Track documented code fixes across releases with a signed manifest, a list of fixes and their identifying text. Verify that markers remain in source files, inspect file changes, and use recorded history to identify commits associated with regressions.
한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.
- Check that documented fixes remain before a release
- Trace a regression through release history
- Verify signed fix records in CI
ruvnet/ruflo☆ 7.8만2026년 10월 20일 업데이트
Collect evidence from a compromised computer before shutdown or remediation erases it. Preserve memory, network connections, processes, and system state, then record integrity hashes and handling history to support incident investigation and evidence tracking.
한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.
- Preserving evidence before shutting down a compromised computer
- Collecting memory evidence for suspected fileless malware
- Recording active connections and processes during an intrusion
mukul975/Anthropic-Cybersecurity-Skills☆ 3.5만2026년 8월 31일 업데이트
Use Binance Onchain Pay APIs to prepare cryptocurrency purchases and transfers to external wallets. Retrieve payment options, exchange rates and fees, create payment links, and check order status with automatically signed requests.
한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.
- Prepare a crypto purchase with delivery to an external wallet
- Check payment methods and estimated fees
- Create a payment link for a merchant checkout
ccxt/ccxt☆ 4.4만2026년 10월 20일 업데이트
Investigate memory dumps, disk records, and captured network traffic while preserving evidence. The skill guides timeline reconstruction and examination of system traces to identify suspicious activity and produce findings that others can review.
한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.
- Preserve evidence before starting an incident investigation
- Inspect processes and connections in memory dumps
- Build timelines from event logs and execution traces
zhaoxuya520/reverse-skill☆ 4.3만2026년 9월 22일 업데이트
Test a released archon binary through Homebrew or curl installation on macOS or a Linux VPS. Check version information, bundled workflows, Claude execution, and sensitive environment key removal, then clean up and report the results.
한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.
- Checking a newly published release
- Reproducing a bug in a released version
- Verifying a hotfix after updating a release tag
coleam00/Archon☆ 2.4만2026년 10월 20일 업데이트
Prepare a software release from the dev branch by turning commits into a changelog, updating the version, and creating a pull request to main. The workflow also covers release tags, branch synchronization, and Homebrew package updates.
한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.
- Preparing a patch, minor, or major release
- Turning changes into a user-facing changelog
- Updating Homebrew packages after publishing binaries
coleam00/Archon☆ 2.4만2026년 10월 20일 업데이트
Turn ARIS research reports in Markdown or JSON into a single HTML file for reading. Choose a report or dashboard layout, retain source version details, and optionally review whether the conversion preserves content and structure.
한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.
- Reading long research reports in a browser
- Viewing review logs alongside their JSON state
- Creating a research-wiki dashboard view
wanshuiyin/Auto-claude-code-research-in-sleep☆ 1.8만2026년 10월 19일 업데이트
Maintain and validate OpenShell builds for Windows on x64 and ARM64 using MSVC, Microsoft's C++ toolchain. Check compilation, build executables, run tests on native hosts, and report artifacts and unsupported driver behavior.
한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.
- Investigating Windows compilation failures
- Building x64 and ARM64 release executables
- Checking errors for unsupported drivers
NVIDIA/OpenShell☆ 1.7만2026년 10월 20일 업데이트
Assess how applications use encryption, signed tokens, and random values. Identify implementation weaknesses, select relevant testing tools, and document causes and fixes for issues involving encryption modes, RSA parameters, predictable randomness, and key derivation.
한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.
- Assessing encrypted cookies and tokens
- Checking RSA keys and cryptographic settings
- Testing session token predictability
SnailSploit/Claude-Red☆ 7.6천2026년 10월 13일 업데이트
The art-route layer of the Forge skills. route_media.py is the one command that generates an image or an image-to-video clip - through the paid API of any provider whose key is configured (OpenAI, Google Gemini, xAI, BytePlus ModelArk, fal.ai; the configured key is the owner's consent), else through the user's own signed-in Codex or Grok CLI - and prints one JSON line with the route, artifact, sha256 and cost estimate; with no route it answers no-route (codeart2d is then the last resort). Also the capability check (forge_doctor), API key configuration, the spend ledger, resume and Codex image adoption. Use when a Forge skill sends a generation here, for the capability check, or when the user asks about keys, routes or spend. Not for planning, processing or QA of sprites, video frames or maps (generate2dsprite, video2dsprite, generate2dmap) or for code-drawn art (codeart2d).
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
0x0funky/agent-sprite-forge☆ 4.5천2026년 10월 6일 업데이트
Audit and update Pilot Shell upstream dependencies in installer/upstreams.yaml. Checks npm, PyPI, brew, and curl-pipe entries for newer stable versions, known security advisories, and sha256 drift. Verifies each update installs successfully before committing. Use when: "check upstreams", "update dependencies", "audit upstreams.yaml", "are our dependencies up to date", "supply chain check".
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
maxritter/pilot-shell☆ 2.1천2026년 10월 20일 업데이트
Fix features broken by REST API responses that flatten Nostr events, losing tag data. Use when: (1) A feature works for WebSocket-loaded events but not REST API-loaded ones, (2) A model field (like sha256, textTrackRef) is null for REST API data but set for WebSocket data, (3) REST API returns denormalized fields (d_tag, video_url) but omits raw tags array, (4) hasSubtitles/hasFeature returns false for REST-loaded videos. Common in Nostr clients that use both REST APIs (for analytics/bulk queries) and WebSocket (for real-time events).
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
divinevideo/divine-mobile☆ 2662026년 10월 20일 업데이트
CRITICAL: Never modify files in content-addressable storage systems where the filename IS the content hash (SHA256, IPFS CID, etc.). Use when: (1) Working with Blossom protocol, IPFS, or any CAS system, (2) Considering "optimizing" stored files (faststart, compression), (3) Implementing transcoding or processing pipelines for hash-identified content, (4) Building on top of ProofMode or any cryptographic verification system. Modifying files in place breaks hash verification and content integrity.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
divinevideo/divine-mobile☆ 2662026년 10월 20일 업데이트
Fix silent video/media processing failures caused by URL extraction code that filters on file extensions (.mp4, .webm, .webp). Use when: (1) Media moderation, transcoding, or analysis silently skips files from Blossom or content-addressed storage servers, (2) URL extraction from Nostr event tags (imeta, r tags) drops URLs without recognized extensions, (3) CDN fallback URLs append .mp4 but the actual server uses extensionless content-addressed paths like /{sha256}. Common in Nostr video events (kind 34236) where different clients use different URL formats.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
divinevideo/divine-mobile☆ 2662026년 10월 20일 업데이트
Expert guide for integrating DOKU Payment Gateway: DOKU Checkout (Hosted & Modal Popup with HMAC-SHA256), Direct API SNAP BI Standard (VA, QRIS, Direct Debit with HMAC-SHA512), and Direct API Non-SNAP (Card Payment Page, OVO Push). Covers single-integration checkout, direct host-to-host APIs, webhook verification, and atomic idempotency / Panduan ahli integrasi DOKU Payment Gateway (DOKU Checkout & Direct API).
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
roedyrustam/vibes-plug☆ 802026년 10월 19일 업데이트
Install and configure the GitHub CLI (gh) for AI agent environments where gh may not be pre-installed and git remotes use local proxies instead of github.com. Use when gh command not found, shutil.which returns None, need GitHub API access for issues or PRs or releases or workflow runs, or repository operations fail with 'failed to determine base repo' error. Provides auto-install script with SHA256 verification, GITHUB_TOKEN auth with anonymous fallback, and the required -R flag pattern for proxy environments. Covers project management via GitHub Projects V2, milestones via REST API, issue lifecycle templates, and label taxonomy management.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
Jamie-BitFlight/claude_skills☆ 672026년 10월 20일 업데이트
The art-route layer of the Forge skills. route_media.py is the one command that generates an image or an image-to-video clip - through the paid API of any provider whose key is configured (OpenAI, Google Gemini, xAI, BytePlus ModelArk, fal.ai; the configured key is the owner's consent), else through the user's own signed-in Codex or Grok CLI - and prints one JSON line with the route, artifact, sha256 and cost estimate; with no route it answers no-route (codeart2d is then the last resort). Also the capability check (forge_doctor), API key configuration, the spend ledger, resume and Codex image adoption. Use when a Forge skill sends a generation here, for the capability check, or when the user asks about keys, routes or spend. Not for planning, processing or QA of sprites, video frames or maps (generate2dsprite, video2dsprite, generate2dmap) or for code-drawn art (codeart2d).
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
gabrielmoreira/agent-skills-mirror☆ 192026년 10월 19일 업데이트
Use when designing or fixing a Content Security Policy on a real site, choosing between nonce-based and hash-based CSP, adding strict-dynamic, debugging "Refused to execute inline script" errors, deploying CSP in report-only mode first, configuring report-to / report-uri, or auditing an existing policy for unsafe-inline / unsafe-eval / wildcards. Triggers: "CSP blocks legitimate inline script", strict-dynamic, nonce-{RANDOM}, sha256-{HASH}, object-src none, base-uri none, frame-ancestors, Trusted Types, X-Content-Security-Policy obsolete, report-only vs enforced. NOT for general HTTP security headers (HSTS, COOP/COEP), Trusted Types deep dive, CORS configuration, or building a WAF.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
curiositech/windags-skills☆ 162026년 10월 19일 업데이트
Obtenir et gérer un access token pour l'API Merci Facteur (envoi de courrier papier, recommandé, recommandé électronique). Utiliser dès qu'un appel à l'API Merci Facteur doit être authentifié, ou quand apparaît une erreur de signature, de timestamp, de restriction d'IP ou un token expiré. Couvre le calcul HMAC-SHA256 de la secret key, getToken, la durée de vie du token jusqu'à 365 jours (timeLimit, force) et le stockage des identifiants.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
MerciFacteur/Merci-facteur-API☆ 82026년 10월 13일 업데이트
Record provenance for an Agentic MIKE+ step via the mike-plus MCP server — a manifest.json tying the model copy, inputs, edits, run QA status, result files and figures together, each file with a sha256. Use at the end of every run/compare/plot task (successful or failed) so the work can be audited, re-compared or reproduced later. No license required.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
Zhonghao1995/Agentic-MIKE-Plus☆ 82026년 8월 16일 업데이트
Perform cryptographic operations using Apple CryptoKit. Use when hashing data with SHA256/SHA384/SHA512, generating HMAC authentication codes, encrypting with AES-GCM or ChaChaPoly, signing with P256/P384/P521/Curve25519 keys, performing ECDH key agreement, storing keys in the Secure Enclave, or migrating from CommonCrypto to CryptoKit.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
JordanCoin/ios-skills-collection☆ 62026년 9월 10일 업데이트
JSON Web Tokens (JWT) defined in RFC 7519 are compact, URL-safe tokens used for authentication and authorization in web applications. bu skill covers implementing secure JWT signing with HMAC-SHA256
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
MustafaKemal0146/fetih☆ 52026년 10월 11일 업데이트
Hash kırma — MD5/SHA/bcrypt format tespiti, hashcat/john kullanımı, wordlist stratejisi
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
MustafaKemal0146/fetih☆ 52026년 10월 11일 업데이트
Use when designing or fixing a Content Security Policy on a real site, choosing between nonce-based and hash-based CSP, adding strict-dynamic, debugging "Refused to execute inline script" errors, deploying CSP in report-only mode first, configuring report-to / report-uri, or auditing an existing policy for unsafe-inline / unsafe-eval / wildcards. Triggers: "CSP blocks legitimate inline script", strict-dynamic, nonce-{RANDOM}, sha256-{HASH}, object-src none, base-uri none, frame-ancestors, Trusted Types, X-Content-Security-Policy obsolete, report-only vs enforced. NOT for general HTTP security headers (HSTS, COOP/COEP), Trusted Types deep dive, CORS configuration, or building a WAF.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
curiositech/port-daddy☆ 32026년 10월 19일 업데이트