Trace uploaded files through extraction, conversion, parsing, and reconstruction of saved objects in a CTF sandbox, an isolated competition environment. Preserve original and derived files, distinguish visible validation from backend behavior, and document the smallest reproducible processing chain.
中文简介正在准备中。当前显示英语简介。
- Trace an uploaded file to its backend effect
- Investigate archive extraction and preview generation
- Compare visible validation with backend file handling
zhaoxuya520/reverse-skill☆ 4.3万2026年9月22日 更新
Review source code for MCP, a protocol connecting AI applications to tools. Check authentication, input validation, unsafe execution, and other security risks, then report findings with file and line references and separate manual follow-ups.
中文简介正在准备中。当前显示英语简介。
- Reviewing an MCP server before release
- Checking authentication and validation on a network-exposed server
- Auditing tool code for unsafe execution paths
github/awesome-copilot☆ 4万2026年10月21日 更新
Add a message type to CARLA's native ROS 2 interface. Create its C++ data structure, serialization code for transmission, type identity hash, registration, and tests, with Docker-based hash calculation and build checks.
中文简介正在准备中。当前显示英语简介。
- Adding a standard ROS 2 message type missing from CARLA
- Defining a custom carla_msgs message
- Investigating type-hash warnings
carla-simulator/carla☆ 1.5万2026年10月21日 更新
Review code changes and files for bugs, security risks, performance problems, design issues, and test coverage. Receive a structured report with prioritized findings, concrete improvement examples, positive feedback, and an overall review verdict.
中文简介正在准备中。当前显示英语简介。
- Reviewing a pull request
- Auditing code quality and security
- Finding refactoring opportunities
Jeffallan/claude-skills☆ 1.2万2026年10月17日 更新
Review code or changes for exposed secrets, injection risks, weak encryption, and missing permission checks. Produce a structured report with severity, location, recommendations, and confidence, with a separate reviewer checking findings for false positives.
中文简介正在准备中。当前显示英语简介。
- Reviewing a module for security issues
- Checking changes for exposed secrets
- Preparing a vulnerability report with evidence
omnigent-ai/omnigent☆ 1.1万2026年10月20日 更新
Review selected files for bugs by reading full source code, callers, and related implementations. Apply detailed checklists and investigate suspected issues, then report evidence, confidence levels, and suggested fixes.
中文简介正在准备中。当前显示英语简介。
- Review selected files in a critical code change
- Investigate concerns raised by an initial review
- Check complex state transitions and object lifecycles
apache/cassandra☆ 1万2026年10月21日 更新
Run a quick first review of code changes with six specialist agents working in parallel. They check logic, input and output, shared state, resources, missing behavior, and API completeness, then combine duplicate findings into a report ranked by confidence.
中文简介正在准备中。当前显示英语简介。
- Running a quick first review of a patch
- Screening diffs to prioritize further investigation
- Checking for missing cleanup and handlers
apache/cassandra☆ 1万2026年10月21日 更新
Write Apache Cassandra distributed tests that simulate multiple nodes within one JVM, the Java runtime. The guide covers cluster setup, queries, node restarts, message dropping for failure scenarios, and troubleshooting problems caused by isolated class loading.
中文简介正在准备中。当前显示英语简介。
- Writing read and write tests across multiple nodes
- Testing timeouts by dropping messages between nodes
- Verifying node replacement and restarts
apache/cassandra☆ 1万2026年10月21日 更新
Guides adding metadata, extra information attached to data elements, to Apache Beam's WindowedValue. Maps the changes needed across serialization, storage, processing, and runner interfaces so new fields remain available during pipeline execution.
中文简介正在准备中。当前显示英语简介。
- Adding trace context or drain flags to WindowedValue
- Checking metadata preservation through Windmill storage
- Reviewing propagation through grouping and timers
apache/beam☆ 86882026年10月21日 更新
Assess security weaknesses in CI/CD systems that automate software builds and delivery. Covering GitHub Actions, Jenkins, GitLab CI, and Azure DevOps, the skill examines unsafe inputs, excessive permissions, exposed credentials, and tampered build outputs, alongside detection and defensive controls.
中文简介正在准备中。当前显示英语简介。
- Reviewing workflow inputs and execution triggers
- Assessing pipeline permissions and credential exposure
- Checking build artifact handoffs for tampering risks
SnailSploit/Claude-Red☆ 76422026年10月13日 更新
Adapt a C/C++ vulnerability pipeline to another language, target, or detection method. The workflow gathers requirements, proposes file changes for approval, updates the implementation, and validates it against a test target containing known bugs.
中文简介正在准备中。当前显示英语简介。
- Adapt the pipeline for web application vulnerabilities
- Plan a port for smart contract auditing
- Change detection signals and report criteria
anthropics/defending-code-reference-harness☆ 76132026年8月7日 更新
Refactor C#/.NET code through renaming, extraction, consolidation, and other structural changes while preserving behavior. Check compatibility beyond code references, including public APIs and serialized names, then validate with builds and relevant tests.
中文简介正在准备中。当前显示英语简介。
- Rename C# members and update their references
- Extract shared logic from duplicate code
- Reorganize code while preserving public API compatibility
dotnet/skills☆ 56902026年10月21日 更新
Move existing .NET 9 projects to .NET 10 by updating project settings and dependencies, fixing build errors, and reviewing behavior changes. Includes CI and Docker updates, followed by builds, tests, and security checks.
中文简介正在准备中。当前显示英语简介。
- Upgrading an existing .NET 9 project to .NET 10
- Fixing build errors and warnings after an SDK upgrade
- Reviewing ASP.NET Core and EF Core behavior changes
dotnet/skills☆ 56902026年10月21日 更新
Create, modify, debug, and review Windows Forms applications while preserving their editable layouts in Visual Studio Designer. Covers resizing, data binding, asynchronous UI behavior, and checks that distinguish successful builds from actual screen and designer verification.
中文简介正在准备中。当前显示英语简介。
- Fixing forms that fail to open in Visual Studio Designer
- Resolving clipped controls after resizing or DPI changes
- Repairing bound lists that do not refresh
dotnet/skills☆ 56902026年10月21日 更新
Review C#/.NET code for about 50 inefficient API usage patterns across asynchronous work, memory, strings, collections, and I/O. Get exact occurrence counts, prioritized findings, and concrete fixes, with attention to frequently executed code.
中文简介正在准备中。当前显示英语简介。
- Reviewing frequently executed C#/.NET code
- Finding unnecessary memory allocations
- Checking known performance pitfalls before release
dotnet/skills☆ 56902026年10月21日 更新
Explore web application vulnerabilities by class, including access control failures, XSS, and SQL injection. Use root causes, testing checklists, and examples to plan investigations and distinguish observable security impact from an initial warning sign.
中文简介正在准备中。当前显示英语简介。
- Study root causes of common web vulnerabilities
- Plan checks for cross-user access control failures
- Investigate upload and authentication weaknesses
awarexone/Agentic-Bug-Hunter☆ 53832026年10月10日 更新
Assess classic ASP.NET applications for security weaknesses in ViewState, the data used to preserve page state, exposed logs, error details, and service endpoints. Organize evidence and separate observed weaknesses from demonstrated impact when preparing findings.
中文简介正在准备中。当前显示英语简介。
- Review classic ASP.NET Webforms security
- Check exposure of trace and error logs
- Inspect WCF service metadata access
elementalsouls/Claude-BugHunter☆ 51832026年10月20日 更新
Assess Laravel applications for exposed secrets, accessible dashboards, and authentication or permission flaws. The skill guides checks of debug settings, signed URLs, cookies, and model updates, with validation criteria for understanding the impact of findings.
中文简介正在准备中。当前显示英语简介。
- Reviewing Laravel debug settings and exposed configuration files
- Checking access controls on Telescope and Horizon dashboards
- Testing signed URLs and unintended profile field updates
elementalsouls/Claude-BugHunter☆ 51832026年10月20日 更新
Golang struct and interface design patterns — composition, embedding, type assertions, type switches, interface segregation, dependency injection via interfaces, struct field tags, and pointer vs value receivers. Use this skill when designing Go types, defining or implementing interfaces, embedding structs or interfaces, writing type assertions or type switches, adding struct field tags for JSON/YAML/DB serialization, or choosing between pointer and value receivers. Also use when the user asks about "accept interfaces, return structs", compile-time interface checks, or composing small interfaces into larger ones.
中文简介正在准备中。当前显示原文说明。
samber/cc-skills-golang☆ 35302026年10月1日 更新
KQL language expertise for writing correct, efficient Kusto Query Language queries. Covers syntax gotchas, join patterns, dynamic types, datetime pitfalls, regex patterns, serialization, memory management, result-size discipline, and advanced functions (geo, vector, graph). USE THIS SKILL whenever writing, debugging, or reviewing KQL queries — even simple ones — because the gotchas section prevents the most common errors that waste tool calls and cause expensive retry cascades. Trigger on: KQL, Kusto, ADX, Azure Data Explorer, Fabric Real-Time Intelligence, EventHouse, Log Analytics, log analysis, data exploration, time series, anomaly detection, summarize, where clause, join, extend, project, let statement, parse operator, extract function, any mention of pipe-forward query syntax.
中文简介正在准备中。当前显示原文说明。
microsoft/skills☆ 31372026年10月21日 更新
AWS SDK for JavaScript v3 development patterns. Use when writing JavaScript or TypeScript code that uses AWS services via @aws-sdk/* packages (aws-sdk-js-v3), or when asked about schemas, runtime validation, serialization, or code generation in the context of the JS/TS AWS SDK.
中文简介正在准备中。当前显示原文说明。
aws/agent-toolkit-for-aws☆ 29192026年10月20日 更新
Java "Ghost Bits" / Cast Attack playbook (Black Hat Asia 2026). Use when attacking Java services where 16-bit char is silently narrowed to 8-bit byte to bypass WAF/IDS for SQL injection, deserialization RCE, file upload (Webshell), path traversal, CRLF injection, request smuggling, and SMTP injection. Affects Tomcat, Spring, Jetty, Undertow, Vert.x, Jackson, Fastjson, Apache Commons BCEL, Apache HttpClient, Angus Mail, JDK HttpServer, Lettuce, Jodd, XMLWriter and re-enables many "patched" CVEs through WAF bypass.
中文简介正在准备中。当前显示原文说明。
yaklang/hack-skills☆ 25182026年9月13日 更新
Use when developing WordPress (Gutenberg) blocks: block.json metadata, register_block_type(_from_metadata), attributes/serialization, supports, dynamic rendering (render.php/render_callback), deprecations/migrations, viewScript vs viewScriptModule, and @wordpress/scripts/@wordpress/create-block build and test workflows.
中文简介正在准备中。当前显示原文说明。
WordPress/agent-skills☆ 22742026年10月19日 更新
Resolve conflicts and merges when several branches are open against one repo at the same time — the hotspot files every change must touch (registry manifests, a single version field, shared tool config, one aggregated test module, tracked build output), union-vs-recompute-vs-rebuild as three different correct resolutions, generated artifacts that must never be merged, non-deterministic serialization that makes every branch conflict, renumbered identifiers that git cannot show you, and why a clean auto-merge is not a passing test. Use when rebasing or merging a long-lived branch, resolving conflict markers, reviewing a merge commit, deciding what a repo should commit vs generate, or setting up a repo that will take parallel contributions.
中文简介正在准备中。当前显示原文说明。
kajisho5/ffmpeg-skill☆ 20302026年10月20日 更新