Assess GraphQL APIs during penetration tests, from finding endpoints and mapping data structures to checking access controls, query limits, subscriptions, and uploads. Includes example queries, guidance for testing tools, and defensive controls for interpreting findings.
中文简介正在准备中。当前显示英语简介。
- Map GraphQL endpoints and data structures
- Check access controls across users and roles
- Review query limits and subscription security
SnailSploit/Claude-Red☆ 76052026年10月13日 更新
Build and query Kusto graphs from natural language. Covers transient graphs (make-graph), persistent graph models/snapshots, pattern matching (graph-match), shortest paths, connected components, and graph-to-table export. Generates the edges-first thinking: define edges, define node lookups, union, make-graph. WHEN: make-graph, graph-match, graph-shortest-paths, graph-to-table, graph-mark-components, persistent graph, graph model, graph snapshot, build a graph from data, find paths between nodes, pattern matching in graph, connected components, transient graph, Kusto graph, KQL graph.
中文简介正在准备中。当前显示原文说明。
microsoft/skills☆ 31312026年10月18日 更新
Build and query Kusto graphs from natural language. Covers transient graphs (make-graph), persistent graph models/snapshots, pattern matching (graph-match), shortest paths, connected components, and graph-to-table export. Generates the edges-first thinking: define edges, define node lookups, union, make-graph. WHEN: make-graph, graph-match, graph-shortest-paths, graph-to-table, graph-mark-components, persistent graph, graph model, graph snapshot, build a graph from data, find paths between nodes, pattern matching in graph, connected components, transient graph, Kusto graph, KQL graph.
中文简介正在准备中。当前显示原文说明。
microsoft/azure-skills☆ 15762026年10月17日 更新
Apply IRQL graph functions to KQL or IRQL query results for Kusto Explorer visualization. Generates Lift_To_Graph mappings and composes Graph_Render_View, Graph_Fold_By_Property, Extract_Node_*, Enrich_Node_*, and Enrich_Graph_* calls. Accepts a supplied query or limited basic natural-language source request; it is not a general natural-language-to-KQL/IRQL skill. WHEN: Lift_To_Graph, Graph_Render_View, Graph_Fold_By_Property, IRQL graph enrichment, graph mapping for existing query results, icon-decorated graph, fold graph nodes. Use azure-kusto-graph for native make-graph analysis, graph-match, shortest paths, components, or persistent graphs.
中文简介正在准备中。当前显示原文说明。
microsoft/skills☆ 31312026年10月18日 更新
Apply IRQL graph functions to KQL or IRQL query results for Kusto Explorer visualization. Generates Lift_To_Graph mappings and composes Graph_Render_View, Graph_Fold_By_Property, Extract_Node_*, Enrich_Node_*, and Enrich_Graph_* calls. Accepts a supplied query or limited basic natural-language source request; it is not a general natural-language-to-KQL/IRQL skill. WHEN: Lift_To_Graph, Graph_Render_View, Graph_Fold_By_Property, IRQL graph enrichment, graph mapping for existing query results, icon-decorated graph, fold graph nodes. Use azure-kusto-graph for native make-graph analysis, graph-match, shortest paths, components, or persistent graphs.
中文简介正在准备中。当前显示原文说明。
microsoft/azure-skills☆ 15762026年10月17日 更新
Investigate Entra ID reconnaissance by searching Graph API logs for tool signatures and unusual directory queries. Use KQL, a log query language, to correlate suspicious requests with sign-ins and turn useful searches into Sentinel detection rules.
中文简介正在准备中。当前显示英语简介。
- Investigating Graph API activity after suspected credential theft
- Checking whether offensive tool activity is visible in logs
- Creating and tuning scheduled Sentinel detection rules
mukul975/Anthropic-Cybersecurity-Skills☆ 3.5万2026年8月31日 更新
The branded entry point to ServiceGraph — use whenever the user explicitly names **ServiceGraph** — "use ServiceGraph to…", "what datasets does ServiceGraph have", "search ServiceGraph for…", "look this up in ServiceGraph", "pull contacts from ServiceGraph for these domains", "how many credits do I have on ServiceGraph". ServiceGraph is a multi-dataset platform of metrics-enriched business data for founders — where to launch, who to email, who to hire. This skill explains how to drive the API (api.servicegraph.co / mcp.servicegraph.co) against ANY dataset — discover what datasets exist, discover a dataset's schema and filters, search free brief rows, and unlock contact + metric detail with credits. Dataset-agnostic by design — it discovers everything through the API and never assumes which datasets or fields exist. When the user describes an intent WITHOUT naming ServiceGraph (e.g. "find a PR agency in NY"), defer to the matching specific skill (find-pr-agency, find-marketing-agency, find-law-firm, …); this skill is for explicit ServiceGraph requests and for datasets no specific skill covers yet. Skip non-US firms, consumer/personal services, and individual freelancers.
中文简介正在准备中。当前显示原文说明。
nostrband/ServiceGraph☆ 612026年6月2日 更新
Build graph neural networks, models that learn from connected nodes, with PyTorch Geometric. Supports node and graph classification, link prediction, custom datasets, and training approaches for large graphs or graphs containing multiple types of nodes and connections.
中文简介正在准备中。当前显示英语简介。
- Build node and graph classification models
- Predict links between nodes
- Train models on graphs with multiple node and connection types
K-Dense-AI/scientific-agent-skills☆ 5.3万2026年10月16日 更新
Build and search a project knowledge graph, a map of information and its relationships. Check matching entries, relationship confidence, graph freshness, and changes since the previous build to understand the project's recorded structure.
中文简介正在准备中。当前显示英语简介。
- Building a map of project information and relationships
- Searching for a term and its related entries
- Checking whether the graph reflects recent project changes
open-gsd/gsd-core☆ 1.1万2026年10月18日 更新
Benchmark how CodeGraph affects an agent investigating a real codebase. Choose a version, language, repository, and execution mode, then compare cost, tool calls, file reads, and answer correctness with and without CodeGraph.
中文简介正在准备中。当前显示英语简介。
- Evaluating a local development build
- Auditing a published CodeGraph version
- Comparing investigation cost and file reads
colbymchenry/codegraph☆ 7.4万2026年10月18日 更新
Add support for a programming language to codegraph, from connecting its parser and implementing code extraction to writing tests. Evaluate extraction quality and compare agent effort with and without codegraph across three real codebases.
中文简介正在准备中。当前显示英语简介。
- Adding a new programming language to codegraph
- Testing extraction of functions, imports, and calls
- Comparing agent effort across three real codebases
colbymchenry/codegraph☆ 7.4万2026年10月18日 更新
GraphQL gives clients exactly the data they need - no more, no less. One endpoint, typed schema, introspection. But the flexibility that makes it powerful also makes it dangerous. Without proper controls, clients can craft queries that bring down your server. This skill covers schema design, resolvers, DataLoader for N+1 prevention, federation for microservices, and client integration with Apollo/urql. Key insight: GraphQL is a contract. The schema is the API documentation. Design it carefully. 2025 lesson: GraphQL isn't always the answer. For simple CRUD, REST is simpler. For high-performance public APIs, REST with caching wins. Use GraphQL when you have complex data relationships and diverse client needs. Use when "graphql, graphql schema, graphql resolver, apollo server, apollo client, graphql federation, dataloader, graphql codegen, graphql query, graphql mutation, graphql, api, apollo, schema, resolvers, dataloader, federation, typescript" mentioned.
中文简介正在准备中。当前显示原文说明。
omer-metin/skills-for-antigravity☆ 1682026年1月22日 更新
Offensive methodology for attacking GraphQL APIs during penetration tests and bug bounty engagements. Covers the full attack lifecycle: endpoint discovery, introspection abuse and blind schema reconstruction when introspection is disabled, authentication and authorization bypass through Relay node IDs and nested object traversal, injection via variables and directives, query batching for brute force and OTP bypass, denial of service through depth bombs and alias amplification, WebSocket subscription hijacking, information disclosure through verbose errors and field suggestion oracles, and file upload abuse via the multipart GraphQL specification. Includes tool-specific guidance for InQL, graphql-cop, CrackQL, BatchQL, Altair, GraphQL Voyager, and clairvoyance. Trigger on: GraphQL, graphql, introspection query, batching attack, query depth, GraphQL injection, GraphQL IDOR, field suggestion, GraphQL auth bypass, GraphQL DoS, GraphQL security, graphql-cop, InQL, CrackQL, BatchQL, Relay node, alias amplificat...
中文简介正在准备中。当前显示原文说明。
ajtazer/heckit☆ 22026年10月7日 更新
Design and review REST and GraphQL APIs with consistent naming, data structures, error responses, pagination for large result sets, and versioning strategies. Helps teams define shared standards and plan changes that existing clients can adopt gradually.
中文简介正在准备中。当前显示英语简介。
- Designing a new REST or GraphQL API
- Reviewing API specifications before implementation
- Establishing shared API design standards
wshobson/agents☆ 4.1万2026年10月19日 更新
Automate Contentful Graphql operations through Rube MCP, a connection for agent tools. The skill discovers available actions, checks the service connection, and follows current input requirements to execute the requested workflow.
中文简介正在准备中。当前显示英语简介。
- Finding available Contentful Graphql actions
- Running tasks after checking the connection
- Retrieving results across multiple pages
ComposioHQ/awesome-claude-skills☆ 7.7万2026年9月18日 更新
Design REST or GraphQL APIs by defining who will use them, what data they expose, and how requests behave. Establish error formats, versioning, pagination, and authentication, then review examples for consistency before implementation.
中文简介正在准备中。当前显示英语简介。
- Designing a new REST or GraphQL API
- Reviewing API specifications before implementation
- Establishing shared API design standards
sickn33/agentic-awesome-skills☆ 4.8万2026年10月19日 更新
Assess REST, GraphQL, and gRPC APIs for authentication, access control, input validation, and business logic weaknesses. Use OWASP API Security Top 10, a framework of common API risks, to organize testing and document findings with reproduction steps and remediation.
中文简介正在准备中。当前显示英语简介。
- Comparing API access across user roles
- Checking token handling and request rate limits
- Assessing GraphQL access control and data exposure
mukul975/Anthropic-Cybersecurity-Skills☆ 3.5万2026年8月31日 更新
Build or refresh a knowledge graph, a map of code relationships used for code review. Choose a full rebuild or an incremental update, then report the operation's status and summary.
中文简介正在准备中。当前显示英语简介。
- Setting up the graph for a repository's first review
- Refreshing the graph after switching branches
- Updating review data after a large refactor
tirth8205/code-review-graph☆ 3.2万2026年10月16日 更新
Automate Contentful Graphql operations through Rube MCP, a connection for agent tools. The skill discovers available actions, checks the service connection, and follows current input requirements to execute the requested workflow.
中文简介正在准备中。当前显示英语简介。
- Finding available Contentful Graphql actions
- Running tasks after checking the connection
- Retrieving results across multiple pages
composio-community/awesome-codex-skills☆ 1.7万2026年7月26日 更新
Serverless Aura Graph Analytics (AGA) GDS Sessions — covers GdsSessions, AuraGraphDataScience, AuraAPICredentials, DbmsConnectionInfo, SessionMemory, get_or_create, remote graph projection with gds.graph.project.cypher and gds.graph.project.remote, gds.graph.project.native, gds.graph.construct, graphdatascience client 2.0 session endpoints, async compute and gds.jobs, AuraDB Cypher API memory/sessionId projection, algorithms, write-back, and session lifecycle. Use for AuraDB-connected, self-managed Neo4j, or standalone DataFrame/Spark session workloads. Does NOT cover the embedded GDS plugin on Aura Pro or self-managed Neo4j — use neo4j-gds-skill. Does NOT handle Cypher authoring — use neo4j-cypher-skill. Does NOT cover Snowflake Graph Analytics — use neo4j-snowflake-graph-analytics-skill.
中文简介正在准备中。当前显示原文说明。
neo4j-contrib/neo4j-skills☆ 1162026年10月15日 更新
Interactively build a Narrative identity graph workflow from one or more first-party datasets and (optionally) third-party data sources. Confirms each input dataset is mapped to the Rosetta Stone graph edge attribute (mapping it via /generate-rosetta-stone-mappings if not), then composes and submits a workflow that unions every edge source and labels connected components. Use when: "build an identity graph", "generate an identity graph", "create an identity graph", "stitch these datasets into a graph", "make a graph workflow", "label connected components on these datasets", "I want a person graph / household graph / device graph". (narrative-identity)
中文简介正在准备中。当前显示原文说明。
narrative-io/narrative-skills-marketplace☆ 92026年10月17日 更新
Operate NVIDIA Nsight Graphics from the command line to capture application frames and GPU activity. Summarize performance traces, analyze existing capture files through ngfx-replay, and check installed versions and compatibility before starting an investigation.
中文简介正在准备中。当前显示英语简介。
- Check installed Nsight Graphics versions and compatibility
- Capture frames from a graphics application
- Summarize GPU activity and investigate performance bottlenecks
HKUDS/CLI-Anything☆ 5.5万2026年9月22日 更新
[omh] Outdated code index or codemap: refresh local code intelligence, summarize repo structure, and prepare task-scoped codegraph handoff context without overclaiming execution. Use when the user says: codegraph-refresh, codegraph refresh, refresh codegraph, update codegraph, codegraph stale, stale codegraph, codegraph handoff, codegraph summary.
中文简介正在准备中。当前显示原文说明。
rlaope/oh-my-hermes☆ 34292026年10月17日 更新
摄影 (摄影 (Photography) — 以静态影像为产出的视觉创作 + 服务行业:从看见 → 用光 → 构图 → 拍摄 → 后期 → 交付的认知操作系统,覆盖商业摄影 (commercial: 产品/广告/电商/美食)、人像摄影 (portrait: 影楼/写真/婚礼/时尚/环境人像)、纪实与街头摄影 (documentary/photojournalism/street),以及与之贯通的风光、新闻、艺术摄影。面向职业摄影师 / 助理 / 修图师 / 想转职业的资深爱好者 / 服务这行的人 (器材厂商、图库、后期外包、影楼运营)。覆盖: (a) 第一性张力 — **光 (light is the craft — 看光、控光、塑光:硬光/柔光、方向、色温、光比、布光是摄影第一性) ⇄ 器材 (gear — 相机/镜头/灯具迷信, 'GAS' gear-acquisition-syndrome, 'the best camera is the one you have with you' — 器材不是摄影)**; **决定性瞬间/抓取 (decisive moment, Cartier-Bresson, 等待与预判, 纪实/街头不可重来) ⇄ 构建/导演 (constructed/directed, 商业与人像是布光摆姿造光的'制造'而非'捕获')**; **前期/拍对 (get it right in camera, 曝光/白平衡/构图当场拍对) ⇄ 后期/暗房 (post/darkroom, Ansel Adams 'negative is the score, print is the performance' — RAW 冲洗/调色/修图是创作一半)**; **作者性/艺术表达 (vision, personal voice, 'photograph what you feel not what you see') ⇄ 服务性/商业交付 (client brief, 影楼标准化出片, 'shoot the brief not your ego', 摄影是生意)**; **真实/未操纵 (truth, photojournalism ethics, 不过度 PS, 新闻摄影伦理) ⇄ 修饰/理想化 (retouch, 商业人像液化磨皮, 广告的'谎言')**; **决定性技术参数 (曝光三角 aperture/shutter/ISO, 景深, 互易律) ⇄ 看见/眼力 (seeing, 'photography is about seeing not cameras', 构图/光感是 tacit 眼力)**; **胶片/慢/不可见 (film, 慢工, 不可即时回看, 暗房) ⇄ 数码/即时/海量 (digital, chimping, 连拍, 后期无限)**; AI 对摄影的冲击 ('是不是摄影'、生成式填充/换天/AI 修图、真实性危机); (b) 核心工作流 / pipeline (最标准、最易蒸高质量+CLI 化) — 通用链: 看光选光 → 曝光三角决策 (光圈定景深/快门定动静/ISO 兜底) → 测光与曝光 (评价/点测光, 向右曝光 ETTR, 直方图, 区域系统) → 构图 (三分法/引导线/框架/负空间/前景) → 对焦 → 拍摄 → 选片 culling → RAW 后期 (Lightroom/Capture One: 曝光/白平衡/色调曲线/HSL/局部) → 精修 retouch (Photoshop: 频率分离/液化/D&B) → 调色 grading → 输出交付 (色彩管理/sRGB/打印/图库上传); 子流派 SOP: 影棚商业布光 (主光/辅光/轮廓光/背景光, 三点布光, 光质修饰器 softbox/beauty-dish/grid)、婚礼/纪实一天流程、街头扫街、产品/电商台面、人像引导摆姿 posing & direction; (c) 工具栈 — 相机系统 (无反主导: Sony A 系 / Canon R / Nikon Z / 富士 X&GFX / 徕卡 M; 中画幅 Phase One/Hasselblad/GFX 商业; 残幅 vs 全幅 vs 中幅)、镜头 (大三元, 定焦 vs 变焦, 35/50/85 人像三剑客, 微距, 移轴)、灯具 (机顶闪 Godox/Profoto, 影室灯, 常亮 LED, 持续光 vs 闪光)、修饰器 (柔光箱/反光伞/束光筒/雷达罩/旗板)、测光/附件 (测光表, 灰卡, 三脚架, 滤镜 ND/CPL/渐变)、后期软件 (Adobe Lightroom Classic/CC 主导, Capture One 商业/影室, Photoshop 精修, DxO PhotoLab/PureRAW 降噪, Capture One vs Lightroom 之争, 国产: 醒图/泼辣 Polarr/Snapseed 移动端, RawTherapee/Darktable 开源, AI: Lightroom 生成式/Photoshop Generative Fill/Topaz Photo AI/Gigapixel/Luminar Neo)、色彩管理 (X-Rite/Calibrite 校色仪, ICC, 显示器)、图库/交付 (Pixieset/图虫/500px/视觉中国/Getty/Adobe Stock, 客片在线选片); (d) 知识正典 — Ansel Adams 'The Camera / The Negative / The Print' 三部曲 + 区域系统 (Zone System)、Henri Cartier-Bresson 'The Decisive Moment'、Michael Freeman 'The Photographer's Eye' (构图) 'The Photographer's Mind'、Bryan Peterson 'Understanding Exposure' (曝光入门圣经)、Scott Kelby 'Digital Photography Book' 系列 + Lightroom/Photoshop 书、Joe McNally 'The Hot Shoe Diaries / Sketching Light' (闪光灯)、Light Science & Magic (布光科学经典教材)、Roland Barthes 'Camera Lucida' (摄影哲学)、Susan Sontag 'On Photography'、John Szarkowski 'The Photographer's Eye'、National Geographic 摄影指南、Robert Capa / Sebastião Salgado / Steve McCurry (纪实)、Annie Leibovitz / Richard Avedon / Peter Lindbergh (人像/时尚)、Galen Rowell / Ansel Adams (风光); (e) figures/流派 — 风光/系统派 (Ansel Adams 区域系统奠基、Galen Rowell 探险风光、Marc Adamus); 决定性瞬间/纪实街头派 (Henri Cartier-Bresson 奠基、Robert Capa 战地、Sebastião Salgado 社会纪实、Steve McCurry、Vivian Maier、Daido Moriyama、森山大道/荒木经惟 日本派、Vivian Maier); 人像/时尚派 (Richard Avedon、Annie Leibovitz、Peter Lindbergh、Platon、Joey L、Lindsay Adler 时尚布光); 布光/教育派 (Joe McNally、Zack Arias 'one light'、Profoto/strobist David Hobby 'Strobist' 闪光灯启蒙博客、Karl Taylor 商业布光教学); 商业/广告派 (Chase Jarvis 'CreativeLive'创办+'best camera'、Joel Grimes、Tim Wallace 汽车); 后期/修图派 (Pratik Naik、Aaron Nace 'Phlearn'); 街头当代派 (Eric Kim 街头博客、Joel Meyerowitz、Saul Leiter 色彩街头); 中文圈 (李涛 'photoshop教学'、宁思潇潇 器材评测、thomas 'Thomas看看世界' 风光后期、阿刘 风光、668 人像); 哲学/批评 (Susan Sontag、Roland Barthes、John Szarkowski MoMA); (f) 行业话术/黑话 — 曝光三角 exposure triangle / 光圈 aperture f-stop / 快门 shutter speed / 感光度 ISO / 景深 DoF depth of field / 焦段 focal length / 等效 / 全画幅 full-frame vs 残幅 crop / 大三元 / 定焦 prime / 互易律 reciprocity / 向右曝光 ETTR / 直方图 histogram / 高光溢出 clipping / 动态范围 dynamic range / 宽容度 / 白平衡 WB
中文简介正在准备中。当前显示原文说明。
swaylq/master-skill☆ 1612026年9月6日 更新