Defensive counterpart to federated-harbor-redteam: closes the smells that red team opens against The Federated Harbor whitepaper. Federation-specific defenses for cross-harbor primitives — mechanization commitments, scope hedges, cross-paper dependency formalization, pre-emptive analogies (CT, Macaroons, atomic swaps), and defense-in-depth framing (refuses vs prices). Use during a versioned red-vs-white round; pairs with federated-harbor-redteam. NOT for ad-hoc code review, NOT for the Anchor or Bonded papers (use whitehat-defense).
中文简介正在准备中。当前显示原文说明。
curiositech/port-daddy☆ 32026年10月19日 更新
Dry-run one cycle of a sales agent workflow without calling language models. Validate the template and agent types, check budget reservations, generate agent prompts, and record a structured status summary for downstream automation.
中文简介正在准备中。当前显示英语简介。
- Demonstrating one cycle of a sales agent workflow
- Checking template validity and agent types
- Verifying budget caps and reservations
ruvnet/ruflo☆ 7.8万2026年10月20日 更新
Look up biomedical relationships in ARAX using explicit entity types and tightly bounded paths. Inspect direct links or paths through one intermediate entity, along with returned publications and source records, to identify candidates for further research.
中文简介正在准备中。当前显示英语简介。
- Checking recorded drug–gene relationships
- Exploring paths between a drug and a disease
- Inspecting publications and original data sources
K-Dense-AI/scientific-agent-skills☆ 5.3万2026年10月19日 更新
Assess authorized single sign-on systems using SAML, OIDC, and OAuth2. Map the login flow, check signatures, redirects, and token validation, then document reproducible findings and their impact, including identity or tenant confusion.
中文简介正在准备中。当前显示英语简介。
- Review redirect and token checks in a single sign-on flow
- Assess SAML signatures and assertion handling
- Investigate tenant confusion and logout failures
zhaoxuya520/reverse-skill☆ 4.3万2026年9月22日 更新
Write, revise, and review beads user documentation using consistent terminology, explanations, diagrams, and navigation. Follow project rules for generated pages and release alignment, with checks for links, freshness, and documentation consistency.
中文简介正在准备中。当前显示英语简介。
- Write user guides with consistent beads terminology
- Simplify confusing explanations with diagrams and examples
- Reorganize pages, navigation, links, and redirects
gastownhall/beads☆ 2.8万2026年10月20日 更新
Guides authentication and access permissions for Google Cloud users and applications. It helps choose credentials for local development, production services, or external clouds, with guidance on short-lived credentials and avoiding downloaded service account keys.
中文简介正在准备中。当前显示英语简介。
- Set up credentials for local Python development
- Configure Cloud Run access to Cloud SQL
- Connect workloads on AWS or Azure to Google Cloud
google/skills☆ 2.1万2026年10月20日 更新
Investigate how credentials can be exposed in CI/CD, the systems that build and deploy software. Covers environment variables, logs, credential stores, cloud trust settings, and runner tokens, with methods to assess access scope and defensive controls.
中文简介正在准备中。当前显示英语简介。
- Review secret exposure in build environments
- Search build logs and caches for leaked credentials
- Assess trust settings between pipelines and cloud services
SnailSploit/Claude-Red☆ 76372026年10月13日 更新
Operate Iris jobs and tasks, from submission and monitoring to debugging and recovery. The skill also guides scheduling checks, coordination between clusters, controller deployments, development GPU or TPU reservations, and investigation of stuck CoreWeave pods.
中文简介正在准备中。当前显示英语简介。
- Monitoring Iris jobs and investigating failures
- Diagnosing scheduling delays and cross-cluster coordination
- Deploying or rolling back controllers
marin-community/marin☆ 39872026年10月20日 更新
Provision Microsoft Entra Agent Identity Blueprints, BlueprintPrincipals, and per-instance Agent Identities via Microsoft Graph, and configure OAuth 2.0 token exchange (fmi_path, OBO, cross-tenant) including the Microsoft Entra SDK for AgentID sidecar. USE FOR: Agent Identity Blueprint, BlueprintPrincipal, agent OAuth, fmi_path token exchange, agent OBO, Workload Identity Federation for agents, polyglot agent auth, Microsoft.Identity.Web.AgentIdentities. DO NOT USE FOR: standard Entra app registration (use entra-app-registration), Microsoft Foundry agent authoring (use microsoft-foundry).
中文简介正在准备中。当前显示原文说明。
microsoft/skills☆ 31362026年10月18日 更新
Microsoft Entra Agent ID (preview) for creating OAuth2-capable AI agent identities via Microsoft Graph beta API. Covers Agent Identity Blueprints, BlueprintPrincipals, Agent Identities, required permissions, sponsors, and Workload Identity Federation. Includes Microsoft Entra SDK for AgentID (containerized sidecar) for polyglot agent authentication (Docker/Kubernetes), 3P agent integration, autonomous and interactive agent patterns. Triggers: "agent identity", "agent id", "Agent Identity Blueprint", "BlueprintPrincipal", "entra agent", "agent identity provisioning", "Graph agent identity", "entra sidecar", "agent id sidecar", "auth sidecar", "3P agent", "third-party agent identity", "polyglot agent auth".
中文简介正在准备中。当前显示原文说明。
microsoft/skills☆ 31362026年10月18日 更新
Amazon Redshift is NOT PostgreSQL; corrects LLM mistakes; covers SQL, metadata, connectivity/auth, storage, query performance, and operations. Applies ONLY to Redshift (provisioned or Serverless). Pushes back on: CREATE INDEX, string_agg, pg_catalog, text type, SERIAL, stl_query. Triggers on: Redshift SQL, Redshift CREATE TABLE, Redshift COPY/UNLOAD, slow or suddenly slow Redshift query, EXPLAIN plan, queue wait, stale statistics/ANALYZE, result cache, Redshift permission denied, Redshift disk full, storage growth, snapshot/backup cost, ghost rows/bloat, VACUUM, spill to disk, distribution skew, Redshift system views, QUALIFY, PIVOT, MERGE, materialized views, Redshift Data API (Python/boto3), Redshift workload management (WLM), concurrency scaling, Redshift resize, Spectrum, awsdatacatalog, connection failures (SSL/TLS, ODBC/JDBC, connection limit), IAM/SAML federation, IAM Identity Center, datashares. Does NOT apply to: S3 policies, Athena, Glue/Iceberg outside Redshift, Aurora, RDS, DynamoDB.
中文简介正在准备中。当前显示原文说明。
aws/agent-toolkit-for-aws☆ 29192026年10月20日 更新
ObsPy allows you to easily download earthquake data from various data centers/networks through its client API. This is an overview of available services and a demo of the client API for International Federation of Digital Seismograph Networks (FDSN). Use this if you need to download earthquake research data.
中文简介正在准备中。当前显示原文说明。
benchflow-ai/skillsbench☆ 18632026年10月13日 更新
Master modern GraphQL with federation, performance optimization, and enterprise security. Build scalable schemas, implement advanced caching, and design real-time systems. Use PROACTIVELY for GraphQL architecture or performance optimization.
中文简介正在准备中。当前显示原文说明。
rmyndharis/antigravity-skills☆ 18152026年10月15日 更新
Provision Microsoft Entra Agent Identity Blueprints, BlueprintPrincipals, and per-instance Agent Identities via Microsoft Graph, and configure OAuth 2.0 token exchange (fmi_path, OBO, cross-tenant) including the Microsoft Entra SDK for AgentID sidecar. USE FOR: Agent Identity Blueprint, BlueprintPrincipal, agent OAuth, fmi_path token exchange, agent OBO, Workload Identity Federation for agents, polyglot agent auth, Microsoft.Identity.Web.AgentIdentities. DO NOT USE FOR: standard Entra app registration (use entra-app-registration), Microsoft Foundry agent authoring (use microsoft-foundry).
中文简介正在准备中。当前显示原文说明。
microsoft/azure-skills☆ 15822026年10月20日 更新
Use for authorized assessment of federated identity systems including SAML, OIDC, OAuth2 flows, SSO misconfiguration, and token confusion issues.
中文简介正在准备中。当前显示原文说明。
coco-research/coco☆ 8172026年10月20日 更新
Use when attacking AWS/Azure/GCP cloud — IAM/identity privilege escalation, IMDS/metadata SSRF, Entra device-code & PRT theft, GCP impersonation chains, Kubernetes/container escape, IaC/CI-CD federation abuse
中文简介正在准备中。当前显示原文说明。
hypnguyen1209/offensive-claude☆ 3942026年9月28日 更新
Provides comprehensive Nx monorepo management guidance for TypeScript/JavaScript projects. Use when creating Nx workspaces, generating apps/libraries/components, running affected commands, setting up CI/CD, configuring Module Federation, or implementing NestJS backends within Nx
中文简介正在准备中。当前显示原文说明。
giuseppe-trisciuoglio/developer-kit☆ 3602026年9月10日 更新
Databricks SQL (DBSQL) advanced features and SQL warehouse capabilities. This skill MUST be invoked when the user mentions: "DBSQL", "Databricks SQL", "SQL warehouse", "SQL scripting", "stored procedure", "CALL procedure", "materialized view", "CREATE MATERIALIZED VIEW", "pipe syntax", "|>", "geospatial", "H3", "ST_", "spatial SQL", "collation", "COLLATE", "ai_query", "ai_classify", "ai_extract", "ai_gen", "AI function", "http_request", "remote_query", "read_files", "Lakehouse Federation", "recursive CTE", "WITH RECURSIVE", "multi-statement transaction", "temp table", "temporary view", "pipe operator". SHOULD also invoke when the user asks about SQL best practices, data modeling patterns, or advanced SQL features on Databricks.
中文简介正在准备中。当前显示原文说明。
databricks/databricks-agent-skills☆ 3572026年10月19日 更新
OAuth and SAML attack hunting - redirect_uri bypass, state CSRF, SAML XSW (XSW1-XSW8), signature stripping, comment injection. Wiki-first, FIND schema output.
中文简介正在准备中。当前显示原文说明。
Encod3d-Sec/TORCH☆ 3332026年9月1日 更新
REST/GraphQL/gRPC API design best practices. Use when designing APIs, defining contracts, handling versioning. Covers OpenAPI 3.2, GraphQL Federation, gRPC streaming.
中文简介正在准备中。当前显示原文说明。
majiayu000/spellbook☆ 2882026年10月20日 更新
Design GraphQL APIs with well-structured schemas, efficient resolvers, pagination, and performance patterns like DataLoader and federation. Use when the user requests graphql api design or provides relevant inputs for this workflow.
中文简介正在准备中。当前显示原文说明。
seb1n/awesome-ai-agent-skills☆ 2202026年8月10日 更新
Implement authentication with Amazon Cognito. Create user pools for sign-up and sign-in, configure identity pools for AWS access, handle JWT tokens, set up social federation with Google and Facebook, and secure APIs with Cognito authorizers.
中文简介正在准备中。当前显示原文说明。
TerminalSkills/skills☆ 1722026年10月14日 更新
Build and configure a GraphQL API backed by Neo4j using @neo4j/graphql v7 (current) or v5 (LTS). Covers Neo4jGraphQL constructor, getSchema(), assertIndexesAndConstraints(), type definitions with @node, @relationship (IN/OUT/UNDIRECTED), @cypher for custom resolvers, @authorization/@authentication for JWT/JWKS security, auto-generated queries/mutations, OGM programmatic access, subscriptions via CDC, and Apollo Federation. Use when writing typeDefs, securing fields, or wiring Neo4j to Apollo Server. Does NOT handle raw Cypher outside resolvers — use neo4j-cypher-skill. Does NOT cover Spring Data Neo4j entity mapping — use neo4j-spring-data-skill.
中文简介正在准备中。当前显示原文说明。
neo4j-contrib/neo4j-skills☆ 1162026年10月20日 更新
Identity, authentication, authorization, and token management for cloud platforms. Covers Keystone-style scoped tokens, OAuth 2.0 flows, OpenID Connect, JWT structure and pitfalls, federation with SAML/OIDC, service-to-service auth with mTLS and SPIFFE, principle of least privilege, IAM role design, and the service catalog pattern (public/internal/admin endpoints). Use when designing authn/authz for a multi-tenant cloud service, integrating with an identity provider, or reviewing IAM policies for over-privilege.
中文简介正在准备中。当前显示原文说明。
Tibsfox/gsd-skill-creator☆ 712026年7月20日 更新