Time-of-Check / Time-of-Use (TOCTOU) race condition exploitation methodology across binary, kernel, filesystem, web, and container layers. Covers symbolic-link races (open/access/stat split), file-descriptor races, fopen/realpath traversal races, /proc and procfs races, FUSE-backed slow-fs races to widen the window, ptrace and signal races, kernel double-fetch / userspace pointer races, container/runc/symlink escape primitives, kubernetes admission/authz TOCTOU, web auth-vs-authz TOCTOU, JWT-claim TOCTOU at gateway vs service, payment/idempotency races, and modern race-amplification techniques (single-packet attack, slow loris, FUSE pause, cgroup freeze, scheduler shaping). Use when you've identified a 'check then act' pattern in code, when fuzzing for race conditions, or when exploiting concurrency bugs in privileged binaries / kernel / orchestrators.
中文简介正在准备中。当前显示原文说明。
ajtazer/heckit☆ 22026年10月7日 更新
将Swift文件操作、网络通信和外部API隔离到小型协议中,通过可控的测试替代实现,验证正常行为与错误处理。
- 不使用真实文件进行测试
- 重现故障并验证错误处理
- 在应用、测试与预览间共用模块
affaan-m/ECC☆ 28.4万2026年10月20日 更新
根据多门店销售数据和商品特征选择需求预测方法,计算安全库存并拟定订货量,同时考虑促销后的需求回落、供应商交期变化及季节性商品的降价时机。
- 为各商品选择需求预测方法
- 交期变化后重新评估安全库存
- 估算促销期间及结束后的需求
affaan-m/ECC☆ 28.4万2026年10月20日 更新
用于访问需要付费的API:检查HTTP 402响应,通过兼容的支付客户端按请求付款,并核对API返回结果与收据信息。
- 为返回HTTP 402的API付款
- 按支付方式选择兼容客户端
- 探索付费服务并管理支出
NousResearch/hermes-agent☆ 25.5万2026年10月19日 更新
指导通过MCP为Claude Code插件连接外部服务,涵盖连接方式选择、服务器配置、身份验证、工具权限设置,以及连接和工具调用的运行检查。
- 为插件添加本地MCP服务器
- 设置外部服务的身份验证
- 通过命令或智能体使用多个服务
anthropics/claude-code☆ 15.3万2026年10月20日 更新
Build MCP servers, which let Claude call external tools and read data through a shared protocol. Follow Python or TypeScript examples to implement tools, connect services, configure Claude, and test server behavior.
中文简介正在准备中。当前显示英语简介。
- Adding custom tools to Claude
- Connecting an external API
- Reading database records or settings
shareAI-lab/learn-claude-code☆ 7.9万2026年9月28日 更新
Review password fields for security and ease of use. Check autocomplete settings, accessible visibility controls, strength indicators, and password manager support, then verify relevant browser and HTTP behavior in an environment resembling production.
中文简介正在准备中。当前显示英语简介。
- Reviewing login and registration forms
- Checking password manager compatibility
- Improving accessible password visibility controls
thedaviddias/Front-End-Checklist☆ 7.5万2026年10月6日 更新
Study Model Context Protocol (MCP), which connects AI applications with external tools, through guided lessons and exercises. Inspect requests and responses, practice implementation and security checks, and record progress alongside observed results.
中文简介正在准备中。当前显示英语简介。
- Learn MCP fundamentals through requests and responses
- Practice building MCP clients and servers
- Study authorization, security, and operational failures
rohitg00/ai-engineering-from-scratch☆ 7.1万2026年10月19日 更新
Screen study titles, abstracts, and full texts against confirmed eligibility rules. Two AI reviewers assess records separately, with a third resolving conflicts, while outputs document exclusion reasons, selection counts, and the methods used.
中文简介正在准备中。当前显示英语简介。
- Define eligibility rules from a review protocol
- Screen titles, abstracts, and full texts
- Resolve conflicting screening decisions
Imbad0202/academic-research-skills☆ 5.3万2026年10月18日 更新
Connect Claude Code plugins to external services through MCP, a protocol that makes service functions available as tools. Covers connection types, configuration files, authentication, tool permissions, and testing for local servers and hosted services.
中文简介正在准备中。当前显示英语简介。
- Connecting a plugin to an external API
- Configuring a local MCP server
- Setting up OAuth or token authentication
anthropics/claude-plugins-official☆ 4.3万2026年10月19日 更新
Analyze packet captures in a CTF sandbox by rebuilding communication sessions and decoding message contents. Recover transferred files and connect packet order, timing, and reconstructed streams to observed host or malware behavior.
中文简介正在准备中。当前显示英语简介。
- Rebuild TCP or UDP communication sessions
- Decode HTTP, DNS, or custom protocol messages
- Recover files transferred over the network
zhaoxuya520/reverse-skill☆ 4.3万2026年9月22日 更新
Analyze captured network traffic and binary messages to recover custom protocol structures. The skill organizes message types, fields, and connection states, then produces reproducible decoding steps with supporting evidence for authorized investigations.
中文简介正在准备中。当前显示英语简介。
- Recover message fields from captured network traffic
- Investigate unknown Protobuf message structures
- Map handshakes, heartbeats, and connection states
zhaoxuya520/reverse-skill☆ 4.3万2026年9月22日 更新
Create stock research notes combining analyst forecasts, reported financials, price history, and economic conditions. Compare market expectations with business performance, present valuation measures, and summarize an investment case with positive scenarios, risks, and potential catalysts.
中文简介正在准备中。当前显示英语简介。
- Preparing an initial research note on a stock
- Comparing analyst forecasts with reported results
- Reviewing financial trends and stock valuation
anthropics/financial-services☆ 4万2026年9月22日 更新
Prepare a one-page morning briefing on covered stocks, overnight news, earnings, and the day's key events. Add a clear view of stock implications, plus trade ideas and risks when relevant, for a quick team discussion.
中文简介正在准备中。当前显示英语简介。
- Preparing a stock market briefing for a morning meeting
- Summarizing overnight earnings and company news
- Listing earnings calls and economic releases for the day
anthropics/financial-services☆ 4万2026年9月22日 更新
Create a Go server for MCP, a protocol that connects AI agents to tools and data. Generate a structured project using the official SDK, with typed tools, configuration, error handling, tests, and setup documentation.
中文简介正在准备中。当前显示英语简介。
- Start a Go MCP server project
- Implement tools with typed inputs and outputs
- Add input validation and cancellation handling
github/awesome-copilot☆ 4万2026年10月20日 更新
Retrieve price and trading volume data for US, Hong Kong, and Canadian stocks, ETFs, and indices through Yahoo Finance. Also gather company profiles, financial statements, dividends, and ownership data for market research and historical strategy testing.
中文简介正在准备中。当前显示英语简介。
- Collect historical prices across several stock markets
- Review company financial statements and ownership
- Check dividend and stock split histories
HKUDS/Vibe-Trading☆ 3.6万2026年10月19日 更新
Rank stocks using several indicators, such as recent returns and trading volume, combined on a common scale. Build equally weighted portfolios from the highest scores, or combine existing factors into strategies with buying and selling positions.
中文简介正在准备中。当前显示英语简介。
- Rank stocks using several investment indicators
- Build an equally weighted portfolio of top-ranked stocks
- Combine Alpha Zoo factors into a trading strategy
HKUDS/Vibe-Trading☆ 3.6万2026年10月19日 更新
Detect unauthorized cryptocurrency mining in cloud workloads by combining billing changes, CPU usage, mining pool connections, and process alerts. Follow workflows to preserve evidence, isolate affected resources, and trace how attackers gained access.
中文简介正在准备中。当前显示英语简介。
- Investigating sudden cloud billing increases
- Responding to GuardDuty cryptocurrency alerts
- Checking containers for unauthorized mining processes
mukul975/Anthropic-Cybersecurity-Skills☆ 3.5万2026年8月31日 更新
Inspect DNP3 traffic, a communication protocol used in industrial control systems, for unauthorized sources and unexpected commands. The skill compares captured traffic with normal patterns and reports suspicious control actions, restarts, and file operations.
中文简介正在准备中。当前显示英语简介。
- Investigating suspicious DNP3 control commands
- Checking substation traffic against normal patterns
- Preparing DNP3 intrusion detection rules
mukul975/Anthropic-Cybersecurity-Skills☆ 3.5万2026年8月31日 更新
Investigate ransomware payment addresses using public blockchain records. Trace transfers, group addresses likely controlled by the same entity, identify links to exchanges or mixing services, and organize findings into a report for incident responders and investigators.
中文简介正在准备中。当前显示英语简介。
- Investigating a payment address found in a ransom note
- Tracing funds after a ransom payment
- Comparing related wallets across ransomware incidents
mukul975/Anthropic-Cybersecurity-Skills☆ 3.5万2026年8月31日 更新
Use Scapy, a Python library for working with network packets, to inspect saved captures or authorized live traffic. Summarize protocols and connections, identify suspicious patterns, craft test packets, and export findings as structured JSON reports.
中文简介正在准备中。当前显示英语简介。
- Investigating saved network captures
- Summarizing traffic volumes, protocols, and connection endpoints
- Checking for SYN floods and DNS data leakage indicators
mukul975/Anthropic-Cybersecurity-Skills☆ 3.5万2026年8月31日 更新
Estimate the distribution of stockholders' purchase costs for Chinese A-share stocks using price and volume data. A triangular model produces cost concentration metrics, the estimated share below the current price, and visualization charts.
中文简介正在准备中。当前显示英语简介。
- Examining estimated purchase cost distributions for Chinese A-share stocks
- Checking the estimated share of holdings below the current price
- Identifying price ranges with concentrated holdings
hsliuping/TradingAgents-CN☆ 3.2万2026年9月22日 更新
Build cryptocurrency exchange integrations with CCXT in JavaScript, Python, or PHP. The skill helps retrieve market data, manage orders, automate trading workflows, check exchange-specific capabilities, and investigate API errors using reproducible examples and logs.
中文简介正在准备中。当前显示英语简介。
- Retrieve market data from multiple cryptocurrency exchanges
- Implement order management and trading automation
- Check support for stop-loss and take-profit orders
2025Emma/vibe-coding-cn☆ 2.3万2025年12月17日 更新
Use CoinGecko API documentation to build cryptocurrency price trackers and market data integrations. The skill supports implementation and debugging for access to prices, market capitalization, trading volume, and historical data.
中文简介正在准备中。当前显示英语简介。
- Building a cryptocurrency price tracker
- Integrating market capitalization and trading volume data
- Exploring how to retrieve historical prices
2025Emma/vibe-coding-cn☆ 2.3万2025年12月17日 更新