Unity Catalog governance, access control, and observability. Use to grant or revoke access (GRANT/REVOKE), reason about the privilege model and ownership, set up row-level security and column masks, create external locations and storage credentials, define catalogs/schemas/tables/volumes, answer "who can read this table", and query system tables (audit, lineage, billing) or work with volume files in /Volumes/.
日本語の概要は準備中です。原文の説明を表示しています。
databricks/databricks-agent-skills☆ 3482026年10月14日 更新
Provides auth patterns for API keys, OAuth, and token management. Use when implementing or reviewing service authentication and credential handling.
日本語の概要は準備中です。原文の説明を表示しています。
athola/claude-night-market☆ 3412026年10月14日 更新
Delegates tasks to the OpenAI Codex CLI (codex exec) via delegation-core. Use when delegation-core selects Codex or OpenAI credentials are already configured.
日本語の概要は準備中です。原文の説明を表示しています。
athola/claude-night-market☆ 3412026年10月14日 更新
macOS attack hunting - foothold to root/persistence on a macOS host. TCC/Gatekeeper/SIP bypass, keychain + credential loot, code-signing/entitlements abuse, XPC/dylib/library injection, launch-constraint evasion, MDM/installer abuse. Wiki-first, FIND schema output.
日本語の概要は準備中です。原文の説明を表示しています。
Encod3d-Sec/TORCH☆ 3322026年9月1日 更新
Enterprise SSL VPN attack - vendor fingerprinting, CVE matrix (Cisco, Fortinet, Citrix, Palo Alto, Pulse/Ivanti), default credentials, pre-auth exploit commands. Wiki-first, FIND schema output.
日本語の概要は準備中です。原文の説明を表示しています。
Encod3d-Sec/TORCH☆ 3322026年9月1日 更新
Cloud attack hunting for AWS / Azure / GCP - credential discovery, metadata SSRF, IAM privesc, service enumeration, persistence. Scope + billing aware. Wiki-first, FIND schema output.
日本語の概要は準備中です。原文の説明を表示しています。
Encod3d-Sec/TORCH☆ 3322026年9月1日 更新
Local Windows privilege escalation on a STANDALONE / workgroup host, or a local shell on a domain member - foothold to SYSTEM. Token privileges (SeImpersonate/Potato), service misconfig (weak perms / unquoted path / writable binary), registry autologon creds, scheduled-task + writable-script abuse, DLL hijack, AlwaysInstallElevated, UAC bypass, credential loot. For DOMAIN escalation (kerberoast/DCSync/ADCS/BloodHound) use hunt-ad instead. Wiki-first, FIND schema output.
日本語の概要は準備中です。原文の説明を表示しています。
Encod3d-Sec/TORCH☆ 3322026年9月1日 更新
只读检索小红书公开内容,并把账号数据、标题、封面、互动量、作者近期内容和低粉爆款整理成可追溯证据。用户要求查公开账号或笔记数据时使用;不得点赞、收藏、评论、发布、删除或导出登录凭证。 English: Read-only research for public Xiaohongshu content, collecting traceable evidence such as account data, titles, covers, engagement, recent posts, and low-follower breakout examples. Use for public account or post research; never like, save, comment, publish, delete, or export credentials.
日本語の概要は準備中です。原文の説明を表示しています。
StopDisTrain/sdt-skills☆ 3092026年8月26日 更新
Generate Atlas Cloud images and videos through its asynchronous media API with schema-first model selection and credential-safe polling.
日本語の概要は準備中です。原文の説明を表示しています。
lingxling/awesome-skills-cn☆ 3072026年10月7日 更新
Provide comprehensive techniques for attacking Microsoft Active Directory environments. Covers reconnaissance, credential harvesting, Kerberos attacks, lateral movement, privilege escalation, and domain dominance for red team operations and penetration testing.
日本語の概要は準備中です。原文の説明を表示しています。
lingxling/awesome-skills-cn☆ 3072026年10月7日 更新
Guide Claude to use SigCLI correctly — check auth, login, get credentials, configure providers, and onboard new websites. Trigger when using sig commands, editing ~/.sig/config.yaml, or needing authenticated API access.
日本語の概要は準備中です。原文の説明を表示しています。
sigcli/sigcli☆ 2922026年9月28日 更新
Detect known malicious npm package versions and install-time supply-chain indicators in repositories, lockfiles, and node_modules. Use when a user mentions an npm compromise, Shai-Hulud, the Keyv/cacheable incident, suspicious preinstall scripts, credential-stealing packages, or asks whether a JavaScript project was exposed to a package supply-chain attack. Do not use as a general CVE or license audit.
日本語の概要は準備中です。原文の説明を表示しています。
majiayu000/spellbook☆ 2872026年10月8日 更新
Set up Cloud Run Jobs with CloudSQL connection. Use when: (1) Deploying long-running batch jobs that need database access, (2) Errors like "Cloud SQL Proxy not found" in container, (3) "password authentication failed" despite correct credentials, (4) Job creation fails with permission errors. Covers socket path configuration, IAM permissions, and common gotchas.
日本語の概要は準備中です。原文の説明を表示しています。
divinevideo/divine-mobile☆ 2662026年10月14日 更新
Statically analyze code to detect security vulnerabilities including buffer overflows, injection risks (SQL, command, XSS), insecure deserialization, improper authentication, hard-coded credentials, and unsafe cryptography. Use when: (1) Performing security code review, (2) Analyzing code for OWASP Top 10 vulnerabilities, (3) Identifying CWE-classified weaknesses, (4) Generating security audit reports, (5) Reviewing code before deployment, or (6) Assessing third-party code security. Findings categorized by CWE ID and severity (Critical/High/Medium/Low).
日本語の概要は準備中です。原文の説明を表示しています。
ArabelaTso/Skills-4-SE☆ 2532026年8月21日 更新
Configure email verification, implement password reset flows, set password policies, and customise hashing algorithms for Better Auth email/password authentication. Use when users need to set up login, sign-in, sign-up, credential authentication, or password security with Better Auth.
日本語の概要は準備中です。原文の説明を表示しています。
better-auth/skills☆ 2222026年9月1日 更新
The order of operations for an Active Directory penetration test: setup, collection, exploitation, post-processing. Use this whenever you are planning or driving an AD assessment and need to know what to run before what and why (map before you exploit; harvest easy credentials before spraying to avoid lockouts; collect the graph before you reason about paths). Covers phase sequencing with standard tooling: netexec/nxc, impacket, certipy, bloodyAD, kerbrute, BloodHound CE. Invoke it at the start of an engagement, when deciding the next phase, or when a step feels out of order.
日本語の概要は準備中です。原文の説明を表示しています。
ADScanPro/Claude-AD☆ 2112026年8月25日 更新
Audit agent skills, plugins, prompts, manifests, scripts, dependencies, and bundled assets for provenance, prompt-injection, permission, execution, exfiltration, persistence, and update risk. Use when evaluating a third-party skill before installing, enabling, updating, publishing, or distributing it; reviewing an untrusted SKILL.md, agent configuration, MCP integration, archive, or repository; comparing a package with a known-good version; or investigating unexpected tool, network, credential, or filesystem behavior.
日本語の概要は準備中です。原文の説明を表示しています。
seb1n/awesome-ai-agent-skills☆ 2112026年8月10日 更新
Implement OAuth 2.0 authentication flows including authorization code with PKCE, client credentials, and device code for secure API integration. Use when the user requests oauth 2 0 setup or provides relevant inputs for this workflow.
日本語の概要は準備中です。原文の説明を表示しています。
seb1n/awesome-ai-agent-skills☆ 2112026年8月10日 更新
Clear stored Woz credentials and log out.
日本語の概要は準備中です。原文の説明を表示しています。
WithWoz/wozcode-plugin☆ 2092026年8月18日 更新
Provider-independent provenance, rights, consent, disclosure, and release governance for AI-generated media. Use when producing or reviewing generated images, video, audio, ads, avatars, product content, social clips, documentaries, localization, music, sound, or campaign assets that need source-rights checks, model/provider term checks, likeness or voice consent, trademark/logo review, copyrighted-character/style risk triage, music licensing, C2PA/content credentials, provenance ledgers, release notes, platform disclosures, jurisdiction/client caveats, or rights QA.
日本語の概要は準備中です。原文の説明を表示しています。
calesthio/generative-media-skills☆ 2032026年7月14日 更新
Operate professional paid advertising across Google, Meta, YouTube, LinkedIn, TikTok, Microsoft, Apple, Amazon, Reddit, Pinterest, Snapchat, and X. Use for account intake, source-grounded audits, strategy, budget and measurement planning, creative production, experiments, reporting, monitoring, and explicitly approved campaign changes. Also trigger on PPC, paid social, retail media, attribution, tracking, landing pages, cross-platform conversion totals, negative keywords or search terms, beta-feature scoring, stale platform claims, API-token or credential setup, campaign deletion, and safe Claude Ads installation or uninstall.
日本語の概要は準備中です。原文の説明を表示しています。
skillmds/skillmd☆ 1982026年10月9日 更新
CISO operacional enterprise para gestao total de credenciais e segredos.
日本語の概要は準備中です。原文の説明を表示しています。
skillmds/skillmd☆ 1982026年10月9日 更新
Security forensics for git repos, AI skills, and MCP servers. Audits dependencies, detects prompt injection, credential theft, runtime dynamism, manifest drift, known CVEs, CISA KEV (actively exploited) vulns, and 2026 attack patterns. Not for fixing vulnerabilities or pentesting.
日本語の概要は準備中です。原文の説明を表示しています。
alexgreensh/repo-forensics☆ 1922026年10月13日 更新
Cross-agent self-inspection of your AI-agent stack. Audits skills, MCP servers, hooks, plugins, commands, credentials, and memory files across Claude Code, Codex, OpenClaw, and NanoClaw. Produces a structured inventory and narrative briefing with cross-ecosystem risk analysis. Use when the user asks to audit their own setup, check what they have installed, review their agent stack security posture, or understand cross-tool interactions. Use when a user has accumulated skills/plugins/MCP servers over time and wants visibility into their attack surface. Use after installing new skills or plugins. Do NOT use for vetting external code before install (that is repo-forensics). Do NOT use for incident response during active attacks. Do NOT use for fixing or patching vulnerabilities (forensify is read-only).
日本語の概要は準備中です。原文の説明を表示しています。
alexgreensh/repo-forensics☆ 1922026年10月13日 更新