AI-powered code vulnerability analysis and dependency scanning using Gemini CLI security extension patterns. Detects hardcoded secrets, injection attacks, weak cryptography, authentication flaws, and LLM prompt injection. Also scans dependencies against the OSV.dev vulnerability database.
日本語の概要は準備中です。原文の説明を表示しています。
oimiragieo/agent-studio☆ 432026年7月14日 更新
Discover, parse, and call external HTTP APIs at runtime using OpenAPI specs, tool templates, and iterative chaining. Adapted from UTCP (Universal Tool Calling Protocol) patterns for Node.js and Claude Code agents.
日本語の概要は準備中です。原文の説明を表示しています。
oimiragieo/agent-studio☆ 432026年7月14日 更新
Two-agent cleanup pattern. Implementer works freely, then a dedicated cleanup agent removes unused imports, console.logs, commented-out code, dead code, and formatting issues. Produces a diff of what was cleaned.
日本語の概要は準備中です。原文の説明を表示しています。
oimiragieo/agent-studio☆ 432026年7月14日 更新
OAuth 2.1, JWT (RFC 8725), encryption, and authentication security expert. Enforces 2026 security standards.
日本語の概要は準備中です。原文の説明を表示しています。
oimiragieo/agent-studio☆ 432026年7月14日 更新
Hunt JSON Web Token (JWT) vulnerabilities — alg=none bypass, RS256→HS256 key confusion, weak HMAC secret cracking, kid path traversal, JWKS injection, jku/x5u header attacks, embedded JWK confusion, expired-token acceptance, claim mutability, and token replay. Use when an app uses JWT for authentication or stateless sessions.
日本語の概要は準備中です。原文の説明を表示しています。
0xGhostCAT/claude-ai-cyber-security-skills☆ 432026年6月3日 更新
Hunt authentication and authorization bypasses — forced browsing, path traversal in auth, header injection, JWT downgrade, OAuth state confusion, role manipulation. Use when an endpoint returns 401/403 but appears reachable.
日本語の概要は準備中です。原文の説明を表示しています。
0xGhostCAT/claude-ai-cyber-security-skills☆ 432026年6月3日 更新
Rewrite text so it reads like a real person wrote it, not an AI. Auto-detects Russian vs English and applies the matching rule set. Use when the user asks to humanize text, remove the "AI smell", de-AI, or make AI output sound natural - especially for Russian. Russian requests count too - очеловечь, перепиши как человек, оживи текст, убери запах ИИ, сделай живее, звучит как робот, убери канцелярит. Also use when asked whether a text was written by AI - нейросеть писала?, похоже на ChatGPT?, видно ли, что это ИИ, человек или бот писал, did AI write this? - then check and report findings without rewriting. While installed, also keep your own Russian and English writing free of the quick-list stock phrases, silently; never edit the user's text unless asked.
日本語の概要は準備中です。原文の説明を表示しています。
thevseprod/humanizer-ru☆ 432026年10月9日 更新
Design in pseudocode first, iterate approaches, then translate to code
日本語の概要は準備中です。原文の説明を表示しています。
obra/clank☆ 422025年10月10日 更新
Execute a frozen workflow contract and collect evidence by implementing only approved scope/files and checks. Use when PLAN_FROZEN=true and Execution Contract is complete, then hand off to review.
日本語の概要は準備中です。原文の説明を表示しています。
TEN-framework/portal☆ 422026年5月9日 更新
Generate 5 distinct, production-grade UI variations for a requested new or existing section, component, page, flow, or shell, then help the user preview and apply one. Use when the user asks to add or redesign UI like a hero, pricing, navbar, auth flow, dashboard shell, ecommerce surface, or data component.
日本語の概要は準備中です。原文の説明を表示しています。
aladicf/better-web-ui☆ 422026年5月22日 更新
Pick a Linear PBI, spec it, assemble it, then hold at the gate with a Boeing list for HITL clearance. Does NOT ship.
日本語の概要は準備中です。原文の説明を表示しています。
villetakanen/asdlc-io☆ 422026年10月9日 更新
Prepare and ship an iOS build to TestFlight — runs the submission pre-flight checks, fixes the config that blocks uploads/processing, then walks internal→external beta review. Use when releasing an iOS build to testers.
日本語の概要は準備中です。原文の説明を表示しています。
SteveGJones/ai-first-sdlc-practices☆ 412026年10月5日 更新
Configure SDLC team formation and SDLC method for this project. Asks the four-option SDLC method question (solo / single-team / programme / assured), then recommends and installs team plugins based on project type, language, tech stack, and support needs.
日本語の概要は準備中です。原文の説明を表示しています。
SteveGJones/ai-first-sdlc-practices☆ 412026年10月5日 更新
Configure and manage MCP (Model Context Protocol) servers in Claude Code CLI. Use this skill when adding, removing, listing, or troubleshooting MCP servers, or when questions arise about MCP configuration, transport types, scopes, or authentication. Essential for connecting Claude Code to external tools, databases, and APIs.
日本語の概要は準備中です。原文の説明を表示しています。
tdimino/claude-code-minoan☆ 412026年9月28日 更新
Channel Tom di Mino's daimonic voice for writing. Invoke when Tom asks to write prose, essays, tweets, poetry, or technical docs in his own voice—possessed by the daimon, not assisted by it. Triggers on: 'write as me', 'in my voice', 'channel', 'daimon', 'tamarru', 'waltz', or any request for Tom's authentic writing voice.
日本語の概要は準備中です。原文の説明を表示しています。
tdimino/claude-code-minoan☆ 412026年9月28日 更新
Research UI component patterns across the component.gallery corpus — 60 canonical component types, ~95 production design systems, 2,600+ examples — plus an AI-era overlay (prompt inputs, tool-call cards, streaming status, citations) and composite patterns (command palette, app shell, agent console). Compare implementations, find alternative component names, ground frontend decisions in real-world precedent. Pairs with minoan-frontend-design for research-then-build workflows. Triggers on component patterns, how do others implement X, design system research, component comparison, AI chat components, agent UI patterns.
日本語の概要は準備中です。原文の説明を表示しています。
tdimino/claude-code-minoan☆ 412026年9月28日 更新
Plan the UX and UI for a feature before writing code. Run a structured discovery interview, then produce a design brief (.design-context.md) that guides implementation. Establishes design direction, constraints, and strategy before any code is written. Triggers on plan the design, design brief, shape the UX, before we build, design discovery.
日本語の概要は準備中です。原文の説明を表示しています。
tdimino/claude-code-minoan☆ 412026年9月28日 更新
Extract transcript and key slides from a local video file, then create a vault-formatted lecture note. Use this skill whenever a user provides a local video file (.mp4, .mov, .mkv, .avi, .webm) and wants notes from it. Triggers on "lecture", "take notes", "I have a recording of", "class video", "transcribe this presentation", "process this video for notes", or /lecture. Works with any language — auto-detects transcript language.
日本語の概要は準備中です。原文の説明を表示しています。
tuan3w/obsidian-vault-agent☆ 402026年3月30日 更新
Deep, iterative, multi-source research that explores a topic from multiple perspectives, detects contradictions, and produces a comprehensive vault note with fact-level citations and a confidence map. Use this skill whenever the user says /deep-research, "deep research X", "research X thoroughly", "investigate X deeply", "I need to really understand X", or wants research that goes beyond a quick web search. Also use when the user wants to understand a complex, contested, or multi-faceted topic, compare competing approaches with evidence, or build a comprehensive mental model they can trust for decisions. This is heavier than /research — it searches web, academic papers, Reddit, and the vault, then loops through exploration and critique rounds until the evidence base is solid. When in doubt between /research and /deep-research, prefer this one if the topic is complex, contested, or the user wants depth over speed.
日本語の概要は準備中です。原文の説明を表示しています。
tuan3w/obsidian-vault-agent☆ 402026年3月30日 更新
Deep cross-domain synthesis engine for the vault. Triggers on "synthesize X", "what do I know about X", "connect ideas about X", "cross-domain analysis of X", "map everything in the vault about X". Searches comprehensively, surfaces non-obvious patterns and tensions, then challenges the user to generate original thought. The vault should surprise you — if synthesis only confirms what you already think, it failed.
日本語の概要は準備中です。原文の説明を表示しています。
tuan3w/obsidian-vault-agent☆ 402026年3月30日 更新
Self-configuring content creation pipeline with geo-lint validation. On first use, scans your project to learn its framework, content schema, categories, and authors, then creates SEO & GEO-optimized content matched to your brand voice. Validates every piece with geo-lint's 92 rules until zero violations. Triggers on: "content-creator", "create content", "write blog", "new post", "content calendar", "brand voice", "content strategy".
日本語の概要は準備中です。原文の説明を表示しています。
IJONIS/geo-lint☆ 402026年3月19日 更新
Run and analyze molecular dynamics simulations with OpenMM and MDAnalysis. Set up protein and protein-ligand systems with PDBFixer, choose force fields and water models (AMBER14, CHARMM36m, ff19SB, GAFF2, TIP3P), solvate and add ions, run energy minimization, NVT/NPT equilibration and production MD on GPU, then analyze trajectories for RMSD, RMSF, radius of gyration, hydrogen bonds, native contacts, PCA and free energy surfaces. Use this skill for protein stability under mutation, ligand binding-mode and residence-time questions, conformational sampling, membrane proteins, and disordered ensembles. Also trigger on OpenMM, MDAnalysis, mdtraj, Simulation.step, LangevinMiddleIntegrator, PDBFixer, DCD or XTC trajectory, RMSD analysis, or production MD.
日本語の概要は準備中です。原文の説明を表示しています。
K-Dense-AI/drug-discovery-agent-skills☆ 392026年10月12日 更新
Use when a local coding agent (Codex, Claude Code, Cursor, or similar) needs to operate Multica through the authenticated `multica` CLI: reading or updating issues, comments, metadata, labels, custom properties, subscribers, projects, agents, squads, runtimes, repos, skills, autopilots, attachments, or workspace state; searching issues; inspecting or cancelling agent runs; replying to a Multica issue from an external agent; creating or triaging issues; checking linked pull requests; or safely handling Multica mention/status side effects without relying on the Multica hosted agent runtime.
日本語の概要は準備中です。原文の説明を表示しています。
multica-ai/multica-cli☆ 392026年8月14日 更新
Use when working with iOS/macOS Keychain Services (SecItem queries, kSecClass, OSStatus errors), biometric authentication (LAContext, Face ID, Touch ID), CryptoKit (AES-GCM, ChaChaPoly, ECDSA, ECDH, HPKE, ML-KEM), Secure Enclave, secure credential storage (OAuth tokens, API keys), certificate pinning (SecTrust, SPKI), keychain sharing across apps/extensions, migrating secrets from UserDefaults or plists, or OWASP MASVS/MASTG mobile compliance on Apple platforms.
日本語の概要は準備中です。原文の説明を表示しています。
ivan-magda/swift-security-skill☆ 392026年6月17日 更新