Okta-as-IdP red-team attack chain — tenant discovery, user enumeration (multiple vectors), authentication flow analysis (factors enumeration, push-notification fatigue, SMS bypass), password spray with lockout discipline, Okta-specific phishing primitives (kits, FastPass abuse, OIDC redirect_uri tampering), MFA enumeration, post-compromise admin API surface. Many enterprise orgs use Okta instead of (or alongside) Entra ID. Distinct endpoints, distinct rate-limiting, distinct factor flows. Use when recon shows `<tenant>.okta.com`, `<tenant>.okta-emea.com`, `<tenant>.oktapreview.com`, or autodiscover-style records pointing at Okta IdP.
中文简介正在准备中。当前显示原文说明。
ajtazer/heckit☆ 22026年10月7日 更新
Detect authentication and authorization bypass vulnerabilities including missing auth middleware, JWT algorithm confusion, IDOR, and session fixation.
中文简介正在准备中。当前显示原文说明。
ajtazer/heckit☆ 22026年10月7日 更新
Expert patterns for HubSpot CRM integration including OAuth authentication, CRM objects, associations, batch operations, webhooks, and custom objects. Covers Node.js and Python SDKs. Use when: hubspot, hubspot api, hubspot crm, hubspot integration, contacts api.
中文简介正在准备中。当前显示原文说明。
danstrem2/clawdbot-skill-master-pack☆ 22026年2月1日 更新
Firebase gives you a complete backend in minutes - auth, database, storage, functions, hosting. But the ease of setup hides real complexity. Security rules are your last line of defense, and they're often wrong. Firestore queries are limited, and you learn this after you've designed your data model. This skill covers Firebase Authentication, Firestore, Realtime Database, Cloud Functions, Cloud Storage, and Firebase Hosting. Key insight: Firebase is optimized for read-heavy, denormalized data. I
中文简介正在准备中。当前显示原文说明。
danstrem2/clawdbot-skill-master-pack☆ 22026年2月1日 更新
Use this skill when adding authentication, handling user input, working with secrets, creating API endpoints, or implementing payment/sensitive features. Provides comprehensive security checklist and patterns.
中文简介正在准备中。当前显示原文说明。
danstrem2/clawdbot-skill-master-pack☆ 22026年2月1日 更新
Access ATXP paid API tools for web search, AI image generation, music creation, video generation, and X/Twitter search. Use when users need real-time web search, AI-generated media (images, music, video), or X/Twitter search. Requires authentication via `npx atxp login`.
中文简介正在准备中。当前显示原文说明。
danstrem2/clawdbot-skill-master-pack☆ 22026年2月1日 更新
Microsoft Entra ID (Azure AD) authentication for React SPAs with MSAL.js and Cloudflare Workers JWT validation using jose library. Full-stack pattern with Authorization Code Flow + PKCE. Prevents 8 documented errors. Use when: implementing Microsoft SSO, troubleshooting AADSTS50058 loops, AADSTS700084 refresh token errors, React Router redirects, setActiveAccount re-render issues, or validating Entra ID tokens in Workers.
中文简介正在准备中。当前显示原文说明。
danstrem2/clawdbot-skill-master-pack☆ 22026年2月1日 更新
Implement secure API design patterns including authentication, authorization, input validation, rate limiting, and protection against common API vulnerabilities
中文简介正在准备中。当前显示原文说明。
danstrem2/clawdbot-skill-master-pack☆ 22026年2月1日 更新
A robust CLI wrapper for yt-dlp to download videos, playlists, and audio from YouTube and thousands of other sites. Supports format selection, quality control, metadata embedding, and cookie authentication.
中文简介正在准备中。当前显示原文说明。
johnalbertini14-glitch/openclaw-skills☆ 22026年2月26日 更新
Sign in to the wallet. Use when you or the user want to log in, sign in, connect, or set up the wallet, or when any wallet operation fails with authentication or "not signed in" errors. This skill is a prerequisite before sending, trading, or funding.
中文简介正在准备中。当前显示原文说明。
johnalbertini14-glitch/openclaw-skills☆ 22026年2月26日 更新
Interact with Bitwarden password manager using the bw CLI. Covers authentication (login/unlock/logout/status), vault operations (list/get/create/edit/delete/restore items, folders, attachments, collections), password/passphrase generation, organization management, and Send/receive. Use for "bitwarden", "bw", "password safe", "vaultwarden", "vault", "password manager", "generate password", "get password", "unlock vault", "share send".
中文简介正在准备中。当前显示原文说明。
johnalbertini14-glitch/openclaw-skills☆ 22026年2月26日 更新
Deploy and manage projects on Vercel using token-based authentication. Use when working with Vercel CLI using access tokens rather than interactive login — e.g. "deploy to vercel", "set up vercel", "add environment variables to vercel".
中文简介正在准备中。当前显示原文说明。
Scoheart/agentskills☆ 22026年8月4日 更新
Hugging Face Hub CLI (`hf`) for downloading, uploading, and managing models, datasets, spaces, buckets, repos, papers, jobs, and more on the Hugging Face Hub. Use when: handling authentication; managing local cache; managing Hugging Face Buckets; running or scheduling jobs on Hugging Face infrastructure; managing Hugging Face repos; discussions and pull requests; browsing models, datasets and spaces; reading, searching, or browsing academic papers; managing collections; querying datasets; configuring spaces; setting up webhooks; or deploying and managing HF Inference Endpoints. Make sure to use this skill whenever the user mentions 'hf', 'huggingface', 'Hugging Face', 'huggingface-cli', or 'hugging face cli', or wants to do anything related to the Hugging Face ecosystem and to AI and ML in general. Also use for cloud storage needs like training checkpoints, data pipelines, or agent traces. Use even if the user doesn't explicitly ask for a CLI command. Replaces the deprecated `huggingface-cli`.
中文简介正在准备中。当前显示原文说明。
Scoheart/agentskills☆ 22026年8月4日 更新
Debug container agent issues. Use when things aren't working, container fails, authentication problems, or to understand how the container system works. Covers logs, environment variables, mounts, and common issues.
中文简介正在准备中。当前显示原文说明。
nanocoai/nanoclaw-gmail☆ 22026年4月3日 更新
Add WhatsApp as a channel. Can replace other channels entirely or run alongside them. Uses QR code or pairing code for authentication.
中文简介正在准备中。当前显示原文说明。
nanocoai/nanoclaw-gmail☆ 22026年4月3日 更新