egress, and TLS certificate management for infrastructure OPSEC. Tools: Cobalt Strike, Sliver, Mythic, Havoc, Metasploit Framework. Aligns to MITRE ATT&CK T1071 (Application Layer P...
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
ajtazer/heckit☆ 22026년 10월 7일 업데이트
Kubernetes cluster attack techniques covering the full attack lifecycle from initial foothold in a pod to cluster-wide compromise. Covers service account token theft and impersonation, RBAC misconfiguration exploitation including wildcard permissions and privilege escalation via role binding, direct etcd access for secret extraction, kubelet API abuse on port 10250 and read-only port 10255, pod escape via hostPID hostNetwork and hostPath volume mounts, Kubernetes secrets enumeration and decoding, admission controller bypass techniques, network policy bypass and lateral movement, cloud metadata service access from pods for credential theft on AWS EKS GCP GKE and Azure AKS, CRD and operator abuse for persistence, and node compromise via DaemonSet deployment. Tools include kubectl, kube-hunter, peirates, kubeaudit, kdigger, kubeletctl. Maps to MITRE ATT&CK T1609 Container Administration Command, T1610 Deploy Container, T1613 Container and Resource Discovery. Use this skill when assessing Kubernetes clusters,...
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
ajtazer/heckit☆ 22026년 10월 7일 업데이트
Use when building CLI tools, implementing argument parsing, or adding interactive prompts. Invoke for CLI design, argument parsing, interactive prompts, progress indicators, shell completions.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
danstrem2/clawdbot-skill-master-pack☆ 22026년 2월 1일 업데이트
Web scraping, search, crawling, and page interaction via the Firecrawl CLI. Use this skill whenever the user wants to search the web, find articles, research a topic, look something up online, scrape a webpage, grab content from a URL, extract data from a website, crawl documentation, download a site, or interact with pages that need clicks or logins. Also use when they say "fetch this page", "pull the content from", "get the page at https://", or reference scraping external websites. This provides real-time web search with full page content extraction and interact capabilities — beyond what Claude can do natively with built-in tools. Do NOT trigger for local file operations, git commands, deployments, or code editing tasks.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
Scoheart/agentskills☆ 22026년 8월 4일 업데이트
小红书图片策划与自动生图。将内容拆解为系列卡通风格信息图提示词,通过 Chrome DevTools MCP 自动化调用 Gemini web app 生成图片,并自动收集到本地临时目录。当用户提到"小红书"、"信息图"、"rednote"、"生图"、"图片策划"、"小红书配图"、"Gemini生图"、"nano banana"、或将内容制作成小红书图片时触发此技能。包含完整的提示词生成、浏览器自动化和图片收集全流程。
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
Scoheart/agentskills☆ 22026년 8월 4일 업데이트
Add automatic CI/CD environment detection using ci-info package. Generic pattern for any CLI tool that needs to adapt behavior (prompts, output, integrations) based on whether it's running in CI.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
krafteq/infraglue☆ 22026년 7월 8일 업데이트
InfraGlue (ig) — CLI tool for managing Infrastructure as Code (IaC) monorepos. Orchestrates Terraform and Pulumi workspaces with dependency resolution, output injection, environment management, drift detection, and state reconciliation. Use this skill when working with ig.yaml configs, ig CLI commands, or multi-workspace Terraform/Pulumi infrastructure projects. Keywords: terraform, pulumi, infrastructure, IaC, monorepo, workspace, ig, infraglue, drift, plan, apply, destroy, import, export, refresh, environment.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
krafteq/infraglue☆ 22026년 7월 8일 업데이트
Add --json flag to CLI commands for machine-readable output on stdout. Generic pattern for any CLI tool, enabling piping to jq and CI/CD integration while keeping human-readable output on stderr.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
krafteq/infraglue☆ 22026년 7월 8일 업데이트
Add Gmail integration to NanoClaw. Can be configured as a tool (agent reads/sends emails when triggered from WhatsApp) or as a full channel (emails can trigger the agent, schedule tasks, and receive replies). Guides through GCP OAuth setup and implements the integration.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
nanocoai/nanoclaw-gmail☆ 22026년 4월 3일 업데이트