Container escape and breakout techniques targeting Docker, containerd, and Podman runtimes. Covers privileged container breakout via host filesystem mount and nsenter, Docker socket abuse through /var/run/docker.sock, Linux capability exploitation including CAP_SYS_ADMIN, CAP_SYS_PTRACE, and CAP_NET_ADMIN, cgroup v1 notify_on_release escape, runc CVEs such as CVE-2019-5736 and CVE-2024-21626 Leaky Vessels, kernel exploits from within containers, and Dockerfile misconfigurations like --privileged and host namespace sharing. Includes enumeration with capsh, amicontained, deepce, CDK, and nsenter. Maps to MITRE ATT&CK T1611 Escape to Host. Use this skill when the engagement scope includes container breakout, Docker escape, container privilege escalation, host access from container, or when you land inside a containerized environment and need to reach the underlying host.
中文简介正在准备中。当前显示原文说明。
ajtazer/heckit☆ 22026年10月7日 更新
在Parallels的macOS虚拟环境中,验证安装、Discord消息发送、主机回复及客户机读取的完整流程,确认双向通信是否成功。
- 检查全新macOS环境的消息收发
- 升级后验证双向通信
- 排查Discord往返通信失败
openclaw/openclaw☆ 39.3万2026年10月20日 更新
Connect ruflo agents running on different machines to share status, tasks, and results through signed messages. Coordinate work ownership across nodes, verify messages against registered public keys, and synchronize shared rooms over HTTP.
中文简介正在准备中。当前显示英语简介。
- Sharing agent status and results across machines
- Coordinating ownership of shared tasks
- Handing work from one node to another
ruvnet/ruflo☆ 7.8万2026年10月20日 更新
Trace SSH keys, tokens, and other credentials in Linux CTF environments. Connect each recovered artifact to the service that accepts it, then document the resulting privileges or movement to another host.
中文简介正在准备中。当前显示英语简介。
- Trace where recovered SSH keys and tokens are accepted
- Document privilege gains through sockets or sudo
- Explain movement between Linux challenge hosts
zhaoxuya520/reverse-skill☆ 4.3万2026年9月22日 更新
Move reusable code and its tests from OpenHuman into the appropriate tiny* submodule. Separate host responsibilities, update module interfaces, verify the migration, and align release versions and integrity hashes when a loadable module changes.
中文简介正在准备中。当前显示英语简介。
- Extract reusable logic from the OpenHuman core
- Move implementation tests into the owning submodule
- Update TinyBus contracts and host adapters
tinyhumansai/openhuman☆ 4.2万2026年10月20日 更新
Create and tune Falco rules to detect possible container escapes, where a container gains access to its host. Define detection conditions, alert priorities, and output fields, then refine exceptions to reduce false positives.
中文简介正在准备中。当前显示英语简介。
- Writing rules for suspicious host filesystem access
- Investigating noisy container escape alerts
- Reusing detection conditions through macros and lists
mukul975/Anthropic-Cybersecurity-Skills☆ 3.5万2026年8月31日 更新
Hunt for lateral movement, where attackers move between networked systems, using Splunk searches. Connect Windows logins with process and network activity to identify unusual host relationships, trace movement paths, and document affected accounts and systems.
中文简介正在准备中。当前显示英语简介。
- Tracing activity after credential theft
- Investigating unusual logins between hosts
- Finding new or unexpected host connections
mukul975/Anthropic-Cybersecurity-Skills☆ 3.5万2026年8月31日 更新
Set up host-based intrusion detection to monitor changes on Windows and Linux endpoints. Configure Wazuh agents, file integrity checks, registry monitoring, alert rules, and automated responses, with guidance on exclusions and centralized security monitoring.
中文简介正在准备中。当前显示英语简介。
- Deploying Wazuh agents on Windows and Linux
- Monitoring critical files and registry changes
- Planning change detection for compliance requirements
mukul975/Anthropic-Cybersecurity-Skills☆ 3.5万2026年8月31日 更新
Add an iMessage channel to NanoClaw so you can message an agent. Choose a local Mac account or a hosted photon.codes line, with setup guidance for permissions, device login, and channel registration.
中文简介正在准备中。当前显示英语简介。
- Chat with a NanoClaw agent through iMessage
- Connect the iMessage account on a Mac
- Set up hosted iMessage on a non-Mac system
nanocoai/nanoclaw☆ 3.1万2026年10月20日 更新
Support startup AI strategy by comparing API use, fine-tuning—additional training of an existing model—and in-house development. Assess three-year costs, regulatory risk, self-hosting breakeven points, and hiring priorities to inform leadership decisions.
中文简介正在准备中。当前显示英语简介。
- Compare API use, fine-tuning, and in-house development
- Assess regulatory risks for an AI use case
- Calculate when self-hosting becomes cost-effective
alirezarezvani/claude-skills☆ 2.8万2026年8月30日 更新
Manage OpenWork feature releases with feature flags, switches that control access to new behavior. Register features before coding, release them by organization and deployment, prepare a global shutdown option, and remove temporary flags after rollout.
中文简介正在准备中。当前显示英语简介。
- Registering a feature before implementation
- Releasing a feature to selected organizations
- Separating cloud and self-hosted availability
different-ai/openwork☆ 2.4万2026年10月20日 更新
Guides migration of existing AI inference workloads to self-hosted GKE, Google’s managed Kubernetes service. Covers requirements, GPU sizing, deployment configuration, model storage, validation, and traffic cutover using gcloud and kubectl.
中文简介正在准备中。当前显示英语简介。
- Migrating an existing Cloud Run AI service to GKE
- Planning a self-hosted replacement for Gemini API inference
- Sizing GPUs and preparing deployment configuration
google/skills☆ 2.1万2026年10月20日 更新
Read, create, and edit text files on the computer running the connected A0 CLI. The skill guides focused replacements and context-based patches, checking current file contents and handling read-only access or outdated edits.
中文简介正在准备中。当前显示英语简介。
- Read a text file on the connected local computer
- Replace a specific passage in an existing file
- Apply edits after file line numbers have shifted
agent0ai/agent-zero☆ 2万2026年10月15日 更新
Deploy and configure LangBot with Docker Compose or Kubernetes. Set up application settings, plugin execution, the Box sandbox for isolated commands, and API authentication, with guidance on hosting choices and common deployment problems.
中文简介正在准备中。当前显示英语简介。
- Deploy LangBot on a self-hosted server
- Configure Box and the plugin runtime
- Enable API authentication for agent access
langbot-app/LangBot☆ 1.8万2026年10月20日 更新
Build micro-frontends with qiankun 3.x, combining separate web apps inside a host app. The skill covers creating host and child apps, converting existing Vite apps, and connecting loading behavior in React or Vue.
中文简介正在准备中。当前显示英语简介。
- Creating a host app that loads separate web apps
- Creating a child app for qiankun 3.x
- Converting an existing Vite app into a child app
umijs/qiankun☆ 1.7万2026年10月11日 更新
Run MNN checks and regression tests on a host computer or Android device, with stage summaries and failure logs. A separate workflow benchmarks LLM prompt processing and token generation on real iPhones and iPads, including branch comparisons.
中文简介正在准备中。当前显示英语简介。
- Run static checks and host regression tests
- Verify selected backends on an Android device
- Benchmark LLM speed and compare branches on iPhone or iPad
alibaba/MNN☆ 1.6万2026年10月20日 更新
Diagnose Superset connection, host, terminal, authentication, and update problems using status checks and logs. Get a matching fix, approve changes before they run, and verify whether the original problem is resolved.
中文简介正在准备中。当前显示英语简介。
- Investigating a Superset connection failure
- Recovering an offline host
- Checking terminal attachment problems
superset-sh/superset☆ 1.5万2026年10月20日 更新
Configure OAuth, the authorization flow used for provider sign-in, with portless development URLs. It guides callback registration and authentication library settings, helping diagnose rejected domains, redirect URL mismatches, and callbacks that point to the wrong address.
中文简介正在准备中。当前显示英语简介。
- Setting up provider sign-in with portless development URLs
- Diagnosing redirect URL mismatch errors
- Using an owned domain when .localhost is rejected
vercel-labs/portless☆ 1.3万2026年10月17日 更新
Plan how to serve a model on Amazon SageMaker AI. The skill uses model type, traffic, response time, and cost constraints to recommend a deployment route, check instance quotas, and coordinate specialized setup and deployment skills.
中文简介正在准备中。当前显示英语简介。
- Plan AWS hosting for a language model
- Choose a serving route for an embedding model
- Plan asynchronous inference for image generation
huggingface/skills☆ 1.1万2026年10月9日 更新
Build and run Omnigent’s server and Postgres together with Docker Compose on a laptop or existing Docker host. Use the supplied configuration and troubleshooting guidance to rebuild images, investigate startup problems, or adapt deployment to another platform.
中文简介正在准备中。当前显示英语简介。
- Running Omnigent locally with Postgres
- Starting the stack on an existing VPS or EC2 host
- Investigating startup and web interface problems
omnigent-ai/omnigent☆ 1.1万2026年10月20日 更新
Set up a persistent Microsoft Testing Platform console host that applies code edits and automatically reruns tests. It covers package setup, test selection, and restarting the host when an edit cannot be applied while running.
中文简介正在准备中。当前显示英语简介。
- Setting up MTP console hot reload
- Automatically rerunning selected tests after edits
- Restarting after unsupported code changes
dotnet/skills☆ 56832026年10月20日 更新
Run demanding scientific work on SSH compute hosts using direct execution or Slurm, a cluster job scheduler. Choose an enabled host, submit background jobs, check progress, collect outputs, and continue with analysis and artifact publication.
中文简介正在准备中。当前显示英语简介。
- Running long GPU inference jobs on a remote host
- Submitting scientific workloads through Slurm
- Collecting and analyzing completed job outputs
aipoch/open-science☆ 53072026年10月20日 更新
Test CDN-backed websites for cache poisoning and Web Cache Deception, where private pages are mistakenly cached as public content. The skill guides cache behavior checks, input testing, and independent-client verification to establish reproducible impact.
中文简介正在准备中。当前显示英语简介。
- Reviewing cache behavior on CDN-backed websites
- Checking whether private pages enter public caches
- Verifying cached responses influenced by headers
elementalsouls/Claude-BugHunter☆ 51822026年10月19日 更新
Operate the DOCA UROM Service container on BlueField Arm for remote memory operations (puts, gets, atomics, collectives) enqueued by a paired host using `doca-urom`: pull the NGC image, choose the UCX component, size queues, configure Comch pairing, and align host and service versions. SECURITY: the service has no standalone access control; Comch pairing and RDMA permissions are the boundary. Pair only intended hosts, expose least-privilege memory regions, and verify both views before start. Trigger for slow UCX collectives, unexpected NOT_PERMITTED, or missing completions. Do not use for host application code, MPI/UCX integration design, or DOCA install.
中文简介正在准备中。当前显示原文说明。
NVIDIA/skills☆ 36612026年10月20日 更新