Manage Superset plugins from installation and updates to account connections and removal. Check which external tools each plugin provides, call them through Superset, and investigate missing connections or other reasons tools are unavailable.
中文简介正在准备中。当前显示英语简介。
- Install or update a Superset plugin
- Connect an account required by a plugin
- Inspect and call a plugin's tools
superset-sh/superset☆ 1.5万2026年10月20日 更新
Set up a personal monitoring dashboard with Vite and TypeScript. The skill provides a folder layout, dependency and build settings, and a page entry point for organizing stock and news panels, data services, and shared utilities.
中文简介正在准备中。当前显示英语简介。
- Start a personal stock and news dashboard
- Organize panels separately from data-fetching code
- Prepare TypeScript and Vite configuration files
HKUDS/OpenSpace☆ 77602026年8月13日 更新
Connect stock data to an application using Finnhub Stock API. The skill covers current quotes, company profiles, historical prices, and market news, with server-side request handling to protect API keys and manage cached responses.
中文简介正在准备中。当前显示英语简介。
- Display current stock prices on a dashboard
- Retrieve historical prices and trading volumes
- Show company profiles alongside stock quotes
HKUDS/OpenSpace☆ 77602026年8月13日 更新
Build TypeScript services that fetch API data for display panels. Use a circuit breaker, which pauses calls after repeated failures, alongside caching and default values, while keeping API keys on the server through proxy endpoints.
中文简介正在准备中。当前显示英语简介。
- Separating API calls from display components
- Pausing requests after repeated API failures
- Configuring cached data and default values
HKUDS/OpenSpace☆ 77602026年8月13日 更新
Build TypeScript data services that separate API calls from display components. Add caching and a circuit breaker, which pauses calls after repeated failures, while keeping user-triggered requests able to report errors directly.
中文简介正在准备中。当前显示英语简介。
- Building data services for automatically refreshed panels
- Pausing repeated calls to a failing API
- Separating generation errors from background refresh handling
HKUDS/OpenSpace☆ 77602026年8月13日 更新
Build TypeScript data services with optional query filters, typed results, and caching. Add a circuit breaker, a mechanism that pauses API calls after repeated failures, and keep API keys behind server-side proxy endpoints.
中文简介正在准备中。当前显示英语简介。
- Build API URLs with optional filters
- Pause API calls after repeated failures
- Separate data fetching from panel components
HKUDS/OpenSpace☆ 77602026年8月13日 更新
Build a graph of functions and calls across multiple programming languages to investigate entry points, paths to sensitive operations, and potential impact. Use the results to prioritize security reviews and connect external findings with source code.
中文简介正在准备中。当前显示英语简介。
- Tracing call paths from entry points to sensitive functions
- Prioritizing code for a security audit
- Connecting calls across language and RPC boundaries
trailofbits/skills☆ 76612026年10月20日 更新
Assess how Wi-Fi clients respond to impersonated access points using Evil Twin, KARMA, and Mana methods. Covers portal-based credential exposure, traffic interception conditions, client behavior, and limits imposed by modern protections.
中文简介正在准备中。当前显示英语简介。
- Assessing client connections to rogue Wi-Fi
- Planning captive portal security exercises
- Reviewing conditions for traffic interception
SnailSploit/Claude-Red☆ 76332026年10月13日 更新
Guides security testing of Android and iOS apps through file inspection and observation while the app runs. Covers network traffic, stored secrets, external app interfaces, authentication, and backend APIs, with tool examples and a testing checklist.
中文简介正在准备中。当前显示英语简介。
- Inspecting APK or IPA files for endpoints and embedded secrets
- Observing app behavior and traffic with Frida
- Reviewing deep links and externally accessible components
SnailSploit/Claude-Red☆ 76332026年10月13日 更新
Organize authorized phishing exercises from sending infrastructure and email scenarios to landing pages and reporting. Uses GoPhish campaign tracking to review opens, clicks, and submissions while assessing employee awareness and email security controls.
中文简介正在准备中。当前显示英语简介。
- Planning an authorized phishing exercise
- Preparing sending infrastructure and landing pages
- Reviewing email, QR code, and callback scenarios
SnailSploit/Claude-Red☆ 76332026年10月13日 更新
Create server endpoints in Expo Router and deploy them with EAS Hosting. Use them to keep API keys off the client, validate incoming data, access databases, proxy external services, and receive webhook notifications.
中文简介正在准备中。当前显示英语简介。
- Call external APIs without exposing keys
- Validate input before database writes
- Receive Stripe or GitHub webhooks
openai/plugins☆ 75172026年10月8日 更新
Configure external APIs and existing MCP tool servers through Higress AI Gateway. The skill covers YAML-based setup, credential updates, Worker access permissions, and connection checks before making tools available to the Workers that need them.
中文简介正在准备中。当前显示英语简介。
- Expose an external API as an MCP tool
- Update credentials for a tool server
- Grant or revoke Worker access to tools
agentscope-ai/AgentTeams☆ 58252026年10月17日 更新
Review DeFi smart contracts using ten vulnerability classes, related-function comparisons, and code search patterns. Includes target selection criteria and a Foundry test template for building reproducible proofs of security issues.
中文简介正在准备中。当前显示英语简介。
- Choose a DeFi target worth auditing
- Compare related functions for missing checks
- Review accounting and price handling
awarexone/Agentic-Bug-Hunter☆ 53812026年10月10日 更新
Review DeFi smart contracts for ten classes of security flaws, including inconsistent accounting, missing permissions, and price manipulation. The skill helps prioritize audit targets and build Foundry tests that reproduce a finding and demonstrate its impact.
中文简介正在准备中。当前显示英语简介。
- Prioritize DeFi protocols for security review
- Check related functions for inconsistent state updates
- Review price feeds and vault accounting
elementalsouls/Claude-BugHunter☆ 51812026年10月19日 更新
Investigate SQL injection in search forms, filters, and APIs by choosing tests based on actual responses. The skill covers visible query results, response differences, and timing evidence, helping produce reproducible reports with concrete data impact.
中文简介正在准备中。当前显示英语简介。
- Inspect search and filter inputs for SQL injection
- Choose tests based on endpoint responses
- Review ORM query construction risks
elementalsouls/Claude-BugHunter☆ 51812026年10月19日 更新
Assess gRPC services for exposed internal methods, missing access controls, identity spoofing through proxies, and unencrypted traffic. The skill guides service discovery and validates findings using response status codes, external reachability, and demonstrated effects on private data or system state.
中文简介正在准备中。当前显示英语简介。
- Inventory exposed gRPC services and methods
- Check authentication and permissions on internal APIs
- Compare identity handling at proxies and backends
elementalsouls/Claude-BugHunter☆ 51812026年10月19日 更新
Inspect Android apps for embedded credentials, internal API addresses, and components exposed to other apps. The skill guides APK acquisition, code inspection, and runtime traffic analysis to support a mobile security assessment.
中文简介正在准备中。当前显示英语简介。
- Inventory Android apps included in a security assessment
- Check APKs for embedded credentials and internal API addresses
- Review components that other apps can invoke
elementalsouls/Claude-BugHunter☆ 51812026年10月19日 更新
Assess Kubernetes and Docker security across exposed APIs, access permissions, service account tokens, and container boundaries. Use actual data reads or command output to establish impact and distinguish information exposure from broader compromise.
中文简介正在准备中。当前显示英语简介。
- Reviewing exposed Kubernetes APIs and kubelet ports
- Checking RBAC permissions and service account tokens
- Assessing etcd and Dashboard data exposure
elementalsouls/Claude-BugHunter☆ 51812026年10月19日 更新
Configure XRequest for AI chat API connections, authentication, and streaming responses that arrive in successive pieces. The skill explains practical request settings, connection checks, and how to keep secret keys on the server when building browser applications.
中文简介正在准备中。当前显示英语简介。
- Configure streaming requests for an AI chat API
- Connect a private API to a custom Provider
- Route browser requests through a server proxy
ant-design/x☆ 48162026年10月12日 更新
Configure XRequest for API calls and streaming responses, where data arrives in successive pieces. This skill covers request settings, authentication, debugging, and environment-specific handling of credentials for standalone requests or integration with chat providers.
中文简介正在准备中。当前显示英语简介。
- Check whether an API endpoint responds
- Configure streaming responses for an AI chat app
- Connect a private API through a chat provider
ant-design/x☆ 48162026年10月12日 更新
Agentica server + Claude proxy setup - architecture, startup sequence, debugging
中文简介正在准备中。当前显示原文说明。
parcadei/Continuous-Claude-v3☆ 39462026年1月27日 更新
Use when a PinMe project (Worker TypeScript) needs to integrate user authentication — creating email/password users, verifying id_tokens, querying user info, or listing users via Identity Platform auth proxy APIs.
中文简介正在准备中。当前显示原文说明。
glitternetwork/pinme☆ 37502026年9月12日 更新
Python library for accessing, analyzing, and extracting data from SEC EDGAR filings. Use when working with SEC filings, financial statements (income statement, balance sheet, cash flow), XBRL financial data, insider trading (Form 4), institutional holdings (13F), company financials, annual/quarterly reports (10-K, 10-Q), proxy statements (DEF 14A), 8-K current events, company screening by ticker/CIK/industry, multi-period financial analysis, or any SEC regulatory filings.
中文简介正在准备中。当前显示原文说明。
foryourhealth111-pixel/Vibe-Skills☆ 37322026年10月20日 更新
Remote control of DOCA Flow over gRPC with the shipped `doca_flow_grpc` server: program Flow pipes and entries from Python, Go, Rust or Java, or from another host, instead of linking `libdoca_flow.so`. PLAINTEXT-ONLY: the server uses `grpc::InsecureServerCredentials()` with NO TLS / mTLS / token-auth knob; transport security must come from external infrastructure (e.g. an mTLS proxy / sidecar) on a trusted segment. Trigger even without "gRPC": "program Flow rules from Python on another host", "remotely configure pipes on the BlueField", "client times out connecting to the Flow server", "where is the .proto for Flow", "UNAUTHENTICATED / FAILED_PRECONDITION on a Flow RPC". Covers bringing up, configuring, hardening and debugging the server. Route elsewhere for the underlying doca-flow C API, generic gRPC tooling (protoc, language bindings), or DOCA install / BFB bring-up.
中文简介正在准备中。当前显示原文说明。
NVIDIA/skills☆ 36642026年10月20日 更新