Investigate cloud configuration weaknesses across AWS, GCP, and Azure, including public storage, exposed services, and leaked credentials. Find candidates in public information and JavaScript, then verify data access and permissions to establish practical impact.
한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.
- Checking public access to S3, GCS, and Azure Blob storage
- Reviewing exposed serverless and managed services
- Assessing CloudWatch RUM guest role permissions
elementalsouls/Claude-BugHunter☆ 5.2천2026년 10월 19일 업데이트
推特中文圈 AI 自媒体博主 (推特(X) 中文圈 AI 自媒体博主 (从业者视角) — 在 X/推特 用中文做 AI 内容的自媒体博主,重点是**怎么写推文/thread、怎么制作内容**。覆盖: (a) 选题 — AI 模型发布解读 / prompt 技巧 / AI 工具实测 / AI 出海与独立开发(build in public) / 英文一手编译翻译 / 信息差 / AI 资讯快讯 / 深度长推; (b) 文案与内容结构(核心) — 单条推(开头钩子/信息密度/短句断行/配图截图/数据图)、长推与 thread(首条钩子/编号/逻辑链/结尾关注 CTA)、引用锐评(quote tweet)、排版可读性、配图(ray.so/carbon 代码图/产品截图/对比图); (c) 内容制作工作流 — 找信息源(英文一手/arXiv/官方/Reddit/HN)→选题→编译总结加洞察→写推/thread→配图→发布→互动维护; (d) AI 工具用于内容生产 — 英文一手编译总结(GPT/Claude/Kimi)、配图(ray.so/carbon/截图美化)、thread 工具(Typefully/Hypefury)、翻译、排程分析; (e) 平台机制与涨粉 — X 算法时间线(转评赞/互动权重/外链降权)、蹭热点借势、互动与回复、build in public 涨粉、英文区搬运到中文区的信息差红利; (f) 变现(次要) — 广告 / 知识星球 / 社群 / 付费课程 / 咨询 / 导流。学派分歧: 编译搬运(英文一手翻译) vs 原创洞察、快讯资讯 vs 深度长推、锐评玩梗 vs 严肃干货、build in public vs 纯内容、全 AI 自动发 vs 人工精选。代表生态(宝玉/歸藏/向阳乔木/AI 进化论/小互/Gorden Sun 等)。不含: 英文 AI Twitter 圈(聚焦中文圈)、通用 X 增长营销、其他平台、AI 工具技术原理。) Master OS — automated mastery of 推特(X) 中文圈 AI 自媒体博主 (从业者视角) — 在 X/推特 用中文做 AI 内容的自媒体博主,重点是**怎么写推文/thread、怎么制作内容**。覆盖: (a) 选题 — AI 模型发布解读 / prompt 技巧 / AI 工具实测 / AI 出海与独立开发(build in public) / 英文一手编译翻译 / 信息差 / AI 资讯快讯 / 深度长推; (b) 文案与内容结构(核心) — 单条推(开头钩子/信息密度/短句断行/配图截图/数据图)、长推与 thread(首条钩子/编号/逻辑链/结尾关注 CTA)、引用锐评(quote tweet)、排版可读性、配图(ray.so/carbon 代码图/产品截图/对比图); (c) 内容制作工作流 — 找信息源(英文一手/arXiv/官方/Reddit/HN)→选题→编译总结加洞察→写推/thread→配图→发布→互动维护; (d) AI 工具用于内容生产 — 英文一手编译总结(GPT/Claude/Kimi)、配图(ray.so/carbon/截图美化)、thread 工具(Typefully/Hypefury)、翻译、排程分析; (e) 平台机制与涨粉 — X 算法时间线(转评赞/互动权重/外链降权)、蹭热点借势、互动与回复、build in public 涨粉、英文区搬运到中文区的信息差红利; (f) 变现(次要) — 广告 / 知识星球 / 社群 / 付费课程 / 咨询 / 导流。学派分歧: 编译搬运(英文一手翻译) vs 原创洞察、快讯资讯 vs 深度长推、锐评玩梗 vs 严肃干货、build in public vs 纯内容、全 AI 自动发 vs 人工精选。代表生态(宝玉/歸藏/向阳乔木/AI 进化论/小互/Gorden Sun 等)。不含: 英文 AI Twitter 圈(聚焦中文圈)、通用 X 增长营销、其他平台、AI 工具技术原理。: top builders' mental models, tool stack, current workflows, jargon, and where to keep up. Trigger this skill when the user works on 推特(X) 中文圈 AI 自媒体博主 (从业者视角) — 在 X/推特 用中文做 AI 内容的自媒体博主,重点是**怎么写推文/thread、怎么制作内容**。覆盖: (a) 选题 — AI 模型发布解读 / prompt 技巧 / AI 工具实测 / AI 出海与独立开发(build in public) / 英文一手编译翻译 / 信息差 / AI 资讯快讯 / 深度长推; (b) 文案与内容结构(核心) — 单条推(开头钩子/信息密度/短句断行/配图截图/数据图)、长推与 thread(首条钩子/编号/逻辑链/结尾关注 CTA)、引用锐评(quote tweet)、排版可读性、配图(ray.so/carbon 代码图/产品截图/对比图); (c) 内容制作工作流 — 找信息源(英文一手/arXiv/官方/Reddit/HN)→选题→编译总结加洞察→写推/thread→配图→发布→互动维护; (d) AI 工具用于内容生产 — 英文一手编译总结(GPT/Claude/Kimi)、配图(ray.so/carbon/截图美化)、thread 工具(Typefully/Hypefury)、翻译、排程分析; (e) 平台机制与涨粉 — X 算法时间线(转评赞/互动权重/外链降权)、蹭热点借势、互动与回复、build in public 涨粉、英文区搬运到中文区的信息差红利; (f) 变现(次要) — 广告 / 知识星球 / 社群 / 付费课程 / 咨询 / 导流。学派分歧: 编译搬运(英文一手翻译) vs 原创洞察、快讯资讯 vs 深度长推、锐评玩梗 vs 严肃干货、build in public vs 纯内容、全 AI 自动发 vs 人工精选。代表生态(宝玉/歸藏/向阳乔木/AI 进化论/小互/Gorden Sun 等)。不含: 英文 AI Twitter 圈(聚焦中文圈)、通用 X 增长营销、其他平台、AI 工具技术原理。 problems and wants industry-grade thinking, tool selection, or workflow guidance. 触发词:「推特 ai 博主」「推特中文 ai」「x ai 自媒体」「推特 thread」「推特爆款推文」
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
swaylq/master-skill☆ 1622026년 9월 6일 업데이트
Retrieve public evidence and linked publications for a supported genetic variant, or look up gene–disease relationships. Preserve sources, conflicting assertions, and explicit search outcomes so qualified professionals can review the findings.
한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.
- Review public evidence for a single genetic variant
- Find publications linked to a resolved variant
- Look up gene–disease relationships
K-Dense-AI/scientific-agent-skills☆ 5.3만2026년 10월 19일 업데이트
Interact with your Public.com brokerage account using the Public.com API. Able to view portfolio, get stock quotes, place trades, and get account updates. To create a Public.com account head to public.com/signup.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
PublicDotCom/claw-skill-public-dot-com☆ 432026년 5월 23일 업데이트
Organize Remotion skills into the correct internal or public directories. For public skills, follow the required symbolic link setup, synchronization, and validation steps so agents can access skills stored in the public location.
한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.
- Choosing a location for a new internal or public skill
- Adding agent links for public skills
- Synchronizing and validating public skill links
remotion-dev/remotion☆ 6.5만2026년 10월 19일 업데이트
Collect public posts across a blog, newsletter, or feed archive and save clean Markdown pages for each article. The workflow avoids duplicates, supports resumed runs, repairs empty results, and hands articles to a separate enrichment skill.
한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.
- Importing a blog's public article archive
- Organizing public newsletter posts as knowledge pages
- Rerunning a feed import without duplicates
garrytan/gbrain☆ 3.1만2026년 10월 19일 업데이트
사진, 영상, 공개 기록의 적은 단서를 연결해 장소, 일시, 조직 관계를 검증합니다. 근거와 가설을 구분하고 반증과 미확인 사항도 정리하는 조사 스킬입니다.
- 공공장소 사진의 촬영 위치를 확인합니다
- 공개 기록으로 사건의 시간순서를 조사합니다
- 기업과 도메인의 관계를 조사합니다
affaan-m/ECC☆ 28.4만2026년 10월 20일 업데이트
비공개 프로젝트를 공개용으로 복사하고 비밀 정보와 개인 정보의 제거·검증부터 README, 설치 절차, 라이선스 등 배포 파일 준비까지 진행합니다.
- 비공개 프로젝트의 공개 준비
- 비밀 정보와 개인 정보 잔존 여부 확인
- 사용자 설명과 설치 절차 정리
affaan-m/ECC☆ 28.4만2026년 10월 20일 업데이트
Build an HTML presentation for a public-transit funding proposal, covering ridership needs, the plan, risk controls, and the requested decision. The template uses bold poster-style colors and typography for city councils and public boards.
한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.
- Preparing a public-transit funding proposal
- Explaining ridership needs to a city council
- Presenting a plan with risk controls
nexu-io/open-design☆ 10.3만2026년 10월 20일 업데이트
Prepare an existing Twenty app for npm or marketplace publication by reviewing its README, listing details, package metadata, logos, and screenshots. The workflow includes checking publication settings, validating the build, and running the publishing command.
한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.
- Prepare a Twenty app marketplace listing
- Write or review README and About text
- Check logos, screenshots, and public assets
twentyhq/twenty☆ 5.9만2026년 10월 19일 업데이트
Develop an eight-part article series examining one company's competitive strengths, earnings, assets, management, and valuation. Review figures, sources, accounting definitions, and claims across the series to prepare consistent articles for public publication.
한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.
- Planning an eight-part company analysis series
- Checking figures and definitions across articles
- Revising unsupported claims before publication
HKUDS/Vibe-Trading☆ 3.6만2026년 10월 19일 업데이트
Audit Azure Blob and ADLS storage accounts for public exposure, risky access tokens, encryption settings, and insecure transport configurations. Use the azure-mgmt-storage Python SDK to produce a JSON report with account findings, severity ratings, and remediation recommendations.
한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.
- Auditing storage accounts across an Azure subscription
- Investigating suspected exposure through public blob access
- Reviewing SAS token permissions and expiration
mukul975/Anthropic-Cybersecurity-Skills☆ 3.5만2026년 8월 31일 업데이트
Create or update skills using OpenSEO's repository conventions. Keep one canonical source, distinguish internal and public workflows, maintain Claude Code links, and register public skills in documentation, the in-app agent, and plugin bundles.
한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.
- Add a new skill to the OpenSEO repository
- Turn a development workflow into an internal skill
- Repair drift between skill directories
every-app/open-seo☆ 2.4만2026년 10월 14일 업데이트
Guide changes to the published @kortix/sdk package with rules for preserving public APIs, writing failing tests before behavior changes, keeping the core independent of frameworks, and checking package installation. It also covers exports, streaming transport, and release version handling.
한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.
- Adding a public SDK feature or export
- Renaming public types while preserving compatibility
- Changing streaming or transport behavior
kortix-ai/suna☆ 2만2026년 10월 19일 업데이트
Find people and assess identity matches using public information from social media, official records, and reverse lookups. The skill cross-checks independent sources, reports confidence levels, and requires at least three matching identifiers for a high-confidence result.
한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.
- Looking for an old friend or former coworker
- Checking public information about an unknown caller
- Finding public accounts linked to a username
danielmiessler/LifeOS☆ 2만2026년 9월 4일 업데이트
Routes listed-company investment research to specialist skills for earnings analysis, valuation, financial model updates, and portfolio risk reviews. Helps organize evidence, assumptions, and investment theses into reports, models, memos, and monitoring trackers.
한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.
- Prepare earnings previews and post-results analysis
- Assess company valuation and update financial models
- Track investment theses and upcoming catalysts
openai/plugins☆ 7.5천2026년 10월 8일 업데이트
Manage article drafts and publication for a WeChat Official Account. The skill checks the target account, reads drafts before editing, requests explicit confirmation before publishing, and reports the publication status and links returned by the API.
한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.
- Create an article draft for a WeChat Official Account
- Read and update an existing draft
- Review the target account and article before publishing
Devin-AXIS/iPolloWork☆ 7.1천2026년 10월 19일 업데이트
Search WeChat articles by keyword and retrieve full text alongside titles, authors, publication dates, article links and cover image URLs. Set collection limits and publication date filters to gather material for topic, brand or competitor research.
한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.
- Collecting WeChat articles about industry trends
- Researching brand and topic mentions
- Gathering articles for an internal knowledge base
browser-act/skills☆ 6.2천2026년 8월 24일 업데이트
GitHub 解封 — 账号封禁/限制/恢复的领域操作系统。覆盖:(a) GitHub 官方政策体系 (TOS / 可接受使用政策 / Trust & Safety 执行模式 / 公开申诉路径 / 受制裁地区解读);(b) 封号原因诊断学 (spam / abuse / 制裁误标 / 2FA 丢失 / ToS 违规 / 账号劫持误判 / ban evasion 等子类型 + 症状→原因映射 + 自我分诊压测);(c) 申诉实操 craft (写一封能让 T&S 快速判误伤的英文申诉信 + 升级阶梯 + 法务介入边界 + Don'ts);(d) 制裁与合规硬边界 (OFAC SDN 名单 / 哪些国家或地区真不可达 / VPN 误判路径 / 中国大陆不是美国制裁地区的反复重申);(e) 中国大陆开发者特别处境 (sanctioned region 误标 + SMS 验证不支持 +86/+852 + Gitee/GitLab/Codeberg/JihuLab 备用迁移 + 私有自托管 Gitea/Forgejo);(f) 真实案例库 (~30+ 公开案例分类拆解:误伤 / 真违规 / 制裁误标三类各自赔率与申诉成功路径)。伦理锚绝不软化:不教 ban evasion / 不教撒谎式申诉 / 真违规承认改进 / 丢 2FA 无恢复因子则诚实告知 / 中国制裁误标靠申诉不靠换 VPN / 申诉 6 个月窗口必算清 / 约 3% (业内估) 真违规恢复 vs 约 79% (业内估) 误伤申诉成功率分层标。 (GitHub Account Reinstatement — the domain operating system for GitHub (and analogous platform) account suspension, restriction, appeal, and recovery. Covers: (a) GitHub official policy architecture (TOS / Acceptable Use Policies / Trust & Safety enforcement patterns / public appeals pathways / sanctioned-region interpretation); (b) suspension-cause diagnostics (spam / abuse / sanctions mis-flag / 2FA loss / ToS violation / account hijack false-positive / ban evasion taxonomy + symptom→cause mapping + self-triage pressure test); (c) appeal craft (writing an English appeal letter that gets T&S to fast-track a false-positive ruling + escalation ladder + legal-engagement boundary + Don'ts); (d) sanctions and compliance hard boundaries (OFAC SDN list / which countries/regions are truly unreachable / VPN false-positive paths / China is NOT a US-sanctioned region — repeated emphasis); (e) mainland China developer special circumstances (sanctioned-region mis-flag + SMS verification does not support +86/+852 + Gitee/GitLab/Codeberg/JihuLab fallback migration + self-hosted Gitea/Forgejo); (f) real-case library (~30+ public cases with categorized analysis: false-positive / genuine violation / sanctions mis-flag, each with win-rate and appeal success path). Ethical anchors absolutely not softened: do NOT teach ban evasion (creating new accounts turns a temp ban into a permanent one — the single biggest mistake); do NOT teach social engineering or lying in appeals (misuse + actually confirms violation); genuine violations: admit + improve beats denial; lost 2FA + no recovery factor → do not pretend recovery is possible; China sanctioned-region mis-flag → fix via appeal, not repeated VPN switching; appeal form 6-month window must be counted carefully; historical 约 3% (业内估) genuine-violation recovery vs 约 79% (业内估) false-positive appeal success rate stratification must be honestly labeled. Anti-samples (explicitly describe harm, never endorse): developer permabanned for ban evasion / open-source team org-banned for personal attacks in public issues / cases where repeated VPN switching escalated risk-control severity.) Master OS — automated mastery of GitHub Account Reinstatement — the domain operating system for GitHub (and analogous platform) account suspension, restriction, appeal, and recovery. Covers: (a) GitHub official policy architecture (TOS / Acceptable Use Policies / Trust & Safety enforcement patterns / public appeals pathways / sanctioned-region interpretation); (b) suspension-cause diagnostics (spam / abuse / sanctions mis-flag / 2FA loss / ToS violation / account hijack false-positive / ban evasion taxonomy + symptom→cause mapping + self-triage pressure test); (c) appeal craft (writing an English appeal letter that gets T&S to fast-track a false-positive ruling + escalation ladder + legal-engagement boundary + Don'ts); (d) sanctions and compliance hard boundaries (OFAC SDN list / which countries/regions are truly unreachable / VPN false-positive paths / China is NOT a US-sanctioned region — repeated emphasis); (e) mainland China developer special circumstances (sanctioned-region mis-flag + SMS verification does not support +86/+852 + Gitee/GitLab/Codeberg/JihuLab fallback migration + self-hosted Gitea/Forgejo); (f) real-case library (~30+ public cases with categorized analysis: fa
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
swaylq/master-skill☆ 1622026년 9월 6일 업데이트
Expose the user's local AionUi WebUI to the public internet with a near-zero-effort flow. Detects whether the WebUI is running, guides the user to switch it on if needed (the only manual step), self-installs cloudflared cross-platform, opens a Cloudflare quick tunnel, verifies the public URL actually works, then explains the limitations honestly (temporary/random URL, must stay running, password is the only protection, traffic transits Cloudflare). Use whenever the user wants to reach their AionUi from outside the LAN, over the internet, or share a public link. Distinct from aionui-webui-setup (which covers manual LAN / Tailscale / server config through the settings UI): this skill produces a one-click public link via an automatic tunnel.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
iOfficeAI/AionCore☆ 1212026년 10월 15일 업데이트
Use when designing or configuring public pages on an Experience Cloud site — guest user profile setup, page-level access settings in Experience Builder, object/field visibility for unauthenticated visitors, and explicit sharing rules that expose data on public pages. Triggers: 'configure public pages Experience Cloud', 'guest user profile setup', 'unauthenticated site access', 'public community page visibility', 'make page visible without login'. NOT for authenticated user features (use admin/experience-cloud-member-management). NOT for security hardening or remediation of guest user exposure (use security/guest-user-security). Also covers the deployable shape: pageAccess on the route file, the guest Profile's objectPermissions and fieldPermissions, sharingGuestRules, siteGuestRecordDefaultOwner on CustomSite, and the Network guest flags.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
PranavNagrecha/AwesomeSalesforceSkills☆ 192026년 10월 20일 업데이트
OpenClaw 보안 권고를 확인하고 수정합니다. 비공개 포크의 열린 PR과 공개 조건을 검증하고, 승인 후 공개와 공개된 상태 확인까지 수행합니다.
- 보안 권고와 비공개 포크 상태 확인
- 취약점 정보와 심각도 업데이트
- 승인 전에 공개 조건 검증
openclaw/openclaw☆ 39.3만2026년 10월 19일 업데이트
Upload large Remotion media assets to Cloudflare R2 storage and replace local file references with public remotion.media URLs. Verify access, remove the local binary, and run checks before committing and pushing the changes.
한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.
- Hosting media files that are too large for Git
- Keeping media binaries out of a pull request
- Replacing local asset references with public URLs
remotion-dev/remotion☆ 6.5만2026년 10월 19일 업데이트
Apply consistent deprecation notices to public Remotion APIs that remain available. Use TypeScript annotations and documentation formatting to mark APIs as no longer recommended, identify replacements, and review whether both representations follow the conventions.
한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.
- Marking an existing public API as deprecated
- Adding guidance on a replacement API
- Reviewing deprecation annotations and documentation
remotion-dev/remotion☆ 6.5만2026년 10월 19일 업데이트