AIGC 创作工作流 (AIGC 创作工作流 / AIGC Creative Workflow — 以「生成式 AI 视觉创作(图像 + 视频)的工程化创作流水线」为对象的认知操作系统:从「需求/概念(要做什么画面/镜头/风格)→ 模型与工具选型(Midjourney / Stable Diffusion·SDXL·Flux / ComfyUI / 可灵 Kling / 即梦 Jimeng / Runway / Vidu / Sora)→ Prompt 与参数设计(提示词工程、风格描述、负向、种子、CFG/步数/采样器、参考图)→ 可控生成(ControlNet / LoRA / IPAdapter / inpainting / 图生图 / 局部重绘 / 区域控制)→ 批量出图与筛选 → 精修与合成(放大/超分、修手修脸、PS/AE 后期、抠图合成)→ 图生视频/文生视频(首尾帧、运镜、时长、一致性、对口型)→ 商业交付与迭代复现(参数留存、工作流文件复用、版权与可商用判断)」的完整创作-工程-交付决策链。覆盖 (a) 第一性张力 — **可控性/工程化复现(ControlNet/LoRA/ComfyUI 节点工作流/固定种子与参数/可复现可迭代)⇄ 随机性/抽卡玄学(出图随机、prompt 玄学、抽卡刷图、靠运气)**;**审美/创意/艺术指导主导(人的审美判断、概念设计、构图、镜头语言、艺术总监能力——'模型是地板,审美是天花板')⇄ 工具/模型/参数主导(堆模型能力、堆参数、堆 LoRA、以为换个大模型就行)**;**开源生态/本地可控(Stable Diffusion / ComfyUI / Flux / civitai / liblib 本地部署可定制可控可商用、显卡门槛)⇄ 闭源商业/易用黑盒(Midjourney / 可灵 / 即梦 / Runway 开箱即用但不可精控、按量付费、黑盒)**;**图像生成(T2I/I2I:Midjourney / SDXL / Flux)⇄ 视频生成(T2V/I2V:可灵 / Runway Gen-3 / Vidu / 即梦 / Sora,2024-2025 前沿从图迁移到视频)**;**生产力/商业量产(替代或增强传统设计/插画/电商/广告/影视分镜流程、降本提效、批量)⇄ 纯艺术创作/作者表达(个人风格、实验性、作品集)**;**效率/批量(一次出几十张筛选、商单走量、自动化 pipeline)⇄ 质量/精控(单张精修、商业可用级细节、修手修脸修穿帮)**。(b) 核心工作流 / pipeline(最标准、最易蒸高质量 + CLI 化)— 单图创作链:概念/参考收集(moodboard/风格定位/竞品)→ 模型工具选型(按可控性/风格/成本/可商用判断 MJ vs SD/Flux vs 国产)→ Prompt 与参数设计(主体/风格/光影/镜头/负向词/CFG/采样器/分辨率/种子)→ 首轮出图与方向筛选 → 可控迭代(ControlNet 控构图/姿态/线稿、LoRA 控风格/角色一致性、图生图重绘、inpainting 局部修)→ 放大超分与精修(高清放大/修手修脸/后期调色合成)→ 交付与参数留存(工作流文件/种子/参数复现)。视频创作链:分镜/脚本→首帧出图(图像链产出关键帧)→图生视频(运镜/时长/首尾帧/动态强度)→多镜头一致性(角色/场景/风格统一)→对口型/配音/配乐→剪辑合成→交付。ComfyUI 工程链:节点工作流搭建(加载器/采样/ControlNet/放大/面部修复节点)→ 参数化与复用→批量队列→工作流分享(civitai/openart workflow json)。(c) 工具栈 — 闭源图像(Midjourney v6/v7、DALL·E 3、Adobe Firefly、Ideogram、Recraft)、开源图像与底座(Stable Diffusion 1.5/SDXL/SD3、Flux.1 dev/schnell(Black Forest Labs)、ComfyUI(节点式)、Automatic1111/Forge WebUI、Fooocus)、可控生成插件(ControlNet、LoRA、IPAdapter、AnimateDiff、inpainting/outpainting、ReActor 换脸、面部修复 CodeFormer/GFPGAN、放大 ESRGAN/SUPIR/Topaz)、模型/资源社区(Hugging Face、Civitai、liblib 哩布、吐司 Tusi、openart)、视频生成(可灵 Kling、即梦 Dreamina/Jimeng、Runway Gen-3/Gen-4、Luma Dream Machine、Pika、Vidu、海螺 Hailuo、Sora、Wan 通义万相、MiniMax)、辅助(Magnific 放大、Krea、Photoshop/After Effects 后期、ChatGPT/Claude 写 prompt、reverse prompt 反推)。(d) 知识正典 — AIGC 创作 canon 横跨论文/工程/社区教程:奠基论文(DDPM、Latent Diffusion/Stable Diffusion(Rombach et al)、DiT、ControlNet(Zhang et al)、LoRA、DreamBooth、Textual Inversion、SDEdit、IP-Adapter、视频扩散 SVD/Sora 技术报告)、官方文档与模型卡(Stability AI、Black Forest Labs Flux、ComfyUI 文档、Midjourney docs、可灵/即梦官方教程、Hugging Face diffusers)、社区教程与工作流(ComfyUI 官方示例、civitai 文章、B站/YouTube 创作者长教程、openart workflow)、prompt 工程资源(Midjourney 风格库、提示词指南)。(e) figures/流派 — 模型/工具创造者(Midjourney David Holz、Stability AI Emad/Robin Rombach、Black Forest Labs(Flux,原 SD 团队)、ComfyUI comfyanonymous、ControlNet 张吕敏 Lvmin Zhang、AUTOMATIC1111、可灵/即梦/快手字节团队)、创作者 KOL 与教育者(Midjourney/SD 头部创作者、ComfyUI 工作流大神、AI 视频创作者、国内 B站/抖音 AIGC 教程作者、独立 AI 艺术家)、行业分析与评测(AI 工具评测、生成式 AI 创作生态观察者)。流派分歧:开源可控派(SD/ComfyUI/Flux 本地精控)vs 闭源易用派(MJ/可灵开箱即用)、工程化派(节点工作流/可复现/参数化)vs 玄学抽卡派(prompt 玄学/堆词/抽卡)、审美主导派('模型是地板审美是天花板')vs 工具主导派(堆模型堆参数)、图像派 vs 视频派、艺术创作派 vs 商业生产力派、国产工具派(可灵/即梦/liblib)vs 海外工具派(MJ/Flux/Runway)。(f) 行业话术/黑话 — 出图 / 抽卡 / 刷图 / 炼丹(训练 LoRA)/ 喂图 / 垫图(参考图/图生图)/ 控图 / 锁种子 seed / CFG / 采样器 sampler / 步数 steps / 重绘幅度 denoise / 提示词 prompt / 咒语 / 负向 negative / 权重 / tag / 大模型 checkpoint / 底模 / LoRA / ControlNet / 控线稿/openpose/depth / IPAdapter / inpainting 局部重绘 / outpainting 扩图 / 高清放大 / 超分 / 修手 / 崩手 / AI 味 / 风格 / 角色一致性 / 工作流 workflow / 节点 / 跑图 / 队列 / 文生图 T2I / 图生图 I2I / 文生视频 T2V / 图生视频 I2V / 首帧/尾帧 / 运镜 / 动态强度 / 时长 / 对口型 / 一致性 / 可商用 / 训练集 / 过拟合 / 翻车 / 穿帮。(g) 争议/批判 — 「版权与训练数据」(模型训练用未授权作品、生成图版权归属、可商用风险、洗图/伪原创)、「AI 替代创作者就业」(替代画师/插画师/设计师/摄影、行业冲击与转型)、「AI 味与审美趋同」(生成图同质化、套模板、缺乏原创审美)、「玄学 prompt 神话与割韭菜」('咒语'神秘化、'7天 AIGC 变现/月入过万'付费课割韭菜、抽卡当能力)、「工具快速迭代与淘汰焦虑」(模型月月换、工作流频繁失效、追新疲劳)、「开源 vs 闭源之争」(可控可商用 vs 易用黑盒)、「质量天花板」(修手修脸穿帮、长视频一致性、可控性仍有限)。(h) 大量隐性创作手艺 + 审美 + 工程 + 沟通软技能(prompt 的描述功底与审美词汇、参数与采样的手感、ControlNet/LoRA 的组合控制经验、节点工作流的搭建与调试、批量筛选的审美眼力、修图合成的后期功底、镜头语言与运镜设计、角色/风格一致性的控制、商业需求的翻译与交付、版权与可商用的判断)是高 tacit、靠大量实操跑图 + 审美积累 + 工程调试经验的核心。水分极高(大量'咒语速成/一键变现/AI 绘画割韭菜'营销
日本語の概要は準備中です。原文の説明を表示しています。
swaylq/master-skill☆ 1572026年9月6日 更新
Odoo 19 development knowledge base with 18 specialized guides covering Actions (ir.actions.*, cron jobs, server actions), Controllers (HTTP routing, endpoints, auth types), Data files (XML/CSV records, shortcuts, noupdate), API Decorators (@api.depends, @api.constrains, @api.ondelete, @api.onchange, @api.model, @api.private), SQL Constraints (models.Constraint replacing _sql_constraints), Database Indexes (models.Index), Module development (manifest, wizards, reports), Field types (Char, Text, Monetary, relational fields), Manifest configuration (__manifest__.py, dependencies, asset bundles), Mixins (mail.thread, mail.activity.mixin, mail.alias.mixin, utm.mixin), ORM Model methods (search, CRUD, domain filters, recordsets, CamelCase model naming), Migration scripts (pre/post/end hooks, data migration), OWL frontend components (hooks, services, lifecycle), Performance optimization (N+1 prevention, batch ops, _read_group), QWeb Reports (PDF/HTML, paper formats, barcodes, t-out), Security/ACL (record rules, field permissions, privilege-based groups, @api.private), Testing (TransactionCase, HttpCase, mocking, query count assertions), Transactions (savepoints, UniqueViolation, serialization failures), Translations (i18n, PO files, translatable fields), XML Views (list/form/search, kanban card templates, xpath inheritance, QWeb templates). Use when writing, reviewing, or debugging any Odoo 19 Python or XML code, creating or modifying modules, fixing performance issues, or looking up Odoo 19 API patterns and best practices. Includes CSS/SCSS asset authoring and review for Odoo addons.
日本語の概要は準備中です。原文の説明を表示しています。
unclecatvn/agent-skills☆ 1452026年9月24日 更新
Your team has high autonomy — and standups are vague, weekly meetings drift into status reports, and 1:1s produce nothing but "I'm fine." This playbook fixes all three layers at once. What's inside: • Daily Standup system — 3-field format, good sample, 4 COO principles to keep it honest • Weekly Meeting — strict 25-min agenda, Scrum Master rotation, 0–10 pulse check • 1:1 Framework — 9-dimension quantified pulse, 5-group deep question bank, bilateral feedback structure • Diagnostic layer — "stuck-at" detection: info / authority / collaboration / capability / direction • FAQ for 4 common failure modes (dead standups, status-report meetings, "I'm fine" 1:1s, scaling beyond 10 people) 🇨🇳 你的团队自由度很高——但 standup 越来越糊,例会变成汇报,1:1 问不出真话。这套三层 Motivation 操作手册解决的正是这件事:standup 是信息层,例会是对齐层,1:1 是个人层。三件事做好了,motivation 不是管出来的,是长出来的。 🇯🇵 チームの自律性は高いのに、スタンドアップは曖昧で、週次ミーティングは進捗報告になり、1on1では「大丈夫です」しか返ってこない——このプレイブックは、その3層すべてを同時に解決します。 🇰🇷 팀의 자율성은 높은데 스탠드업은 두루뭉술하고, 주간 회의는 진척 보고가 되어버리고, 1:1에서는 진심을 들을 수 없다면 — 이 플레이북이 세 레이어 모두를 동시에 해결합니다. Triggers: "团队 motivation" | "standup 没人写" | "例会变成汇报" | "1:1 问不出真话" | "高自由度团队管理" | "COO 如何管人" | "team motivation" | "standup best practices" | "1on1 framework" | "weekly meeting template" | "チームモチベーション" | "팀 동기부여" | "AI startup team ops" | "remote team alignment" | "engagement下降"
Gingiris-1031/gingiris-skills☆ 842026年10月8日 更新
Transforms Claude into a CFA-level financial analyst for specialty finance, regulatory compliance, and industry-specific analysis. Use when performing private credit pricing, insurance reserving, FP&A variance analysis, wealth planning, restructuring recovery analysis, real estate valuation, venture capital analysis, ESG assessment, regulatory capital analysis (Basel III), compliance reporting (MiFID II, GIPS), credit derivatives (CDS, CVA), convertible bond analysis, lease accounting (ASC 842/IFRS 16), pension funding/LDI, sovereign risk assessment, real option valuation, equity research (SOTP, target price), commodity spread trading, treasury operations, PPP infrastructure modelling, onshore fund structuring, offshore fund structuring, transfer pricing analysis (BEPS, Pillar Two), tax treaty optimisation, FATCA/CRS compliance, economic substance analysis, regulatory reporting (AIFMD, Form PF), AML/KYC compliance, crypto/DeFi analysis, municipal bond analysis, structured products, trade finance, fund of funds (J-curve, commitment pacing, manager selection, secondaries), bank analytics (NIM, CAMELS, CECL, deposit beta, loan book), carbon markets (credit pricing, ETS, CBAM, offsets, shadow carbon price), or private wealth (concentrated stock, philanthropic vehicles, wealth transfer, direct indexing, family governance) analysis is required. Pairs with corp-finance-mcp tools for computation.
日本語の概要は準備中です。原文の説明を表示しています。
FDU-INS/Insurance-Skills☆ 772026年7月12日 更新
Use when developing in packages/agent-core-v2 (the DI × Scope agent engine) — adding or modifying a domain Service, choosing a LifecycleScope, wiring DI dependencies, splitting a domain across scopes, owning or migrating a config section, gating behavior behind an experimental flag, raising coded errors, working on the permission system, writing DI/Scope tests, porting business logic from agent-core (v1) to v2, triaging a main-branch commit against v2, or exposing a v2 domain over server-v2 while keeping the /api/v1 wire contract compatible with released clients. Self-contained guide organized by development stage (orient → design → implement → test → verify) plus align workflows for v1→v2 migration, main-branch commit triage, and server-v2 wire exposure; each file carries the rules, examples, and red lines for its step.
日本語の概要は準備中です。原文の説明を表示しています。
PyModel/pythinker-code☆ 292026年10月14日 更新
houtu-dependencies enterprise-grade Spring Cloud microservice foundational framework complete usage guide. GroupId is io.github.lujiafa, covering unified response, exception handling, parameter parsing, session authentication, permission control, signature verification, anti-replay, distributed lock, rate limiting, database field encryption, config decryption, access logging, canary routing, weighted load balancing, Feign enhancement, Sentinel circuit breaking, service discovery, Swagger documentation, crypto utilities, HTTP client, monitoring metrics, and other enterprise-grade capabilities. When the project build file (pom.xml or build.gradle/build.gradle.kts) contains io.github.lujiafa or houtu-related dependencies, or when the user mentions houtu or houtu-dependencies, this Skill must be read and code must be generated strictly following framework conventions. Even if the user is simply doing regular Spring Boot development (e.g., writing Controller, Service, Feign), as long as the project includes houtu, the houtu approach must be used instead of native Spring. When the user explicitly wants to use the houtu framework and the project has not yet included it, proactively add the BOM and required Starters; when the project already includes it, proactively identify and import required module dependencies based on business scenarios during coding, naturally integrating framework capabilities to enhance business services based on business semantics, rather than waiting for the user to specify each one.
日本語の概要は準備中です。原文の説明を表示しています。
lujiafa/houtu-project-skills☆ 262026年5月8日 更新
Replace sentence-by-sentence revised or paraphrased text back into an original paper or document while preserving the original formatting, typography, paragraph settings, citation layout, and document conventions as the source of truth. Use when the user provides revised text that maps back to original sentences, paragraphs, sections, or the whole document, but may also contain clear local sentence merges or splits, and asks to replace it back into the source, keep the original formatting, do sentence-by-sentence replacement, preserve original formatting, or only swap wording without rewriting the document. Only allow minimal edits to the rewritten text when fixing citation formatting, restoring protected original content, restoring the original person reference, or minimally splitting/merging text back into original sentence slots; otherwise do not improve grammar, style, logic, or wording.
日本語の概要は準備中です。原文の説明を表示しています。
zxzin/runpro☆ 232026年7月19日 更新
Email marketing operations and automation for B2B SaaS. Use this skill for newsletter strategy, email automation sequences, lifecycle campaigns, nurture workflows, onboarding sequences, deliverability optimization, email copywriting, lead scoring, marketing automation platform setup, and cold-email sending infrastructure — secondary sending domains, SPF/DKIM/DMARC, and domain warmup — plus the contact budget: a cross-channel frequency cap across every sender (marketing, sales sequences, customer success, in-app). Also triggers on: email, newsletter, drip campaign, lifecycle, nurture, onboarding sequence, deliverability, email automation, lead scoring, marketing automation, our emails are going to spam, SPF, DKIM, DMARC, sender reputation, sending domain, cold email domains, domain warmup, mailbox setup, blacklist, bounce rate, BIMI, brand logo in inbox, VMC, Verified Mark Certificate, Common Mark Certificate, transactional email, password reset emails going to spam, DMARCbis, RFC 9989, DMARC pct tag, DMARC t=y test mode, DMARC rollout, move DMARC to reject, frequency cap, email fatigue, customers get too many emails, too many messages, sales and marketing both emailing the same person, communication limits, send frequency safeguard, global frequency capping, quiet period, message precedence.
日本語の概要は準備中です。原文の説明を表示しています。
shalintripathi/saas-marketing-agents☆ 222026年10月14日 更新
Use when configuring org-wide platform settings: MFA enforcement, My Domain setup and deployment, session timeout and security settings, password policies, trusted IP ranges (Network Access), and CSP Trusted Sites. Owns these settings as deployable Settings metadata (Security.settings, MyDomain.settings, Company.settings, Language.settings) and the order in which a new org is stood up. Trigger keywords: 'MFA setup', 'My Domain', 'session settings', 'password policy', 'trusted IP ranges', 'CSP trusted sites', 'Security.settings', 'SecuritySettings metadata', 'MyDomainSettings', 'settings-meta.xml', 'enhanced domains', 'deploy org settings', 'new org setup order', 'sessionTimeout enum', 'lockSessionsToIp', 'enableAdminLoginAsAnyUser'. NOT for user-level login restrictions (use user-management), NOT for permission model design (use permission-sets-vs-profiles), NOT for security audit and hardening review (use security/org-hardening-and-baseline-config).
日本語の概要は準備中です。原文の説明を表示しています。
PranavNagrecha/AwesomeSalesforceSkills☆ 192026年10月4日 更新
Canonical patterns for writing custom MSBuild targets. Only activate in MSBuild/.NET build context. USE FOR: diagnosing and fixing custom target authoring anti-patterns, reviewing MSBuild target definitions for correctness, diagnosing broken SDK target chains across files (e.g., Directory.Build.targets silently redefining SDK targets), fixing targets that replace CompileDependsOn instead of extending it with $(CompileDependsOn), fixing query targets that return stale results due to Outputs vs Returns misuse, fixing missing Inputs/Outputs causing unnecessary rebuilds, fixing missing FileWrites registration. Covers DependsOnTargets vs BeforeTargets vs AfterTargets, the Build→CoreBuild three-level pattern, hooking into the build pipeline, the $(XxxDependsOn) chain-extension pattern. DO NOT USE FOR: incremental build tuning (use incremental-build), parallelization (use build-parallelism), general anti-patterns (use msbuild-antipatterns), non-MSBuild build systems.
日本語の概要は準備中です。原文の説明を表示しています。
bouclem/skills☆ 62026年5月31日 更新
Rory Sutherland's 'psycho-logic' approach to marketing, product, and business problems — solve the human perception, not just the engineering or economic metric. Use when the obvious 'logical' fix is expensive, slow, or already done by every competitor; when the user asks 'how do we make people want X', 'the product/price/funnel is fine but nobody converts', 'how do we stand out', 'is there a cheaper way to fix this', or mentions behavioral economics, nudges, irrational behavior, perception, or 'it doesn't make sense but it works'. This is the ROUTER skill: it diagnoses the problem in human terms, then dispatches to reframing, costly-signaling, counterintuitive-tests, or experience-design. Inspired by Rory Sutherland's book *Alchemy*. 日本語の相談(「商品はいいのに売れない」「値下げしかない?」「競合と差別化できない」)にも使う。中文咨询(“产品很好却卖不动”“只能降价吗?”“无法差异化”)也适用。For a catalogue of individual biases, use marketing-psychology (separate plugin) instead.
meikocho1/alchemy-marketing-skills☆ 42026年9月25日 更新
.NET advanced testing skills overview and navigation center. Triggered when users ask about "integration testing", "API testing", "containerized testing", "microservice testing", "test framework migration", "Testcontainers", "Aspire testing", and other advanced testing needs. Recommends appropriate sub-skills based on specific requirements, covering integration testing, Testcontainers, Aspire testing, framework upgrades, and other 8 advanced skills. Keywords: integration testing, integration testing, API testing, advanced testing, advanced testing, testcontainers, aspire testing, WebApplicationFactory, TestServer, database test, database testing, EF Core test, MongoDB test, Redis test, Docker test, container testing, microservice test, microservice testing, .NET Aspire, xUnit upgrade, TUnit, framework migration
日本語の概要は準備中です。原文の説明を表示しています。
rudironsoni/Synaxis☆ 22026年3月17日 更新
Phishing campaign execution methodology for authorized red team engagements. Covers end-to-end campaign lifecycle: infrastructure provisioning (GoPhish, SMTP relay configuration, domain acquisition and aging, SPF/DKIM/DMARC alignment), payload delivery vectors (Office macro weaponization, HTA droppers, ISO/IMG container abuse, LNK shortcut hijacking, OneNote embedded payloads, HTML smuggling), email authentication bypass techniques (SPF softfail exploitation, DKIM replay attacks, display name spoofing, homoglyph and cousin domain registration), credential harvesting with MFA bypass (EvilGinx2 transparent proxy, Modlishka session relay, pixel-perfect HTML cloning), spear phishing pretext development informed by OSINT, email security gateway evasion, QR code phishing (quishing), and callback phishing for initial access. Integrates with GoPhish for campaign management, EvilGinx2 for adversary-in-the-middle credential interception, King Phisher for template design, and the Social Engineering Toolkit for paylo...
日本語の概要は準備中です。原文の説明を表示しています。
ajtazer/heckit☆ 22026年10月7日 更新
Spring Bootの変更をビルド、コード解析、テスト、セキュリティ検査で確認するスキル。差分もレビューし、公開・デプロイ前の合否と修正点をまとめます。
- Spring BootのPR前に確認したいとき
- リファクタリングや依存更新後の検証
- テストカバレッジの目標を確認したいとき
affaan-m/ECC☆ 28万2026年10月12日 更新
Spring Bootの機能追加や不具合修正を、先にテストを書く手順で進めます。単体・Web層・データ保存のテストから結合テスト、カバレッジの確認まで扱います。
- テストからSpring BootのAPIを追加
- 不具合の再発防止テストを書きたいとき
- データの保存と取得を検証したいとき
affaan-m/ECC☆ 28万2026年10月12日 更新
Claude Codeのファイル編集時に、Planktonで自動整形とコード検査を行う設定を支援するスキル。残った違反の自動修正や再検査、検査ルールの保護も扱います。
- 編集のたびに整形・コード検査したいとき
- 残った検査違反の自動修正を設定
- 検査設定のルール緩和を防ぎたいとき
affaan-m/ECC☆ 28万2026年10月12日 更新
ルーターやスイッチ、Linuxの通信エラーや切断を調べ、両端の設定とエラー件数の増え方から、ケーブル不良や混雑などの原因を切り分けるスキル。
- 通信の途切れやパケット損失を調べたいとき
- スイッチのCRC増加を調べたいとき
- リンク両端の設定を比較したいとき
affaan-m/ECC☆ 28万2026年10月12日 更新
電子カルテに組み込む臨床判断支援を設計し、薬の相互作用や用量の検証、臨床スコアの計算、警告の重要度に応じた画面制御とテストを実装するスキル。
- 薬の相互作用とアレルギー確認の実装
- 患者情報に応じた用量検証
- NEWS2などの臨床スコアの実装
affaan-m/ECC☆ 28万2026年10月12日 更新
Review the current diff, or a PR number/branch/path target, for correctness bugs (plus reuse/simplification/efficiency cleanups where the model's review recipe covers them) at the given effort level (low|medium|high|xhigh|max: from few high-confidence findings up to many, some of them uncertain; ultra: deep multi-agent review in the cloud); with no level given, it reuses the level you typed last. Pass --comment to post findings as inline PR comments, or --fix to apply the findings to the working tree after the review. Pass --max-findings <n> to report up to n findings, or --max-findings all for every finding. The choice stays until you pass --max-findings default. For ultra on a GitHub.com PR target, --post asks to post the finished review’s findings to the PR as a single comment from the user’s GitHub account (not a review; the launch dialog still confirms in interactive sessions, while non-interactive mode posts on the flag alone) and --no-post hides that option.
日本語の概要は準備中です。原文の説明を表示しています。
asgeirtj/system_prompts_leaks☆ 7万2026年10月14日 更新
Delivers the weekly growth briefing as one merged read — whether the growth engine is working, what customers are saying in public and private, what competitors actually changed, and the three growth actions worth taking this week. The growth twin of the Monday brief, chaining growth-pulse and review-reputation and adding a web-native competitor scan, merged into a single page rather than three reports. Offers to run on a weekly cadence once, and sets it up on a yes. Use this whenever the owner wants a recurring or one-off growth check, including phrasings like "how's marketing doing," "growth check for the week," "give me my Monday growth brief," "what should I be doing about growth this week," "are we winning or losing out there," or "set up a weekly marketing update." Reach for it when the owner asks how the business is growing rather than how it is paying its bills.
日本語の概要は準備中です。原文の説明を表示しています。
anthropics/knowledge-work-plugins☆ 3万2026年10月14日 更新
Diagnose GKE TPU VM instances stuck in Compute Engine repair (REPAIRING state) after host errors, maintenance events, or faulty host reports in single-host, multi-host, dynamic slicing, and TPU All Capacity mode node pools. Use when TPU instances in a slice node pool remain in REPAIRING, host error events appear in audit logs, or TPU slices are unschedulable due to a VM in repair. Don't use for nodes reporting Ready: Unknown when no VM is in REPAIRING (use gke-ai-troubleshooting-node-unresponsive-timeout), other NotReady nodes when no VM is in REPAIRING (use gke-node-notready), Pending Pods when all nodes are Ready (use gke-workload-troubleshooting), JobSet preemption events (use gke-ai-troubleshooting-jobset-interruption), or Slice custom resource lifecycle failures (use gke-ai-troubleshooting-tpu-dynamic-slices-monitoring).
日本語の概要は準備中です。原文の説明を表示しています。
google/skills☆ 2.1万2026年10月15日 更新
Systematic methodology for identifying and exploiting cryptographic implementation weaknesses in real-world applications. Covers padding oracle attacks against CBC-mode ciphers with PKCS7 padding (Vaudenay's original attack through modern padbuster automation), ECB mode exploitation including block cut-and-paste and byte-at-a-time decryption, hash length extension attacks against SHA1/SHA256/MD5-based MACs using HashPump, RSA vulnerabilities including small public exponent, common modulus, Bleichenbacher PKCS1v1.5 padding oracle, and Coppersmith's method for partial key recovery. Addresses weak PRNG exploitation targeting time-seeded generators and Mersenne Twister MT19937 state recovery from observed outputs, timing side-channel attacks against comparison operations, nonce reuse in AES-GCM leading to authentication key recovery, and key derivation weaknesses including insufficient iteration counts and missing salts. Primary tooling includes padbuster, RsaCtfTool, hashpump, and PyCryptodome for building custom exploit payloads. Maps to CWE-327 (Use of a Broken or Risky Cryptographic Algorithm), CWE-328 (Use of Weak Hash), and CWE-330 (Use of Insufficiently Random Values). Emphasizes black-box identification of vulnerable implementations before transitioning to targeted exploitation.
日本語の概要は準備中です。原文の説明を表示しています。
SnailSploit/Claude-Red☆ 7,5102026年10月13日 更新
This skill helps users extract YouTube influencer profiles including social links, subscriber counts, and channel stats via the BrowserAct API. Agent should proactively apply this skill when users express needs like finding YouTube creators for specific keywords, discovering influencers for a marketing campaign, extracting YouTube channel contact emails, scraping YouTube influencer social media links, gathering subscriber counts for YouTube creators, researching top YouTube channels in a specific niche, compiling a list of YouTube content creators with recent uploads, collecting YouTube creator profiles for outreach, extracting total views and video counts for specific YouTube influencers, building a database of YouTube partners for market research, finding YouTube influencers who uploaded videos this month, or monitoring competitor influencer activities on YouTube.
日本語の概要は準備中です。原文の説明を表示しています。
browser-act/skills☆ 6,1452026年8月24日 更新
YouTube channel business email and contact extractor: accepts a channel id (UCxxx), handle (@name), or URL; navigates the channel About view; extracts the business email from the description text plus full channel metadata (name, id, country, subscriber count, view count, video count, joined date, external links classified as social/aggregator/personal). When the description has no email, follows non-social outbound links (personal site, business site, link aggregator) and scans those pages for an email so creators who place their inquiry email on their own site are still covered. Use when user mentions youtube channel email, youtube business email, youtube creator email, youtube contact email, youtube channel contact, youtube channel scraper email, youtube email finder, youtube influencer email, youtube outreach, youtube sponsorship contact, youtube partnership email, scrape email from youtube, get email from youtube channel, find youtube creator contact, extract youtube channel emails in bulk, youtube channel inquiry email, business inquiries youtube, brand deal email youtube, lead generation youtube creators, youtube creator outreach list, youtube channel about email, ytInitialData about, youtube channel id to email, youtube handle to email, youtube channel url to email, youtube about page scraper, channel about page email, youtube channel metadata, youtube channel social links, youtube channel external links, youtube channel description email, follow channel website for email, scrape creator personal website from youtube. Also applies to building creator/KOL contact databases for influencer marketing, agency lead lists, sponsorship prospecting, brand-creator collaboration sourcing, and enriching existing YouTube channel lists with contact info.
日本語の概要は準備中です。原文の説明を表示しています。
browser-act/skills☆ 6,1452026年8月24日 更新