Analyze CVE reachability in software repositories by examining how vulnerable dependencies are imported and used. Determines whether vulnerable components, classes, or functions are reachable from project code through call chain analysis, reflection detection, dynamic loading patterns, and configuration-gated behavior. Classifies each CVE as likely reachable, possibly reachable, or likely unreachable with supporting evidence. Use when analyzing security vulnerabilities in dependencies, performing post-disclosure CVE triage, assessing vulnerability impact, or when users ask to analyze CVE reachability, check if vulnerabilities are exploitable, or evaluate dependency security risks.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
ArabelaTso/Skills-4-SE☆ 2572026년 8월 21일 업데이트
명령줄에서 ngrok, Cloudflare 등의 터널 연결을 시작하고 중지합니다. 공개 URL, 연결 상태, 로그를 확인하고 외부 접근 가능 여부를 테스트합니다.
- ngrok 및 Cloudflare 터널을 시작합니다
- 공개 URL과 연결 상태를 확인합니다
- 연결 문제 발생 시 로그를 살펴봅니다
diegosouzapw/OmniRoute☆ 7.9만2026년 10월 20일 업데이트
Independently rerun supplied proof-of-concept code against freshly built versions from before and after a change. Compare observed behavior, verify reachability through real interfaces, and preserve separate logs showing agreement, divergence, or blockers.
한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.
- Independently check a supplied reproduction result
- Compare behavior before and after a change
- Verify reachability with the claimed access level
trailofbits/skills☆ 7.7천2026년 10월 21일 업데이트
Build 2D game maps and backgrounds with generated artwork and explicit layout data. Check collision and route reachability, explore a playable HTML preview, and export scenes to Tiled, Godot 4 or LDtk.
한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.
- Build a top-down map with collision and exits
- Design a side-scrolling stage
- Create battle backdrops or parallax backgrounds
0x0funky/agent-sprite-forge☆ 4.5천2026년 10월 6일 업데이트
Generate prioritized CVE watchlists and actionable security recommendations for repositories. Use when analyzing CVE scan results, creating security reports, prioritizing vulnerability remediation, or generating security gate reports for CI/CD. Takes CVE scan results (JSON/SARIF from npm audit, pip-audit, Snyk), reachability analysis, and cutoff date as input. Combines severity, reachability, exploitability, and dependency criticality to rank CVEs by practical risk. Outputs markdown reports with concrete next-step guidance (immediate upgrade, monitor, ignore with justification, apply mitigation) suitable for issue trackers, security reviews, and CI security gates.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
ArabelaTso/Skills-4-SE☆ 2572026년 8월 21일 업데이트
Network reachability and pivoting after an operator already has a foothold. Use to make previously unreachable hosts, subnets, services or listener directions reachable via Ligolo-ng, Chisel, GOST v3, SSH/native forwarding, socat/netsh, Microsoft Dev Tunnels, DNS/HTTP/QUIC fallback transports, and multi-hop routing. This module does not exploit services, obtain credentials, or own C2/persistence. Its success condition is changed reachability: the operator can route/connect to the intended internal network/service through the selected foothold.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
pale-knight/redteam-skill☆ 512026년 8월 23일 업데이트
Apply practical DAG decomposition, transitive-edge reduction, and reachability indexing to dense dependency graphs. Use when low width and repeated queries justify preprocessing. NOT for cyclic graphs, one-off graph checks, or exact-minimum-chain requirements.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
curiositech/windags-skills☆ 162026년 10월 19일 업데이트
Apply practical DAG decomposition, transitive-edge reduction, and reachability indexing to dense dependency graphs. Use when low width and repeated queries justify preprocessing. NOT for cyclic graphs, one-off graph checks, or exact-minimum-chain requirements.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
curiositech/port-daddy☆ 32026년 10월 19일 업데이트
Apply practical DAG decomposition, transitive-edge reduction, and reachability indexing to dense dependency graphs. Use when low width and repeated queries justify preprocessing. NOT for cyclic graphs, one-off graph checks, or exact-minimum-chain requirements.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
curiositech/port-daddy☆ 32026년 10월 19일 업데이트
Validate finite-DAG order objectives and construct reachability-chain or direct-edge path partitions with explicit proof boundaries. NOT for equating reachability chains with direct-edge paths without checking the chosen objective.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
curiositech/port-daddy☆ 32026년 10월 19일 업데이트
Trace server-side request forgery, where a server fetches a supplied URL, through internal services and metadata endpoints in a CTF sandbox. Document credential scope and distinguish successful token extraction from access actually accepted by another service.
한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.
- Tracing server-side requests to internal services
- Checking metadata access and token scope
- Distinguishing token extraction from accepted access
zhaoxuya520/reverse-skill☆ 4.3만2026년 9월 22일 업데이트
Assess software dependencies, build pipelines, and container images for security risks. Create a software component inventory, check vulnerabilities and license conflicts, verify artifact signatures, and prioritize fixes based on whether vulnerable code can actually be reached.
한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.
- Creating and auditing a software component inventory
- Prioritizing dependency vulnerabilities by actual exposure
- Auditing CI/CD pipelines and secret handling
zhaoxuya520/reverse-skill☆ 4.3만2026년 9월 22일 업데이트
Diagnose OpenViking memory problems by checking plugin installation, client settings, server connections, and recent activity. The skill helps trace missing recalled context, failed saves, and authentication errors, then guides targeted fixes and checks whether they worked.
한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.
- Investigating missing recalled context
- Checking whether conversation records were saved
- Troubleshooting 401 or 403 authentication errors
volcengine/OpenViking☆ 4만2026년 10월 20일 업데이트
Diagnose missing recall, failed captures, and connection errors in the OpenViking memory plugin for Codex. Check installation, configuration, authentication, and server readiness, then use the findings to guide fixes and verify that memory works again.
한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.
- Investigate missing recall or unsaved conversations
- Check plugin status after installation or updates
- Diagnose 401 and 403 authentication errors
volcengine/OpenViking☆ 4만2026년 10월 20일 업데이트
Assess a single suspected security issue using Trailmark's graph of code relationships. Gather evidence about reachable paths, input flow, and potential impact, then receive a priority verdict and a list of remaining manual checks.
한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.
- Prioritizing a static analysis finding before proof-of-concept work
- Checking whether entry points can reach a suspicious function
- Preparing code evidence for exploit validation
trailofbits/skills☆ 7.7천2026년 10월 21일 업데이트
Assess gRPC services for exposed internal methods, missing access controls, identity spoofing through proxies, and unencrypted traffic. The skill guides service discovery and validates findings using response status codes, external reachability, and demonstrated effects on private data or system state.
한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.
- Inventory exposed gRPC services and methods
- Check authentication and permissions on internal APIs
- Compare identity handling at proxies and backends
elementalsouls/Claude-BugHunter☆ 5.2천2026년 10월 20일 업데이트
Use this skill whenever the agent is about to recommend or apply a change that touches DPU / NIC hardware state on a live system — mlxconfig firmware-parameter write, NIC firmware burn, BFB reflash, NIC ↔ DPU mode flip, SR-IOV or device-emulation slot enable, kernel boot-parameter change (IOMMU, hugepages, VFIO), PCIe rebind / rescan / link-state flip, BlueField cold reboot, or remediation of a BlueField thermal shutdown. Wrap the change in pre-flight inventory, OOB reachability, a maintenance window, replica rehearsal, and rollback. Trigger on implicit phrasing: "flip BlueField mode over SSH", "enable SR-IOV and reboot", "burned firmware but mlxconfig shows old value", "BlueField thermal shutdown". Not for read-only inventory or version queries (doca-version, doca-caps). Refuse orientation (doca-public-knowledge-map), install or env debug (doca-setup), and program-side debug (doca-debug, doca-programming-guide).
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
NVIDIA/skills☆ 3.7천2026년 10월 21일 업데이트
[omh] Security event on the code already shipped -- a CVE in a dependency, a secret committed to the repo, a license question, an advisory: triage reachability and severity, contain in order, and never close a leaked secret before its rotation is observed. Use when the user says: security-event-response, security event response, cve, triage this cve, cve in our dependency, cve in a dependency, security advisory, dependabot alert.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
rlaope/oh-my-hermes☆ 3.5천2026년 10월 20일 업데이트
Use when the user asks to "map our positioning", "name our competitive alternatives", or "pick a beachhead segment for the launch"; produces a Dunford-style positioning canvas — named competitive alternatives (including spreadsheet and status quo), unique attributes (verifiable, or routed to the claims ledger), value themes (attribute→benefit→value chains), a target beachhead segment scored on serviceability / pain intensity / reachability, and a one-sentence onlyness statement — the sole upstream of the message house and the entity-signal source for the canonical entity profile. Not for the message house or per-channel launch copy — use message-house-builder; not for audience/persona profiling itself — use audience-mapper; not for SEO keyword positioning — use keyword-research. 定位画布/竞争替代品/独特价值/滩头细分
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
aaron-he-zhu/aaron-marketing-skills☆ 3천2026년 10월 20일 업데이트
Best-practice rulebook for a marketing site's pages, organized by page class — campaign landers, product pages, programmatic SEO trees, editorial. Use when writing or updating a landing/marketing page, wiring a campaign lander to an attribution identifier, changing site-wide nav/footer links, touching sitemap/robots/agent-readable surfaces, or auditing a public site's indexing, reachability, and conversion setup.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
dzhng/skills☆ 1.4천2026년 10월 20일 업데이트
Build, review, or improve networking code in iOS/macOS apps using URLSession with async/await, structured concurrency, and modern Swift patterns. Use when working with REST APIs, downloading files, uploading data, WebSocket connections, pagination, retry logic, request middleware, caching, background transfers, or network reachability monitoring. Also use when handling HTTP requests, API clients, network error handling, or data fetching in Swift apps.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
dpearson2699/swift-ios-skills☆ 1.2천2026년 8월 1일 업데이트
Implement, compose, test, and debug LuisaCompute XIR transformation and analysis passes. Use when modifying files under src/xir/passes or include/luisa/xir/passes, changing CFG or SSA invariants, authoring a PassPipeline, or diagnosing pass-order, reachability, PHI, dominance, aliasing, or memory-effect bugs.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
LuisaGroup/LuisaCompute☆ 1.1천2026년 10월 20일 업데이트
Diagnose performance issues on Amazon SageMaker HyperPod clusters — uneven NCCL bandwidth across nodes and poor filesystem throughput. Read-only. Surfaces host-side signals (Xid, ECC, NVLink, EFA reachability, FSx saturation) and routes to the appropriate sibling skill (hyperpod-node-debugger, hyperpod-nccl, hyperpod-version-checker, hyperpod-issue-report) for any remediation. Triggers on uneven NCCL across nodes, straggler node, FSx slow, checkpoint slow, dataloader slow, filesystem bottleneck, FSx throughput, cross-AZ latency, topology mismatch.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
awslabs/agent-plugins☆ 9242026년 10월 15일 업데이트
Use for software supply-chain security assessment covering SBOM, SCA, CI/CD pipelines, container images, build integrity, dependency provenance, and vulnerability reachability.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
coco-research/coco☆ 8422026년 10월 20일 업데이트