Test REST, gRPC, and WebSocket APIs for weaknesses in authentication, access controls, input handling, and configuration. Provides protocol-specific checks, tool guidance, and detection indicators to help document reproducible findings and severity during authorized assessments.
中文简介正在准备中。当前显示英语简介。
- Check access controls across users and roles
- Review token lifecycles and request limits
- Assess gRPC and WebSocket security
SnailSploit/Claude-Red☆ 76042026年10月13日 更新
Prepare an Apache bRPC release with tracked progress, version updates, release candidate checks, and draft release notes and emails. The workflow leaves signing, publishing, and other external release actions to the release manager.
中文简介正在准备中。当前显示英语简介。
- Prepare version files and a release branch
- Resume release work from a saved progress record
- Verify local or uploaded release packages
apache/brpc☆ 1.8万2026年10月18日 更新
Set up and inspect an Ethereum node through a command-line interface. Install execution and consensus clients, configure validator metadata, expose RPC access for external requests, and retrieve structured health reports for agent workflows.
中文简介正在准备中。当前显示英语简介。
- Set up a new Ethereum node host
- Install chosen execution and consensus clients
- Configure RPC access through Nginx or Caddy
HKUDS/CLI-Anything☆ 5.5万2026年9月22日 更新
Compare GraphQL and RPC contracts, which describe expected API behavior, with generated clients and live handlers in a CTF sandbox. Identify hidden or outdated operations and preserve minimal request pairs that demonstrate the mismatch.
中文简介正在准备中。当前显示英语简介。
- Compare API contracts with live request handling
- Trace requests made by generated clients
- Investigate hidden or outdated API operations
zhaoxuya520/reverse-skill☆ 4.3万2026年9月22日 更新
Choose how an API, the interface software uses to exchange data, should work. Covers REST, GraphQL, and tRPC selection, consistent responses, pagination, versioning, authentication, request limits, documentation, and security review considerations.
中文简介正在准备中。当前显示英语简介。
- Choosing between REST, GraphQL, and tRPC
- Standardizing API responses, errors, and pagination
- Planning authentication, request limits, and versioning
davila7/claude-code-templates☆ 3.3万2026年10月18日 更新
Review tRPC API changes against released desktop, mobile, CLI, and SDK clients. Use release history and usage data to choose compatible changes, assess whether deprecated features can be removed, and plan recovery when deployed changes break clients.
中文简介正在准备中。当前显示英语简介。
- Review API changes for compatibility with released apps
- Choose a compatible way to change inputs or outputs
- Assess whether a deprecated procedure can be removed
superset-sh/superset☆ 1.5万2026年10月18日 更新
Hunt gRPC vulnerabilities — server reflection enabled (enumerate all services/methods), missing authentication / metadata-stripping on internal endpoints, plaintext gRPC over HTTP/2, internal endpoint disclosure, proto file leakage, gRPC-Web/grpc-gateway transcoding injection, and HTTP/2 Rapid Reset DoS (CVE-2023-44487). Use when target exposes port 50051 / 443 / 8443 / 9090 with HTTP/2, when grpcurl/grpcui detects reflection, when an Envoy or grpc-gateway proxy is fronting a microservice, or when recon reveals a microservice architecture.
中文简介正在准备中。当前显示原文说明。
elementalsouls/Claude-BugHunter☆ 51642026年10月17日 更新
Remote control of DOCA Flow over gRPC with the shipped `doca_flow_grpc` server: program Flow pipes and entries from Python, Go, Rust or Java, or from another host, instead of linking `libdoca_flow.so`. PLAINTEXT-ONLY: the server uses `grpc::InsecureServerCredentials()` with NO TLS / mTLS / token-auth knob; transport security must come from external infrastructure (e.g. an mTLS proxy / sidecar) on a trusted segment. Trigger even without "gRPC": "program Flow rules from Python on another host", "remotely configure pipes on the BlueField", "client times out connecting to the Flow server", "where is the .proto for Flow", "UNAUTHENTICATED / FAILED_PRECONDITION on a Flow RPC". Covers bringing up, configuring, hardening and debugging the server. Route elsewhere for the underlying doca-flow C API, generic gRPC tooling (protoc, language bindings), or DOCA install / BFB bring-up.
中文简介正在准备中。当前显示原文说明。
NVIDIA/skills☆ 36382026年10月18日 更新
Hunt gRPC vulnerabilities — server reflection enabled (enumerate all services/methods), missing authentication / metadata-stripping on internal endpoints, plaintext gRPC over HTTP/2, internal endpoint disclosure, proto file leakage, gRPC-Web/grpc-gateway transcoding injection, and HTTP/2 Rapid Reset DoS (CVE-2023-44487). Use when target exposes port 50051 / 443 / 8443 / 9090 with HTTP/2, when grpcurl/grpcui detects reflection, when an Envoy or grpc-gateway proxy is fronting a microservice, or when recon reveals a microservice architecture.
中文简介正在准备中。当前显示原文说明。
ajtazer/heckit☆ 22026年10月7日 更新
Design TypeScript types and APIs that catch mistakes such as mixed-up identifiers and missing state handling. Implement reusable types and runtime checks that narrow types, configure tRPC for shared client-server types, and improve compiler settings.
中文简介正在准备中。当前显示英语简介。
- Prevent identifier mix-ups with distinct types
- Model application states and handle every case
- Create reusable types for complex data
Jeffallan/claude-skills☆ 1.2万2026年10月17日 更新
Build Go services and command-line tools with clear interfaces, explicit error handling, and concurrent tasks using goroutines and channels. Use pprof to investigate performance, then check behavior with benchmarks, structured test cases, fuzzing, and race detection.
中文简介正在准备中。当前显示英语简介。
- Implementing concurrent tasks with cancellation and error handling
- Building gRPC or REST services and command-line tools
- Investigating Go performance with pprof and benchmarks
Jeffallan/claude-skills☆ 1.2万2026年10月17日 更新
Test REST, GraphQL, and gRPC APIs with Strix using schemas, credentials, and example data. Investigate authorization flaws, excessive data exposure, and other API risks, then verify findings with requests that reproduce the issue.
中文简介正在准备中。当前显示英语简介。
- Testing an API from its specification
- Checking data access across tenants
- Verifying restrictions on administrator routes
usestrix/strix☆ 7万2026年10月18日 更新
Choose between REST, GraphQL, and tRPC based on who uses an API and how it is deployed. Define consistent responses, pagination, authentication, and versioning, supported by concrete request examples and failure cases.
中文简介正在准备中。当前显示英语简介。
- Choose an API style for known clients
- Standardize response and error formats
- Design pagination for changing data
sickn33/agentic-awesome-skills☆ 4.8万2026年10月19日 更新
Build and review Cloudflare Durable Objects for applications that retain shared state, such as chat rooms, games, and booking systems. Covers SQLite storage, remote method calls, WebSockets, scheduled work, Workers integration, configuration, and Vitest tests.
中文简介正在准备中。当前显示英语简介。
- Build shared state for chat rooms, games, and bookings
- Implement remote methods, SQLite storage, WebSockets, and alarms
- Configure Workers bindings and migrations
openai/plugins☆ 74932026年10月8日 更新
Build or review gRPC services and clients in .NET. USE FOR: ASP.NET Core gRPC, protobuf contracts, unary or streaming RPC, gRPC client factory, interceptors, deadlines, cancellation, channel reuse, backend service integration. DO NOT USE FOR: broad browser-facing APIs without gRPC-Web tradeoff review, SignalR realtime hubs, plain REST APIs. INVOKES: dotnet build/test and focused service or client smoke checks when code changes.
中文简介正在准备中。当前显示原文说明。
managedcode/dotnet-skills☆ 4902026年10月17日 更新
Provides gRPC usage guidelines, protobuf organization, and production-ready patterns for Golang microservices. Use when implementing, reviewing, or debugging gRPC servers/clients, writing proto files, setting up interceptors, handling gRPC errors with status codes, configuring TLS/mTLS, testing with bufconn, or working with streaming RPCs.
中文简介正在准备中。当前显示原文说明。
samber/cc-skills-golang☆ 35072026年10月1日 更新
Build networked games with Godot 4.7 high-level multiplayer: set up an ENetMultiplayerPeer server/client, define RPCs with the @rpc annotation (call via rpc()/rpc_id()), set per-node multiplayer authority, and replicate state with MultiplayerSpawner and MultiplayerSynchronizer. Use when adding multiplayer/networking to a Godot project, writing @rpc functions, or syncing player/world state across peers.
中文简介正在准备中。当前显示原文说明。
gamedev-skills/awesome-gamedev-agent-skills☆ 16052026年10月9日 更新
Use when a Godot 4 game goes online or co-op: host and join with ENet, WebSocket for a web build, RPCs (@rpc, rpc_id, any_peer), MultiplayerSpawner and MultiplayerSynchronizer, player authority, lobbies and login, a dedicated or headless server export, lag, rubber-banding, prediction or netfox, cheating, bandwidth, Steam, Nakama or WebRTC. Symptoms: players do not appear on the client, 'rpc node checksum failed', 'node not found' on an RPC, desync, the server build is huge, a client never connects.
中文简介正在准备中。当前显示原文说明。
scenario-labs/skills☆ 10482026年10月18日 更新
Use the command line to send tasks to OmniRoute's A2A server, which supports communication between agents. Inspect execution history and logs, monitor or cancel tasks, and interactively test the JSON-RPC 2.0 communication protocol.
中文简介正在准备中。当前显示英语简介。
- Check server status and available skills
- Invoke a skill with JSON input
- Inspect task history and logs
diegosouzapw/OmniRoute☆ 7.8万2026年10月18日 更新
Assess REST, GraphQL, and gRPC APIs for authentication, access control, input validation, and business logic weaknesses. Use OWASP API Security Top 10, a framework of common API risks, to organize testing and document findings with reproduction steps and remediation.
中文简介正在准备中。当前显示英语简介。
- Comparing API access across user roles
- Checking token handling and request rate limits
- Assessing GraphQL access control and data exposure
mukul975/Anthropic-Cybersecurity-Skills☆ 3.5万2026年8月31日 更新
Guides development across the Kilo JetBrains plugin’s shared, frontend, and backend modules. Explains remote calls between modules, UI thread rules, dependency packaging, and testing practices, including serialization failures that require checks in a running IDE.
中文简介正在准备中。当前显示英语简介。
- Placing new code in the appropriate plugin module
- Defining frontend and backend communication
- Reviewing UI threading and coroutine usage
Kilo-Org/kilocode☆ 2.8万2026年10月18日 更新
Build a graph of functions and calls across multiple programming languages to investigate entry points, paths to sensitive operations, and potential impact. Use the results to prioritize security reviews and connect external findings with source code.
中文简介正在准备中。当前显示英语简介。
- Tracing call paths from entry points to sensitive functions
- Prioritizing code for a security audit
- Connecting calls across language and RPC boundaries
trailofbits/skills☆ 76342026年10月16日 更新
Guides using eRPC (electron-tRPC) for inter-process communication (IPC) between Electron main and renderer processes. Triggered when handling Electron IPC or tRPC-based systems.
中文简介正在准备中。当前显示原文说明。
MatrixAges/polywise☆ 6622026年6月11日 更新
API design and implementation across REST, GraphQL, gRPC, and tRPC patterns. Use when building backend services, public APIs, or service-to-service communication. Covers REST frameworks (FastAPI, Axum, Gin, Hono), GraphQL libraries (Strawberry, async-graphql, gqlgen, Pothos), gRPC (Tonic, Connect-Go), tRPC for TypeScript, pagination strategies (cursor-based, offset-based), rate limiting, caching, versioning, and OpenAPI documentation generation. Includes frontend integration patterns for forms, tables, dashboards, and ai-chat skills.
中文简介正在准备中。当前显示原文说明。
ancoleman/ai-design-components☆ 5252025年12月11日 更新