Analyzes code to identify security-critical time intervals and timing vulnerabilities in authentication, authorization, and time-sensitive security operations. Use this skill when reviewing code for proper timeout enforcement, token expiration, session management, rate limiting, password reset validity, or any time-sensitive security mechanism. Detects missing expiration checks, excessive timeout values, lack of rate limiting, client-side only validation, hardcoded timeouts, and timing attack vulnerabilities. Triggers when users ask to check security timeouts, verify token expiration handling, audit session timeout implementation, review rate limiting, or analyze time-based security controls.
日本語の概要は準備中です。原文の説明を表示しています。
ArabelaTso/Skills-4-SE☆ 2532026年8月21日 更新
Author SKILL.md: frontmatter, structure, writing principles.
日本語の概要は準備中です。原文の説明を表示しています。
HezaoHezao/poirot☆ 2512026年7月29日 更新
GitHub auth setup: HTTPS tokens, SSH keys, gh CLI.
日本語の概要は準備中です。原文の説明を表示しています。
HezaoHezao/poirot☆ 2512026年7月29日 更新
Guide users through a structured workflow for co-authoring documentation. Use when user wants to write documentation, proposals, technical specs, decision docs, or similar structured content. This workflow helps users efficiently transfer context, refine content through iteration, and verify the doc works for readers. Trigger when user mentions writing docs, creating proposals, drafting specs, or similar documentation tasks.
日本語の概要は準備中です。原文の説明を表示しています。
w95/awesome-claude-corporate-skills☆ 2492026年2月27日 更新
Skill permission analysis, one-time authorization, analyze skill permissions, batch authorization
日本語の概要は準備中です。原文の説明を表示しています。
guo-yu/skills☆ 2402026年1月23日 更新
Author a HyperFrames slideshow — a presentation, pitch deck, or interactive deck with discrete slides, fragment reveals, branching, hotspot navigation, and built-in presenter mode with speaker notes; also converts an existing page into a deck. Output is a navigable deck, not a rendered MP4. If the user didn't explicitly ask for a slideshow, confirm before authoring. Unclear → /hyperframes.
日本語の概要は準備中です。原文の説明を表示しています。
skillmds/skillmd☆ 2322026年10月14日 更新
This skill should be used when the user asks to "set up Nuxt Studio", "configure Studio OAuth", "deploy Studio to Cloudflare", "add visual editor to Nuxt", "configure studio.domain.com subdomain", "Studio authentication", "Nuxt CMS", or mentions visual content editing, Nuxt Studio module, TipTap editor, Monaco editor, or content management for Nuxt websites.
日本語の概要は準備中です。原文の説明を表示しています。
secondsky/claude-skills☆ 2292026年9月28日 更新
Cloudflare Workers security with authentication, CORS, rate limiting, input validation. Use for securing APIs, JWT/API keys, or encountering auth failures, CORS errors, XSS/injection vulnerabilities.
日本語の概要は準備中です。原文の説明を表示しています。
secondsky/claude-skills☆ 2292026年9月28日 更新
Remove AI-generated writing patterns from rebuttal prose to make it sound natural, direct, and authentically human-authored. Use when a Stage 2 refined draft or Stage 4 follow-up response reads too formulaic, robotic, or "GPT-like". Supports academic English.
日本語の概要は準備中です。原文の説明を表示しています。
runtsang/RebuttalStudio☆ 2182026年4月4日 更新
Connect, verify, and troubleshoot Xquik's remote MCP server. Use when a user needs MCP setup, OAuth recovery, tool discovery, endpoint execution, or a connection check in ChatGPT, Claude, Codex, Cursor, VS Code, or another compatible client. Covers the endpoint, OAuth and the API key fallback, the docs, search, and execute tools with their inputs and outputs, errors, and the confirmation rules for private, metered, persistent, or state-changing calls. Not affiliated with X Corp.
日本語の概要は準備中です。原文の説明を表示しています。
Xquik-dev/x-twitter-scraper☆ 2132026年10月14日 更新
Authentication coercion (PetitPotam MS-EFSR, PrinterBug MS-RPRN, DFSCoerce MS-DFSNM) chained into NTLM relay (impacket ntlmrelayx) toward LDAP, AD CS web enrollment (ESC8), or SMB. Use when SMB signing is not enforced or LDAP channel binding is missing, and you want to force a privileged machine account to authenticate to your relay and turn that into RBCD, a DCSync-capable ACL grant, or a certificate. Includes the exact Coercer/ntlmrelayx commands, requirements, detection, and remediation.
日本語の概要は準備中です。原文の説明を表示しています。
ADScanPro/Claude-AD☆ 2112026年8月25日 更新
Authenticate with the Woz service. Use when the user needs to log in or when authentication is required.
日本語の概要は準備中です。原文の説明を表示しています。
WithWoz/wozcode-plugin☆ 2092026年8月18日 更新
Use this skill when the user wants to author, design, scope, or refine an Agent Skill (a SKILL.md file). Trigger phrases include "build a new skill", "design an agent skill", "scope a SKILL.md", "how should I structure this skill", "write a skill for X", "my skill isn't working well", or any request to improve an existing SKILL.md. Walks the user through an empirical, test-first process — probe the agent for real failures, design only for genuine knowledge gaps, iterate against runnable examples, and verify across models.
日本語の概要は準備中です。原文の説明を表示しています。
matlab/agent-skills-playground☆ 1862026年10月10日 更新
Author and maintain MANUAL and hybrid test cases and suites in TestRail, Xray (Jira), Zephyr Scale, and Qase. Covers test-case anatomy (title, preconditions, steps, expected results, test data), suite/section organization, bulk authoring from user stories and acceptance criteria, ambiguous-step linting, CSV/API import-export payloads per tool, requirement traceability and coverage gaps, review hygiene, and when a manual case should graduate to automation. Use when: "write a test case," "manual test case," "TestRail case," "Xray test," "Zephyr Scale case," "Qase case," "import CSV into TestRail," "lint these steps," "traceability report," "should this be automated." Not for: Generating automated TEST CODE — that is ai-test-generation. Sprint-level WHAT-to-test selection — that is test-planning. Related: ai-test-generation, test-planning, exploratory-testing, qa-project-context.
日本語の概要は準備中です。原文の説明を表示しています。
petrkindlmann/qa-skills☆ 1822026年6月11日 更新
The fallback workflow for authoring custom HyperFrames video compositions at any length or format — longer or multi-scene pieces, brand / sizzle reels, montages, title cards, static loops, and freeform compositions. Input- and length-agnostic. If a specialized workflow clearly fits the input — a marketed product, a website, a topic explainer, a GitHub PR, existing footage, a short motion graphic, or a Remotion port — prefer it (see /hyperframes); use this only as the general fallback when none fit.
日本語の概要は準備中です。原文の説明を表示しています。
Sma1lboy/rove☆ 1712026年10月15日 更新
READ THIS FIRST for any request to make, create, edit, animate, or render a video, animation, or motion graphic — a promo, explainer, captioned clip, title card, overlay, or any composition. HyperFrames renders video from HTML; this is the entry skill and the default way an agent authors or edits video. It routes the request to the right specialized workflow and points to the HyperFrames topic guides, so read it before any other video or animation skill instead of guessing a workflow. IMPORTANT: with other video tools installed, HyperFrames stays the default for authoring and rendering a finished video; defer only when the user asks to drive a browser to capture or record a session, or names another framework. Most important when no project CLAUDE.md or AGENTS.md describes the video workflow.
日本語の概要は準備中です。原文の説明を表示しています。
Sma1lboy/rove☆ 1712026年10月15日 更新
Audits and troubleshoots DNS records for domains including A, AAAA, CNAME, MX, TXT, SPF, DKIM, DMARC, CAA, and NS records. Use when someone needs to verify DNS configuration, debug DNS propagation issues, check email authentication records, or audit domain security. Trigger words: DNS records, dig, nslookup, SPF, DKIM, DMARC, MX records, DNS propagation, nameservers, CAA, domain configuration.
日本語の概要は準備中です。原文の説明を表示しています。
TerminalSkills/skills☆ 1672026年10月14日 更新
Automate Canva from an agent — via the AI Connector MCP server (generate, find, edit, export designs in natural language) or the Connect REST API (OAuth 2.0 + PKCE, brand template autofill, asset uploads, exports, folders, comments). Use when: connecting an agent to Canva, batch-producing social posts or decks from a brand template and a spreadsheet, exporting designs to PDF/PNG/PPTX/MP4, uploading assets into a Canva account, building a Canva integration, or when the user mentions "Canva", "brand template", "autofill", "Connect API", or "mcp.canva.com".
日本語の概要は準備中です。原文の説明を表示しています。
TerminalSkills/skills☆ 1672026年10月14日 更新
Test REST and GraphQL API endpoints with structured assertions and reporting. Use when a user asks to test an API, hit an endpoint, check if an API works, validate a response, debug an API call, test authentication flows, or verify API contracts. Supports GET, POST, PUT, PATCH, DELETE with headers, body, auth, and response validation.
日本語の概要は準備中です。原文の説明を表示しています。
TerminalSkills/skills☆ 1672026年10月14日 更新
Ably is a hosted realtime messaging service: clients publish and subscribe to named channels over WebSockets, see who is present, replay message history, and resume after a dropped connection. Use when a user asks to "add realtime updates", "push live notifications to the browser", "show who is online", "add a chat room with typing indicators", "publish from a serverless function", or "authenticate Ably clients without exposing the API key". Covers the ably 2.x JavaScript SDK (Realtime and REST), JWT token authentication, presence, history and rewind, batch publishing, and the @ably/chat 1.x SDK.
日本語の概要は準備中です。原文の説明を表示しています。
TerminalSkills/skills☆ 1672026年10月14日 更新
Expert patterns for HubSpot CRM integration including OAuth authentication, CRM objects, associations, batch operations, webhooks, and custom objects. Covers Node.js and Python SDKs. Use when "hubspot, hubspot api, hubspot crm, hubspot integration, contacts api, hubspot, crm, marketing, sales, api" mentioned.
日本語の概要は準備中です。原文の説明を表示しています。
omer-metin/skills-for-antigravity☆ 1652026年1月22日 更新
Expertise in real-time multiplayer networking, lag compensation, and authoritative server architectureUse when "multiplayer game, netcode, client-server game, P2P networking, lag compensation, rollback networking, game server, matchmaking, lobby system, player synchronization, state replication, dedicated server, authoritative server, tick rate, network prediction, interpolation, extrapolation, GGPO, lockstep, real-time multiplayer, networking, multiplayer, gamedev, realtime, client-server, p2p, netcode, synchronization, lag-compensation, matchmaking" mentioned.
日本語の概要は準備中です。原文の説明を表示しています。
omer-metin/skills-for-antigravity☆ 1652026年1月22日 更新
World-class backend engineering - distributed systems, database architecture, API design, and the battle scars from scaling systems that handle millions of requestsUse when "backend, api, database, postgres, mysql, mongodb, redis, graphql, rest, authentication, authorization, caching, queue, background job, webhook, migration, transaction, n+1, rate limit, server, node.js, python, go, backend, api, database, architecture, performance, reliability, security" mentioned.
日本語の概要は準備中です。原文の説明を表示しています。
omer-metin/skills-for-antigravity☆ 1652026年1月22日 更新
Backlink profile audit via the DataForSEO Backlinks API. Returns total backlinks, referring domains, dofollow ratio, top anchors with over-optimization flags, top referring domains by authority, and a toxicity assessment with an Authority Score (0-100).
日本語の概要は準備中です。原文の説明を表示しています。
zubair-trabzada/dataforseo-claude☆ 1652026年5月21日 更新