7,550 件 ・ 関連度順
概要と使いどころ
Understand the mechanics of Border Gateway Protocol (BGP) Hijacking, where an attacker creatively manipulates Internet routing tables to intercept, monitor, or drop massive volumes of network traffic destined for legitimate Autonomous Systems (AS).
日本語の概要は準備中です。原文の説明を表示しています。
Exploit misconfigurations in AWS Cognito, specifically focusing on unauthorized identity pool access, user pool self-registration issues, and privilege escalation via custom attributes to access broader AWS infrastructure.
日本語の概要は準備中です。原文の説明を表示しています。
Implement the 5-stage Funnel workflow (Notes → Leads → Primitives → Findings → Reports) for structured bug bounty hunting. Based on Critical Thinking Bug Bounty Podcast Episode 166.
日本語の概要は準備中です。原文の説明を表示しています。
White-box source code security review structured around OWASP ASVS 5.0 (427 verification requirements across 16 chapters). Reads and understands application source code to build a security-aware knowledge base that enriches all downstream skills. Covers: tech stack identification, route/endpoint mapping, authentication and authorization architecture, dangerous function patterns, source-to-sink data flow tracing, IaC review, dependency analysis, ASVS compliance mapping, and LLM integration security (prompt injection, tool abuse, output handling, RAG poisoning, MCP server patterns). When LLM/AI framework usage is detected, automatically reviews OWASP LLM Top 10 patterns from source code and chains into /ai-redteam with white-box context for live endpoint testing. Chains into /pentester, /threat-modeling, /web-exploit, /api-security, /cloud-security, /analyze-cve, /credential-audit, and /ai-redteam — providing white-box context that transforms black-box testing into targeted, informed assessment.
日本語の概要は準備中です。原文の説明を表示しています。
AI/LLM red-team assessment using the OWASP LLM Top 10 (2025) + OWASP AI Testing Guide (AITG v1, Nov 2025) frameworks, plus OWASP MCP Top 10 runtime testing for agentic/MCP targets. Tests prompt injection, jailbreaks, system prompt leakage, sensitive data extraction, excessive agency, improper output handling, model extraction, content bias, evasion, membership inference, MCP token exposure, MCP command injection, and more. Uses four tools in combination: FuzzyAI (single-turn jailbreak fuzzing), PyRIT (multi-turn orchestrated attacks), Garak (probe-based vulnerability scanning), and promptfoo (plugin-based red-team evaluation). Each tool covers different OWASP categories; running them together gives systematic coverage. Includes a conditional MCP reconnaissance phase and a post-access AI infrastructure phase (chained from /post-exploit). Produces: OWASP LLM Top 10 + AITG + MCP coverage matrix, findings per category, architecture diagram of the AI system, PoCs for confirmed exploits. Chains into /gh-export for issue filing.
日本語の概要は準備中です。原文の説明を表示しています。
Bootstrap a new standalone skill repo under gaia-research/ from the canonical template set at gaia-research/gaia-research/templates/skill-repo/. Handles the full flow: interactive prompts for all placeholders, fetches templates via the GitHub API, substitutes values, creates the new repo (gaia-research/skill-<name>), writes README.md / SKILL.md / install.sh / .gitignore / LICENSE / powered-by-gaia.svg, makes the initial commit and pushes. Also supports update mode: re-applies the template structure to a pre-existing skill repo and opens a draft PR with the drift. Use when the user says "new skill repo", "bootstrap a skill repo", "/skill-template", "create skill-foo", "spin up a gaia-research skill repo", "template a new skill", "align skill-fuse to the template", or "/skill-template update <repo>". Requires: gh CLI (authenticated with gaia-research org access), python3, git.
日本語の概要は準備中です。原文の説明を表示しています。
Explore a feature or CLI, repair verified defects, review adversarially, and leave one existing or new PR ready for its authorized reviewer. Use for "explore X", "test and ship X", "run the pipeline on X", "stress-test X", or "take X through the full pipeline" when exploration and integration matter. Supports lean autonomous, structured economy (default), and explicit hard-gated runs. Routine checkpoints do not require user approval; actual founder, L4, security, schema and merge gates always apply. Not for a one-file edit with no exploration need. Uses scripts/state.sh for resumable checkpoints.
日本語の概要は準備中です。原文の説明を表示しています。
EPUB ebook creation and processing — structure, metadata, validation — use when generating or parsing ebooks.
日本語の概要は準備中です。原文の説明を表示しています。
Organize files so you can find anything: naming conventions, folder structures, archiving, and deduplication. Use when digital clutter slows you down or you're setting up a new system.
日本語の概要は準備中です。原文の説明を表示しています。
Structured differential diagnosis — generating, prioritizing, and ruling out diagnostic hypotheses.
日本語の概要は準備中です。原文の説明を表示しています。
Apply the devil's advocate technique: structured critical thinking that stress-tests ideas, plans, and decisions. Use when you need honest critique before committing to something important.
日本語の概要は準備中です。原文の説明を表示しています。
Run professional Discord servers — community structure, moderation, events, bots, and engagement for teams and audiences.
日本語の概要は準備中です。原文の説明を表示しています。
Django guidance — project structure, ORM mastery, admin, auth, async views, and production deployment.
日本語の概要は準備中です。原文の説明を表示しています。
Run structured design critiques with frameworks for feedback that is honest, specific, and actionable.
日本語の概要は準備中です。原文の説明を表示しています。
Crystal structure fundamentals — lattices, space groups, Miller indices, and reading crystallographic data correctly.
日本語の概要は準備中です。原文の説明を表示しています。
Idiomatic modern C#: nullable reference types, records, async/await, LINQ, and .NET project structure. Use when writing, reviewing, or structuring C# applications.
日本語の概要は準備中です。原文の説明を表示しています。
Structured code review discipline: correctness, design, readability, and security checks with actionable feedback. Use when reviewing diffs, PRs, or code snippets before merge or after writing.
日本語の概要は準備中です。原文の説明を表示しています。
Clarify career direction, set goals, and build actionable development plans through structured coaching.
日本語の概要は準備中です。原文の説明を表示しています。
Plan a structured career change with skill-gap analysis, bridge roles, and a de-risked transition timeline.
日本語の概要は準備中です。原文の説明を表示しています。
Capacity planning — forecasting demand, sizing infrastructure, and avoiding both outages and waste — use when scaling systems.
日本語の概要は準備中です。原文の説明を表示しています。
Structured ideation for technical problems: divergent generation, constraint framing, and convergent selection. Use when stuck on a design, naming, architecture, or feature approach and need fresh options.
日本語の概要は準備中です。原文の説明を表示しています。
Craft effective AI image prompts with structured syntax, style control, and iterative refinement techniques.
日本語の概要は準備中です。原文の説明を表示しています。
Generate UI with AI tools effectively: prompt structure, design-system grounding, iteration technique, and evaluating output quality. Use when using AI to create interfaces.
日本語の概要は準備中です。原文の説明を表示しています。
Build and run affiliate programs — recruitment, commission structures, partner enablement, and fraud prevention.
日本語の概要は準備中です。原文の説明を表示しています。